~ ZHPCleaner v2015.2.27.96 by Nicolas Coolman (27/02/2015)
~ Run by Administrador (Administrator) (27/02/2015 15:59:22)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\Administrador\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Administrador\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 7, 64-bit Service Pack 1 (Build 7601)
---\ Services (0)
~ No malicious items found.
---\ Browser internet (1)
REPLACED Proxy: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyHttp1.1 ( 1 )
---\ Hosts file (1)
~ The hosts file is legitimate (20)
---\ Scheduled automatic tasks. (0)
~ No malicious items found.
---\ Explorer ( File, Folder) (11)
MOVED folder: C:\ProgramData\Baidu Security\RpData (Adware.BDPlugin)
MOVED folder: C:\ProgramData\InstallMate{F4F3177B-DF80-4A41-A8AA-97A22F10358D} (PUP.Tarma)
MOVED folder: C:\ProgramData\Baidu Security (Adware.BDPlugin)
MOVED folder: C:\ProgramData\boost_interprocess (PUP.Boost)
MOVED folder: C:\ProgramData\InstallMate (PUP.Tarma)
MOVED file: \Users\CARLOS\AppData\Roaming\ContentExplorer\loader.dat [ - ] (PUP.ContentExplorer)
MOVED file: \Users\CARLOS\AppData\Roaming\ContentExplorer\makecert.exe [Microsoft Corporation - ECM MakeCert] (PUP.ContentExplorer)
MOVED file: \Users\CARLOS\AppData\Roaming\ContentExplorer\storage.bin [ - ] (PUP.ContentExplorer)
MOVED folder: \Users\CARLOS\AppData\Roaming\ContentExplorer (PUP.ContentExplorer)
MOVED folder: \Users\CARLOS\AppData\Local\Temp\DizzyDing (PUP.DizzyDing)
MOVED folder: \Users\CARLOS\AppData\Local\Temp\Solution Real (Adware.SolutionReal)
---\ Registry ( Key, Value, Data) (28)
DELETED data: HKCR\OperaStable\Shell\Open\Command\Default [Bad : ] (Broken.OpenCommand)
DELETED key*: [X64] HKLM\SOFTWARE\Clients\StartMenuInternet\BoBrowser.WERHBN4M7PLFCSQ5RKQCFIMM5E ["C:\Users\CARLOS\AppData\Local\BoBrowser\Application\bobrowser.exe"] (PUP.BoBrowser)
DELETED key*: [X64] HKLM\SOFTWARE\Clients\StartMenuInternet\CrossBrowser.WERHBN4M7PLFCSQ5RKQCFIMM5E ["C:\Users\CARLOS\AppData\Local\CrossBrowser\Application\crossbrowser.exe"] (PUP.CrossBrowser)
DELETED value: [X64] HKLM\Software\Classes.htm\OpenWithProgIDs\BoBrowsHTM.WERHBN4M7PLFCSQ5RKQCFIMM5E [] (PUP.BoBrowser)
DELETED value: [X64] HKLM\Software\Classes.htm\OpenWithProgIDs\XBrowserHTM.WERHBN4M7PLFCSQ5RKQCFIMM5E [] (PUP.SpeedBrowser)
DELETED value: [X64] HKLM\Software\Classes.html\OpenWithProgIDs\BoBrowsHTM.WERHBN4M7PLFCSQ5RKQCFIMM5E [] (PUP.BoBrowser)
DELETED value: [X64] HKLM\Software\Classes.html\OpenWithProgIDs\XBrowserHTM.WERHBN4M7PLFCSQ5RKQCFIMM5E [] (PUP.SpeedBrowser)
DELETED value: [X64] HKLM\Software\Classes.shtml\OpenWithProgIDs\BoBrowsHTM.WERHBN4M7PLFCSQ5RKQCFIMM5E [] (PUP.BoBrowser)
DELETED value: [X64] HKLM\Software\Classes.shtml\OpenWithProgIDs\XBrowserHTM.WERHBN4M7PLFCSQ5RKQCFIMM5E [] (PUP.SpeedBrowser)
DELETED value: [X64] HKLM\Software\Classes.webp\OpenWithProgIDs\BoBrowsHTM.WERHBN4M7PLFCSQ5RKQCFIMM5E [] (PUP.BoBrowser)
DELETED value: [X64] HKLM\Software\Classes.webp\OpenWithProgIDs\XBrowserHTM.WERHBN4M7PLFCSQ5RKQCFIMM5E [] (PUP.SpeedBrowser)
DELETED value: [X64] HKLM\Software\Classes.xht\OpenWithProgIDs\BoBrowsHTM.WERHBN4M7PLFCSQ5RKQCFIMM5E [] (PUP.BoBrowser)
DELETED value: [X64] HKLM\Software\Classes.xht\OpenWithProgIDs\XBrowserHTM.WERHBN4M7PLFCSQ5RKQCFIMM5E [] (PUP.SpeedBrowser)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\TypeLib{44444444-4444-4444-4444-440344854424} [] (PUP.CrossRider)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\TypeLib{44444444-4444-4444-4444-440444414458} [] (PUP.CrossRider)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\c8e69b28-f55b-4c99-9b96-9a2a9bd0ae8d [] (PUP.CrossRider)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\I - Cinema-nv-ie [] (Heuristic.CrossRider)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\Applications\iLividSetup-r641-n-bi.exe [] (Adware.Bandoo)
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{7C93EED6-7E91-494d-A92E-5957CCF32CDE} [C:\Program Files (x86)\Speed Analysis 2] (PUP.SpeedAnalysis)
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{A43F0F0F-7571-41b7-AFBC-B60A747CADEC} [C:\Program Files (x86)\Speed Analysis 2] (PUP.SpeedAnalysis)
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{B2BC04DF-EFBD-409A-95CA-36874E5AB92A} [C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.2.0] (Toolbar.AVGSearch)
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{C3DE4C1F-D822-486c-844C-13A728A0CA3F} [C:\Program Files (x86)\Speed Analysis 2] (PUP.SpeedAnalysis)
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{F4924C41-0244-4d92-83FA-361C36AE76C2} [C:\Program Files (x86)\Speed Analysis 2] (PUP.SpeedAnalysis)
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{FD7004F2-BCB5-4222-845E-5888182A8E49} [C:\Program Files (x86)\Speed Analysis 2] (PUP.SpeedAnalysis)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\mamverifier [] (Toolbar.Mamverifier)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{3E3F76E8-E689-4802-AC2D-D0A52A9F80EA} [C:\Program Files (x86)\Speed Analysis 2] (PUP.SpeedAnalysis)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{57D4C1B0-FA44-485d-BF87-F573C6975A4A} [C:\Program Files (x86)\Speed Analysis 2] (PUP.SpeedAnalysis)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{B2BC04DF-EFBD-409A-95CA-36874E5AB92A} [C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.2.0] (Toolbar.AVGSearch)
---\ Result of repair
~ Repair carried out successfully
~ Browser not found (Google Chrome)
~ Browser not found (Mozilla Firefox)
~ Browser not found (Opera Software)
~ Repair canceled by the user (Internet Explorer)
---\ Statistics
~ Items scanned : 76819
~ Items found : 0
~ Items repaired : 27
End of clean at 16:38:52
===================
ZHPCleaner-[R]-27022015-16_38_52.txt