~ ZHPFix v2019.4.7.44 by Nicolas Coolman (2019/04/07)
~ Run by victor (Administrator) (27/04/2019 11:55:09)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\victor\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 17134)



---\\ SCRIPT DE L'UTILISATEUR. (34)
Script Zhpfix
O4 - HKCU\..\Run: [c__program_files_(x86)_skype_phone_skype.exe] . (. - .) -- C:\Program Files (x86)\Skype\Phone\Skype.exe (.Not File.)
O4 - HKUS\S-1-5-19\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000
O4 - HKUS\S-1-5-20\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000
O4 - HKUS\S-1-5-21-2246733337-40615877-3045130703-1001\..\Run: [c__program_files_(x86)_skype_phone_skype.exe] . (. - .) -- C:\Program Files (x86)\Skype\Phone\Skype.exe (.Not File.)
O4 - GS\CommonDesktop [Public]: REACHit.lnk . (.Lenovo - REACHit Agent.) C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe
O42 - Logiciel: Lenovo Experience Improvement - (.Lenovo.) [HKLM][64Bits] -- LenovoExperienceImprovement
O42 - Logiciel: SHAREit - (.Lenovo.) [HKLM][64Bits] -- SHAREit_is1
O87 - FAEL: "UDP Query User{9EBD626A-7D59-4569-ACCE-348F3FB9BAF3}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe" [In-None-P17-TRUE] .(...) -- C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (.not file.)
O87 - FAEL: "TCP Query User{51AB08F3-4546-4D4E-A353-939A4F4F0C96}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe" [In-None-P6-TRUE] .(...) -- C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (.not file.)
O87 - FAEL: "UDP Query User{6132523D-FCF4-45E0-A90D-DC94A6CA429E}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe" [In-None-P17-TRUE] .(...) -- C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (.not file.)
O87 - FAEL: "TCP Query User{3FCD1BA6-5337-47E6-AD4B-0D5D65DF9712}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe" [In-None-P6-TRUE] .(...) -- C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (.not file.)
O87 - FAEL: "UDP Query User{8E034FC2-C5AF-424C-836D-DD7F7B90866C}C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe (.not file.)
O87 - FAEL: "TCP Query User{67C6F338-85AF-4AD2-BBD5-A13198374944}C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe (.not file.)
O87 - FAEL: "{20BA3B02-CAFD-428F-AA9F-9EB05C07CD7C}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Skype\Phone\Skype.exe (.not file.)
O87 - FAEL: "{68D2EC73-C808-4552-B6AE-F0BDB068C1F2}" [In-None-P17-TRUE] .(.Lenovo - SHAREit.) -- C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe
O87 - FAEL: "{EB05826A-8322-44FC-9660-D1D494F05744}" [In-None-P6-TRUE] .(.Lenovo - SHAREit.) -- C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe
O87 - FAEL: "{1ECC9AA0-AB01-4539-85AD-FBFDAC3A457E}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (.not file.)
O87 - FAEL: "{B92FAB93-9ED1-4D0F-887E-5059DECCDB10}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (.not file.)
O87 - FAEL: "{04683520-3EFE-464F-89BC-46B23E20753D}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (.not file.)
O87 - FAEL: "{7A034672-E523-4FA6-AE04-7F897BE1B224}" [In-None-P17-TRUE] .(...) -- C:\Program Files\AVAST
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH4: SHAREit.FileContextMenuExt [64Bits] - {430BD134-576D-4E75-87CD-0F5C6221A82B} . (.Lenovo - Shell Extension.) -- C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
EmptyPrefetch
Emptytemp
EmptyClsid
ShortcutFix






---\\ LOGICIEL. (2)
DESINSTALLER : LenovoExperienceImprovement
DESINSTALLER : SHAREit_is1


---\\ SERVICE. (0)


---\\ TÂCHE PLANIFIÉE. (0)


---\\ NAVIGATEUR INTERNET. (0)


---\\ EXPLORATEUR ( Dossiers, Fichiers ). (36)
DEPLACÉ Fichier Shortcut: C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe
DEPLACÉ Fichier Shortcut: C:\Users\Public\Desktop\REACHit.lnk
DEPLACÉ Fichier FirewallRules: C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\AdobeARM.log
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\AdobeARM_NotLocked.log
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\adobegc.log
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\amt3.log
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\aria-debug-12100.log
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\aria-debug-9956.log
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\NGLClient_default.log
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\oobelib.log
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\PDApp.log
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\StructuredQuery.log
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\swtag.log
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\TWAIN.LOG
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCD41F9.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCD41FA.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCD41FB.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCD41FC.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCD420D.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCD421D.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCD422E.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCD422F.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCD426E.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCD428F.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCD42AF.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCD42DF.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCD435D.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\victor\AppData\Local\Temp\TCDC9EB.tmp
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\wct179B.tmp
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\wctBE2.tmp
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\wctDAE6.tmp
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\wctE4DA.tmp
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\wctEEED.tmp
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\tmpaddon
DEPLACÉ Fichier Temp: C:\Users\victor\AppData\Local\Temp\tmpaddon-ba7a84


---\\ REGISTRE ( Clés, Valeurs, Données ). (24)
SUPPRIMÉ Valeur Run: c__program_files_(x86)_skype_phone_skype.exe [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\]
SUPPRIMÉ Valeur Run: OneDriveSetup [HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\]
SUPPRIMÉ Valeur Run: OneDriveSetup [HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\]
ABSENT Valeur Run: HKU\S-1-5-21-2246733337-40615877-3045130703-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ [C:\Program Files (x86)\Skype\Phone\Skype.exe (.Not File.)]
SUPPRIMÉ Valeur FirewallRules: UDP Query User{9EBD626A-7D59-4569-ACCE-348F3FB9BAF3}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: TCP Query User{51AB08F3-4546-4D4E-A353-939A4F4F0C96}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: UDP Query User{6132523D-FCF4-45E0-A90D-DC94A6CA429E}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: TCP Query User{3FCD1BA6-5337-47E6-AD4B-0D5D65DF9712}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: UDP Query User{8E034FC2-C5AF-424C-836D-DD7F7B90866C}C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: TCP Query User{67C6F338-85AF-4AD2-BBD5-A13198374944}C:\program files (x86)\starcraft ii\versions\base60321\sc2_x64.exe [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: {20BA3B02-CAFD-428F-AA9F-9EB05C07CD7C} [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: {68D2EC73-C808-4552-B6AE-F0BDB068C1F2} [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: {EB05826A-8322-44FC-9660-D1D494F05744} [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: {1ECC9AA0-AB01-4539-85AD-FBFDAC3A457E} [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: {B92FAB93-9ED1-4D0F-887E-5059DECCDB10} [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: {04683520-3EFE-464F-89BC-46B23E20753D} [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: {7A034672-E523-4FA6-AE04-7F897BE1B224} [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR321]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\B41DB860-8EE4-11D2-9906-E49FADC173CA}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\SHAREit.FileContextMenuExt [SHAREit.FileContextMenuExt4]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\430BD134-576D-4E75-87CD-0F5C6221A82B}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR326]
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
ABSENT Clé: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32


---\\ COMMANDE. (3)
~ EmptyPrefetch: Fichiers Prefetcher supprimés (248)
~ EmptyTemp: Dossier Local temp partiellement vidé (33)
~ EmptyCSID: Dossiers CLSID vides supprimés (0)


---\\ NON TRAITÉ. (1)
ShortcutFix

~ Le système a été redémarré.

***** ~ Fin de rapport terminé en 00h00mn46s