~ ZHPCleaner v2026.2.8.4 by Nicolas Coolman (2026/02/08) ~ Run by elton (Administrator) (18/02/2026 00:39:59) ~ Forum: https://forum.nicolascoolman.eu/index.php ~ Blog: https://zoneantimalware.com/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : ~ Certificate ZHPCleaner: Illegal ~ Type : Repair ~ Report : C:\Users\elton\Desktop\ZHPCleaner (R).txt ~ Quarantine : C:\Users\elton\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Deactivate ~ Boot Mode : Normal (Normal boot) Windows 7 Ultimate, 64-bit Service Pack 1 (Build 7601) ---\ Alternate Data Stream (ADS). (0) ~ No malicious or unnecessary items found. (ADS) ---\ Services (0) ~ No malicious or unnecessary items found. (Service) ---\ Browser internet (0) ---\ Hosts file (1) ~ The hosts file is legitimate (21) ---\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. (Task) ---\ Explorer ( File, Folder) (100) MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\invalidprefs.js =>PUP.Optional.Legacy MOVED file: C:\Users\elton\AppData\Local\Google\Chrome\User Data\Default\History =>.SUP.BrowserHistoric MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\default\https+++wix-instantsearchplus-ssl.akamaized.net\.metadata-v2 =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\default\https+++wix-instantsearchplus-ssl.akamaized.net\ls\data.sqlite =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\default\https+++wix-instantsearchplus-ssl.akamaized.net\ls\usage =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\default\https+++euro-truck-simulator-2.en.softonic.com\.metadata-v2 =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\default\https+++euro-truck-simulator-2.en.softonic.com\ls\data.sqlite =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\default\https+++euro-truck-simulator-2.en.softonic.com\ls\usage =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\default\https+++euro-truck-simulator-2-fh-tuning-pack.en.softonic.com\.metadata-v2 =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\default\https+++euro-truck-simulator-2-fh-tuning-pack.en.softonic.com\ls\data.sqlite =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\default\https+++euro-truck-simulator-2-fh-tuning-pack.en.softonic.com\ls\usage =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-12-23\default\https+++www.softonic.com.br\.metadata-v2 =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-12-23\default\https+++www.softonic.com.br\ls\data.sqlite =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-12-23\default\https+++www.softonic.com.br\ls\usage =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-12-18\default\https+++wix-instantsearchplus-ssl.akamaized.net^partitionKey=%28https%2Ceastlondonbandag.com%29\.metadata-v2 =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-12-18\default\https+++wix-instantsearchplus-ssl.akamaized.net^partitionKey=%28https%2Ceastlondonbandag.com%29\ls\data.sqlite =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-12-18\default\https+++wix-instantsearchplus-ssl.akamaized.net^partitionKey=%28https%2Ceastlondonbandag.com%29\ls\usage =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-12-01\default\https+++saluscompany.no.comunidades.net\.metadata-v2 =>PUP.Optional.Salus MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-12-01\default\https+++saluscompany.no.comunidades.net\ls\data.sqlite =>PUP.Optional.Salus MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-12-01\default\https+++saluscompany.no.comunidades.net\ls\usage =>PUP.Optional.Salus MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-09-03-1\default\https+++wheres-waldo-hd.softonic.com.br\.metadata-v2 =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-09-03-1\default\https+++wheres-waldo-hd.softonic.com.br\ls\data.sqlite =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-09-03-1\default\https+++wheres-waldo-hd.softonic.com.br\ls\usage =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-09-03-1\default\https+++wally.softonic.com.br\.metadata-v2 =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-09-03-1\default\https+++wally.softonic.com.br\ls\data.sqlite =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-09-03-1\default\https+++wally.softonic.com.br\ls\usage =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-08-14\default\https+++www.youtube.com^partitionKey=%28https%2Cautopecashorizonte.com.br%29\.metadata-v2 =>.SUP.Elex MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-08-14\default\https+++www.youtube.com^partitionKey=%28https%2Cautopecashorizonte.com.br%29\ls\data.sqlite =>.SUP.Elex MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-08-14\default\https+++www.youtube.com^partitionKey=%28https%2Cautopecashorizonte.com.br%29\ls\usage =>.SUP.Elex MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-08-14\default\https+++www.youtube.com^partitionKey=%28https%2Cautopecashorizonte.com.br%29\idb\2171031483YattIedMb.sqlite =>.SUP.Elex MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-08-14\default\https+++www.youtube.com^partitionKey=%28https%2Cautopecashorizonte.com.br%29\idb\2278617337LCo7g%sCD7a%tca5bea1s.sqlite =>.SUP.Elex MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-08-14\default\https+++www.youtube.com^partitionKey=%28https%2Cautopecashorizonte.com.br%29\idb\2735475169LCo7g%sCD7a%tea6b1acs.sqlite =>.SUP.Elex MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-08-14\default\https+++www.youtube.com^partitionKey=%28https%2Cautopecashorizonte.com.br%29\cache\.padding =>.SUP.Elex MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-08-14\default\https+++www.youtube.com^partitionKey=%28https%2Cautopecashorizonte.com.br%29\cache\caches.sqlite =>.SUP.Elex MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-08-14\default\https+++www.autopecashorizonte.com.br\.metadata-v2 =>.SUP.Elex MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-08-14\default\https+++www.autopecashorizonte.com.br\ls\data.sqlite =>.SUP.Elex MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-08-14\default\https+++www.autopecashorizonte.com.br\ls\usage =>.SUP.Elex MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-13\default\https+++assetto-corsa.softonic.com.br\.metadata-v2 =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-13\default\https+++assetto-corsa.softonic.com.br\ls\data.sqlite =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-13\default\https+++assetto-corsa.softonic.com.br\ls\usage =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-03\default\https+++www.youtube.com^partitionKey=%28https%2Caerobask.com%29\.metadata-v2 =>Toolbar.Ask MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-03\default\https+++www.google.com^partitionKey=%28https%2Csolvusoft.com%29\.metadata-v2 =>SUP.Optional.Solvusoft MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-03\default\https+++wix-instantsearchplus-ssl.akamaized.net^partitionKey=%28https%2Cprotork.com%29\.metadata-v2 =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-03\default\https+++wix-instantsearchplus-ssl.akamaized.net^partitionKey=%28https%2Cfactorgamerbrmods.com.br%29\.metadata-v2 =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-03\default\https+++wix-instantsearchplus-ssl.akamaized.net^partitionKey=%28https%2Ceurekas.com.br%29\.metadata-v2 =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-03\default\https+++pxlgnpgecom-a.akamaihd.net^partitionKey=%28http%2Cpmstone.com%29\.metadata-v2 =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-03\default\https+++pxlgnpgecom-a.akamaihd.net^partitionKey=%28http%2Ckscans.com%29\.metadata-v2 =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-03\default\https+++pxlgnpgecom-a.akamaihd.net^partitionKey=%28http%2Ciyfbodn.com%29\.metadata-v2 =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-03\default\https+++pxlgnpgecom-a.akamaihd.net^partitionKey=%28http%2Cfoundrymusic.com%29\.metadata-v2 =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-03\default\https+++pxlgnpgecom-a.akamaihd.net^partitionKey=%28http%2Cbest1byday.com%29\.metadata-v2 =>.SUP.AkamaiHD MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-03\default\https+++en.uptodown.com\.metadata-v2 =>PUP.Optional.UpToDown MOVED file: C:\Users\elton\AppData\Roaming\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\storage\archives\0\2025-04-03\default\https+++assetto-corsa-content-manager.softonic.com.br\.metadata-v2 =>SUP.Optional.Softonic MOVED file: C:\Users\elton\AppData\Local\Google\Chrome\User Data\Default\Preferences =>Préférences Chromium MOVED file: C:\Users\elton\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences =>Préférences Chromium MOVED file: C:\Users\elton\AppData\Local\Temp\atcMRUList.idx =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\boost82386.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\boost964325.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\DMI4F47.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\DMI52B2.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\DMI537E.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\DMI8C.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\DMI96DA.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\DMIC12.