Tá aqui
~ ZHPCleaner v2015.9.19.352 by Nicolas Coolman (2015/09/19)
~ Run by Larissa (Administrator) (19/09/2015 16:42:38)
~ Site : http://www.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Reparo
~ Report : H:\Users\Antonio\Desktop\ZHPCleaner.txt
~ Quarantine : H:\Users\Antonio\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 10240)
---\ Serviços (0)
~ Nenhum ítem malicioso o desnecessários foi encontrado.
---\ Navegadores de Internet (0)
---\ Arquivo hosts (2)
SUBSTITUIDO:
Número de redirecionamentos encontrados 1/20
---\ Tarefas automáticas agendadas. (0)
~ Nenhum ítem malicioso o desnecessários foi encontrado.
---\ Explorer ( Arquivos, Pastas) (17)
MOVIDO pasta: H:\Users\Antonio\AppData\Roaming\5.exe =>PUP.Optional.Pirrit
MOVIDO pasta: H:\Users\Antonio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_cdncache-a.akamaihd.net_0.localstorage =>PUP.Optional.AkamaiHD
MOVIDO pasta: H:\Users\Antonio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_cdncache-a.akamaihd.net_0.localstorage-journal =>PUP.Optional.AkamaiHD
MOVIDO pasta: H:\Users\Antonio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage =>PUP.Optional.BestPriceNinja
MOVIDO pasta: H:\Users\Antonio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage-journal =>PUP.Optional.BestPriceNinja
MOVIDO pasta: H:\Users\Antonio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_br.similarsites.com_0.localstorage =>PUP.Optional.SimilarSites
MOVIDO pasta: H:\Users\Antonio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_br.similarsites.com_0.localstorage-journal =>PUP.Optional.SimilarSites
MOVIDO pasta: H:\Users\Antonio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.bestpriceninja.com_0.localstorage =>PUP.Optional.BestPriceNinja
MOVIDO pasta: H:\Users\Antonio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.bestpriceninja.com_0.localstorage-journal =>PUP.Optional.BestPriceNinja
MOVIDO pasta: H:\Users\Antonio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.v9.com_0.localstorage =>PUP.Optional.V9Software
MOVIDO pasta: H:\Users\Antonio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.v9.com_0.localstorage-journal =>PUP.Optional.V9Software
MOVIDO pasta: H:\Windows\SECOH-QAD.exe =>HackTool.KMSpico
MOVIDO arquivo: H:\Users\Antonio\AppData\Roaming\Opera Software\Opera Stable\Extensions\fijhlnmmmgflacagjecncpmpnhjieggk =>PUP.Optional.CrossRider
MOVIDO arquivo: H:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS
MOVIDO arquivo: H:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
MOVIDO arquivo: H:\WINDOWS\AutoKMS =>HackTool.AutoKMS
MOVIDO arquivo: H:\Users\Antonio\Music\BearShare =>PUP.Optional.BearShare
---\ Registro ( Chaves, Valores, Dados ) (28)
SUPRIMIDO chave*: HKCU\Software\I - Cinema-nv [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: HKCU\Software\CinemaPlus-3.2cV05.09-nv-ie [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: HKCU\Software\CinemaPlus_1.3dV28.08-nv-ie [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: HKCU\Software\GoHD-nv-ie [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: HKCU\Software\I - Cinema-nv-ie [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\I - Cinema-nv [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\GoHD-nv [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\I - Cinema-nv [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\GoHD-nv-ie [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\I - Cinema-nv-ie [] =>PUP.Optional.CrossRider
SUPRIMIDO chave: HKEY_USERS\S-1-5-21-3881480461-1328551782-2652260182-1001\Software\CinemaPlus-3.2cV05.09-nv-ie [] =>PUP.Optional.CrossRider
SUPRIMIDO chave: HKEY_USERS\S-1-5-21-3881480461-1328551782-2652260182-1001\Software\GoHD-nv-ie [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: HKEY_USERS\S-1-5-21-3881480461-1328551782-2652260182-1001\Software\I - Cinema [] =>PUP.Optional.CrossRider
SUPRIMIDO chave: HKEY_USERS\S-1-5-21-3881480461-1328551782-2652260182-1001\Software\I - Cinema-nv [] =>PUP.Optional.CrossRider
SUPRIMIDO chave: HKEY_USERS\S-1-5-21-3881480461-1328551782-2652260182-1001\Software\I - Cinema-nv-ie [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: HKEY_USERS\S-1-5-21-3881480461-1328551782-2652260182-1001\Software\Classes\BoBrowser.3L77NGVBGDB3C3DIF3737IEHXU [] =>PUP.Optional.BoBrowser
SUPRIMIDO chave*: HKEY_USERS\S-1-5-21-3881480461-1328551782-2652260182-1001\Software\Classes\BoBrowsHTML.3L77NGVBGDB3C3DIF3737IEHXU [BoBrowser HTML Document] =>PUP.Optional.BoBrowser
SUPRIMIDO chave: HKCU\Software\I - Cinema [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: [X64] HKLM\Software\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E [globalupdate Helper] =>PUP.Optional.GlobalUpdate
SUPRIMIDO chave*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WdsManPro [] =>PUP.Optional.WdsManPro
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\GoHD-nv-edge [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\I - Cinema [] =>PUP.Optional.CrossRider
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\WdsManPro [] =>PUP.Optional.WdsManPro
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\WordSurfer_1.10.0.19 [] =>PUP.Optional.WordSurfer
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [globalupdate Inc.] =>PUP.Optional.GlobalUpdate
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WordSurferAutoUpdateClient_RASAPI32 [] =>PUP.Optional.WordSurfer
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WordSurferAutoUpdateClient_RASMANCS [] =>PUP.Optional.WordSurfer
SUPRIMIDO valor: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleChromeAutoLaunch_CAB83D23BEA78C213B3D417EA5E03903 ["H:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window] =>PUP.Optional.CrossBrowse
---\ Resultado de reparação
Reparação efectuada com sucesso
~ Este navegador está faltando ! (Mozilla Firefox)
~ O sistema foi reiniciado.
---\ Estatísticas
~ Items scan : 814
~ Items encontrado : 1
~ items cancelados : 2
~ Items réparo : 45
~ End of clean in 0 minutes
===================
ZHPCleaner-[R]-19092015-16_43_25.txt
ZHPCleaner-[S]-19092015-16_39_57.txt