~ ZHPCleaner v2017.2.24.35 by Nicolas Coolman (2017/02/24)
~ Run by Rita (Administrator) (25/02/2017 20:14:27)
~ Web:
https://www.nicolascoolman.com
~ Blog:
https://nicolascoolman.eu/
~ Facebook :
https://www.facebook.com/nicolascoolman1
~ State version : Versie OK
~ Type : Reparatie
~ Report : C:\Users\Rita\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Rita\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 14393)
---\\ Services (0)
~ Geen schadelijk of onnodig element gevonden.
---\\ Browser internet (0)
~ Geen schadelijk of onnodig element gevonden.
---\\ Hosts file (2)
VERVANGEN: 0.0.0.1 mssplus.mcafee.com
Aantal gevonden redirections 1/27
---\\ Scheduled automatic tasks. (0)
~ Geen schadelijk of onnodig element gevonden.
---\\ Explorer ( Bestand, Map) (59)
VERPLAATST bestand: C:\Users\Rita\AppData\Roaming\Mozilla\Firefox\Profiles\y652r2ae.default\storage\default\http+++nl.reimageplus.com\.metadata =>.Superfluous.ReimageRepair
VERPLAATST bestand: C:\Users\Rita\AppData\Roaming\Mozilla\Firefox\Profiles\y652r2ae.default\storage\default\http+++nl.reimageplus.com\.metadata-v2 =>.Superfluous.ReimageRepair
VERPLAATST bestand: C:\Users\Rita\AppData\Roaming\Mozilla\Firefox\Profiles\y652r2ae.default\storage\default\http+++nl.reimageplus.com\idb\1320802654iedibk_oeovcer.sqlite =>.Superfluous.ReimageRepair
VERPLAATST bestand: C:\Windows\Prefetch\AMZNSEARCHPROTECT.EXE-A0190CB3.pf =>PUP.Optional.SearchProtect
VERPLAATST bestand: C:\Windows\Installer\wix{3D310F56-A7CA-441F-993E-35BF9CE0B021}.SchedServiceConfig.rmi =>.Superfluous.Empty
VERPLAATST bestand: C:\Windows\Installer\wix{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}.SchedServiceConfig.rmi =>.Superfluous.Empty
VERPLAATST bestand: C:\Windows\Installer\wix{B6DCCCD3-520D-4485-B642-FCC136CE12C3}.SchedServiceConfig.rmi =>.Superfluous.Empty
VERPLAATST bestand: C:\Windows\Installer\wix{D4D86CB2-2370-4691-8272-3869EDED6C64}.SchedServiceConfig.rmi =>.Superfluous.Empty
VERPLAATST bestand: C:\Windows\Installer\wix{FA378CD1-F32D-4610-9884-3902DF8AF826}.SchedServiceConfig.rmi =>.Superfluous.Empty
VERPLAATST bestand: C:\Users\Rita\Downloads\Popcorn-Time-0.3.9-Setup.exe [Popcorn Time - Popcorn-Time 0.3.9 Installer] =>.Superfluous.PopcornTime
VERPLAATST bestand: C:\Windows\Installer\{C881D603-277F-4056-918D-654844EF2B37}\_853F67D554F05449430E7E.exe =>.Superfluous.WinSnare
VERPLAATST bestand: C:\Program Files (x86)\Popcorn Time\Updater.exe [Popcorn Time - Updater] =>.Superfluous.PopcornTime
VERPLAATST map: C:\Program Files (x86)\Popcorn Time =>.Superfluous.PopcornTime
VERPLAATST map: C:\Program Files (x86)\Save to 4shared =>PUP.Optional.SaveShare
VERPLAATST map: C:\Program Files (x86)\SaveeNewAAppz =>PUP.Optional.SaveNewAppz
VERPLAATST map: C:\Program Files (x86)\SaVeLoets =>PUP.Optional.SaveLots
VERPLAATST map: C:\Program Files (x86)\SaveNEwaAPpzz =>PUP.Optional.SaveNewAppz
VERPLAATST map: C:\Program Files (x86)\Stardock =>.Superfluous.Empty
VERPLAATST map: C:\Program Files (x86)\Weather Europe Extension =>PUP.Optional.Multiplug
VERPLAATST map: C:\ProgramData\FlexuibaleeSohooppEra =>PUP.Optional.FlexibleShoper
VERPLAATST map: C:\Users\Rita\AppData\Local\Popcorn-Time-CE =>.Superfluous.PopcornTime
VERPLAATST map: C:\Users\Rita\AppData\Local\PopcornTimeDesktop =>.Superfluous.PopcornTime
VERPLAATST map: C:\Program Files (x86)\QuickTime =>Riskware.QuickTime
VERPLAATST map: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime =>Riskware.QuickTime
VERPLAATST map: C:\WINDOWS\Installer\MSI112F.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI149E.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI193B.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI296C.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI3837.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI3AD7.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI3C9E.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI3F10.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI40B6.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI4CCE.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI5AB9.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI66EF.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI7085.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI83E2.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI93FE.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI94C7.