ZHPCleaner

~ ZHPCleaner v2017.4.10.
62 by Nicolas Coolman (2017/04/10)

~ Run by ram (Administrator) (11/04/2017 02:35:05)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\ram\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\ram\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 14393)
---\\ Services (1)

CLOSED : iSafeService =>.Superfluous.Elex
---\\ Browser internet (2)

DELETED: [kmsuenfh.default-1483258343921] -
user_pref("browser.search.defaultenginename", "youndoo"); =>PUP.Optional.Youndoo
DELETED: [kmsuenfh.default-1483258343921] -
user_pref("browser.search.selectedEngine", "youndoo"); =>PUP.Optional.Youndoo
---\\ Hosts file (0)

~ No malicious or unnecessary items found.
---\\ Scheduled automatic tasks. (0)

~ No malicious or unnecessary items found.
---\\ Explorer ( File, Folder) (217)

MOVED file^: C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [Elex do Brasil
Participaes Ltda - iSafe Kernel Driver] =>.Superfluous.Elex
MOVED file^: C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [Elex do Brasil
Participaes Ltda - iSafe Kernel Kit Driver] =>.Superfluous.Elex
MOVED file^: C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [Elex do Brasil
Participaes Ltda - iSafeSvc] =>.Superfluous.Elex
MOVED file: C:\Windows\Prefetch\KYUBEY.EXE-5B9EF9B9.pf =>Adware.CrossRider
MOVED file: C:\Windows\Installer\wix{89AFB053-A343-46EF-97E4-
D593AD7184E6}.SchedServiceConfig.rmi =>.Superfluous.Empty
MOVED file: C:\Windows\Installer\wix{AF599C42-A2E5-4251-B7EE-
4925B177CBA7}.SchedServiceConfig.rmi =>.Superfluous.Empty
MOVED file: C:\Windows\Installer\wix{E625FCA0-E43E-4D3B-92FF-
4851308A0366}.SchedServiceConfig.rmi =>.Superfluous.Empty
MOVED file: C:\Users\ram\Downloads\download.php =>PUP.Optional.DownApp
MOVED file: C:\Users\ram\AppData\Local\Temp\040DD597-F1B6-47F4-8AC6-
86C51109F20C.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\0E3EC64B-E4F4-4D1E-9C88-
8ECB08E78E98.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\57D08033-873C-453E-BCE2-
EC2C54A8A3A8.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\6712D56A-BA85-4D27-95C0-
CF501E642BE0.Diagnose.0.etl =>.Superfluous.Temporary.Empty
CF501E642BE0.Repair.1.etl =>.Superfluous.Temporary.Empty
CF501E642BE0.Verify.2.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\6C33EBF6-27C4-4F51-85E4-
D61EE9C307A9.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\70038980-BB31-4A3C-971A-
37EB9C78EC51.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\70A8C16C-418E-4A04-85EC-
C55C313854E1.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\7565666B-282F-4140-A413-
74A6301F5D76.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\8DD6EFC2-F1DB-4146-97E6-
B0EA76A2370B.Diagnose.0.etl =>.Superfluous.Temporary.Empty
B0EA76A2370B.Repair.1.etl =>.Superfluous.Temporary.Empty
B0EA76A2370B.Verify.2.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\920678C9-9117-4577-AEA1-
5C95ECDA94E2.Diagnose.0.etl =>.Superfluous.Temporary.Empty
5C95ECDA94E2.Repair.1.etl =>.Superfluous.Temporary.Empty
5C95ECDA94E2.Verify.2.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\94971F49-8A38-45D7-A3E1-
20A4143EB87B.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\9788C8A8-678F-4D8E-9C83-
624D116D9C5F.Diagnose.1.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\A0DB5D5D-1703-4B01-858F-
61D4804B3F04.Repair.Admin.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\A0DB5D5D-1703-4B01-858F-
61D4804B3F04.Verify.Admin.1.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\B8242B5E-AB5A-4827-87CA-
9DC37A176B9C.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\B8DBFFA4-CC12-42AB-AFB8-
404A98E59AD4.Diagnose.0.etl =>.Superfluous.Temporary.Empty
404A98E59AD4.Repair.1.etl =>.Superfluous.Temporary.Empty
404A98E59AD4.Verify.2.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\BAB3EEC4-C913-459C-A64B-
623C879643E6.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\C0191572-03EE-499E-A080-
D463144D41CA.Diagnose.0.etl =>.Superfluous.Temporary.Empty
D463144D41CA.Repair.Admin.0.etl =>.Superfluous.Temporary.Empty
D463144D41CA.Verify.Admin.1.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\C439937C-2225-40B4-891A-
8EEF82408163.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\CB38C993-EB4F-4B71-9E90-
C447B1DE7682.Diagnose.3.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\csw1A1B.tmp
=>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\csw1BE1.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\csw1BF1.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\csw7158.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\DA2BEE4C-532B-437F-9BD9-
162EAC227A1B.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\DCFCEB4D-6C41-40AA-8090-
DA52CD740AC9.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\EF0BEEAE-C332-47FA-9783-
F7359E646B42.Diagnose.0.etl =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\httpex.log
MOVED file: C:\Users\ram\AppData\Local\Temp\IDM Patch Uninstaller 5.exe
MOVED file: C:\Users\ram\AppData\Local\Temp\PH_patch_20170310to20170323.0.dat
MOVED file: C:\Users\ram\AppData\Local\Temp\PH_patch_20170310to20170323.exe
