~ ZHPFix v2022.10.27.82 by Nicolas Coolman (2022/10/27)
~ Run by UEF & twister (Administrator)  (04/11/2022 08:42:22)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Report : C:\Users\UEF & twister.DESKTOP-650T4C4\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Sans échec avec prise en charge du réseau (Fail-safe with network boot)
Windows 10 Home, 64-bit  (Build 19044)



---\\  SCRIPT DE L'UTILISATEUR.  (85)
Start::
O4 - HKLM\..\Run: [Restoro] . (.Restoro - Restoro Application.) -- C:\Program Files\Restoro\bin\RestoroApp.exe {46D0D610648069B60BC9B01587B1A3D5}.
O4 - GS\CommonDesktop [Public]: Restoro.lnk . (.Restoro - Restoro Downloader.) C:\Program Files\Restoro\Restoro.exe /ScanConfirm=true  {46D0D610648069B60BC9B01587B1A3D5}.
O4 - GS\ProgramsCommon [Public]: Systweak Software Updater.lnk . (.Systweak - Systweak Software Updater.) C:\Program Files (x86)\Systweak Software Updater\SystweakSoftwareUpdater.exe   {56AFAF1CE84C43C0E7A416AF}.
HKCU\Software\Local AppWizard-Generated Applications\Restoro
HKLM\SOFTWARE\Wow6432Node\IObit\RealTimeProtector
HKLM\SOFTWARE\Wow6432Node\IObit\Advanced SystemCare
HKLM\SOFTWARE\Wow6432Node\IObit\ASC
HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}
HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.ascplugin.protect
HKLM\SOFTWARE\IObit\RealTimeProtector
HKLM\SOFTWARE\IObit\Advanced SystemCare
HKLM\SOFTWARE\Iobit\ASC
HKLM\SOFTWARE\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}
HKLM\SOFTWARE\Ascrod
HKLM\SOFTWARE\Restoro
HKLM\SOFTWARE\SaferWeb
HKLM\SOFTWARE\Systweak
HKLM\SOFTWARE\WOW6432Node\Auslogics
HKLM\SOFTWARE\WOW6432Node\SaferWeb
HKLM\SOFTWARE\WOW6432Node\Systweak
HKLM\SOFTWARE\WOW6432Node\Systweak VPN
HKCU\SOFTWARE\Restoro
HKU\.DEFAULT\SOFTWARE\Systweak
HKU\S-1-5-21-3945783615-3853108761-1058730989-1004\SOFTWARE\Restoro
HKLM\SOFTWARE\Microsoft\Tracing\svchost_RASCHAP
C:\Program Files\Restoro\bin\RestoroApp.exe
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Restoro
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5904B3FF-F175-464F-A347-70D9E058E312_Systweak_Du~3C856E16_is1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DA71BA65-680A-4212-9150-6239217B53DC_Systweak_Di~BECC4794_is1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC HelpSoft Driver Updater_is1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Systweak Software Updater_is1
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\5904B3FF-F175-464F-A347-70D9E058E312_Systweak_Du~3C856E16_is1
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DA71BA65-680A-4212-9150-6239217B53DC_Systweak_Di~BECC4794_is1
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PC HelpSoft Driver Updater_is1
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Systweak Software Updater_is1
C:\Program Files\Restoro
C:\Program Files (x86)\Systweak Software Updater
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restoro
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Systweak Software Updater
C:\ProgramData\Auslogics
C:\ProgramData\Restoro
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ASZip2
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ASZip264
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PfMenu
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\Comodo Antivirus
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\IObit Malware Fighter
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\IObitUninstaller
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\PfMenu
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\FAExt
HKLM\Software\Classes\CLSID\{05672D66-9736-42F5-8BEB-FA1DD3CA51C4}
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
C:\Users\UEF & twister.DESKTOP-650T4C4\AppData\Local\Microsoft\Windows\INetCache\IE\5RU4903O\RestoroServiceSetup64[1].exe
C:\Users\UEF & twister.DESKTOP-650T4C4\AppData\Local\Microsoft\Windows\INetCache\IE\DHRH7TBN\RestoroSetup64[1].exe
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\svchost_RASCHAP
HKCU\Software\Local AppWizard-Generated Applications\Restoro
HKLM\SOFTWARE\Wow6432Node\IObit\RealTimeProtector
HKLM\SOFTWARE\Wow6432Node\IObit\Advanced SystemCare
HKLM\SOFTWARE\Wow6432Node\IObit\ASC
HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}
HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.ascplugin.protect
HKLM\SOFTWARE\IObit\RealTimeProtector
HKLM\SOFTWARE\IObit\Advanced SystemCare
HKLM\SOFTWARE\Iobit\ASC
HKLM\SOFTWARE\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}
C:\Users\UEF & twister.DESKTOP-650T4C4\AppData\LocalLow\IObit\Advanced SystemCare
C:\Users\UEF & twister.DESKTOP-650T4C4\AppData\Roaming\IObit\Advanced SystemCare
C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
C:\ProgramData\Auslogics\BoostSpeed
C:\ProgramData\IObit\Advanced SystemCare
C:\ProgramData\Application Data\IObit\ASCDownloader
C:\ProgramData\IObit\ASCDownloader
[013BAA2C5C24A6FC5648FC7085072396] [01/11/2022] (.Auslogics Labs Pty Ltd.) - C:\Program Files (x86)\Auslogics\Disk Defrag\unins000.exe
[013BAA2C5C24A6FC5648FC7085072396] [08/06/2022] (.Auslogics Labs Pty Ltd.) - C:\Program Files (x86)\Auslogics\Duplicate File Finder\ActionCenter.exe
[013BAA2C5C24A6FC5648FC7085072396] [20/10/2022] (.Auslogics Labs Pty Ltd.) - C:\Program Files (x86)\Auslogics\BitReplica\unins000.exe
[013BAA2C5C24A6FC5648FC7085072396] [20/10/2022] (.Auslogics Labs Pty Ltd.) - C:\Program Files (x86)\Auslogics\Duplicate File Finder\unins000.exe
EmptyPrefetch
EmptyClsid




