~ ZHPCleaner v2017.11.11.197 by Nicolas Coolman (2017/11/11) ~ Run by Qtera69 (Administrator) (12/11/2017 19:32:21) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Versie OK ~ Certificate ZHPCleaner: Legal ~ Type : Scan ~ Report : C:\Users\Qtera69\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Qtera69\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 15063) ---\\ Services (0) ~ Geen schadelijk of onnodig element gevonden. ---\\ Browser internet (0) ~ Geen schadelijk of onnodig element gevonden. ---\\ Hosts file (1) ~ The hosts file is rechtmatig (21) ---\\ Scheduled automatic tasks. (0) ~ Geen schadelijk of onnodig element gevonden. ---\\ Explorer ( Bestand, Map) (19) GEVONDEN bestand: C:\Users\Public\Desktop\DriverToolkit.lnk [Bad : C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe](..) =>.SUP.DriverToolkit GEVONDEN bestand: C:\Users\Public\Desktop\Office 2016 KMS Activator Ultimate v1.1.lnk [Bad : C:\Program Files\Office 2016 KMS Activator Ultimate v1.1 Final\Office 2016 KMS Activator Ultimate v1.1.exe](..) =>Hacktool.Office GEVONDEN bestand: C:\Users\Public\Desktop\DriverToolkit.lnk =>.SUP.DriverToolkit GEVONDEN bestand: C:\Users\Public\Desktop\Office 2016 KMS Activator Ultimate v1.1.lnk =>Hacktool.Office GEVONDEN bestand: C:\Windows\Prefetch\ACT.KMSPICO-V4.1.EXE-F99E0729.pf =>HackTool.KMSpico GEVONDEN bestand: C:\Windows\Prefetch\DRIVERTOOLKIT.EXE-522A3A6D.pf =>.SUP.DriverToolkit GEVONDEN bestand: C:\Windows\Prefetch\DRIVERTOOLKITINSTALLER (2).TM-17A58A9D.pf =>.SUP.DriverToolkit GEVONDEN bestand: C:\Windows\Prefetch\DRIVERTOOLKITINSTALLER (2).TM-A87B8D97.pf =>.SUP.DriverToolkit GEVONDEN bestand: C:\Windows\Prefetch\KMSPICO_SETUP.TMP-3B8EAE3F.pf =>HackTool.KMSpico GEVONDEN bestand: C:\Windows\Prefetch\KMSPICO_SETUP.TMP-D1B5B640.pf =>HackTool.KMSpico GEVONDEN bestand: C:\Windows\Prefetch\OFFICE 2016 KMS ACTIVATOR ULT-1F102874.pf =>Hacktool.Office GEVONDEN bestand: C:\Program Files\Office 2016 KMS Activator Ultimate v1.1 Final\Readme.txt =>Hacktool.Office GEVONDEN bestand: C:\Program Files\Office 2016 KMS Activator Ultimate v1.1 Final\unins000.dat =>Hacktool.Office GEVONDEN bestand: C:\Program Files\Office 2016 KMS Activator Ultimate v1.1 Final\unins000.exe [ - Setup/Uninstall] =>Hacktool.Office GEVONDEN map: C:\Program Files\KMSpico\TokensBackup =>HackTool.KMSpico GEVONDEN map: C:\Program Files\KMSpico =>HackTool.KMSpico GEVONDEN map: C:\Program Files\Office 2016 KMS Activator Ultimate v1.1 Final =>Hacktool.Office GEVONDEN bestand: C:\ProgramData\Microsoft Toolkit\Settings.xml =>HackTool.AutoKMS GEVONDEN map: C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS ---\\ Register ( Sleutel, Waarde, Data) (4) GEVONDEN sleutel: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\static.audienceinsights.net [43] =>.SUP.AudienceInsights GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Microsoft\Tracing\Office 2016 KMS Activator Ultimate v1_RASAPI32 [] =>Hacktool.Office GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Microsoft\Tracing\Office 2016 KMS Activator Ultimate v1_RASMANCS [] =>Hacktool.Office GEVONDEN sleutel: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office 2016 KMS Activator Ultimate v1.1 Final_is1 [Office 2016 KMS Activator Ultimate v1.1 Final] =>Hacktool.Office ---\\ Samenvatting van elementen gevonden op uw werkstation (5) https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.DriverToolkit https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Hacktool.Office https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico https://nicolascoolman.eu/2017/02/02/hacktool-autokms/ =>HackTool.AutoKMS https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.AudienceInsights ---\\Resultaat van reparaties ~ Gerepareerd ~ Browser niet gevonden (Mozilla Firefox) ~ Browser niet gevonden (Opera Software) ---\\Statistics ~ Items gescand : 96087 ~ Items gevonden : 25 ~ Items gecancelled : 0 ~ Items gerepareerd : 0 ~ End of search in 00h06mn41s ~==================== ZHPCleaner-[S]-12112017-19_39_02.txt