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\DMICA0.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\DMIF018.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\etmp87AAD184-9D75-A24E-B66B-56183934FC6B =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\etmpD97C5B07-74B4-B14A-AF5B-E7449FC69D73 =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\qq.png =>.SUP.Temporary.Picture MOVED file: C:\Users\elton\AppData\Local\Temp\screenshots.png =>.SUP.Temporary.Picture MOVED file: C:\Users\elton\AppData\Local\Temp\SFC29FC.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\SFC3B89.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\SFC3BD7.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\SFC3BF6.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\SFC512B.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\SFC5253.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\SFC6660.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\SFC6FE1.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\SFC9A2.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\SFCCF3F.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\SFCEEB1.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\SFCF8DE.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\SFCFCB5.tmp =>.SUP.Temporary.Empty MOVED file: C:\Users\elton\AppData\Local\Temp\tmp-2li.xpi =>.SUP.Temporary.Firefox MOVED file: C:\Users\elton\AppData\Local\Temp\~DF1CD2D005621EFF37.TMP =>.SUP.Temporary.Other MOVED folder: C:\Users\elton\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data =>.SUP.BrowserCache MOVED folder: C:\Users\elton\AppData\Local\Mozilla\Firefox\Profiles\iv1hceom.default\Cache2 =>.SUP.BrowserCache MOVED folder: C:\Users\elton\AppData\Local\Mozilla\Firefox\Profiles\bu4nq6bf.default-release\Cache2 =>.SUP.BrowserCache MOVED folder: C:\Program Files (x86)\LetsView =>.SUP.Empty MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare =>SUP.Optional.AdvancedSystemCare MOVED folder: C:\Users\elton\AppData\Local\Google\Chrome\User Data\Default\File System\000 =>.SUP.Temporary.Chrome MOVED folder: C:\Users\elton\AppData\Local\Google\Chrome\User Data\Default\File System\001 =>.SUP.Temporary.Chrome MOVED folder: C:\Users\elton\AppData\LocalLow\IObit\Advanced SystemCare =>SUP.Optional.AdvancedSystemCare MOVED folder: C:\Users\elton\AppData\Roaming\IObit\Advanced SystemCare =>SUP.Optional.AdvancedSystemCare MOVED folder: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\IObit\Advanced SystemCare =>SUP.Optional.AdvancedSystemCare MOVED folder: C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare =>SUP.Optional.AdvancedSystemCare MOVED folder: C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare =>SUP.Optional.AdvancedSystemCare MOVED folder: C:\ProgramData\IObit\Advanced SystemCare =>SUP.Optional.AdvancedSystemCare MOVED folder: C:\ProgramData\Application Data\IObit\ASCDownloader =>SUP.Optional.AdvancedSystemCare MOVED folder: C:\ProgramData\IObit\ASCDownloader =>SUP.Optional.AdvancedSystemCare MOVED folder: C:\Users\elton\AppData\Local\Temp\chrome_BITS_5044_1023858590 =>.SUP.Empty ---\ Registry ( Key, Value, Data) (72) DELETED data: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{72F108E8-FC5B-43A1-BC63-460DD0FC4AF7}\\DhcpNameServer [Bad : 181.213.132.2 181.213.132.3] =>Hijacker.Browser DELETED data: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer [Bad : 181.213.132.2 181.213.132.3] =>Hijacker.Browser DELETED key*: [X64] HKLM\SOFTWARE\c6ba130a-455e-5073-9dbd-f9d1f65c1562 [] =>Adware.CrossRider DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\c6ba130a-455e-5073-9dbd-f9d1f65c1562 [] =>Adware.CrossRider DELETED key*: HKLM\SOFTWARE\Wow6432Node\IObit\RealTimeProtector [AdditionalScan 289] =>SUP.Optional.AdvancedSystemCare DELETED key*: HKLM\SOFTWARE\Wow6432Node\IObit\Advanced SystemCare [AdditionalScan 290] =>SUP.Optional.AdvancedSystemCare DELETED key*: HKLM\SOFTWARE\Wow6432Node\IObit\ASC [AdditionalScan 291] =>SUP.Optional.AdvancedSystemCare DELETED key*: HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B} [AdditionalScan 365] =>SUP.Optional.AdvancedSystemCare DELETED key**: HKLM\SOFTWARE\IObit\RealTimeProtector [AdditionalScan 431] =>SUP.Optional.AdvancedSystemCare DELETED key**: HKLM\SOFTWARE\IObit\Advanced SystemCare [AdditionalScan 432] =>SUP.Optional.AdvancedSystemCare DELETED key**: HKLM\SOFTWARE\Iobit\ASC [AdditionalScan 458] =>SUP.Optional.AdvancedSystemCare DELETED key**: HKLM\SOFTWARE\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B} [AdditionalScan 