~ ZHPCleaner v2021.8.14.320 by Nicolas Coolman (2021/08/14) ~ Run by nlaun (Administrator) (14/08/2021 17:02:52) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Repair ~ Report : C:\Users\nlaun\OneDrive\Bureau\ZHPCleaner (R).txt ~ Quarantine : C:\Users\nlaun\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ System Restore Point : OK ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 19043) ---\\ Alternate Data Stream (ADS). (0) ~ No malicious or unnecessary items found. ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (0) ~ No malicious or unnecessary items found. ---\\ Hosts file (1) ~ The hosts file is legitimate (21) ---\\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. ---\\ Explorer ( File, Folder) (29) MOVED file: C:\Users\nlaun\AppData\Local\Google\Chrome\User Data\Default\Preferences =>Préférences Chromium MOVED file: C:\Users\nlaun\AppData\Local\Microsoft\Edge\User Data\Default\Preferences =>Préférences Chromium MOVED file: C:\Windows\Installer\wix{7D84E343-A23D-451C-B123-0195B2D903A6}.SchedServiceConfig.rmi =>.SUP.Empty MOVED file: C:\Windows\Installer\MSI49F1.tmp =>.SUP.MSIInstaller MOVED file: C:\Windows\Installer\MSI9547.tmp =>.SUP.MSIInstaller MOVED file: C:\Windows\Installer\MSIE3CA.tmp =>.SUP.MSIInstaller MOVED file: C:\Users\nlaun\AppData\Local\Temp\c95eb325-174f-4e40-947c-f8cc312e4317.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\nlaun\AppData\Local\Temp\CVRC708.tmp.cvr =>.SUP.Temporary.Empty MOVED file: C:\Users\nlaun\AppData\Local\Temp\wct271A.tmp =>.SUP.Temporary.Office MOVED file: C:\Users\nlaun\AppData\Local\Temp\wct271B.tmp =>.SUP.Temporary.Office MOVED file: C:\Users\nlaun\AppData\Local\Temp\wct50F1.tmp =>.SUP.Temporary.Office MOVED file: C:\Users\nlaun\AppData\Local\Temp\wct5288.tmp =>.SUP.Temporary.Office MOVED file: C:\Users\nlaun\AppData\Local\Temp\wct928B.tmp =>.SUP.Temporary.Office MOVED file: C:\Users\nlaun\AppData\Local\Temp\wct9740.tmp =>.SUP.Temporary.Office MOVED file: C:\Users\nlaun\AppData\Local\Temp\wctD197.tmp =>.SUP.Temporary.Office MOVED file: C:\Users\nlaun\AppData\Local\Temp\wctD91A.tmp =>.SUP.Temporary.Office MOVED file: C:\Users\nlaun\AppData\Local\Temp\wctE066.tmp =>.SUP.Temporary.Office MOVED folder: C:\Users\nlaun\AppData\Local\Google\Chrome\User Data\Default\File System\006 =>.SUP.Temporary.Chrome MOVED folder: C:\Users\nlaun\AppData\Local\Google\Chrome\User Data\Default\File System\007 =>.SUP.Temporary.Chrome MOVED folder: C:\Users\nlaun\AppData\Local\Google\Chrome\User Data\Default\File System\008 =>.SUP.Temporary.Chrome MOVED folder: C:\Users\nlaun\AppData\Local\Google\Chrome\User Data\Default\File System\009 =>.SUP.Temporary.Chrome MOVED folder: C:\WINDOWS\Installer\MSI2566.tmp- =>.SUP.Empty MOVED folder: C:\WINDOWS\Installer\MSI2F98.tmp- =>.SUP.Empty MOVED folder: C:\WINDOWS\Installer\MSI55B1.tmp- =>.SUP.Empty MOVED folder: C:\WINDOWS\Installer\MSI5788.tmp- =>.SUP.Empty MOVED folder: C:\WINDOWS\Installer\MSI838F.tmp- =>.SUP.Empty MOVED folder: C:\WINDOWS\Installer\MSI8B71.tmp- =>.SUP.Empty MOVED folder: C:\WINDOWS\Installer\MSIA6B3.tmp- =>.SUP.Empty MOVED folder: C:\WINDOWS\Installer\MSIFF09.tmp- =>.SUP.Empty ---\\ Registry ( Key, Value, Data) (8) DELETED key*: HKLM\SOFTWARE\POLICIES\Mozilla\Firefox [AdditionalScan 571] =>.SUP.FirefoxRestriction DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\TeamViewer\TeamViewer.exe.FriendlyAppName [TeamViewer 10] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\TeamViewer\TeamViewer.exe.ApplicationCompany [TeamViewer GmbH] =>.SUP.Orphan.MUICache DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Dropbox\ [No Folder] =>.SUP.Obsolete.NoFolder DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Foxit PhantomPDF\plugins\spool\ [No Folder] =>.SUP.Obsolete.NoFolder DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\CyberLink\PhotoDirector5\Kernel\Photo\Nikon\Profiles\ [No Folder] =>.SUP.Obsolete.NoFolder DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\CyberLink\PowerDirector12\Setup\RichVideo\ [No Folder] =>.SUP.Obsolete.NoFolder DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\WinZip\ [No Folder] =>.SUP.Obsolete.NoFolder ---\\ Summary of the elements found (9) https://nicolascoolman.eu/forum/Topic/repaquetage-et-infection/ =>Préférences Chromium https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Empty https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.MSIInstaller https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Temporary.Empty https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Temporary.Office https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Temporary.Chrome https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.FirefoxRestriction https://nicolascoolman.eu/forum/Topic/orphan-muicache-logiciel-potentiellement-superflu-lps/ =>.SUP.Orphan.MUICache https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Obsolete.NoFolder ---\\ Other deletions. (15) ~ Registry Keys Tracing deleted (15) ~ Remove the old reports ZHPCleaner. (0) ---\\ Result of repair ~ Repair carried out successfully ~ Google Chrome OK ~ Internet Explorer OK ---\\ Statistics ~ Items scanned : 1073 ~ Items found : 0 ~ Items cancelled : 0 ~ Space saving (bytes) : 203537 ~ Items options : 14/17 ---\\ OPTIONS NOT ACTIVES ~ View Detections ~ View Report ~ Start browsers with extensions removed ~ End of clean in 00h00mn15s ---\\ Reports (2) ZHPCleaner-[S]-14082021-16_59_05.txt ZHPCleaner-[R]-14082021-17_03_07.txt