MOVED file: C:\Users\ram\AppData\Local\Temp\psg1A4A.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\psg1A89.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\psg1A9A.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\psg1AE9.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\RAMON-20170322-1320.log
MOVED file: C:\Users\ram\AppData\Local\Temp\Setup Log 2017-04-11 #001.txt
MOVED file: C:\Users\ram\AppData\Local\Temp\wct1896.tmp
=>.Superfluous.Temporary.Various
MOVED file: C:\Users\ram\AppData\Local\Temp\wct643B.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\wct76E2.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\wctC787.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\wctD1DF.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\wctFA4C.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\wctFDA7.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileBGSocial.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileBroom.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileCheck.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileClose.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileCluff_EN.txt
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileCluff_FR.txt
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileDetected.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileExit-40.bmp
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileExit-40.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileFB.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileForum.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileGP.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileIcone.ico
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileInfo.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFilelogo-texte.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileNav_FF.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileNav_GG.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileNav_IE.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileNav_OP.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFilePayPal.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFilePercent.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileQuar.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileQuestion.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileRapport.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileSearch.png
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPCFileTransGui.jpg
MOVED file: C:\Users\ram\AppData\Local\Temp\ZHPdonate.png
MOVED file: C:\Users\ram\AppData\Local\Temp\_@58D5.tmp [Elex do Brasil
Participaes Ltda - uninstal] =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\_@5933.tmp [Elex do Brasil
Participaes Ltda - libcurl wrapper] =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\_@59C1.tmp [Elex do Brasil
Participaes Ltda - iCommon] =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\_@5A7E.tmp [Elex do Brasil
Participaes Ltda - iImportLib] =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\_@5ACD.tmp [Elex do Brasil
Participaes Ltda - isafebase] =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\_@5C06.tmp [Elex do Brasil
Participaes Ltda - Module Config] =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\_@5CC3.tmp [Elex do Brasil
Participaes Ltda - isafepxy] =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\_@5CC4.tmp [Elex do Brasil
Participaes Ltda - isaferpt] =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\_@5E6B.tmp [The cURL library,
http://curl.haxx.se/ - libcurl Shared Library] =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\_@5F95.tmp [? 1998-2009 Glenn Randers-
Pehrson et al. - PNG image compression library] =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\_@6054.tmp [Elex do Brasil
Participaes Ltda - ouilib] =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\_@6055.tmp [SQLite3 - SQLite3 Dynamic
Link Library] =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\ram\AppData\Local\Temp\_@6086.tmp [(C) 1995-2004 Jean-loup
Gailly & Mark Adler - zlib data compression library]
MOVED file: C:\Users\ram\AppData\Local\Temp\~bkBC06.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\~bkBC07.tmp
MOVED file: C:\Users\ram\AppData\Local\Temp\~DF0743417FAFFC2C1F.TMP
MOVED file: C:\Users\ram\AppData\Local\Temp\~DF2754C815F098A7AC.TMP
MOVED file: C:\Users\ram\AppData\Local\Temp\~DF32D69EF475FC8910.TMP
MOVED file: C:\Users\ram\AppData\Local\Temp\~DF341F9A9A8536C3C4.TMP
MOVED file: C:\Users\ram\AppData\Local\Temp\~DF5713368E34D6F205.TMP
MOVED file: C:\Users\ram\AppData\Local\Temp\~DF60D3C1352716DA20.TMP
MOVED file: C:\Users\ram\AppData\Local\Temp\~DF6EFBDD0D8ADB8E5F.TMP
MOVED file: C:\Users\ram\AppData\Local\Temp\~DF9403CA541A91AF9E.TMP
MOVED file: C:\Users\ram\AppData\Local\Temp\~DFC491F0B35CB191D8.TMP
MOVED file: C:\Users\ram\AppData\Local\Temp\~DFD4AC7E737EEDC2D2.TMP
MOVED file: C:\Users\ram\AppData\Local\Temp\~DFD730B811089BC93F.TMP
MOVED file: C:\Users\ram\AppData\Local\Temp\~DFE6ED9CE54835DC70.TMP
MOVED file: C:\Users\ram\AppData\Local\Temp\~DFFFBD39160DA94136.TMP
MOVED file: C:\Users\ram\AppData\Local\Temp\~ppBC05.tmp
MOVED file: C:\WINDOWS\System32\log\iSafeKrnlCall.log
