~ ZHPCleaner v2024.1.26.4 by Nicolas Coolman (2024/01/26)
~ Run by TRABALHO (Administrator)  (04/02/2024 05:19:08)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Scan
~ Report : C:\Users\TRABALHO\Desktop\ZHPCleaner (S).txt
~ Quarantine : C:\Users\TRABALHO\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ System Restore Point : 
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 11, 64-bit  (Build 22631)


---\\  Alternate Data Stream (ADS). (1)
FOUND file ADS: C:\Users\TRABALHO\Desktop\adwcleaner.exe:MBAM.Zone.Identifier  =>.SUP.FileADS


---\\  Services (0)
~ No malicious or unnecessary items found.


---\\  Browser internet (3)
FOUND file: C:\Users\TRABALHO\AppData\Local\Microsoft\Edge\User Data\Default\History    =>.SUP.BrowserHistoric
FOUND folder: C:\Users\TRABALHO\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data  =>.SUP.BrowserCache
FOUND folder: C:\Users\TRABALHO\AppData\Local\Opera Software\Opera GX Stable\User Data\Default\Cache\Cache_Data  =>.SUP.BrowserCache


---\\  Hosts file (1)
~ The hosts file is legitimate (40)


---\\  Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.


---\\  Explorer ( File, Folder) (2)
FOUND file: C:\Users\TRABALHO\AppData\Local\Microsoft\Edge\User Data\Default\Preferences    =>ChromiumPreference
FOUND folder: C:\Users\TRABALHO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc  =>.SUP.Discord


---\\  Registry ( Key, Value, Data) (6)
FOUND value: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Discord ["C:\Users\TRABALHO\AppData\Local\Discord\Update.ex]  =>.SUP.Discord
FOUND key: HKEY_USERS\S-1-5-21-1323919425-2868841928-406510748-1001\SOFTWARE\Discord []  =>.SUP.Discord
FOUND key: HKEY_USERS\S-1-5-21-1323919425-2868841928-406510748-1001\SOFTWARE\Classes\AppXq0pwa73vfcn2qdexp8cexcc6qk87xh1r []  =>Adware.Navipromo
FOUND key: HKEY_USERS\S-1-5-21-1323919425-2868841928-406510748-1001\SOFTWARE\Classes\Discord [URL:Discord Protocol]  =>.SUP.Discord
FOUND key: HKCU\Software\Discord []  =>.SUP.Discord
FOUND key: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Discord [Discord Inc.]  =>.SUP.Discord


---\\  Summary of the elements found (6)
https://nicolascoolman.eu/2018/01/04/ads-alternate-data-stream/  =>.SUP.FileADS
https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/  =>.SUP.BrowserHistoric
https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/  =>.SUP.BrowserCache
https://nicolascoolman.eu/2020/10/01/preferences-navigateurs-chromium/  =>ChromiumPreference
https://nicolascoolman.eu/forum/Topic/Discord-logiciel-potentiellement-superflu-lps/  =>.SUP.Discord
https://nicolascoolman.eu/forum/Topic/repaquetage-et-infection/  =>Adware.Navipromo


---\\ Result of repair
~ Any repair made
~ Microsoft Edge OK
~ Microsoft Internet Explorer OK
~ Opera GX Stable OK


---\\ Statistics
~ Items scanned : 91342
~ Items found : 13
~ Items cancelled : 0
~ Space saving (bytes) : 0
~ Items options : 10/18


---\\ OPTIONS NOT ACTIVES
~ Temporary file analysis
~ Temporary folder analysis
~ Empty Folder CLSID Analysis
~ Empty Other Folder Analysis
~ Empty LocalLow Folder Analysis
~ Empty Local Folder Analysis
~ Obsolete Installer File Analysis
~ Start browsers with extensions removed





~ End of search in 00h04mn50s

---\\  Reports (0)
ZHPCleaner-[S]-04022024-05_23_58.txt