Rapport de ZHPFix 2013.9.15.7 par Nicolas Coolman, Update du 15/09/2013 Fichier d'export Registre : Run by Chantal at 21/09/2013 16:25:45 High Elevated Privileges : OK Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Corbeille vidée ========== Logiciels ========== SUPPRIMÉ: Software Updater ========== Processus mémoire ========== SUPPRIMÉ: Memory Process: C:\Windows\Installer\{774C0434-9948-4DEE-A14E-69CDD316E36C}\ARPPRODUCTICON.exe SUPPRIMÉ: Memory Process: C:\Users\Chantal\AppData\Local\Temp\Quarantine.exe ========== Clés du Registre ========== SUPPRIMÉ:* CLSID BHO: {9fdfb66c-713b-4201-83a6-5b78ae227b41} SUPPRIMÉ:* HKCU\Software\EPSON Software Updater SUPPRIMÉ: [HKLM\Software\Classes\Installer\Products\\4340C4778499EED41AE496DC3D613EC6] SUPPRIMÉ: [HKLM\Software\Classes\Installer\Features\4340C4778499EED41AE496DC3D613EC6] SUPPRIMÉ:* HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7 SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267 SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058 SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401 SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6 SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81 SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635 SUPPRIMÉ:* HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4340C4778499EED41AE496DC3D613EC6 SUPPRIMÉ:* HKLM\Software\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C} SUPPRIMÉ:* HKLM\Software\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A} SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0 SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420 SUPPRIMÉ:* HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011441179} SUPPRIMÉ:* HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011441179} SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4 SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2 SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789 SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399 SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156 SUPPRIMÉ: [HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}] SUPPRIMÉ:* HKCU\Software\AppDataLow\Software\Yahoo SUPPRIMÉ:* HKCU\Software\yahooinstall SUPPRIMÉ:* HKLM\Software\ASK SUPPRIMÉ:* HKLM\Software\Wow6432Node\Yahoo SUPPRIMÉ:* HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375 SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5 ========== Valeurs du Registre ========== SUPPRIMÉ: {82AA26B7-DDAC-4D3F-9364-CB3D10AE6217} SUPPRIMÉ: {08CEA3F4-5501-44E7-BD75-962F5585B265} SUPPRIMÉ: {D2125BD2-0AFE-43F7-91CC-9D1484BEE8C2} SUPPRIMÉ: {153A82B8-268B-491C-B485-12AA8F41AECB} SUPPRIMÉ: {65386937-48DC-412A-BEA2-D4C297928A9A} SUPPRIMÉ: {2BEDCE51-5C72-4A61-A453-F67D8D3ED8D6} SUPPRIMÉ: Toolbar: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} SUPPRIMÉ RunValue: HP Software Update SUPPRIMÉ: {834C2B1D-8E76-40BC-9347-39810615749F} ========== Eléments de donnée du Registre ========== SUPPRIMÉ: R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride ========== Dossiers ========== SUPPRIMÉ: C:\Program Files (x86)\Yahoo! SUPPRIMÉ: C:\Users\Chantal\AppData\Roaming\Yahoo! ========== Fichiers ========== SUPPRIMÉ: c:\windows\installer\{774c0434-9948-4dee-a14e-69cdd316e36c}\arpproducticon.exe SUPPRIMÉ: c:\windows\launcher.exe SUPPRIMÉ: c:\diskdefrag.log SUPPRIMÉ: c:\windows\prefetch\ntosboot-b00dfaad.pf SUPPRIMÉ: c:\windows\prefetch\soffice.bin-7f88d3be.pf SUPPRIMÉ: c:\windows\prefetch\flashplayerplugin_11_8_800_16-4c6f12c5.pf SUPPRIMÉ: c:\windows\prefetch\avast.setup-b1d66586.pf SUPPRIMÉ: c:\windows\prefetch\aggluad_s-1-5-21-3319042926-2513336005-101065848-1003.db SUPPRIMÉ: c:\windows\prefetch\aggluad_p_s-1-5-21-3319042926-2513336005-101065848-1003.db SUPPRIMÉ: c:\users\chantal\appdata\local\temp\{002b9f6c-2bda-44bf-a4cc-3e8170de1b5f}\isbew64.exe SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\0687788962.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\0851456951.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\1051046345.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\2259730739.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\2506597183.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\2546016050.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\2674799383.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\2876791823.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\2997775547.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\3588963087.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\3822196163.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\3971180670.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\4743315300.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\5306769314.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\6016641612.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\6054203549.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\6608440825.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\6999877774.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\7296335996.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\7304451296.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\7395084659.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\8726326013.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\8743133148.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\9187137542.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\9804333298.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\3765686703.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\5034147137.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\5365124872.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\6609030367.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\7982939822.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\8529450388.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\9505962979.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\9866984745.quar SUPPRIMÉ: c:\users\chantal\appdata\roaming\malwarebytes\malwarebytes' anti-malware\quarantine\9972963633.quar SUPPRIMÉ: c:\users\chantal\appdata\local\temp\mcconfignsis\update.xml SUPPRIMÉ: c:\users\chantal\appdata\local\temp\mcconfignsis\mcsetup.exe SUPPRIMÉ: c:\users\chantal\appdata\local\diagnostics\733862231\2013091721.000\results.xsl SUPPRIMÉ: c:\users\chantal\appdata\local\diagnostics\733862231\2013091721.000\pcw.0.debugreport.xml SUPPRIMÉ: c:\users\chantal\appdata\local\diagnostics\733862231\2013091721.000\resultreport.xml SUPPRIMÉ: c:\users\chantal\appdata\local\diagnostics\733862231\2013091721.000\results.xml SUPPRIMÉ: c:\users\chantal\appdata\local\diagnostics\733862231\latest.cab SUPPRIMÉ: c:\users\chantal\appdata\local\temp\etilqs_cyedsaqm0qj5wfe SUPPRIMÉ: c:\users\chantal\appdata\local\temp\etilqs_h4n6arkyeahcvxn SUPPRIMÉ: c:\users\chantal\appdata\local\temp\~upgrade.dat SUPPRIMÉ: c:\users\chantal\appdata\local\temp\~gu3-ver.dat SUPPRIMÉ: c:\users\chantal\appdata\local\temp\aucheck_core.txt SUPPRIMÉ: c:\users\chantal\appdata\local\temp\aucheck_parser.txt SUPPRIMÉ: c:\users\chantal\appdata\local\temp\crx_75daf8cb7768\crl-set SUPPRIMÉ: c:\users\chantal\appdata\local\temp\crx_75daf8cb7768\manifest.fingerprint SUPPRIMÉ: c:\users\chantal\appdata\local\temp\crx_75daf8cb7768\manifest.json SUPPRIMÉ: c:\users\chantal\appdata\local\temp\redboxlog.txt SUPPRIMÉ: c:\users\chantal\appdata\local\temp\quarantine.exe ========== Récapitulatif ========== 2 : Processus mémoire 84 : Clés du Registre 9 : Valeurs du Registre 1 : Eléments de donnée du Registre 2 : Dossiers 62 : Fichiers 1 : Logiciels End of clean in 01mn 08s ========== Chemin de fichier rapport ========== C:\ZHP\ZHPFix[R1].txt - 21/09/2013 16:25:48 [15443]