cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPCleaner v2014.11.7.211 by Nicolas Coolman (07/11/2014)
~ Run by liz (Administrator) (07/11/2014 14:32:19)
~ WebSite : http://nicolascoolman.fr
~ Forum : http://forum.nicolascoolman.fr
~ State version : Version � jour
~ Type : R�parer
~ Report : C:\Users\liz\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\liz\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Windows 7, 64-bit Service Pack 1 (Build 7601)


---\\ Service. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ Navigateur internet. (32)
REMPLAC� Proxy: ProxyHttp1.1 ( 1 )
REMPLAC� PARAMS: ProxyServer [http://127.0.0.1:8080] ()
TROUV� FF: C:\Users\liz\AppData\Roaming\Mozilla\Firefox\Profiles\khlz095n.default\prefs.js
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.AL", 2);*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.aflt", "ast_ir_14_43_ie");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.appId", "{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - user_pref("extensions.astrmndasr.cd", "2XzuyEtN2Y1L1Qzu0EtDyCzyzyyD0Czy0AyC0FyE0C0D0FyBtN0D0Tzu0StCt[...] (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.cr", "1177906518");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.data.1475e97c0146bfb1c490339546d9e72ee", "1");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.data._dy", "20141026");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.data.a2._dy", "20141026");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.data.a2.aliveDate", "20141026");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.data.a2.instlDate", "20141026");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.data.cc", "ca");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.data.ccfc1eb13092ea34473c169417eefd00", "1");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.dfltLng", "");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.dfltSrch", true);*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.dnsErr", true);*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.excTlbr", false);*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.general.guid", "1879aa36-a9d1-4858-b480-14049d9b9724");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.hmpg", true);*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.id", "E06995C9A6F4CDF7");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.instlDay", "16368");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.instlRef", "142905_f");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.prdct", "astrmndasr");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.tlbrId", "");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.vrsn", "");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr.vrsni", "");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr_i.newTab", true);*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr_i.smplGrp", "none");*/ (PUP.Astromenda)
REMPLAC� FF: [khlz095n.default] - /*user_pref("extensions.astrmndasr_i.vrsnTs", "21:8:51");*/ (PUP.Astromenda)
REMPLAC� Chrome URL: "hxxp://astromenda.com/?f=7&a=ast_ir_14_43_ie&cd=2XzuyEtN2Y1L1Qzu0EtDyCzyzyyD0Czy0AyC0FyE0C0D0FyBtN0[...]


---\\ Fichier h�te. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ T�che planifi�e. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ Explorateur ( Dossiers, Fichiers ). (7)
DEPLAC�: C:\Program Files (x86)\LookSafe Utility (PUP.LookSafe)
DEPLAC�: C:\Users\liz\AppData\Roaming\P2P Rocket (PUP.RockTurner)
DEPLAC�: C:\Users\liz\AppData\Roaming\P2P Rocket\Collections (PUP.RockTurner)
DEPLAC�: C:\Users\liz\AppData\Roaming\P2P Rocket\Data (PUP.RockTurner)
DEPLAC�: C:\Users\liz\AppData\Roaming\P2P Rocket\Torrents (PUP.RockTurner)
DEPLAC�: C:\Users\liz\AppData\Local\P2P Rocket (PUP.RockTurner)
DEPLAC�: C:\Users\liz\AppData\Local\P2P Rocket\Incomplete (PUP.RockTurner)


---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (8)
SUPPRIM�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465} [ShopperReports.dll] (Adware.ShopperReports)
SUPPRIM�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754} [ShoppingReport.dll] (Adware.ShoppingReport)
SUPPRIM�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} [BabylonToolbar.dll] (PUP.Babylon)
SUPPRIM�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} [BabylonToolbar.dll] (PUP.Babylon)
SUPPRIM�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} [BabylonToolbarTlbr.dll] (PUP.Babylon)
SUPPRIM�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} [ShoppingReport.dll] (Adware.ShoppingReport)
SUPPRIM�: HKCR\TypeLib\{2696CE9F-423F-4901-A109-0C85E6430266} [P2PRocket Image Viewer Plugin Type Library] (PUP.RockTurner)
SUPPRIM�: HKCR\TypeLib\{4E7B260F-E3A4-42DD-89D8-E0372158626E} [P2PRocket Media Player 1.0 Type Library] (PUP.RockTurner)



---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Opera Software)
~ R�paration annul�e par l'utilisateur (Internet Explorer)


End of clean at 14:43:38

Publicité


Signaler le contenu de ce document

Publicité