~ ZHPCleaner v2014.9.7.115 by Nicolas Coolman (07/09/2014)
~ Run by martine (Administrator)  (08/09/2014 10:01:15)
~ WebSite : http://nicolascoolman.fr
~ Forum : http://forum.nicolascoolman.fr
~ State version : Version à jour
~ Report : C:\Users\martine\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\martine\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ Windows VISTA, 32-bit Service Pack 2 (Build 6002)


---\\ Restauration des paramètres proxy par défaut.
REMPLACÉ PARAMS: EnableHttp1_1  ( 1 )
REMPLACÉ PARAMS: ProxyHttp1.1  ( 1 )
REMPLACÉ PARAMS: ProxyOverride  ( <-loopback> )


---\\ Suppression des redirections des raccourcis de navigateurs (Infection par argument).
REMPLACÉ ARGS: C:\Users\martine\Desktop\Launch Internet Explorer Browser.lnk  (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLACÉ ARGS: C:\Users\martine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Internet Explorer.lnk  (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLACÉ ARGS: C:\Users\martine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk  (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLACÉ ARGS: C:\Users\martine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox (2).lnk  (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLACÉ ARGS: C:\Users\martine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk  (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLACÉ ARGS: C:\Users\Public\Desktop\Mozilla Firefox.lnk  (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLACÉ ARGS: C:\Users\martine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk  (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLACÉ ARGS: C:\Users\martine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk  (http://istart.webssearches.com/?type=sc&ts=1410120[...])


---\\ Réparation des pages de démarrage et de recherche de Microsoft Internet Explorer.
REMPLACÉ PARAMS: Default_Page_URL  ( http://istart.webssearches.com/?type=hp&ts=1410120195&from=adks&uid=395049983_1052450_902D2971 )
REMPLACÉ PARAMS: Default_Search_URL  ( http://istart.webssearches.com/web/?type=ds&ts=1410120195&from=adks&uid=395049983_1052450_902D2971&q={searchTerms} )
REMPLACÉ PARAMS: Search Page  ( http://istart.webssearches.com/web/?type=ds&ts=1410120195&from=adks&uid=395049983_1052450_902D2971&q={searchTerms} )
REMPLACÉ PARAMS: Default_Page_URL  ( http://istart.webssearches.com/?type=hp&ts=1410120195&from=adks&uid=395049983_1052450_902D2971 )
REMPLACÉ PARAMS: Default_Search_URL  ( http://istart.webssearches.com/web/?type=ds&ts=1410120195&from=adks&uid=395049983_1052450_902D2971&q={searchTerms} )
REMPLACÉ PARAMS: Start Page  ( http://istart.webssearches.com/?type=hp&ts=1410120195&from=adks&uid=395049983_1052450_902D2971 )
REMPLACÉ PARAMS: Search Page  ( http://istart.webssearches.com/web/?type=ds&ts=1410120195&from=adks&uid=395049983_1052450_902D2971&q={searchTerms} )


---\\ Réparation de la page de démarrage de Mozilla Firefox.
REMPLACÉ URL HomePage : http://google.fr 


---\\ Réparation du fichier hôte.
~ Le fichier hôte est légitime. (20)


---\\ Suppression des redirections de navigateurs (StartMenuInternet).
REMPLACÉ : HKLM\...\FIREFOX.EXE\Shell\open\Command\\"C:\Program Files\Mozilla Firefox\firefox.exe" http://istart.webssearches.com/?type=sc&ts=1410120195&from=adks&uid=395049983_1052450_902D2971 (Hijacker.Browsers)
REMPLACÉ : HKLM\...\Google Chrome.B3P54SFEPPIFFIZ2SV7T3ELQ7Q\Shell\open\Command\\"C:\Users\martine\AppData\Local\Google\Chrome\Application\chrome.exe" http://istart.webssearches.com/?type=sc&ts=1410120195&from=adks&uid=395049983_1052450_902D2971 (Hijacker.Browsers)


---\\ Suppression des spywares.
DEPLACÉ : C:\Program Files\Magentic --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (Toolbar.Magentic)
DEPLACÉ : C:\Program Files\SupTab --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (PUP.SupTab)
DEPLACÉ : C:\Users\martine\AppData\Roaming\RocketUpdater --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (PUP.RockTurner)
DEPLACÉ : C:\ProgramData\IePluginServices --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (PUP.IePluginService)
DEPLACÉ : C:\ProgramData\WindowsMangerProtect --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (PUP.Fuyu)
DEPLACÉ : C:\Users\martine\AppData\Local\Magentic --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (Toolbar.Magentic)
DEPLACÉ : C:\Users\martine\AppData\Local\SearchProtect --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (PUP.SearchProtect)



---\\ Bilan de la réparation
~ Réparation réalisée avec succès
~ Ce navigateur est absent  (Google Chrome)
~ Ce navigateur est absent  (Opera Software)


End of clean at 10:02:48
===================
ZHPCleaner-08092014-10_02_48.txt