~ ZHPCleaner v2017.1.29.20 by Nicolas Coolman (2017/01/29) ~ Run by Walter (Administrator) (29/01/2017 11:54:47) ~ Web: https://www.nicolascoolman.com ~ Blog: https://www.anti-malware.top ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Versie OK ~ Type : Scan ~ Report : C:\Users\Walter\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Walter\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 14393) ---\\ Services (0) ~ Geen schadelijk of onnodig element gevonden. ---\\ Browser internet (0) ~ Geen schadelijk of onnodig element gevonden. ---\\ Hosts file (1) ~ The hosts file is rechtmatig (21) ---\\ Scheduled automatic tasks. (0) ~ Geen schadelijk of onnodig element gevonden. ---\\ Explorer ( Bestand, Map) (14) GEVONDEN bestand: C:\Windows\Prefetch\REIMAGE.EXE-4681D307.pf =>.Superfluous.ReimageRepair GEVONDEN bestand: C:\Windows\Prefetch\REIMAGEPACKAGE.EXE-528CE4EA.pf =>.Superfluous.ReimageRepair GEVONDEN bestand: C:\Windows\Prefetch\REIMAGEREPAIR (4).EXE-64E6A011.pf =>.Superfluous.ReimageRepair GEVONDEN bestand: C:\Windows\Prefetch\REIMAGEREPAIR (5).EXE-CA59114E.pf =>.Superfluous.ReimageRepair GEVONDEN bestand: C:\Windows\Prefetch\REIMAGEREPAIR.EXE-644F243E.pf =>.Superfluous.ReimageRepair GEVONDEN bestand: C:\Windows\Installer\wix{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}.SchedServiceConfig.rmi =>.Superfluous.Empty GEVONDEN bestand: C:\Users\Walter\AppData\Local\Temp\wct1342.tmp =>.Superfluous.Temporary.Various GEVONDEN bestand: C:\Users\Walter\AppData\Local\Microsoft\Windows\INetCache\IE\WS0ANL9H\ReimagePackage1848x64[1].exe [Reimage - Reimage Package] =>.Superfluous.ReimageRepair GEVONDEN bestand: C:\Users\Walter\AppData\Local\Microsoft\Windows\INetCache\IE\JG3K2GQS\ProtectorPackage2015x64[1].exe [Reimage - Reimage Protector Installation Package] =>.Superfluous.ReimageRepair GEVONDEN bestand: C:\Users\Walter\AppData\Local\Microsoft\Windows\INetCache\IE\JG3K2GQS\ReimagePackage1849x64a[1].exe [Reimage - Reimage Package] =>.Superfluous.ReimageRepair GEVONDEN bestand: C:\Users\Walter\AppData\Local\Microsoft\Windows\INetCache\IE\CDZVDGCE\ProtectorPackage2013x64c[1].exe [Reimage - Reimage Protector Installation Package] =>.Superfluous.ReimageRepair GEVONDEN map: C:\WINDOWS\Installer\MSI1B41.tmp- =>.Superfluous.Empty GEVONDEN map: C:\WINDOWS\Installer\MSI4198.tmp- =>.Superfluous.Empty GEVONDEN map: C:\WINDOWS\Installer\MSIF2C8.tmp- =>.Superfluous.Empty ---\\ Register ( Sleutel, Waarde, Data) (48) GEVONDEN sleutel: HKEY_USERS\S-1-5-21-848628004-3480468251-1483466668-1001\SOFTWARE\APN PIP [] =>.Superfluous.Conduit GEVONDEN sleutel: HKEY_USERS\S-1-5-21-848628004-3480468251-1483466668-1001\SOFTWARE\Reimage [] =>.Superfluous.ReimageRepair GEVONDEN sleutel: HKCU\Software\APN PIP [] =>.Superfluous.Conduit GEVONDEN sleutel: HKCU\Software\Reimage [] =>.Superfluous.ReimageRepair GEVONDEN sleutel: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0fad5fcf-d40f-4dd2-a49f-a3252209df37} [ReSoft Ltd.] =>.Superfluous.Linkury GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\safefinder.com [] =>PUP.Optional.Browser GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\search.safefinder.com [186] =>PUP.Optional.Browser GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com [651] =>.Superfluous.Superfish GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com [600] =>.Superfluous.Superfish GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\protector_dll.protectorbho [Google Toolbar Notifier BHO] =>PUP.Optional.BProtector GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 [Google Toolbar Notifier BHO] =>PUP.Optional.BProtector GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute [IESmartBar.BandObjectAttribute] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel [IESmartBar.DockingPanel] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar [IESmartBar.IESmartBar] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject [IESmartBar.IESmartBarBandObject] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState [IESmartBar.SmartbarDisplayState] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm [IESmartBar.SmartbarMenuForm] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\protector_dll.Protector [Protector Class] =>PUP.Optional.BProtector GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\protector_dll.Protector.1 [Protector Class] =>PUP.Optional.BProtector GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib [ProtectorLib Class] =>PUP.Optional.BProtector GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1 [ProtectorLib Class] =>PUP.Optional.BProtector GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine [ReiEngine Class] =>PUP.Optional.GetLiveSupport GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1 [ReiEngine Class] =>PUP.Optional.GetLiveSupport GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209} [IESmartBar.SmartbarDisplayState] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E} [IESmartBar.BandObjectAttribute] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358} [IESmartBar.SmartbarMenuForm] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7} [IESmartBar.DockingPanel] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301} [IESmartBar.IESmartBarBandObject] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\Record\{181480C8-90AC-3430-B39A-CD121E034A1A} [IESmartBar.MSG] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6} [IESmartBar.BandObjectStyle] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E} [IESmartBar.POINT] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\Record\{8F54FA54-1DF8-3B20-890C-CDD95364BC95} [IESmartBar.DBIM] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24} [IESmartBar.DESKBANDINFO] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9} [IESmartBar.DBIMF] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Reimage [] =>.Superfluous.ReimageRepair GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-848628004-3480468251-1483466668-1001\Products\A7B80CAF950F6DF4CA2AC9F20D5B2B14 [Snap.Do] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467 [] =>PUP.Optional.QuickShare GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Wow6432Node\PIP [] =>Toolbar.Ask GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Google Inc.] =>Heuristic.Suspect GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}\InprocServer32 [C:\Program Files\Reimage\Reimage Repair\REI_Axcontrol.dll (Not File)] =>.Superfluous.ReimageRepair GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}\InprocServer32 [mscoree.dll (Not File)] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}\InprocServer32 [C:\Program Files\Reimage\Reimage Repair\REI_Axcontrol.dll (Not File)] =>.Superfluous.ReimageRepair GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}\InprocServer32 [mscoree.dll (Not File)] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}\InprocServer32 [mscoree.dll (Not File)] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}\InprocServer32 [mscoree.dll (Not File)] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}\InprocServer32 [mscoree.dll (Not File)] =>PUP.Optional.SmartBar GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484} [ReiEngine Class] =>.Superfluous.ReimageRepair GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB} [CompReg Class] =>.Superfluous.ReimageRepair ---\\ Samenvatting van elementen gevonden op uw werkstation (13) https://nicolascoolman.eu/2017/01/27/superfluous-reimagerepair/ =>.Superfluous.ReimageRepair https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>.Superfluous.Empty https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>.Superfluous.Temporary.Various https://www.nicolascoolman.com/fr/toolbar-conduit/ =>.Superfluous.Conduit https://www.anti-malware.top/2016/08/02/superfluous-linkury/ =>.Superfluous.Linkury https://nicolascoolman.eu/2017/01/26/hijacker-browser/ =>PUP.Optional.Browser https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>.Superfluous.Superfish https://www.anti-malware.top/2016/04/30/pup-optional-bprotector/ =>PUP.Optional.BProtector https://www.nicolascoolman.com/fr/hijacker-smartbar/ =>PUP.Optional.SmartBar https://www.nicolascoolman.com/forum/post33206.html#p33206 =>PUP.Optional.GetLiveSupport https://www.nicolascoolman.com/fr/pup-quickshare/ =>PUP.Optional.QuickShare https://www.anti-malware.top/2016/09/22/toolbar-ask/ =>Toolbar.Ask https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect ---\\Resultaat van reparaties ~ Gerepareerd ~ Browser niet gevonden (Google Chrome) ~ Browser niet gevonden (Opera Software) ---\\Statistics ~ Items gescand : 92693 ~ Items gevonden : 70 ~ Items gecancelled : 0 ~ Items gerepareerd : 0 ~ End of search in 00h05mn21s ~==================== ZHPCleaner-[S]-29012017-12_00_08.txt