=>.Superfluous.YetAnotherCleaner
MOVED file: C:\WINDOWS\System32\Drivers\iSafeNetFilter.sys [Elex do Brasil
Participaes Ltda - iSafeNetFilter SDK WFP Driver (WPP)]
MOVED file: C:\Users\ram\AppData\Local\AMD\amd.exe =>.Superfluous.Elex
MOVED file: C:\Windows\Installer\{6C097E4F-C70E-4EDF-A10F-
E147DEE8C26A}\_853F67D554F05449430E7E.exe =>.Superfluous.WinSnare
MOVED folder: C:\Program Files (x86)\4n61han4 =>.Superfluous.Elex
MOVED folder^: C:\Program Files (x86)\Elex-tech =>.Superfluous.Elex
MOVED folder: C:\Program Files (x86)\eSupport.com =>PUP.Optional.eSupport
MOVED folder: C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS
MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eSupport.com
=>PUP.Optional.eSupport
MOVED folder: C:\WINDOWS\System32\config\systemprofile\AppData\Roaming\Tencent
=>.Superfluous.Tencent
MOVED folder: C:\WINDOWS\System32\config\systemprofile\AppData\Local\CrashRpt
=>.Superfluous.CrashReports
MOVED folder^: C:\Users\ram\AppData\Roaming\Elex-tech =>.Superfluous.Elex
MOVED folder^: C:\Users\ram\AppData\Roaming\WinSAPSvc =>PUP.Optional.Youndoo
MOVED folder: C:\Users\ram\AppData\Local\CrashRpt =>.Superfluous.CrashReports
MOVED folder: C:\Users\ram\AppData\Local\eSupport.com =>PUP.Optional.eSupport
MOVED folder: C:\Users\ram\AppData\Local\Pokki =>.Superfluous.SweetLabs
MOVED folder: C:\Users\Default\AppData\Local\CrashRpt =>.Superfluous.CrashReports
MOVED folder: C:\Users\Default\AppData\Local\Pokki =>.Superfluous.SweetLabs
MOVED folder: C:\Users\Default User\AppData\Local\CrashRpt
MOVED folder: C:\Users\Default User\AppData\Local\Pokki =>.Superfluous.SweetLabs
MOVED folder: C:\Users\Guest\AppData\Local\CrashRpt =>.Superfluous.CrashReports
MOVED folder: C:\Users\Guest\AppData\Local\Pokki =>.Superfluous.SweetLabs
MOVED folder: C:\Users\Guest Account\AppData\Local\CrashRpt
MOVED folder: C:\Users\Guest Account\AppData\Local\Pokki =>.Superfluous.SweetLabs
MOVED folder: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Roaming\Tencent
=>.Superfluous.Tencent
MOVED folder: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Local\CrashRpt
MOVED folder^: C:\Program Files (x86)\Elex-tech\YAC
MOVED folder: C:\Users\ram\AppData\Roaming\SNARER =>.Superfluous.InterSectAlliance
MOVED folder: C:\WINDOWS\Installer\MSI111.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI112D.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI1AC3.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI26A3.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI2BB.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI2D8.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI33EB.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI36AB.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI38FE.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI3C4B.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI3EBB.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI469F.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI4AE6.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI4DA5.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI64D8.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI6C5C.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI72A.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI7C7D.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI800A.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI82F3.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSI8E5D.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIA0FE.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIA785.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIA96B.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIA98F.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIAE12.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIAFAA.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIB326.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIB3D1.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIC7B3.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSICB9C.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSICE1E.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSICF57.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSID062.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSID5E9.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIDE31.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIDE77.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIDEB.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIDF2C.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIE65C.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIE9D7.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIECF5.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIEE6D.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIEEE2.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIEFA7.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF46B.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIF538.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIFBB2.tmp- =>.Superfluous.Empty
MOVED folder: C:\WINDOWS\Installer\MSIFFD7.tmp- =>.Superfluous.Empty
---\\ Registry ( Key, Value, Data) (27)

