~ ZHPCleaner v2020.4.22.193 by Nicolas Coolman (2020/04/22)
~ Run by Gianna Catalina (Administrator)  (26/04/2020 07:41:45)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Scan
~ Report : C:\Users\Gianna Catalina\Desktop\ZHPCleaner (S).txt
~ Quarantine : C:\Users\Gianna Catalina\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ System Restore Point : 
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit  (Build 10240)


---\\  Alternate Data Stream (ADS). (0)
~ No malicious or unnecessary items found.


---\\  Services (0)
~ No malicious or unnecessary items found.


---\\  Browser internet (0)
~ No malicious or unnecessary items found.


---\\  Hosts file (1)
~ The hosts file is legitimate (21)


---\\  Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.


---\\  Explorer ( File, Folder) (68)
FOUND file: C:\Windows\Prefetch\KMSPICO_SETUP.TMP-89044BB2.pf    =>HackTool.KMSpico
FOUND file: C:\Windows\Prefetch\KMSPICO_SETUP.TMP-F160FC7B.pf    =>HackTool.KMSpico
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\KMSELDI.exe [@ByELDI - KMS GUI ELDI]  =>HackTool.KMSpico
FOUND file: C:\Program Files\KMSpico\DevComponents.DotNetBar2.dll [DevComponents.com - DevComponents.DotNetBar]  =>HackTool.KMSpico
FOUND file: C:\Program Files\KMSpico\unins000.dat    =>HackTool.KMSpico
FOUND file: C:\Program Files\KMSpico\unins000.exe [ - Setup/Uninstall]  =>HackTool.KMSpico
FOUND file: C:\Program Files\KMSpico\Vestris.ResourceLib.dll [Vestris Inc. - ResourceLib]  =>HackTool.KMSpico
FOUND folder: C:\Program Files\KMSpico\cert  =>HackTool.KMSpico
FOUND folder: C:\Program Files\KMSpico\driver  =>HackTool.KMSpico
FOUND folder: C:\Program Files\KMSpico\icons  =>HackTool.KMSpico
FOUND folder: C:\Program Files\KMSpico\logs  =>HackTool.KMSpico
FOUND folder: C:\Program Files\KMSpico\scripts  =>HackTool.KMSpico
FOUND folder: C:\Program Files\KMSpico\sounds  =>HackTool.KMSpico
FOUND folder: C:\Program Files\KMSpico\TokensBackup  =>HackTool.KMSpico
FOUND folder: C:\Program Files\KMSpico\x64  =>HackTool.KMSpico
FOUND folder: C:\Program Files\KMSpico\x86  =>HackTool.KMSpico
FOUND folder: C:\Program Files\KMSpico  =>HackTool.KMSpico
FOUND folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico  =>HackTool.KMSpico
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\0Select.cmd    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\2semiauto.cmd    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\3Manual.cmd    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\disco.vmdk    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\fmod.dll [Firelight Technologies Pty, Ltd - FMOD]  =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\IPAddressControlLib.dll [ - IPAddressControlLib]  =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\jpeg62.dll [Independent JPEG Group <www.ijg.org> - Jpeg: library and tools for JPEG images]  =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\KMSELDI.exe [@ByELDI - KMS GUI ELDI]  =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\libcurl-4.dll    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\libgcc_s_dw2-1.dll    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\libpng12.dll [LibPng - LibPng: PNG image compression library]  =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\libpng14-14.dll    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\libssp-0.dll    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\mgwz.dll    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\mingwm10.dll    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\PortQry.exe    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\Qemu.cmd    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\SDL.dll [ - SDL]  =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\stderr.txt    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\stdout.txt    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\timesync.exe [Horst Schaeffer - Time Sync (NIST Servers)]  =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\timesync.ini    =>HackTool.AutoKMS
FOUND file: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\zlib1.dll [(C) 1995-2006 Jean-loup Gailly & Mark Adler - zlib data compression library]  =>HackTool.AutoKMS
FOUND folder: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano\Bios  =>HackTool.AutoKMS
FOUND folder: C:\Users\Gianna Catalina\AppData\Local\Temp\KMSnano  =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\0Select.cmd    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\2semiauto.cmd    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\3Manual.cmd    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\disco.vmdk    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\fmod.dll [Firelight Technologies Pty, Ltd - FMOD]  =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\IPAddressControlLib.dll [ - IPAddressControlLib]  =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\jpeg62.dll [Independent JPEG Group <www.ijg.org> - Jpeg: library and tools for JPEG images]  =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\KMSELDI.exe [@ByELDI - KMS GUI ELDI]  =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\libcurl-4.dll    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\libgcc_s_dw2-1.dll    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\libpng12.dll [LibPng - LibPng: PNG image compression library]  =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\libpng14-14.dll    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\libssp-0.dll    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\mgwz.dll    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\mingwm10.dll    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\PortQry.exe    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\Qemu.cmd    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\SDL.dll [ - SDL]  =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\stderr.txt    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\stdout.txt    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\timesync.exe [Horst Schaeffer - Time Sync (NIST Servers)]  =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\timesync.ini    =>HackTool.AutoKMS
FOUND file: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\zlib1.dll [(C) 1995-2006 Jean-loup Gailly & Mark Adler - zlib data compression library]  =>HackTool.AutoKMS
FOUND folder: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano\Bios  =>HackTool.AutoKMS
FOUND folder: C:\Documents and Settings\Gianna Catalina\Local Settings\Application Data\Temp\KMSnano  =>HackTool.AutoKMS


---\\  Registry ( Key, Value, Data) (0)
~ No malicious or unnecessary items found.


---\\  Summary of the elements found (2)
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/  =>HackTool.KMSpico
https://nicolascoolman.eu/2017/02/02/hacktool-autokms/  =>HackTool.AutoKMS


---\\ Result of repair
~ Any repair made
~ Google Chrome OK
~ Internet Explorer OK


---\\ Statistics
~ Items scanned : 88937
~ Items found : 93
~ Items cancelled : 0
~ Space saving (bytes) : 0
~ Items options : 8/15


---\\ OPTIONS NOT ACTIVES
~ Temporary file analysis
~ Temporary folder analysis
~ Empty Folder CLSID Analysis
~ Empty Other Folder Analysis
~ Empty LocalLow Folder Analysis
~ Empty Local Folder Analysis
~ Obsolete Installer File Analysis





~ End of search in 00h07mn04s

---\\  Reports (0)
ZHPCleaner-[S]-26042020-07_48_49.txt