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSI9AF8.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIAEB7.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIB50F.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIBAC0.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIBE01.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIC025.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIC1CC.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIC7F7.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSICB9A.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSICF13.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSID52F.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIDA09.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIEA2C.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIF0D5.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIF3E6.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIF5A8.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIF972.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIFB57.tmp- =>.Superfluous.Empty
VERPLAATST map: C:\WINDOWS\Installer\MSIFF61.tmp- =>.Superfluous.Empty
---\\ Register ( Sleutel, Waarde, Data) (42)
VERWIJDERD sleutel*: HKEY_USERS\S-1-5-21-2370912473-469425822-2799426420-1002\SOFTWARE\Popcorn Time [] =>.Superfluous.PopcornTime
VERWIJDERD sleutel*: HKEY_USERS\S-1-5-21-2370912473-469425822-2799426420-1002\SOFTWARE\PopcornTime [] =>.Superfluous.PopcornTime
VERWIJDERD sleutel: HKCU\Software\Popcorn Time [] =>.Superfluous.PopcornTime
VERWIJDERD sleutel: HKCU\Software\PopcornTime [] =>.Superfluous.PopcornTime
VERWIJDERD sleutel*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\nl.softonic.com [] =>.Superfluous.Softonic
VERWIJDERD sleutel*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\softonic.com [] =>.Superfluous.Softonic
VERWIJDERD sleutel*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\solitaire-windows-10.nl.softonic.com [] =>.Superfluous.Softonic
VERWIJDERD sleutel*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\nl.softonic.com [] =>.Superfluous.Softonic
VERWIJDERD sleutel*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\softonic.com [] =>.Superfluous.Softonic
VERWIJDERD sleutel*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\solitaire-windows-10.nl.softonic.com [314] =>.Superfluous.Softonic
VERWIJDERD sleutel*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\sharelive.net [] =>PUP.Optional.SaveNet
VERWIJDERD sleutel*: HKCU\Software\WEBAPP [] =>.Superfluous.Downloader
VERWIJDERD sleutel*: HKLM\SOFTWARE\Wow6432Node\Firefox [] =>Adware.GhokswaBrowser
VERWIJDERD sleutel: HKLM\SOFTWARE\Firefox [] =>Adware.GhokswaBrowser
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Classes\S [] =>Toolbar.Agent
VERWIJDERD sleutel*: [X64] HKLM\Software\Classes\Installer\Products\306D188CF772650419D8568444FEB273 [WinSnare] =>.Superfluous.WinSnare
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe [] =>.Superfluous.MediaTechSoft
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe [] =>PUP.Optional.BProtector
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe [] =>PUP.Optional.BProtector
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe [] =>PUP.Optional.Staser
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe [] =>PUP.Optional.ProtectedSearch
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe [] =>PUP.Optional.SearchProtect
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe [] =>PUP.Optional.SearchProtect
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe [] =>PUP.Optional.SearchSettings
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe [] =>PUP.Optional.SearchSettings
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe [] =>PUP.Optional.SmartBar
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe [] =>.Superfluous.SimplyTech
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe [] =>.Superfluous.SimplyTech
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe [] =>PUP.Optional.JumpFlip
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe [] =>PUP.Optional.InternetUpdater
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe [] =>PUP.Optional.InternetUpdater
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2370912473-469425822-2799426420-1002\Products\E4DFFE2B890D5484D965ED57EB3B9531 [amuleC] =>.Superfluous.aMULEcustom
