~ ZHPCleaner v2017.7.27.128 by Nicolas Coolman (2017/07/27)
~ Run by PC-ABDERRAHMEN (Administrator) (27/07/2017 22:31:21)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Repair
~ Report : C:\Users\PC-ABDERRAHMEN\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\PC-ABDERRAHMEN\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 14393)


---\\ Services (0)
~ No malicious or unnecessary items found.


---\\ Browser internet (1)
FOUND PARAMS: ProxyServer [163.172.86.64:3128] (User.Validation)


---\\ Hosts file (1)
~ The hosts file is legitimate (26)


---\\ Scheduled automatic tasks. (1)
DELETED task: [AutoKMS] [C:\Windows\AutoKMS\AutoKMS.exe (Not File) ] =>HackTool.AutoKMS


---\\ Explorer ( File, Folder) (18)
MOVED file: C:\Users\PC-ABDERRAHMEN\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gihcngphjjankfngmgdkihhngndcdflc_0.localstorage-journal =>PUP.Optional.Adblocker
MOVED file: C:\Users\PC-ABDERRAHMEN\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gihcngphjjankfngmgdkihhngndcdflc_0.localstorage =>PUP.Optional.Adblocker
MOVED file: C:\Windows\AutoKMS\AutoKMS.exe [CODYQX4 - AutoKMS] =>HackTool.AutoKMS
MOVED file: C:\Users\PC-ABDERRAHMEN\Downloads\popcorn-time-2-8-0.apk =>.Superfluous.PopcornTime
MOVED file: C:\Users\PC-ABDERRAHMEN\Downloads\uptodown-android-3-21.apk =>PUP.Optional.UpToDown
MOVED file: C:\Users\PC-ABDERRAHMEN\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage =>PUP.Optional.Generic
MOVED file: C:\Users\PC-ABDERRAHMEN\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal =>PUP.Optional.Generic
MOVED file: C:\Users\PC-ABDERRAHMEN\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.uptodown.com_0.localstorage =>PUP.Optional.UpToDown
MOVED file: C:\Users\PC-ABDERRAHMEN\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.uptodown.com_0.localstorage-journal =>PUP.Optional.UpToDown
MOVED file: C:\Users\PC-ABDERRAHMEN\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_st.chatango.com_0.localstorage =>PUP.Optional.Chatango
MOVED file: C:\Users\PC-ABDERRAHMEN\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_st.chatango.com_0.localstorage-journal =>PUP.Optional.Chatango
MOVED file: C:\Windows\AutoKMS\AutoKMS.log =>HackTool.AutoKMS
MOVED folder: C:\Users\PC-ABDERRAHMEN\AppData\Local\Google\Chrome\User Data\Default\Extensions\gihcngphjjankfngmgdkihhngndcdflc =>PUP.Optional.Adblocker
MOVED folder: C:\Users\PC-ABDERRAHMEN\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gihcngphjjankfngmgdkihhngndcdflc =>PUP.Optional.Adblocker
MOVED folder: C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS
MOVED folder: C:\WINDOWS\AutoKMS =>HackTool.AutoKMS
MOVED folder: C:\Users\PC-ABDERRAHMEN\AppData\Local\PackageAware =>PUP.Optional.BearShare
MOVED folder: C:\Users\PC-ABDERRAHMEN\AppData\Local\Google\Chrome\User Data\Default\File System\008 =>PUP.Optional.DomaIQ


---\\ Registry ( Key, Value, Data) (3)
DELETED key*: HKEY_USERS\S-1-5-21-256474428-2574812502-1661256676-1001\SOFTWARE\Classes\.snapdoc [SNAP.DOC] =>PUP.Optional.SmartBar
DELETED key*: HKEY_USERS\S-1-5-21-256474428-2574812502-1661256676-1001\SOFTWARE\Classes\SNAP.DOC [SNAP.DOC] =>PUP.Optional.SmartBar
DELETED value: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\SMΔRT-Protection [C:\Program Files (x86)\SMADAV\SMΔRTP.exe] =>Heuristic.Salus


---\\ Summary of the elements found (10)
https://nicolascoolman.eu/2017/02/02/hacktool-autokms/ =>HackTool.AutoKMS
https://nicolascoolman.eu/2017/01/28/adware-adblocker/ =>PUP.Optional.Adblocker
https://nicolascoolman.eu/2017/02/26/superfluous-popcorntime/ =>.Superfluous.PopcornTime
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.UpToDown
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Generic
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Chatango
https://www.nicolascoolman.com/fr/pup-bearshare/ =>PUP.Optional.BearShare
https://www.nicolascoolman.com/fr/adware-domaiq/ =>PUP.Optional.DomaIQ
https://www.nicolascoolman.com/fr/hijacker-smartbar/ =>PUP.Optional.SmartBar
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Heuristic.Salus


---\\ Other deletions. (25)
~ Registry Keys Tracing deleted (23)
~ Remove the old reports ZHPCleaner. (2)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Opera Software)


---\\ Statistics
~ Items scanned : 1117
~ Items found : 1
~ Items cancelled : 0
~ Items repaired : 22


~ End of clean in 00h00mn21s
~====================
ZHPCleaner-[R]-27072017-22_31_42.txt
ZHPCleaner-[S]-27072017-22_26_57.txt