521] =>SUP.Optional.AdvancedSystemCare DELETED key*: [X64] HKLM\SOFTWARE\Classes\Interface\{BA935377-E17C-4475-B1BF-DE3110613A99} [ICExtMenu] =>SUP.Optional.AdvancedSystemCare DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BA935377-E17C-4475-B1BF-DE3110613A99} [ICExtMenu] =>SUP.Optional.AdvancedSystemCare DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare_is1 [IObit] =>SUP.Optional.AdvancedSystemCare DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FS2004 Hawker Siddeley HS.748 [FS2004 Hawker Siddeley HS.748] =>PUP.Optional.Hawker DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FS2004 Hawker Siddeley HS.748 Texture Pack 2 [FS2004 Hawker Siddeley HS.748 Texture Pack 2] =>PUP.Optional.Hawker DELETED key*: [X64] HKLM\SOFTWARE\Classes\CLSID\{2803063F-4B8D-4dc6-8874-D1802487FE2D} [CExtMenu Class] =>SUP.Optional.AdvancedSystemCare DELETED key**: [X64] HKLM\SOFTWARE\Classes\CLSID\{2803063F-4B8D-4dc6-8874-D1802487FE2D}\InprocServer32 [C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll] =>SUP.Optional.AdvancedSystemCare DELETED key*: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Advanced SystemCare [{2803063F-4B8D-4dc6-8874-D1802487FE2D}] =>SUP.Optional.AdvancedSystemCare DELETED key*: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\Advanced SystemCare [{2803063F-4B8D-4dc6-8874-D1802487FE2D}] =>SUP.Optional.AdvancedSystemCare DELETED key*: HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\Advanced SystemCare [{2803063F-4B8D-4dc6-8874-D1802487FE2D}] =>SUP.Optional.AdvancedSystemCare DELETED key*: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Advanced SystemCare [{2803063F-4B8D-4dc6-8874-D1802487FE2D}] =>SUP.Optional.AdvancedSystemCare DELETED key*: HKLM\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Advanced SystemCare [{2803063F-4B8D-4dc6-8874-D1802487FE2D}] =>SUP.Optional.AdvancedSystemCare DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Mozilla Firefox\firefox.exe [Firefox] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe [FastStone Image Viewer] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\WinRAR\WinRAR.exe [WinRAR archiver] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\7-Zip\7zG.exe [7-Zip GUI] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\7-Zip\7z.exe [7-Zip Console] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\MWGFX\DXTBmp\DXTbmp.exe [DXT1 Bitmap Manipulator] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Mozilla Firefox\private_browsing.exe [Firefox] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Windows Photo Viewer\PhotoViewer.dll [Visualizador de Fotos do Windows] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Windows Media Player\wmplayer.exe [Windows Media Player] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Windows NT\Accessories\WORDPAD.EXE [WordPad] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\AppData\Roaming\uTorrent\uTorrent.exe [µTorrent] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\DAEMON Tools Lite\DTAgent.exe [DAEMON Tools Lite Agent] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\SpeedFan\speedfan.exe [speedfan.exe] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\ferramentas ets\DESBLOQUEADOR [ USE APENAS SE O DART NAO DESBLOQUEAR ]\DESBLOQUEADOR.bat [DESBLOQUEADOR.bat] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\ferramentas ets\baretail.exe [baretail.exe] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\ferramentas ets\DART 2.0 [D32]_2.exe [D.A.R.T - Damaged Archives Repair Tool] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Google\Chrome\Application\chrome.exe [Google Chrome] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\ferramentas ets\SCS Extractor.exe [SCS Extractor] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\ferramentas ets\scs_extractor.exe [scs_extractor.exe] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\ferramentas ets\SCS_Unlocker.exe [SCS Unlocker] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\ferramentas ets\ScsExtract.exe [ScsExtract] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\AIMP\AIMP.exe [AIMP] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Logitech\Gaming Software\LWEMon.exe [Logitech WingMan Event Monitor] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\SimHub\SimHubWPF.exe [SimHub] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Speccy\Speccy64.exe [Speccy] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe [aTube Catcher to download and convert videos.] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\E:\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe [Euro Truck Simulator 2 - Steam] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\IObit\IObit Uninstaller\AutoUpdate.exe [Autoupdate] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [IObit Uninstall Tool] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\SpyHunter\SpyHunter4.exe [SpyHunter4 application] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\E:\FS2004\fs9.exe [Microsoft Flight Simulator] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\G:\arquivos duplicados\dupeGuru_win64_4.2.1.exe [dupeGuru_win64_4.2.1.exe] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\trucks\DESBLOQUEADOR [ USE APENAS SE O DART NAO DESBLOQUEAR ]\DESBLOQUEADOR.bat [DESBLOQUEADOR.bat] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\DAEMON Tools Lite\DTLite.exe [DAEMON Tools Lite] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\letsview-setup.exe [LetsView Installer] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\pcsx2-1.6.0-setup.exe [pcsx2-1.6.0-setup.exe] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\PCSX2\pcsx2.exe [pcsx2.exe] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\directx_Jun2010_redist(1).exe [Win32 Cabinet Self-Extractor ] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\pcsx2-1.6.0-setup(1).exe [Installs PCSX2, a Playstation 2 Emulator for the P] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\DXSETUP.exe [Depuração da instalação do Microsoft DirectX] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Play\Play.exe [Play! - PlayStation2 Emulator] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\Play-x86-64.exe [Play-x86-64.exe] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\pcsx2-v1.6.0-windows-32bit-portable\PCSX2 1.6.0\pcsx2.exe [pcsx2.exe] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\elton\Downloads\utweb_installer.exe [uT?rrent Web® ] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Fraps\fraps.exe [Fraps] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\2- adwcleaner.exe [AdwCleaner] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\rkill.exe [Terminates malware processes so that you can run y] =>.SUP.Orphan.MUICache DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\SUPERAntiSpywarePro.exe [SUPERAntiSpyware Professional Setup] =>.SUP.Orphan.MUICache ---\ Summary of the elements found (22) https://nicolascoolman.eu/legacy-logiciel-potentiellement-indesirable-pup-lpi/ =>PUP.Optional.Legacy https://zoneantimalware.com/caches-historique-navigateur =>.SUP.BrowserHistoric https://nicolascoolman.eu/sup-akamaihd/ =>.SUP.AkamaiHD https://nicolascoolman.eu/softonic-logiciel-potentiellement-superflu-lps/ =>SUP.Optional.Softonic https://nicolascoolman.eu/pup-optional-salus/ =>PUP.Optional.Salus https://nicolascoolman.eu/superfluous-elex/ =>.SUP.Elex https://nicolascoolman.eu/toolbar-ask/ =>Toolbar.Ask https://nicolascoolman.eu/solvusoft-logiciel-potentiellement-superflu-lps/ =>SUP.Optional.Solvusoft https://zoneantimalware.com/repaquetage-les-risques/ =>PUP.Optional.UpToDown https://zoneantimalware.com/repaquetage-les-risques/ =>Préférences Chromium https://zoneantimalware.com/logiciels-superflus-lps/ =>.SUP.Temporary.Empty https://zoneantimalware.com/logiciels-superflus-lps/ =>.SUP.Temporary.Picture https://zoneantimalware.com/logiciels-superflus-lps/ =>.SUP.Temporary.Firefox https://zoneantimalware.com/logiciels-superflus-lps/ =>.SUP.Temporary.Other https://zoneantimalware.com/caches-historique-navigateur =>.SUP.BrowserCache https://zoneantimalware.com/logiciels-superflus-lps/ =>.SUP.Empty https://zoneantimalware.com/repaquetage-les-risques/ =>SUP.Optional.AdvancedSystemCare https://zoneantimalware.com/logiciels-superflus-lps/ =>.SUP.Temporary.Chrome https://nicolascoolman.eu/hijacker-browser-2/ =>Hijacker.Browser https://nicolascoolman.eu/pup-optional-crossrider/ =>Adware.CrossRider https://zoneantimalware.com/repaquetage-les-risques/ =>PUP.Optional.Hawker https://zoneantimalware.com/muicache-registre-windows/ =>.SUP.Orphan.MUICache ---\ Other deletions. (41) ~ Registry Keys Tracing deleted (39) ~ Remove the old reports ZHPCleaner. (2) ---\ Result of repair ~ Repair carried out successfully ~ Google Chrome OK ~ Mozilla Firefox OK ~ Microsoft Internet Explorer OK ---\ Statistics ~ Items scanned : 1801 ~ Items found : 0 ~ Items cancelled : 0 ~ Space saving (bytes) : 10558176 ~ Items options : 17/18 ---\ OPTIONS NOT ACTIVES ~ Start browsers with extensions removed ~ End of clean in 00h01mn48s ---\ Reports (2) ZHPCleaner-[S]-18022026-00_35_31.txt ZHPCleaner-[R]-18022026-00_41_47.txt