---\\  LOGICIEL.  (0)


---\\  SERVICE.  (0)


---\\  TÂCHE PLANIFIÉE.  (0)


---\\  NAVIGATEUR INTERNET.  (0)


---\\  EXPLORATEUR ( Dossiers, Fichiers ).  (17)
DEPLACÉ Fichier  Shortcut: C:\Users\Public\Desktop\Restoro.lnk
DEPLACÉ Fichier : C:\Program Files\Restoro\bin\RestoroApp.exe
SUPPRIMÉ Dossier : C:\Program Files\Restoro
SUPPRIMÉ Dossier : C:\Program Files (x86)\Systweak Software Updater
SUPPRIMÉ Dossier : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
SUPPRIMÉ Dossier : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
SUPPRIMÉ Dossier : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restoro
SUPPRIMÉ Dossier : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Systweak Software Updater
SUPPRIMÉ Dossier : C:\ProgramData\Auslogics
SUPPRIMÉ Dossier : C:\ProgramData\Restoro
DEPLACÉ Fichier : C:\Users\UEF & twister.DESKTOP-650T4C4\AppData\Local\Microsoft\Windows\INetCache\IE\5RU4903O\RestoroServiceSetup64[1].exe
DEPLACÉ Fichier : C:\Users\UEF & twister.DESKTOP-650T4C4\AppData\Local\Microsoft\Windows\INetCache\IE\DHRH7TBN\RestoroSetup64[1].exe
SUPPRIMÉ Dossier : C:\Users\UEF & twister.DESKTOP-650T4C4\AppData\LocalLow\IObit\Advanced SystemCare
SUPPRIMÉ Dossier : C:\Users\UEF & twister.DESKTOP-650T4C4\AppData\Roaming\IObit\Advanced SystemCare
SUPPRIMÉ Dossier : C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
SUPPRIMÉ Dossier : C:\ProgramData\IObit\Advanced SystemCare
SUPPRIMÉ Dossier : C:\ProgramData\Application Data\IObit\ASCDownloader


