~ ZHPCleaner v2017.3.15.46 by Nicolas Coolman (2017/03/15)
~ Run by Husen (Administrator) (15/03/2017 19:41:28)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\Husen\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Husen\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
Windows 7 Ultimate, 32-bit Service Pack 1 (Build 7601)


---\\ Services (0)
~ No malicious or unnecessary items found.


---\\ Browser internet (0)
~ No malicious or unnecessary items found.


---\\ Hosts file (1)
~ The hosts file is legitimate (21)


---\\ Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.


---\\ Explorer ( File, Folder) (35)
MOVED file: C:\Windows\Installer\wix{5CFFD58D-A8EB-439C-B3FD-A8862C886C55}.SchedServiceConfig.rmi =>.Superfluous.Empty
MOVED file: C:\Windows\Installer\wix{E1DB0812-2D60-43DB-AE09-6C7027D93B28}.SchedServiceConfig.rmi =>.Superfluous.Empty
MOVED file: C:\Users\Husen\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_ciuvo.com_0.localstorage =>PUP.Optional.Ciuvo
MOVED file: C:\Users\Husen\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_ciuvo.com_0.localstorage-journal =>PUP.Optional.Ciuvo
MOVED file: C:\Windows\Installer\{5245414C-392D-4700-76A7-A758B70C2806}\ToolbarIcon.exe =>PUP.Optional.BrowserTabSearch
MOVED folder: C:\Users\Husen\AppData\Roaming\HMYGSetting =>Adware.Suspect
MOVED folder: C:\Users\Husen\AppData\Local\Temp\scoped_dir_3492_3803 =>.Superfluous.Temporary.Steam
MOVED folder: C:\Users\Husen\AppData\Local\Temp\scoped_dir_3560_21959 =>.Superfluous.Temporary.Steam
MOVED folder: C:\Windows\Installer\MSI11FA.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI2BA4.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI33EA.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI36CC.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI3AD8.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI3D6.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI49E5.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI5108.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI530A.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI55E9.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI5990.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI5F9A.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI6531.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI723.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI7627.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSI78C7.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIBC5.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIBFCD.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSICB72.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSICC0C.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSICD00.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSID428.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSID4DD.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIDB03.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIF8D.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIFC0B.tmp- =>.Superfluous.Empty
MOVED folder: C:\Windows\Installer\MSIFF96.tmp- =>.Superfluous.Empty


---\\ Registry ( Key, Value, Data) (8)
DELETED key*: HKLM\SOFTWARE\Classes\esrv.escrtSrvc [escrtSrvc Object] =>PUP.Optional.Facemoods
DELETED key*: HKLM\SOFTWARE\Classes\esrv.escrtSrvc.1 [escrtSrvc Object] =>PUP.Optional.Facemoods
DELETED key*: HKLM\Software\Classes\Installer\Products\C4145425D2930074677A7A857BC08260 [Search App by Ask] =>PUP.Optional.BrowserTabSearch
DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4} [C:\Program Files\AskPartnerNetwork\Toolbar\ (Not File)] =>PUP.Optional.APNToolBar
DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D} [C:\Program Files\AskPartnerNetwork\Toolbar\ (Not File)] =>PUP.Optional.APNToolBar
DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDF9EF3-3C3A-4f05-9A6E-5D3B778EC567} [C:\Program Files\facemoods.com\facemoods\1.4.17.10 (Not File)] =>PUP.Optional.Facemoods
DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\189F6D048E923EA48B11D15B30CDAC81 [C:\Program Files\AskPartnerNetwork\Toolbar\ServiceLocator.exe (Not File)] =>PUP.Optional.APNToolBar
DELETED key*: HKLM\Software\Classes\Installer\Features\C4145425D2930074677A7A857BC08260 [] =>PUP.Optional.BrowserTabSearch


---\\ Summary of the elements found (7)
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Empty
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Ciuvo
https://www.nicolascoolman.com/fr/pup-browsertabsearch/ =>PUP.Optional.BrowserTabSearch
https://nicolascoolman.eu/2017/03/02/adware-suspect/ =>Adware.Suspect
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Temporary.Steam
https://www.nicolascoolman.com/fr/adware-facemoods/ =>PUP.Optional.Facemoods
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.APNToolBar


---\\ Other deletions. (8)
~ Registry Keys Tracing deleted (8)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Mozilla Firefox)
~ Browser not found (Opera Software)


---\\ Statistics
~ Items scanned : 349
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 43


~ End of clean in 00h00mn23s
~====================
ZHPCleaner-[R]-15032017-19_41_51.txt
ZHPCleaner-[S]-15032017-19_39_55.txt