~ ZHPCleaner v2017.2.2.22 by Nicolas Coolman (2017/02/02)
~ Run by Cosmin (Administrator) (03/02/2017 22:27:28)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\Cosmin\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Cosmin\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Ultimate, 64-bit (Build 7600)


---\\ Services (0)
~ No malicious or unnecessary items found.


---\\ Browser internet (0)
~ No malicious or unnecessary items found.


---\\ Hosts file (1)
~ The hosts file is legitimate (30)


---\\ Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.


---\\ Explorer ( File, Folder) (21)
MOVED file: C:\Windows\Temp\rnsD2CA.tmp.exe =>Heuristic.Suspect
MOVED file: C:\Windows\Temp\rnsDEEA.tmp.exe =>Heuristic.Suspect
MOVED file: C:\Windows\Temp\rnsE7DF.tmp.exe =>Heuristic.Suspect
MOVED file: C:\Windows\Temp\rnsF8FF.tmp.exe =>Heuristic.Suspect
MOVED file: C:\Windows\Temp\rnsFA85.tmp.exe =>Heuristic.Suspect
MOVED file: C:\Users\Cosmin\AppData\Local\Temp\1RRLAISUGZ.exe [CSDI - Hostify Setup] =>.Superfluous.CSDI
MOVED file: C:\Users\Cosmin\AppData\Local\Temp\9V9SFK0O2P.exe [CSDI - Hostify Setup] =>.Superfluous.CSDI
MOVED file: C:\Users\Cosmin\AppData\Local\Temp\UF8CRH2EEU.exe [CSDI - Hostify Setup] =>.Superfluous.CSDI
MOVED file: C:\Users\Cosmin\AppData\Local\Temp\Uninstall.exe [Copyright 2013 - ] =>PUP.Optional.Generic
MOVED folder: C:\Program Files (x86)\68823e93-40b0-4386-9844-36ce005c2205 =>PUP.Optional.CrossRider
MOVED folder: C:\Users\Cosmin\AppData\Local\Temp\scoped_dir1180_23082 =>.Superfluous.Temporary.Steam
MOVED folder: C:\Users\Cosmin\AppData\Local\Temp\scoped_dir1684_31614 =>.Superfluous.Temporary.Steam
MOVED folder: C:\Users\Cosmin\AppData\Local\Temp\scoped_dir1904_14165 =>.Superfluous.Temporary.Steam
MOVED folder: C:\Users\Cosmin\AppData\Local\Temp\scoped_dir3232_2483 =>.Superfluous.Temporary.Steam
MOVED folder: C:\Users\Cosmin\AppData\Local\Temp\scoped_dir3416_3647 =>.Superfluous.Temporary.Steam
MOVED folder: C:\Users\Cosmin\AppData\Local\Temp\scoped_dir3568_19420 =>.Superfluous.Temporary.Steam
MOVED folder: C:\Users\Cosmin\AppData\Local\Temp\scoped_dir3708_29564 =>.Superfluous.Temporary.Steam
MOVED folder: C:\Users\Cosmin\AppData\Local\Temp\scoped_dir3928_6856 =>.Superfluous.Temporary.Steam
MOVED folder: C:\Users\Cosmin\AppData\Local\Temp\scoped_dir5024_27417 =>.Superfluous.Temporary.Steam
MOVED folder: C:\Users\Cosmin\AppData\Local\Temp\scoped_dir532_14913 =>.Superfluous.Temporary.Steam
MOVED folder: C:\Users\Cosmin\AppData\Local\Temp\scoped_dir968_1368 =>.Superfluous.Temporary.Steam


---\\ Registry ( Key, Value, Data) (13)
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\mpck_en_005030252 ["C:\Program Files (x86)\mpck_en_005030252\mpck_en_005030252.exe" (Not File)] =>PUP.Optional.MobilePCStarterKit
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\rec_en_212 ["C:\Program Files (x86)\rec_en_212\rec_en_212.exe" (Not File)] =>.Superfluous.Tuto4PC
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\rec_en_217 ["C:\Program Files (x86)\rec_en_217\rec_en_217.exe" (Not File)] =>.Superfluous.Tuto4PC
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\rec_en_218 ["C:\Program Files (x86)\rec_en_218\rec_en_218.exe" (Not File)] =>.Superfluous.Tuto4PC
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com [36] =>Toolbar.Ask
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\videodownloadconverter.com [41] =>.Superfluous.MindSpark
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akamaihd.net [208370] =>.Superfluous.AkamaiHD
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com [120] =>Toolbar.Ask
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\bringmesports.com [48] =>.Superfluous.MindSpark
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\safefinder.com [12] =>PUP.Optional.Browser
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\snapdo.com [74] =>PUP.Optional.SmartBar
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\televisionfanatic.com [44] =>PUP.Optional.TelevisionFanatic
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\videodownloadconverter.com [41] =>.Superfluous.MindSpark


---\\ Summary of the elements found (13)
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect
https://www.anti-malware.top/2016/05/03/superfluous-csdi/ =>.Superfluous.CSDI
https://www.anti-malware.top/2016/05/01/definition-dun-logiciel-pup-lpi/ =>PUP.Optional.Generic
https://www.anti-malware.top/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Temporary.Steam
https://www.nicolascoolman.com/fr/pup-mobilepcstarterkit/ =>PUP.Optional.MobilePCStarterKit
https://www.nicolascoolman.com/fr/pup-optional-tuto4pc/ =>.Superfluous.Tuto4PC
https://www.anti-malware.top/2016/09/22/toolbar-ask/ =>Toolbar.Ask
https://nicolascoolman.eu/2017/01/15/superfluous-mindspark/ =>.Superfluous.MindSpark
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.AkamaiHD
https://nicolascoolman.eu/2017/01/26/hijacker-browser/ =>PUP.Optional.Browser
https://www.nicolascoolman.com/fr/hijacker-smartbar/ =>PUP.Optional.SmartBar
https://www.nicolascoolman.com/fr/pup-televisionfanatic/ =>PUP.Optional.TelevisionFanatic


---\\ Other deletions. (88)
~ Registry Keys Tracing deleted (88)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Mozilla Firefox)


---\\ Statistics
~ Items scanned : 380
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 34


~ End of clean in 00h00mn19s
~====================
ZHPCleaner-[R]-03022017-22_27_47.txt
ZHPCleaner-[S]-03022017-22_25_23.txt