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0785F5BAB0464947A123C88A3DA58014 [C:\Program Files (x86)\WinSnare(4.1.6)\openweb.bat (Not File)] =>.Superfluous.WinSnare
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C881D603-277F-4056-918D-654844EF2B37} [WinSnare] =>.Superfluous.WinSnare
VERWIJDERD sleutel*: [X64] HKLM\Software\Classes\Installer\Features\306D188CF772650419D8568444FEB273 [] =>.Superfluous.WinSnare
VERWIJDERD sleutel*: HKCU\SOFTWARE\D0579E3B78ECAC2B3B8C52A63342F575 [] =>Hijacker.Browser
VERWIJDERD sleutel*: [X64] HKLM\SOFTWARE\D0579E3B78ECAC2B3B8C52A63342F575 [] =>Hijacker.Browser
VERWIJDERD waarde: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder\\MyPC Backup.lnk [0x020000000000000000000000] =>PUP.Optional.MyPCBackup
VERWIJDERD waarde: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{42B1FFFB-356F-4694-82B2-B36DD4B0BE4B}C:\users\rita\appdata\local\popcorn time ce yify\nw.exe [C:\users\rita\appdata\local\popcorn time ce yify\nw.exe] =>.Superfluous.PopcornTime
VERWIJDERD waarde: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{BD84E35D-05B7-42D8-AA83-FA373593CD0E}C:\users\rita\appdata\local\popcorn time ce yify\nw.exe [C:\users\rita\appdata\local\popcorn time ce yify\nw.exe] =>.Superfluous.PopcornTime
VERWIJDERD waarde: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{331E6220-E5D5-4F46-A9C3-3B65763A4688} [C:\Program Files (x86)\Popcorn Time\Updater.exe] =>.Superfluous.PopcornTime
VERWIJDERD waarde: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{286222D5-FD2D-459D-843F-7A9135954934} [C:\Program Files (x86)\Popcorn Time\Updater.exe] =>.Superfluous.PopcornTime
---\\ Samenvatting van elementen gevonden op uw werkstation (28)
https://nicolascoolman.eu/2017/01/27/su ... agerepair/ =>.Superfluous.ReimageRepair
https://nicolascoolman.eu/2017/02/07/pu ... chprotect/ =>PUP.Optional.SearchProtect
https://nicolascoolman.eu/2017/01/20/lo ... superflus/ =>.Superfluous.Empty
https://www.anti-malware.top/2016/09/28 ... pcorntime/ =>.Superfluous.PopcornTime
https://nicolascoolman.eu/2017/01/12/su ... -winsnare/ =>.Superfluous.WinSnare
https://nicolascoolman.eu/2017/01/27/re ... infection/ =>PUP.Optional.SaveShare
https://nicolascoolman.eu/2017/01/27/re ... infection/ =>PUP.Optional.SaveNewAppz
https://nicolascoolman.eu/2017/01/27/re ... infection/ =>PUP.Optional.SaveLots
https://www.anti-malware.top/2016/04/28 ... multiplug/ =>PUP.Optional.Multiplug
https://nicolascoolman.eu/2017/01/27/re ... infection/ =>PUP.Optional.FlexibleShoper
https://nicolascoolman.eu/2017/01/15/ri ... quicktime/ =>Riskware.QuickTime
https://nicolascoolman.eu/2017/01/20/lo ... superflus/ =>.Superfluous.Softonic
https://nicolascoolman.eu/2017/01/27/re ... infection/ =>PUP.Optional.SaveNet
https://nicolascoolman.eu/2017/01/20/lo ... superflus/ =>.Superfluous.Downloader
https://nicolascoolman.eu/2017/02/19/ad ... wabrowser/ =>Adware.GhokswaBrowser
https://www.nicolascoolman.com/fr/?p=5143 =>Toolbar.Agent
https://nicolascoolman.eu/2017/01/20/lo ... superflus/ =>.Superfluous.MediaTechSoft
https://www.anti-malware.top/2016/04/30 ... protector/ =>PUP.Optional.BProtector
https://www.nicolascoolman.com/fr/trojan-staser/ =>PUP.Optional.Staser
https://www.nicolascoolman.com/fr/spywa ... tedsearch/ =>PUP.Optional.ProtectedSearch
https://www.nicolascoolman.com/fr/adwar ... hsettings/ =>PUP.Optional.SearchSettings
https://www.nicolascoolman.com/fr/hijacker-smartbar/ =>PUP.Optional.SmartBar
https://nicolascoolman.eu/2017/01/20/lo ... superflus/ =>.Superfluous.SimplyTech
https://www.nicolascoolman.com/fr/pup-jumpflip/ =>PUP.Optional.JumpFlip
https://www.nicolascoolman.com/fr/pup-internetupdater/ =>PUP.Optional.InternetUpdater
https://www.anti-malware.top/2016/10/11 ... ulecustom/ =>.Superfluous.aMULEcustom
https://nicolascoolman.eu/2017/02/02/hi ... browser-2/ =>Hijacker.Browser
https://www.nicolascoolman.com/fr/pup-mypcbackup/ =>PUP.Optional.MyPCBackup
---\\ Een ander verwijdering. (15)
~ Registersleutel Tracing Verwijderd (15)
~ Verwijder de oude rapporten ZHPCleaner. (0)
---\\Resultaat van reparaties
~ Reparatie succesvol uitgevoerd
~ Browser niet gevonden (Google Chrome)
~ Browser niet gevonden (Opera Software)
---\\Statistics
~ Items gescand : 788
~ Items gevonden : 1
~ Items gecancelled : 0
~ Items gerepareerd : 101
~ End of clean in 00h01mn38s
~====================
ZHPCleaner-[R]-25022017-20_16_05.txt
ZHPCleaner-[S]-25022017-19_04_04.txt
ZHPCleaner-[S]-25022017-19_57_31.txt