~ ZHPCleaner v2024.1.9.2 by Nicolas Coolman (2024/01/09)
~ Run by camil (Administrator)  (10/01/2024 12:17:48)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\camil\Desktop\ZHPCleaner (R).txt
~ Quarantine : C:\Users\camil\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ System Restore Point : OK
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home Single Language, 64-bit  (Build 19045)


---\\  Alternate Data Stream (ADS). (0)
~ No malicious or unnecessary items found.


---\\  Services (0)
~ No malicious or unnecessary items found.


---\\  Browser internet (0)


---\\  Hosts file (1)
~ The hosts file is legitimate (21)


---\\  Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.


---\\  Explorer ( File, Folder) (9)
MOVED file: C:\Users\camil\AppData\Local\Microsoft\Edge\User Data\Default\History    =>.SUP.BrowserHistoric
MOVED file: C:\Users\camil\AppData\Local\Google\Chrome\User Data\Profile 1\Preferences    =>Préférences Chromium
MOVED file: C:\Users\camil\AppData\Local\Microsoft\Edge\User Data\Default\Preferences    =>Préférences Chromium
MOVED folder: C:\Users\camil\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data  =>.SUP.BrowserCache
MOVED folder: C:\Users\camil\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data  =>.SUP.BrowserCache
MOVED folder: C:\Users\camil\AppData\Local\Opera Software\Opera GX Stable\User Data\Default\Cache\Cache_Data  =>.SUP.BrowserCache
MOVED folder: C:\Users\camil\AppData\Local\Mozilla\Firefox\Profiles\0afcu2qq.default\Cache2  =>.SUP.BrowserCache
MOVED folder: C:\Users\camil\AppData\Local\Mozilla\Firefox\Profiles\qtsv1590.default-release\Cache2  =>.SUP.BrowserCache
MOVED folder: C:\Users\camil\AppData\Local\Google\Update  =>Heuristic.Suspect


---\\  Registry ( Key, Value, Data) (7)
DELETED key*: [X64] HKLM\SOFTWARE\db821d47-7b3f-5a6f-afe8-6a107e22d1c8 []  =>Adware.CrossRider
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0123F70F2E9783C4EA7F8DBE0E661261 [22:\Software\Classes\powertoys\components\Launcher_WebSearch_zh_TW_Component (Not File)]  =>PUP.Optional.SimpleSearches
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\04A919A9754E5F74798C8E680FD6ED61 [22:\Software\Classes\powertoys\components\Launcher_WebSearch_hu_HU_Component (Not File)]  =>PUP.Optional.SimpleSearches
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\13A4947975F51CE46A9A99D40F18B361 [22:\Software\Classes\powertoys\components\Launcher_WebSearch_pl_PL_Component (Not File)]  =>PUP.Optional.SimpleSearches
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14855185A35D0334983DC530839B8261 [22:\Software\Classes\powertoys\components\Launcher_WebSearch_pt_PT_Component (Not File)]  =>PUP.Optional.SimpleSearches
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\16D68F9F747CCF3458903F1D1F891E61 [22:\Software\Classes\powertoys\components\Launcher_WebSearch_fr_FR_Component (Not File)]  =>PUP.Optional.SimpleSearches
DELETED value: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_058F8E8258CCAEDA7776EEA8AB9F83AC ["C:\Program Files\Google\Chrome\Application\chrome]  =>PUP.Optional.MyBrowser


---\\  Summary of the elements found (7)
https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/  =>.SUP.BrowserHistoric
https://nicolascoolman.eu/forum/Topic/repaquetage-et-infection/  =>Préférences Chromium
https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/  =>.SUP.BrowserCache
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/  =>Heuristic.Suspect
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/  =>Adware.CrossRider
https://nicolascoolman.eu/forum/Topic/repaquetage-et-infection/  =>PUP.Optional.SimpleSearches
https://nicolascoolman.eu/2017/11/01/adware-mybrowser/  =>PUP.Optional.MyBrowser


---\\  Other deletions. (0)
~ Registry Keys Tracing deleted (0)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Google Chrome OK
~ Microsoft Edge OK
~ Mozilla Firefox OK
~ Microsoft Internet Explorer OK
~ Opera GX Stable OK


---\\ Statistics
~ Items scanned : 1551
~ Items found : 0
~ Items cancelled : 0
~ Space saving (bytes) : 0
~ Items options : 10/18


---\\ OPTIONS NOT ACTIVES
~ Temporary file analysis
~ Temporary folder analysis
~ Empty Folder CLSID Analysis
~ Empty Other Folder Analysis
~ Empty LocalLow Folder Analysis
~ Empty Local Folder Analysis
~ Obsolete Installer File Analysis
~ Start browsers with extensions removed





~ End of clean in 00h00mn45s

---\\  Reports (2)
ZHPCleaner-[S]-10012024-12_10_17.txt
ZHPCleaner-[R]-10012024-12_18_33.txt