DELETED key^: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnl [C:\Program Files
(x86)\Elex-tech\YAC\iSafeKrnl.sys] =>.Superfluous.Elex
DELETED key^: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlKit [C:\Program Files
(x86)\Elex-tech\YAC\iSafeKrnlKit.sys] =>.Superfluous.Elex
DELETED key^: HKLM\SYSTEM\CurrentControlSet\Services\iSafeService [C:\Program Files
(x86)\Elex-tech\YAC\iSafeSvc.exe] =>.Superfluous.Elex
DELETED key*: HKCU\Software\eSupport.com [] =>PUP.Optional.eSupport
DELETED key*: HKCU\Software\Pokki [] =>.Superfluous.SweetLabs
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
[Pokki] =>.Superfluous.SweetLabs
DELETED key*:
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e90821
3e7689d4342ce2111caf [Pokki] =>.Superfluous.SweetLabs
DELETED key*: HKCU\Software\undefined [] =>.Superfluous.Downloader
DELETED key*: HKLM\SOFTWARE\Wow6432Node\Firefox [] =>Adware.GhokswaBrowser
DELETED key: HKLM\SOFTWARE\Firefox [] =>Adware.GhokswaBrowser
DELETED key*: [X64] HKLM\SOFTWARE\Classes\TypeLib\{1112F282-7099-4624-A439-
DB29D6551552} [OCComSDK 1.0 Type Library] =>Adware.OpenCandy
DELETED key*: [X64]
HKLM\Software\Classes\Installer\Products\F4E790C6E07CFDE41AF01E74ED8E2CA6
[WinSnare] =>.Superfluous.WinSnare
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\SNARER []
=>.Superfluous.InterSectAlliance
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\WinSAPSvc []
=>PUP.Optional.Youndoo
DELETED key*: [X64] HKLM\SOFTWARE\InterSect Alliance [] =>.Superfluous.InterSect
DELETED key*: [X64]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-
18\Components\1E9542DF5C852210D6CA6CA721FAB122 [C:\Program Files
(x86)\WinSnare(4.2.5)\s_32.ico (Not File)] =>.Superfluous.WinSnare
DELETED key*: [X64]
18\Components\24C995FA5E2A15247BEE945257D29017 [C:\Program Files (x86)\Hotspot
Shield\bin\CrashRpt1403.dll] =>.Superfluous.CrashReports
DELETED key*: [X64]
18\Components\24C995FA5E2A15247BEE94525E20E902 [C:\Program Files (x86)\Hotspot
Shield\bin\crashrpt_lang.ini] =>.Superfluous.CrashReports
DELETED key^: [X64] HKLM\SOFTWARE\Wow6432Node\Elex-tech [] =>.Superfluous.Elex
DELETED key: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{1112F282-7099-4624-
A439-DB29D6551552} [OCComSDK 1.0 Type Library] =>Adware.OpenCandy
DELETED key^: [X64]
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iSafe [ELEX DO
BRASIL PARTICIPAES LTDA] =>.Superfluous.Elex
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BikaQ_RASAPI32 []
=>.Superfluous.BikaQ
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BikaQ_RASMANCS []
=>.Superfluous.BikaQ
DELETED key*: [X64]
HKLM\Software\Classes\Installer\Features\F4E790C6E07CFDE41AF01E74ED8E2CA6 []
=>.Superfluous.WinSnare
DELETED key*: HKCU\SOFTWARE\D86EE0BBCE21F1A68B2D7488E23D81D7 [] =>Hijacker.Browser
DELETED key*: [X64] HKLM\SOFTWARE\D86EE0BBCE21F1A68B2D7488E23D81D7 []
=>Hijacker.Browser
DELETED value:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Pokki
[0x020000000000000000000000] =>.Superfluous.SweetLabs
---\\ Summary of the elements found (21)

