~ ZHPCleaner v2017.1.24.

18 by Nicolas Coolman (2017/01/24)

~ Run by MOHA (Administrator) (25/01/2017 00:37:06)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Users\MOHA\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\MOHA\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 32-bit (Build 14393)
---\\ Service. (1)
ARRET : rtop =>.Superfluous.ByteFence
---\\ Navigateur internet. (0)
~ Aucun lment malicieux ou superflu trouv.
---\\ Fichier hte. (1)
~ Le fichier hte est lgitime. (60)
---\\ Tche planifie. (1)
SUPPRIM tche: [AutoPico Daily Restart] [C:\Program Files\KMSpico\AutoPico.exe (Not
File) ] =>HackTool.KMSpico
---\\ Explorateur ( Dossiers, Fichiers ). (53)
DEPLAC fichier: C:\Program Files\ByteFence\ByteFenceService.exe [Byte Technologie
s LLC - ByteFence Anti-Malware] =>.Superfluous.ByteFence
DEPLAC fichier: C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe [Copyright Byte
Technologies LLC. - ByteFence Real-time Protection] =>.Superfluous.ByteFence
DEPLAC fichier: C:\Program Files\KMSpico\Service_KMS.exe [@ByELDI - Service_KMS]
=>HackTool.KMSpico
DEPLAC fichier: C:\Program Files\KMSpico\AutoPico.exe [@ByELDI - AutoPico] =>Hac
kTool.KMSpico
DEPLAC fichier: C:\Windows\prefetch\AUTOPICO.EXE-EB7BC268.pf
=>HackTool.KMSpic
o
DEPLAC fichier: C:\Windows\prefetch\BYTEFENCE-INSTALLER.EXE-3C08C25D.pf
=>.Sup
erfluous.ByteFence
DEPLAC fichier: C:\Windows\prefetch\BYTEFENCE-INSTALLER_2.10.0.EX-00AFDF60.pf
=>.Superfluous.ByteFence
DEPLAC fichier: C:\Windows\prefetch\BYTEFENCE.EXE-FAC31F78.pf
=>.Superfluous.B
yteFence
DEPLAC fichier: C:\Windows\prefetch\BYTEFENCESERVICE.EXE-4186E33D.pf
=>.Superf
luous.ByteFence
DEPLAC fichier: C:\Windows\prefetch\KMSPICO_SETUP.EXE-2860FB9F.pf
=>HackTool.K
MSpico
DEPLAC fichier: C:\Windows\prefetch\KMSPICO_SETUP.EXE-A6DFCE1E.pf
=>HackTool.K
MSpico
DEPLAC fichier: C:\Windows\prefetch\KMSPICO_SETUP.EXE-DF13BFAA.pf
=>HackTool.K
MSpico
DEPLAC fichier: C:\Windows\prefetch\KMSPICO_SETUP.TMP-06BCF3D2.pf
=>HackTool.K
MSpico
DEPLAC fichier: C:\Windows\prefetch\KMSPICO_SETUP.TMP-2B50490F.pf
=>HackTool.K
MSpico

