~ ZHPCleaner v2017.5.12.80 by Nicolas Coolman (2017/05/12) ~ Run by Jozef Van Ingelgem (Administrator) (12/05/2017 14:30:52) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Versie OK ~ Type : Scan ~ Report : C:\Users\Jozef Van Ingelgem\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Jozef Van Ingelgem\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 14393) ---\\ Services (0) ~ Geen schadelijk of onnodig element gevonden. ---\\ Browser internet (1) GEVONDEN data: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigUrl [Bad : http://unstop.net/wpad.dat?b6a857e0f15161223b341a118bfc969f30668632] =>Hijacker.Proxy ---\\ Hosts file (1) ~ The hosts file is rechtmatig (21) ---\\ Scheduled automatic tasks. (0) ~ Geen schadelijk of onnodig element gevonden. ---\\ Explorer ( Bestand, Map) (13) GEVONDEN bestand: C:\Windows\Prefetch\FLIGHTSEARCH.16CA3337811246F7-253ABB96.pf =>.Superfluous.MindSpark GEVONDEN bestand: C:\Users\Jozef Van Ingelgem\AppData\Local\Temp\airbus_a380-800_air_france_fs2004-20C8.exe [Tarma Software Research Pty Ltd - Tarma® Installer] =>.Superfluous.Temporary.Empty GEVONDEN bestand: C:\Users\Jozef Van Ingelgem\AppData\Local\Temp\PCWBEF3.tmp =>.Superfluous.Temporary.Empty GEVONDEN bestand: C:\Users\Jozef Van Ingelgem\AppData\Local\Temp\PCWBEF3.xml =>.Superfluous.Temporary.Empty GEVONDEN bestand: C:\Users\Jozef Van Ingelgem\AppData\Local\Temp\Picture0001.png =>.Superfluous.Temporary.Empty GEVONDEN bestand: C:\Users\Jozef Van Ingelgem\AppData\Local\Temp\sa.AD2F1837.HPPrinterControl_v10z8vjag6ke6_1__.Public.InstallAgent.dat =>.Superfluous.Temporary.Empty GEVONDEN bestand: C:\Users\Jozef Van Ingelgem\AppData\Local\Temp\SquirrelSetup.log =>.Superfluous.Temporary.Empty GEVONDEN bestand: C:\Users\Jozef Van Ingelgem\AppData\Local\Temp\URLD96F.tmp =>.Superfluous.Temporary.Empty GEVONDEN bestand: C:\Users\Jozef Van Ingelgem\AppData\Local\Temp\URLDB2C.tmp =>.Superfluous.Temporary.Empty GEVONDEN bestand: C:\Users\Jozef Van Ingelgem\AppData\Local\Temp\URLE800.tmp =>.Superfluous.Temporary.Empty GEVONDEN bestand: C:\Users\Jozef Van Ingelgem\AppData\Local\Temp\{DA484C8E-69F7-4583-BE61-66DA4C18C4D9} - OProcSessId.dat =>.Superfluous.Temporary.Empty GEVONDEN bestand: C:\Users\Jozef Van Ingelgem\AppData\Local\Temp\{EB2E2B30-EB69-41F9-B43D-1D47488B0543} - OProcSessId.dat =>.Superfluous.Temporary.Empty GEVONDEN bestand: C:\Users\Jozef Van Ingelgem\AppData\Local\Temp\~DF1A340AD9224DD6F1.TMP =>.Superfluous.Temporary.Empty ---\\ Register ( Sleutel, Waarde, Data) (15) GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com [] =>Toolbar.Ask GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\convertpdfsnow.dl.tb.ask.com [12] =>Toolbar.Ask GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\download.televisionfanatic.com [29] =>.Superfluous.TelevisionFanatic GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\downspeedtest.dl.myway.com [12] =>.Superfluous.MindSpark GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\downspeedtest.dl.tb.ask.com [12] =>.Superfluous.MindSpark GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\easydocmerge.dl.myway.com [12] =>PUP.Optional.MyWebSearch GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\easydocmerge.dl.tb.ask.com [12] =>Toolbar.Ask GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\flightsearchapp.dl.myway.com [1450] =>.Superfluous.MindSpark GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pdfconverterhq.dl.myway.com [12] =>.Superfluous.MindSpark GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pdfconverterhq.dl.tb.ask.com [12] =>.Superfluous.MindSpark GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\plusnetwork.com [] =>PUP.Optional.PlusNetwork GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\televisionfanatic.com [] =>.Superfluous.TelevisionFanatic GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\televisionfanatic.dl.myway.com [12] =>.Superfluous.TelevisionFanatic GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.plusnetwork.com [15] =>PUP.Optional.PlusNetwork GEVONDEN sleutel: HKLM\SYSTEM\CurrentControlSet\Services\BsUpdate [] =>PUP.Optional.SoftwareUpdater ---\\ Samenvatting van elementen gevonden op uw werkstation (8) https://nicolascoolman.eu/2017/04/03/hijacker-proxy/ =>Hijacker.Proxy https://nicolascoolman.eu/2017/01/15/superfluous-mindspark/ =>.Superfluous.MindSpark https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Temporary.Empty https://nicolascoolman.eu/2017/02/28/toolbar-ask/ =>Toolbar.Ask https://nicolascoolman.eu/2017/03/15/superfluous-televisionfanatic/ =>.Superfluous.TelevisionFanatic https://www.nicolascoolman.com/fr/adware-mywebsearch/ =>PUP.Optional.MyWebSearch https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.PlusNetwork https://www.nicolascoolman.com/fr/pup-software-updater/ =>PUP.Optional.SoftwareUpdater ---\\Resultaat van reparaties ~ Gerepareerd ~ Browser niet gevonden (Opera Software) ---\\Statistics ~ Items gescand : 85895 ~ Items gevonden : 29 ~ Items gecancelled : 0 ~ Items gerepareerd : 0 ~ End of search in 00h07mn06s ~==================== ZHPCleaner-[S]-12052017-14_37_58.txt