~ ZHPCleaner v2021.8.6.318 by Nicolas Coolman (2021/08/06) ~ Run by Desktop (Administrator) (06/08/2021 13:05:36) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Scan ~ Report : C:\Users\Desktop\Desktop\ZHPCleaner (S).txt ~ Quarantine : C:\Users\Desktop\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ System Restore Point : ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Pro, 64-bit (Build 19043) ---\\ Alternate Data Stream (ADS). (0) ~ No malicious or unnecessary items found. ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (0) ~ No malicious or unnecessary items found. ---\\ Hosts file (1) ~ The hosts file is legitimate (21) ---\\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. ---\\ Explorer ( File, Folder) (5) FOUND file: C:\Users\Desktop\AppData\Local\Google\Chrome\User Data\Default\Preferences =>ChromiumPreference FOUND file: C:\Users\Desktop\AppData\Local\Microsoft\Edge\User Data\Default\Preferences =>ChromiumPreference FOUND folder: C:\Program Files (x86)\Skillbrains\lightshot =>SUP.Optional.Skillbrains FOUND folder: C:\Program Files (x86)\Skillbrains\Updater =>SUP.Optional.Skillbrains FOUND folder: C:\Program Files (x86)\Skillbrains =>SUP.Optional.Skillbrains ---\\ Registry ( Key, Value, Data) (7) FOUND key: HKLM\SOFTWARE\POLICIES\Mozilla\Firefox [AdditionalScan 571] =>.SUP.FirefoxRestriction FOUND key: HKEY_USERS\S-1-5-21-214438618-2847933801-3807939465-1001\SOFTWARE\SkillBrains [] =>SUP.Optional.Skillbrains FOUND key: HKCU\Software\SkillBrains [] =>SUP.Optional.Skillbrains FOUND data: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{df1e414d-4768-49cb-b186-6ff5d8907ee6}\\DhcpNameServer [Bad : 181.213.132.4 181.213.132.5] =>Hijacker.Browser FOUND data: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer [Bad : 181.213.132.4 181.213.132.5] =>Hijacker.Browser FOUND key: [X64] HKLM\SOFTWARE\Wow6432Node\Skillbrains [] =>SUP.Optional.Skillbrains FOUND key: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1 [Skillbrains] =>SUP.Optional.Skillbrains ---\\ Summary of the elements found (4) https://nicolascoolman.eu/2020/10/01/preferences-navigateurs-chromium/ =>ChromiumPreference https://nicolascoolman.eu/2019/01/sup-skillbrains =>SUP.Optional.Skillbrains https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.FirefoxRestriction https://nicolascoolman.eu/2017/11/10/hijacker-browser-3/ =>Hijacker.Browser ---\\ Result of repair ~ Any repair made ~ Internet Explorer OK ~ Opera Stable OK ---\\ Statistics ~ Items scanned : 102891 ~ Items found : 15 ~ Items cancelled : 0 ~ Space saving (bytes) : 0 ~ Items options : 9/17 ---\\ OPTIONS NOT ACTIVES ~ Temporary file analysis ~ Temporary folder analysis ~ Empty Folder CLSID Analysis ~ Empty Other Folder Analysis ~ Empty LocalLow Folder Analysis ~ Empty Local Folder Analysis ~ Obsolete Installer File Analysis ~ Start browsers with extensions removed ~ End of search in 00h07mn04s ---\\ Reports (0) ZHPCleaner-[S]-06082021-13_12_40.txt