~ ZHPCleaner v2017.8.15.140 by Nicolas Coolman (2017/08/15)
~ Run by Micaele (Administrator) (19/08/2017 10:02:15)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Reparo
~ Report : C:\Users\Micaele\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Micaele\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home Single Language, 64-bit (Build 14393)


---\\ Serviços (1)
PAROU : WeatherLiteService =>PUP.Optional.WeatherTool


---\\ Navegadores de Internet (0)
~ Nenhum ítem malicioso o desnecessários foi encontrado.


---\\ Arquivo hosts (1)
~ O arquivo hosts é legítimo (63)


---\\ Tarefas automáticas agendadas. (0)
~ Nenhum ítem malicioso o desnecessários foi encontrado.


---\\ Explorer ( Arquivos, Pastas) (12)
MOVIDO pasta: C:\Program Files (x86)\WeatherTool\2.0.1.5000183\WeatherService.exe [Copyright (C) 2015 - Weather Lite Service] =>PUP.Optional.WeatherTool
MOVIDO pasta**: C:\Windows\AutoKMS\AutoKMS.exe [CODYQX4 - AutoKMS] =>HackTool.AutoKMS
MOVIDO pasta**: C:\Windows\AutoKMS\AutoKMS.log =>HackTool.AutoKMS
MOVIDO arquivo^: C:\Program Files (x86)\WeatherTool =>PUP.Optional.WeatherTool
MOVIDO arquivo^: C:\Program Files\ByteFence =>.SUP.ByteFence
MOVIDO arquivo*: C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS
MOVIDO arquivo*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ByteFence Anti-Malware =>.SUP.ByteFence
MOVIDO arquivo*: C:\WINDOWS\AutoKMS =>HackTool.AutoKMS
MOVIDO arquivo*: C:\WINDOWS\System32\config\systemprofile\AppData\Roaming\WeatherTool =>PUP.Optional.WeatherTool
MOVIDO arquivo*: C:\Users\Micaele\AppData\Roaming\Solvusoft =>.SUP.Solvusoft
MOVIDO arquivo*: C:\Users\Micaele\AppData\Roaming\WeatherTool =>PUP.Optional.WeatherTool
MOVIDO arquivo: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Roaming\WeatherTool =>PUP.Optional.WeatherTool


---\\ Registro ( Chaves, Valores, Dados ) (20)
SUPRIMIDO dados: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8d9f5b78-3eae-4233-83bd-bbab4767e52d}\\DhcpNameServer [Bad : 187.36.192.33 187.36.192.28] =>Hijacker.Browser
SUPRIMIDO chave*: HKLM\SYSTEM\CurrentControlSet\Services\ByteFenceService [C:\Program Files\ByteFence\ByteFenceService.exe (Not File)] =>.SUP.ByteFence
SUPRIMIDO chave*: HKLM\SYSTEM\CurrentControlSet\Services\WeatherLiteService [C:\Program Files (x86)\WeatherTool\2.0.1.5000183\WeatherService.exe (Not File)] =>PUP.Optional.WeatherTool
SUPRIMIDO chave*: HKEY_USERS\S-1-5-21-14380496-3129006202-516063525-1001\SOFTWARE\WeatherTool [] =>PUP.Optional.WeatherTool
SUPRIMIDO chave: HKCU\Software\WeatherTool [] =>PUP.Optional.WeatherTool
SUPRIMIDO chave*: HKCU\Software\csastats [] =>Adware.InstallCore
SUPRIMIDO chave*: HKCU\Software\ProductSetup [] =>Adware.InstallCore
SUPRIMIDO chave*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ByteFenceService [] =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\ByteFence [] =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\DtsEncodeTools [] =>PUP.Optional.WeatherTool
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\WeatherTool [] =>PUP.Optional.WeatherTool
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 [] =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS [] =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WeatherTool [ShenZhen Qianhailewang Technology Co,.Ltd] =>PUP.Optional.WeatherTool
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\ByteFence [] =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ByteFence [Byte Technologies LLC] =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ByteFenceScan_RASAPI32 [] =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ByteFenceScan_RASMANCS [] =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\bytefenceupdater-csb_RASAPI32 [] =>.SUP.ByteFence
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\bytefenceupdater-csb_RASMANCS [] =>.SUP.ByteFence


---\\ Resumo dos elementos encontrados na sua estação de trabalho (6)
https://www.nicolascoolman.com/fr/pup-optional-weathertool =>PUP.Optional.WeatherTool
https://nicolascoolman.eu/2017/02/02/hacktool-autokms/ =>HackTool.AutoKMS
https://nicolascoolman.eu/2017/03/13/superfluous-bytefence/ =>.SUP.ByteFence
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Solvusoft
https://nicolascoolman.eu/2017/02/02/hijacker-browser-2/ =>Hijacker.Browser
https://nicolascoolman.eu/2017/03/12/adware-installcore-2/ =>Adware.InstallCore


---\\ Dodatkowe oczyszczenie. (22)
~ Chave de registro Tracing Supprimido (22)
~ Remover os relatórios antigos ZHPCleaner. (0)


---\\ Resultado de reparação
Reparação efectuada com sucesso
~ Este navegador está faltando ! (Mozilla Firefox)
~ Este navegador está faltando ! (Opera Software)
~ O sistema foi reiniciado.


---\\ Estatísticas
~ Items scan : 756
~ Items encontrado : 0
~ items cancelados : 0
~ Items réparo : 34


~ End of clean in 00h10mn18s
~====================
ZHPCleaner-[R]-19082017-10_12_33.txt
ZHPCleaner-[S]-19082017-09_56_13.txt