---\\  REGISTRE ( Clés, Valeurs, Données ).  (51)
ABSENT Valeur Run: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ [C:\Program Files\Restoro\bin\RestoroApp.exe {46D0D610648069B60BC9B01587B1A3D5}.]
SUPPRIMÉ Clé: HKCU\Software\Local AppWizard-Generated Applications\Restoro [Restoro]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Wow6432Node\IObit\RealTimeProtector [RealTimeProtector]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Wow6432Node\IObit\Advanced SystemCare [Advanced SystemCare]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Wow6432Node\IObit\ASC [ASC]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B} [{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}]
SUPPRIMÉ Redémarrage  Clé ^: HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.ascplugin.protect
ABSENT Clé: HKLM\SOFTWARE\IObit\RealTimeProtector
ABSENT Clé: HKLM\SOFTWARE\IObit\Advanced SystemCare
ABSENT Clé: HKLM\SOFTWARE\Iobit\ASC
ABSENT Clé: HKLM\SOFTWARE\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}
ABSENT Clé: HKLM\SOFTWARE\Ascrod
ABSENT Clé: HKLM\SOFTWARE\Restoro
SUPPRIMÉ Redémarrage  Clé ^: HKLM\SOFTWARE\SaferWeb
SUPPRIMÉ Redémarrage  Clé ^: HKLM\SOFTWARE\Systweak
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\Auslogics [Auslogics]
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\SaferWeb [SaferWeb]
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\Systweak [Systweak]
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\Systweak VPN [Systweak VPN]
SUPPRIMÉ Clé: HKCU\SOFTWARE\Restoro [Restoro]
SUPPRIMÉ Clé: HKU\.DEFAULT\SOFTWARE\Systweak [Systweak]
ABSENT Clé: HKU\S-1-5-21-3945783615-3853108761-1058730989-1004\SOFTWARE\Restoro
ABSENT Clé Tracing: HKLM\SOFTWARE\Microsoft\Tracing\svchost_RASCHAP
ABSENT Clé: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Restoro
SUPPRIMÉ Redémarrage  Clé ^: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5904B3FF-F175-464F-A347-70D9E058E312_Systweak_Du~3C856E16_is1
SUPPRIMÉ Redémarrage  Clé ^: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DA71BA65-680A-4212-9150-6239217B53DC_Systweak_Di~BECC4794_is1
SUPPRIMÉ Redémarrage  Clé ^: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC HelpSoft Driver Updater_is1
SUPPRIMÉ Redémarrage  Clé ^: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Systweak Software Updater_is1
SUPPRIMÉ Clé: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\5904B3FF-F175-464F-A347-70D9E058E312_Systweak_Du~3C856E16_is1 [5904B3FF-F175-464F-A347-70D9E058E312_Systweak_Du~3C856E16_is1]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DA71BA65-680A-4212-9150-6239217B53DC_Systweak_Di~BECC4794_is1 [DA71BA65-680A-4212-9150-6239217B53DC_Systweak_Di~BECC4794_is1]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PC HelpSoft Driver Updater_is1 [PC HelpSoft Driver Updater_is1]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Systweak Software Updater_is1 [Systweak Software Updater_is1]
SUPPRIMÉ Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ASZip2 [ASZip2]
SUPPRIMÉ Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ASZip264 [ASZip264]
SUPPRIMÉ Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PfMenu [PfMenu]
SUPPRIMÉ Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32]
SUPPRIMÉ Redémarrage  Clé ^: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
SUPPRIMÉ Clé: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\Comodo Antivirus [Comodo Antivirus]
SUPPRIMÉ Clé: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\IObit Malware Fighter [IObit Malware Fighter]
SUPPRIMÉ Clé: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\IObitUninstaller [IObitUninstaller]
SUPPRIMÉ Clé: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\PfMenu [PfMenu]
SUPPRIMÉ Clé: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 [WinRAR32]
SUPPRIMÉ Clé: HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\FAExt [FAExt]
SUPPRIMÉ Redémarrage  Clé ^: HKLM\Software\Classes\CLSID\{05672D66-9736-42F5-8BEB-FA1DD3CA51C4}
SUPPRIMÉ Clé: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32]
ABSENT Clé Tracing: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\svchost_RASCHAP
ABSENT Clé: HKCU\Software\Local AppWizard-Generated Applications\Restoro
ABSENT Clé: HKLM\SOFTWARE\Wow6432Node\IObit\RealTimeProtector
ABSENT Clé: HKLM\SOFTWARE\Wow6432Node\IObit\Advanced SystemCare
ABSENT Clé: HKLM\SOFTWARE\Wow6432Node\IObit\ASC
ABSENT Clé: HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}


---\\  COMMANDE.  (2)
~ EmptyPrefetch: Fichiers Prefetcher supprimés (159)
~ EmptyCSID: Dossiers CLSID vides supprimés  (0)


---\\  NON TRAITÉ.  (4)
[013BAA2C5C24A6FC5648FC7085072396] [01/11/2022] (.Auslogics Labs Pty Ltd.) - C:\Program Files (x86)\Auslogics\Disk Defrag\unins000.exe
[013BAA2C5C24A6FC5648FC7085072396] [08/06/2022] (.Auslogics Labs Pty Ltd.) - C:\Program Files (x86)\Auslogics\Duplicate File Finder\ActionCenter.exe
[013BAA2C5C24A6FC5648FC7085072396] [20/10/2022] (.Auslogics Labs Pty Ltd.) - C:\Program Files (x86)\Auslogics\BitReplica\unins000.exe
[013BAA2C5C24A6FC5648FC7085072396] [20/10/2022] (.Auslogics Labs Pty Ltd.) - C:\Program Files (x86)\Auslogics\Duplicate File Finder\unins000.exe

~ Le système a été redémarré.

***** ~ Fin de rapport terminé en 35mn51s