DEPLAC fichier: C:\Windows\prefetch\KMSPICO_SETUP.TMP-31FA3098.pf

=>HackTool.K
MSpico
DEPLAC fichier: C:\Windows\prefetch\KMSPICO_SETUP.TMP-4F006B9B.pf
=>HackTool.K
MSpico
DEPLAC fichier: C:\Windows\prefetch\KMSPICO_SETUP.TMP-8BAD3C7F.pf
=>HackTool.K
MSpico
DEPLAC fichier: C:\Windows\prefetch\KMSPICO_SETUP.TMP-AB6319C7.pf
=>HackTool.K
MSpico
DEPLAC fichier: C:\Windows\prefetch\OLBPRE.EXE-826AFBAE.pf
=>PUP.Optional.MyPC
Backup
DEPLAC fichier: C:\Windows\prefetch\PC-MECHANIC.EXE-752AE50E.pf
=>.Superfluous
.Uniblue
DEPLAC fichier: C:\Users\MOHA\Downloads\KMSpico 10.2.1.zip
=>HackTool.KMSpico
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.00D57B0F-01FA-B79F-08D6-878ED
20C4C9B_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.0116DC02-781B-D1D1-FC1C-C8019
5511E17_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.0862A72D-A96C-83E5-AD0F-78B6A
A06F9C6_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.0C8CF327-9D17-CCDE-18AF-DFF4F
20070E5_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.18DDC675-D472-0DB4-9563-7DF7C
34F512C_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.1FE89C0B-9BED-CC5D-7426-9E402
5D6BDD9_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.3BFD26C9-8DA9-B940-F638-55890
012AAB4_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.50611331-FE19-D366-B049-694B8
AC9D758_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.557EA3BB-623E-ADD9-4DFB-629A8
648A038_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.558F5D32-0827-EB7B-6AD6-D5DB4
138B3AA_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.62B49C0A-499E-A02D-EBCB-EB168
E148E52_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.664AA17A-2D25-0823-3315-3708F
E16147A_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.674C4C14-7BAA-F782-E214-956DC
3BEDF39_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.68BC3251-2D8B-A604-92BA-89363
8CA72EA_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.68E019EB-0B92-5E08-5D86-9BFE6
DBA8517_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.69F3BCAB-8975-C526-30F5-39FA7
0C77AD9_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.6D151227-6BD9-726D-B30E-A8A01
8DCC82B_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.6EA6FC2E-9305-586B-3411-02826
D151533_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.97612282-D1E8-1D6A-9E92-C271E
7F177EF_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.9D4DED89-CABC-F4FB-8133-BC5ED
B1C7EDA_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.A90B8400-D36D-8235-8BF2-A21A5
3D3FB65_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.DFBE09D0-1F22-A9C0-2D3D-3F4C6
351E58F_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.E336BB8F-16ED-7CBE-AFEE-971DD
3041585_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.E6658C19-4221-2EBE-763A-F0493

FBA2BB0_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.E6D3B497-80AF-7F14-F9E6-9606E
E369FC3_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC fichier: C:\Users\MOHA\AppData\Local\Temp\sa.FACF9DDE-1FF1-B57D-4D1D-CE479
FDD42AF_5__.Public.AppUpdate.dat
=>.Superfluous.Temporary
DEPLAC dossier^: C:\Program Files\ByteFence =>.Superfluous.ByteFence
DEPLAC dossier: C:\Program Files\KMSpico =>HackTool.KMSpico
DEPLAC dossier^: C:\ProgramData\ByteFence =>.Superfluous.ByteFence
DEPLAC dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ByteFence An
ti-Malware =>.Superfluous.ByteFence
DEPLAC dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>H
ackTool.KMSpico
DEPLAC dossier: C:\Users\MOHA\AppData\Local\Temp\scoped_dir_1796_8602 =>.Superfl
uous.Temporary.Steam
---\\ Base de Registres ( Cls, Valeurs, Donnes ). (23)
SUPPRIM cl*: HKLM\SYSTEM\CurrentControlSet\Services\ByteFenceService [C:\Program F
iles\ByteFence\ByteFenceService.exe (Not File)] =>.Superfluous.ByteFence
SUPPRIM cl*: HKLM\SYSTEM\CurrentControlSet\Services\rtop [C:\Program Files\ByteFen
ce\rtop\bin\rtop_svc.exe (Not File)] =>.Superfluous.ByteFence
SUPPRIM cl*: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [C:\Program Fi
les\KMSpico\Service_KMS.exe (Not File)] =>HackTool.KMSpico
SUPPRIM cl*: HKCU\Software\ByteFence [] =>.Superfluous.ByteFence
SUPPRIM cl*: HKCU\Software\AppDataLow\Software\adawarebp [] =>PUP.Optional.Toolba
rCleaner
SUPPRIM cl*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Curre
ntVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\00
1\Internet Explorer\EdpDomStorage\download.kmspicofinal.com [] =>HackTool.KMSpi
co
SUPPRIM cl*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Curre
ntVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\00
1\Internet Explorer\EdpDomStorage\kmspico10.com [] =>HackTool.KMSpico
SUPPRIM cl*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Curre
ntVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\00
1\Internet Explorer\EdpDomStorage\kmspicofinal.com [] =>HackTool.KMSpico
SUPPRIM cl*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Curre
ntVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\00
1\Internet Explorer\DOMStorage\download.kmspicofinal.com [39] =>HackTool.KMSpic
o
SUPPRIM cl*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Curre
ntVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\00
1\Internet Explorer\DOMStorage\kmspico10.com [39] =>HackTool.KMSpico
SUPPRIM cl*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Curre
ntVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\00
1\Internet Explorer\DOMStorage\kmspicofinal.com [] =>HackTool.KMSpico
SUPPRIM cl*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\bytefence.com []
=>.Superfluous.ByteFence
SUPPRIM cl*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\fr.bytefence.com
[81] =>.Superfluous.ByteFence
SUPPRIM cl*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ByteFence
Service [] =>.Superfluous.ByteFence
SUPPRIM cl*: HKLM\SOFTWARE\ByteFence [] =>.Superfluous.ByteFence
SUPPRIM cl*: HKLM\SOFTWARE\Uniblue [] =>.Superfluous.Uniblue
SUPPRIM cl*: HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 [] =>.Superfluous
.ByteFence
SUPPRIM cl*: HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS [] =>.Superfluous
.ByteFence
SUPPRIM cl*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ByteFence [B
yte Technologies LLC] =>.Superfluous.ByteFence