https://nicolascoolman.eu/2017/03/28/superfluous-elex/ =>.Superfluous.Elex
https://nicolascoolman.eu/2017/03/11/superfluous-youndoo/ =>PUP.Optional.Youndoo
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Empty
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/
=>PUP.Optional.DownApp
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/
https://nicolascoolman.eu/2017/01/12/superfluous-winsnare/ =>.Superfluous.WinSnare
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/
=>PUP.Optional.eSupport
https://nicolascoolman.eu/2017/02/02/hacktool-autokms/ =>HackTool.AutoKMS
https://nicolascoolman.eu/2017/02/23/tencentadressbar/ =>.Superfluous.Tencent
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.SweetLabs
=>.Superfluous.InterSectAlliance
=>.Superfluous.Downloader
https://nicolascoolman.eu/2017/02/19/adware-ghokswabrowser/
=>Adware.GhokswaBrowser
https://nicolascoolman.eu/2017/02/24/adware-opencandy/ =>Adware.OpenCandy
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.InterSect
https://nicolascoolman.eu/2017/02/17/superfluous-bikaq/ =>.Superfluous.BikaQ
https://nicolascoolman.eu/2017/02/02/hijacker-browser-2/ =>Hijacker.Browser
---\\ Other deletions. (21)

~ Registry Keys Tracing deleted (21)
~ Remove the old reports ZHPCleaner. (0)
---\\ Result of repair

~ Repair carried out successfully
~ Browser not found (Google Chrome)
~ Browser not found (Opera Software)
~ The system has been restarted.
---\\ Statistics
~ Items scanned : 803
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 247
~ End of clean in 00h06mn33s

~====================
ZHPCleaner-[R]-11042017-02_41_38.txt
ZHPCleaner-[S]-11042017-02_34_21.txt

ZHPCleaner

Enviado por

Dados do documento

Título original

Direitos autorais

Formatos disponíveis

Compartilhar este documento

Compartilhar ou incorporar documento

Opções de compartilhamento

Você considera este documento útil?

Este conteúdo é inapropriado?

Direitos autorais:

Formatos disponíveis

ZHPCleaner

Enviado por

Direitos autorais:

Formatos disponíveis

~ ZHPCleaner v2017.4.10.

62 by Nicolas Coolman (2017/04/10)

---\\ Services (1)

---\\ Browser internet (2)

---\\ Hosts file (0)

---\\ Scheduled automatic tasks. (0)

---\\ Explorer ( File, Folder) (217)

---\\ Registry ( Key, Value, Data) (27)

---\\ Summary of the elements found (21)

---\\ Other deletions. (21)

---\\ Result of repair

~ End of clean in 00h06mn33s

Você também pode gostar