~ ZHPCleaner v2017.4.8.61 by Nicolas Coolman (2017/04/08)
~ Run by Alahly (Administrator) (08/04/2017 23:09:20)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version KO
~ Type : Repair
~ Report : C:\Users\Alahly\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Alahly\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Ultimate, 32-bit (Build 7600)


---\\ Services (2)
CLOSED : ByteFenceService =>.Superfluous.ByteFence
CLOSED : rtop =>.Superfluous.ByteFence


---\\ Browser internet (0)
~ No malicious or unnecessary items found.


---\\ Hosts file (1)
~ The hosts file is legitimate (60)


---\\ Scheduled automatic tasks. (1)
DELETED task: [ByteFence] [C:\Program Files\ByteFence\ByteFence.exe] =>.Superfluous.ByteFence


---\\ Explorer ( File, Folder) (135)
MOVED file: C:\Users\Alahly\Desktop\ByteFence Anti-Malware.lnk [Bad : C:\Program Files\ByteFence\ByteFence.exe](.Byte Technologies LLC.) =>.Superfluous.ByteFence
MOVED file: C:\Windows\Prefetch\BYTEFENCE-INSTALLER_3.8.0.EXE-27E9000A.pf =>.Superfluous.ByteFence
MOVED file: C:\Windows\Prefetch\BYTEFENCE.EXE-FAC31F78.pf =>.Superfluous.ByteFence
MOVED file: C:\Windows\Prefetch\BYTEFENCESERVICE.EXE-4186E33D.pf =>.Superfluous.ByteFence
MOVED file: C:\Users\Alahly\AppData\Local\Temp\00713AA1.log =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\00734C9B.log =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\10042BE5-3812-47d2-87F5-4F6ECC99962A.xml =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\1191DAA.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\1584E80C-CB3E-492c-9490-C2B8A214B946.xml =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\1757B76.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\180C29.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\1815C32.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\1bcAB93.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\203B9A.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\291CAF5.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\29aAC79.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\2e4B4D9.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\2feEFC0.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\31c303D.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\34bD29B.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\358E042.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\35f3325.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\36bA77D.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\395C93F.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\399C93E.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\3a734AC.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\3af9270.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\483C8B0.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\4e24903.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\4e9A923.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\518CAD4.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\519274D.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\5a155A8.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\5bc1DA9.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\5d791F2.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\5d9FADF.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\5ebD106.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\5f35312.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\6041BE2.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\609EC83.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\692C2A.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\6ab5361.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\6d74C9C.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\6dfD29C.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\6ec291E.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\6fcA7D6.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\7166FED.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\7875DAA.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\797C8D1.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\7e01BF3.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\87fDDFF.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\880BC5B.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\894BD38.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\89FE9506-0373-4f4c-821D-95E572F064C6.xml =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\8a5186A.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\92f6FEC.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\96f79DB.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\999610A.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\9dc2A67.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\9eb7A4A.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\9fd7B65.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\a017052.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\a47B73A.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B03E.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B04F.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B050.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B051.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B052.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B053.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B054.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B055.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B065.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B066.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B067.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B068.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B069.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B07A.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B07B.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B07C.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B07D.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\B08D.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\b265913.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\b7457C5.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\b7b7A4B.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\b7eFD40.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\b91BC5C.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\b9eD107.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\c8fAB02.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\d1c91D2.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\d438ACF.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\d49AC7A.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D8C6.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D8F6.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\d8fC7A5.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D907.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D917.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D918.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D929.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D92A.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D94A.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D94B.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D94C.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D94D.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D98D.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D98E.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D98F.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D990.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\d9eC861.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D9FE.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\D9FF.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\DA00.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\da18E3.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\dd859FE.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\de0B7A8.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\e257BB0.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\e31ED30.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\ea79332.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\eaa8E4.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\ebeC09.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\ec27265.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\eca1EB0.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\F0042BE5-3812-47d2-87F5-4F6ECC99962A.xml =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\f06ABD3.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\f5e95D2.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\f5f5B18.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\f70599B.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\f8258B0.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\fa15D6B.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\fe8A6CB.tmp =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\~DF452E8F7E0FC0BA5D.TMP =>.Superfluous.Temporary.Empty
MOVED file^: C:\Users\Alahly\AppData\Local\Temp\~DFD6141DEA1878433C.TMP =>.Superfluous.Temporary.Empty
MOVED file: C:\Users\Alahly\AppData\Local\Temp\~DFFF364BACE27020BF.TMP =>.Superfluous.Temporary.Empty
MOVED folder^: C:\Program Files\ByteFence =>.Superfluous.ByteFence
MOVED folder^: C:\ProgramData\ByteFence =>.Superfluous.ByteFence
MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ByteFence Anti-Malware =>.Superfluous.ByteFence


---\\ Registry ( Key, Value, Data) (11)
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\ByteFenceService [C:\Program Files\ByteFence\ByteFenceService.exe] =>.Superfluous.ByteFence
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\rtop [C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe] =>.Superfluous.ByteFence
DELETED key*: HKEY_USERS\S-1-5-21-2542220997-3276560281-2219768793-1000\SOFTWARE\ByteFence [] =>.Superfluous.ByteFence
DELETED key: HKCU\Software\ByteFence [] =>.Superfluous.ByteFence
DELETED key*: HKCU\Software\csastats [] =>Adware.InstallCore
DELETED key*: HKCU\Software\ProductSetup [] =>Adware.InstallCore
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ByteFenceService [] =>.Superfluous.ByteFence
DELETED key*: HKLM\SOFTWARE\ByteFence [] =>.Superfluous.ByteFence
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 [] =>.Superfluous.ByteFence
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS [] =>.Superfluous.ByteFence
DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ByteFence [Byte Technologies LLC] =>.Superfluous.ByteFence


---\\ Summary of the elements found (3)
https://nicolascoolman.eu/2017/03/13/superfluous-bytefence/ =>.Superfluous.ByteFence
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Temporary.Empty
https://nicolascoolman.eu/2017/03/12/adware-installcore-2/ =>Adware.InstallCore


---\\ Other deletions. (19)
~ Registry Keys Tracing deleted (19)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Google Chrome)
~ Browser not found (Mozilla Firefox)
~ Browser not found (Opera Software)
~ The system has been restarted.


---\\ Statistics
~ Items scanned : 404
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 149


~ End of clean in 00h00mn54s
~====================
ZHPCleaner-[R]-08042017-17_50_34.txt
ZHPCleaner-[R]-08042017-23_10_14.txt
ZHPCleaner-[S]-08042017-17_47_11.txt
ZHPCleaner-[S]-08042017-23_08_45.txt