~ ZHPCleaner v2019.1.17.9 by Nicolas Coolman (2019/01/17)
~ Run by ltd (Administrator) (19/01/2019 11:07:01)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version KO
~ Certificate ZHPCleaner: Legal
~ Type : Repair
~ Report : C:\Users\ltd\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\ltd\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 17134)
---\\ Alternate Data Stream (ADS). (0)
~ No malicious or unnecessary items found.
---\\ Services (0)
~ No malicious or unnecessary items found.
---\\ Browser internet (0)
~ No malicious or unnecessary items found.
---\\ Hosts file (1)
~ The hosts file is legitimate (135)
---\\ Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.
---\\ Explorer ( File, Folder) (28)
MOVED file: C:\Windows\Installer\wix{9CBA860F-7437-4A75-941C-8EF559F2D145}.SchedServiceConfig.rmi =>.SUP.Empty
MOVED file: C:\Windows\Installer\wix{C5FDDED7-DEC7-48B4-AFD8-DFB8A0FD199A}.SchedServiceConfig.rmi =>.SUP.Empty
MOVED file: C:\Windows\Installer\wix{F814D094-197F-43C8-87FA-3210BB780486}.SchedServiceConfig.rmi =>.SUP.Empty
MOVED file: C:\Users\ltd\Downloads\myprintscreen.exe [MyPrintScreen Company - MyPrintScreen Setup] =>.SUP.MyPrintScreen
MOVED file: C:\Users\ltd\AppData\Local\Temp\CUsersltdAppDataLocalProgramsOpera56.0.3051.52opera_autoupdate.download.lock =>.SUP.Temporary.Opera
MOVED file: C:\Users\ltd\AppData\Local\Temp\CUsersltdAppDataLocalProgramsOpera56.0.3051.52opera_autoupdate.metrics.lock =>.SUP.Temporary.Opera
MOVED file: C:\Users\ltd\AppData\Local\Temp\nsgC0D4.tmp =>.SUP.Temporary.Empty
MOVED folder: C:\Users\ltd\AppData\Local\OneDrive =>PUP.Optional.Y2Go
MOVED folder: C:\WINDOWS\Installer\MSI1817.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSI349.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSI3A17.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSI43AD.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSI504E.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSI59F0.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSI6716.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSI71FF.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSI83B5.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSI8BE3.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSIA050.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSIB542.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSIB744.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSIBC17.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSIBDC0.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSIC2B1.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSIC7FF.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSIC88E.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSICAC.tmp- =>.SUP.Empty
MOVED folder: C:\WINDOWS\Installer\MSIFB3A.tmp- =>.SUP.Empty
---\\ Registry ( Key, Value, Data) (13)
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\808fc302-3d01-59ce-8094-e0443a55877e [] =>Adware.CrossRider
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\ltd\AppData\Local\Temp\x64\ [No Folder] =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\ltd\AppData\Local\Temp\x86\ [No Folder] =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\ltd\AppData\Local\Temp\Ceement\ [No Folder] =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\ltd\AppData\Local\Temp\Ceement\src\ [No Folder] =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\HP\HP Wireless Button Driver\ [No Folder] =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\HP\HP Wireless Button Driver\Driver\ [No Folder] =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\ltd\AppData\Local\ACD Systems\Actions\120Ult\V10\ [No Folder] =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\ltd\AppData\Local\ACD Systems\Actions\120Ult\ [No Folder] =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\ltd\AppData\Local\ACD Systems\Actions\ [No Folder] =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\ltd\AppData\Local\ACD Systems\ [No Folder] =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\ltd\AppData\Local\ACD Systems\LUTs\V10\ [No Folder] =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\ltd\AppData\Local\ACD Systems\LUTs\ [No Folder] =>.SUP.Obsolete.NoFolder
---\\ Summary of the elements found (7)
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Empty
https://nicolascoolman.eu/2017/12/09/sup-myprintscreen/ =>.SUP.MyPrintScreen
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Temporary.Opera
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Temporary.Empty
https://nicolascoolman.eu/2017/04/08/pup-optional-y2go/ =>PUP.Optional.Y2Go
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Obsolete.NoFolder
---\\ Other deletions. (38)
~ Registry Keys Tracing deleted (37)
~ Remove the old reports ZHPCleaner. (1)
---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Google Chrome)
---\\ Statistics
~ Items scanned : 957
~ Items found : 0
~ Items cancelled : 0
~ Items options : 12/12
~ Space saving (bytes) : 0
~ End of clean in 00h00mn38s
---\\ Reports (2)
ZHPCleaner-[S]-19012019-10_56_45.txt
ZHPCleaner-[R]-19012019-11_07_39.txt