~ ZHPCleaner v2014.9.7.115 by Nicolas Coolman (07/09/2014)
~ Run by martine (Administrator) (08/09/2014 10:01:15)
~ WebSite : http://nicolascoolman.fr
~ Forum : http://forum.nicolascoolman.fr
~ State version : Version � jour
~ Report : C:\Users\martine\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\martine\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ Windows VISTA, 32-bit Service Pack 2 (Build 6002)


---\\ Restauration des param�tres proxy par d�faut.
REMPLAC� PARAMS: EnableHttp1_1 ( 1 )
REMPLAC� PARAMS: ProxyHttp1.1 ( 1 )
REMPLAC� PARAMS: ProxyOverride ( <-loopback> )


---\\ Suppression des redirections des raccourcis de navigateurs (Infection par argument).
REMPLAC� ARGS: C:\Users\martine\Desktop\Launch Internet Explorer Browser.lnk (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLAC� ARGS: C:\Users\martine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Internet Explorer.lnk (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLAC� ARGS: C:\Users\martine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLAC� ARGS: C:\Users\martine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox (2).lnk (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLAC� ARGS: C:\Users\martine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLAC� ARGS: C:\Users\Public\Desktop\Mozilla Firefox.lnk (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLAC� ARGS: C:\Users\martine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk (http://istart.webssearches.com/?type=sc&ts=1410120[...])
REMPLAC� ARGS: C:\Users\martine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk (http://istart.webssearches.com/?type=sc&ts=1410120[...])


---\\ R�paration des pages de d�marrage et de recherche de Microsoft Internet Explorer.
REMPLAC� PARAMS: Default_Page_URL ( http://istart.webssearches.com/?type=hp&ts=1410120195&from=adks&uid=395049983_1052450_902D2971 )
REMPLAC� PARAMS: Default_Search_URL ( http://istart.webssearches.com/web/?type=ds&ts=1410120195&from=adks&uid=395049983_1052450_902D2971&q={searchTerms} )
REMPLAC� PARAMS: Search Page ( http://istart.webssearches.com/web/?type=ds&ts=1410120195&from=adks&uid=395049983_1052450_902D2971&q={searchTerms} )
REMPLAC� PARAMS: Default_Page_URL ( http://istart.webssearches.com/?type=hp&ts=1410120195&from=adks&uid=395049983_1052450_902D2971 )
REMPLAC� PARAMS: Default_Search_URL ( http://istart.webssearches.com/web/?type=ds&ts=1410120195&from=adks&uid=395049983_1052450_902D2971&q={searchTerms} )
REMPLAC� PARAMS: Start Page ( http://istart.webssearches.com/?type=hp&ts=1410120195&from=adks&uid=395049983_1052450_902D2971 )
REMPLAC� PARAMS: Search Page ( http://istart.webssearches.com/web/?type=ds&ts=1410120195&from=adks&uid=395049983_1052450_902D2971&q={searchTerms} )


---\\ R�paration de la page de d�marrage de Mozilla Firefox.
REMPLAC� URL HomePage : http://google.fr


---\\ R�paration du fichier h�te.
~ Le fichier h�te est l�gitime. (20)


---\\ Suppression des redirections de navigateurs (StartMenuInternet).
REMPLAC� : HKLM\...\FIREFOX.EXE\Shell\open\Command\\"C:\Program Files\Mozilla Firefox\firefox.exe" http://istart.webssearches.com/?type=sc&ts=1410120195&from=adks&uid=395049983_1052450_902D2971 (Hijacker.Browsers)
REMPLAC� : HKLM\...\Google Chrome.B3P54SFEPPIFFIZ2SV7T3ELQ7Q\Shell\open\Command\\"C:\Users\martine\AppData\Local\Google\Chrome\Application\chrome.exe" http://istart.webssearches.com/?type=sc&ts=1410120195&from=adks&uid=395049983_1052450_902D2971 (Hijacker.Browsers)


---\\ Suppression des spywares.
DEPLAC� : C:\Program Files\Magentic --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (Toolbar.Magentic)
DEPLAC� : C:\Program Files\SupTab --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (PUP.SupTab)
DEPLAC� : C:\Users\martine\AppData\Roaming\RocketUpdater --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (PUP.RockTurner)
DEPLAC� : C:\ProgramData\IePluginServices --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (PUP.IePluginService)
DEPLAC� : C:\ProgramData\WindowsMangerProtect --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (PUP.Fuyu)
DEPLAC� : C:\Users\martine\AppData\Local\Magentic --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (Toolbar.Magentic)
DEPLAC� : C:\Users\martine\AppData\Local\SearchProtect --> C:\Users\martine\AppData\Roaming\ZHP\Quarantine (PUP.SearchProtect)



---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s
~ Ce navigateur est absent (Google Chrome)
~ Ce navigateur est absent (Opera Software)


End of clean at 10:02:48
===================
ZHPCleaner-08092014-10_02_48.txt