SUPPRIM cl*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92

E2-4C20-9EE0-F710991F5D7C}_is1 [KMSpico] =>HackTool.KMSpico
SUPPRIM cl*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E
2C-4304-9AB6-BC44E68B55E2} [Google Inc.] =>Heuristic.Suspect
SUPPRIM valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\fi
rewallpolicy\firewallRules\\{2E578F55-9F14-406E-92E9-80BC8D64CD93} [C:\Program F
iles\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIM valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\fi
rewallpolicy\firewallRules\\{8A1360DF-78E5-4BA1-A938-381D20FB1E37} [C:\Program F
iles\KMSpico\AutoPico.exe] =>HackTool.KMSpico
---\\ Rcapitulatif des lments trouvs sur votre station. (8)
https://www.anti-malware.top/2016/04/29/superfluous-bytefence/ =>.Superfluous.B
yteFence
https://www.anti-malware.top/2016/09/08/hacktool-kmspico/ =>HackTool.KMSpico
https://www.nicolascoolman.com/fr/pup-mypcbackup/ =>PUP.Optional.MyPCBackup
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>
.Superfluous.Uniblue
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>
.Superfluous.Temporary
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>
.Superfluous.Temporary.Steam
https://www.nicolascoolman.com/fr/pup-toolbarcleaner/ =>PUP.Optional.ToolbarCle
aner
https://www.anti-malware.top/2016/04/22/heuristic-suspect/ =>Heuristic.Suspect
---\\ Nettoyage Additionnel. (6)
~ Suppression des Cls de registre Tracing. (6)
~ Suppression des anciens rapports ZHPCleaner. (0)
---\\ Bilan de la rparation
~ Rparation ralise avec succs.
~ Ce navigateur est absent (Mozilla Firefox)
~ Ce navigateur est absent (Opera Software)
~ Le systme a t redmarr.
---\\ Statistiques
~ Items scanns : 322
~ Items trouvs : 0
~ Items annuls : 0
~ Items rpars : 80
~ End of clean in 00h00mn49s
~====================
ZHPCleaner-[R]-25012017-00_37_55.txt
ZHPCleaner-[S]-24012017-14_15_49.txt
ZHPCleaner-[S]-25012017-00_36_56.txt