~ ZHPCleaner v2024.3.2.9 by Nicolas Coolman (2024/03/02) ~ Run by Users (Administrator) (04/03/2024 14:57:52) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Repair ~ Report : C:\Users\Users\Desktop\ZHPCleaner (R).txt ~ Quarantine : C:\Users\Users\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ System Restore Point : OK ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Pro, 64-bit (Build 19045) ---\\ Alternate Data Stream (ADS). (0) ~ No malicious or unnecessary items found. ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (0) ---\\ Hosts file (1) ~ The hosts file is legitimate (21) ---\\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. ---\\ Explorer ( File, Folder) (19) MOVED file: C:\Users\Users\AppData\Local\Google\Chrome\User Data\Default\History =>.SUP.BrowserHistoric MOVED file: C:\Users\Users\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\History =>.SUP.BrowserHistoric MOVED file: C:\Users\Users\AppData\Local\Microsoft\Edge\User Data\Default\History =>.SUP.BrowserHistoric MOVED file: C:\Users\Users\AppData\Local\Google\Chrome\User Data\Default\Preferences =>Préférences Chromium MOVED file: C:\Users\Users\AppData\Local\Google\Chrome\User Data\Profile 1\Preferences =>Préférences Chromium MOVED file: C:\Users\Users\AppData\Local\Microsoft\Edge\User Data\Default\Preferences =>Préférences Chromium MOVED file: C:\Users\Users\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences =>Préférences Chromium MOVED file: C:\Users\Users\Downloads\setup-lightshot (1).exe [Skillbrains - lightshot Setup] =>SUP.Optional.Skillbrains MOVED file: C:\Users\Users\Downloads\setup-lightshot (2).exe [Skillbrains - lightshot Setup] =>SUP.Optional.Skillbrains MOVED file: C:\Users\Users\Downloads\setup-lightshot.exe [Skillbrains - lightshot Setup] =>SUP.Optional.Skillbrains MOVED folder: C:\Users\Users\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data =>.SUP.BrowserCache MOVED folder: C:\Users\Users\AppData\Local\BraveSoftware\Brave-BrowserUser Data\Default\Cache\Cache_Data =>.SUP.BrowserCache MOVED folder: C:\Users\Users\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data =>.SUP.BrowserCache MOVED folder: C:\Users\Users\AppData\Local\Opera Software\Opera Stable\User Data\Default\Cache\Cache_Data =>.SUP.BrowserCache MOVED folder: C:\Users\Users\AppData\Local\Mozilla\Firefox\Profiles\27i4fbxj.default\Cache2 =>.SUP.BrowserCache MOVED folder: C:\Users\Users\AppData\Local\Mozilla\Firefox\Profiles\n0nmrtmx.default-release\Cache2 =>.SUP.BrowserCache MOVED folder: C:\Program Files (x86)\Skillbrains =>SUP.Optional.Skillbrains MOVED folder: C:\Users\Users\AppData\Local\PackageAware =>.SUP.BearShare MOVED folder: C:\ProgramData\IObit\ASCDownloader =>SUP.Optional.AdvancedSystemCare ---\\ Registry ( Key, Value, Data) (7) DELETED key*: HKLM\SOFTWARE\POLICIES\Mozilla\Firefox [AdditionalScan 576] =>.SUP.FirefoxRestriction DELETED key*: HKEY_USERS\S-1-5-21-1718706080-4065284056-1823354823-1001\SOFTWARE\SkillBrains [] =>SUP.Optional.Skillbrains DELETED key**: HKCU\Software\SkillBrains [] =>SUP.Optional.Skillbrains DELETED key*: [X64] HKLM\SOFTWARE\Classes\Installer\Products\3B9E3B7B41BF729498B49E215490FAA5 [Adobe Flash Player 10 ActiveX] =>Riskware.FlashPlayer DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Skillbrains [] =>SUP.Optional.Skillbrains DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX [Adobe Systems Incorporated] =>Riskware.FlashPlayer DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1 [Skillbrains] =>SUP.Optional.Skillbrains ---\\ Summary of the elements found (8) https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/ =>.SUP.BrowserHistoric https://nicolascoolman.eu/forum/Topic/repaquetage-et-infection/ =>Préférences Chromium https://nicolascoolman.eu/2019/01/sup-skillbrains =>SUP.Optional.Skillbrains https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/ =>.SUP.BrowserCache https://nicolascoolman.eu/2017/09/15/sup-bearshare/ =>.SUP.BearShare https://nicolascoolman.eu/wp-content/uploads/2017/12/26/sup-advancedsystemcare/ =>SUP.Optional.AdvancedSystemCare https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.FirefoxRestriction https://nicolascoolman.eu/forum/Topic/flashplayer-logiciel-a-risque-riskware/ =>Riskware.FlashPlayer ---\\ Other deletions. (0) ~ Registry Keys Tracing deleted (0) ~ Remove the old reports ZHPCleaner. (0) ---\\ Result of repair ~ Repair carried out successfully ~ Google Chrome OK ~ Microsoft Edge OK ~ Brave OK ~ Mozilla Firefox OK ~ Microsoft Internet Explorer OK ~ Opera Stable OK ---\\ Statistics ~ Items scanned : 1595 ~ Items found : 0 ~ Items cancelled : 0 ~ Space saving (bytes) : 0 ~ Items options : 10/18 ---\\ OPTIONS NOT ACTIVES ~ Temporary file analysis ~ Temporary folder analysis ~ Empty Folder CLSID Analysis ~ Empty Other Folder Analysis ~ Empty LocalLow Folder Analysis ~ Empty Local Folder Analysis ~ Obsolete Installer File Analysis ~ Start browsers with extensions removed ~ End of clean in 00h02mn17s ---\\ Reports (2) ZHPCleaner-[S]-04032024-14_54_47.txt ZHPCleaner-[R]-04032024-15_00_09.txt