~ ZHPCleaner v2014.11.28.239 by Nicolas Coolman (28/11/2014)
~ Run by martine salmon (Administrator) (28/11/2014 15:17:45)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : R�parer
~ Report : C:\Documents and Settings\martine salmon\Bureau\ZHPCleaner.txt
~ Quarantine : C:\Documents and Settings\martine salmon\Application Data\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Windows XP, 32-bit Service Pack 3 (Build 2600)


---\\ Service. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ Navigateur internet. (45)
REMPLAC� Proxy: ProxyOverride ( )
REMPLAC� IE Params: Tabs ( about:newtab )
REMPLAC� IE Params: Search Bar ( hxxps://fr.yahoo.com/?fr=hp-avast&type=avastbcl )
TROUV� FF: C:\Documents and Settings\martine salmon\Application Data\Mozilla\Firefox\Profiles\uvaj2kyb.default\prefs.js
REMPLAC� FF: [uvaj2kyb.default] - user_pref("browser.search.order.1", "Recherche s�curis�e"); (PUP.Babylon)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.irmysearch.aflt", "dsites0301"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1QzutDtDtCtAtBtD0DyDzyyDzz0F0E0EtBtCtN0D0Tzu0SyBz[...] (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.irmysearch.cr", "518430286"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.irmysearch.instlRef", ""); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.AL", 2); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.aflt", "dsites0301"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutDtDtCtAtBtD0DyDzyyDzz0F0E0EtBtCtN0D0Tzu0Sy[...] (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.cntry", "FR"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.cr", "518430286"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.dfltLng", ""); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.dfltSrch", true); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.dnsErr", true); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,6[...] (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.dpk_blck", "true"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.dspFFXOld", "Orange"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.excTlbr", false); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.hdrMd5", "5FE06A7C6F96B178D69D9E658FE6B3F7"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.hmpg", true); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&a=dsites0301&cd=2Xz[...] (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.hpFFXOld", "http://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultPa[...] (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.id", "001320D5958FEE21"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.instlDay", "16130"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.instlRef", ""); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.lastB", "http://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultPage_[...] (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.lastVrsnTs", "1.8.21.08:54:1"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearchdial.com/?f=2&a=dsites0301&cd=2[...] (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.prdct", "mysearchdial"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.sg", "none"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.tlbrId", "base"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearchdial.com/?f=3&a=dsites0301&cd[...] (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.vrsn", "1.8.21.0"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial.vrsni", "1.8.21.0"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial_i.hmpg", true); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial_i.newTab", false); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial_i.smplGrp", "none"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.08:54:1"); (Adware.MyWebSearch)
REMPLAC� FF: [uvaj2kyb.default] - user_pref("extensions.wrc@avast.com.install-event-fired", true); (Toolbar.Ask)


---\\ Fichier h�te. (1)
~ Le fichier h�te est l�gitime. (20)


---\\ T�che planifi�e. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ Explorateur ( Dossiers, Fichiers ). (19)
DEPLAC�: C:\Documents and Settings\martine salmon\Application Data\Mozilla\Firefox\Profiles\uvaj2kyb.default\searchplugins\Mysearchdial.xml [] (Adware.MyWebSearch)
DEPLAC�: C:\Program Files\AskPartnerNetwork (Toolbar.Ask)
DEPLAC�: C:\Program Files\AskPartnerNetwork\Toolbar [ - ] (Toolbar.Ask)
DEPLAC�: C:\Program Files\MyPC Backup (PUP.MyPCBackup)
DEPLAC�: C:\Program Files\MyPC Backup\Database [ - ] (PUP.MyPCBackup)
DEPLAC�: C:\Program Files\MyPC Backup\DEL_AWSSDK.dll [ - ] (PUP.MyPCBackup)
DEPLAC�: C:\Program Files\MyPC Backup\DEL_GetText.dll [ - ] (PUP.MyPCBackup)
DEPLAC�: C:\Program Files\MyPC Backup\DEL_MPCBClient.dll [ - ] (PUP.MyPCBackup)
DEPLAC�: C:\Program Files\MyPC Backup\DEL_MyPC Backup.exe [ - ] (PUP.MyPCBackup)
DEPLAC�: C:\Program Files\MyPC Backup\DEL_ObjectListView.dll [ - ] (PUP.MyPCBackup)
DEPLAC�: C:\Program Files\MyPC Backup\DEL_Shared Stack.dll [ - ] (PUP.MyPCBackup)
DEPLAC�: C:\Program Files\MyPC Backup\x86 [ - ] (PUP.MyPCBackup)
DEPLAC�: C:\Program Files\PC Speed Maximizer (Rogue.PCSpeedMaximizer)
DEPLAC�: C:\Documents and Settings\All Users\Application Data\APN (Toolbar.Ask)
DEPLAC�: C:\Documents and Settings\All Users\Application Data\APN\APN-Stub [ - ] (Toolbar.Ask)
DEPLAC�: C:\Documents and Settings\martine salmon\Application Data\DigitalSites (Hijacker.DSite)
DEPLAC�: C:\Documents and Settings\martine salmon\Mes documents\PC Speed Maximizer (Rogue.PCSpeedMaximizer)
DEPLAC�: C:\Documents and Settings\martine salmon\Mes documents\PC Speed Maximizer\CookiesException.txt [ - ] (Rogue.PCSpeedMaximizer)
DEPLAC�: C:\WINDOWS\System32\SkinBoxer43.dll[SmartBrain Software] (PUP.InboxEmail)


---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (7)
SUPPRIM�: HKCR\CLSID\{2a6eb050-7f1c-11ce-be57-00aa0051fe20} [French_French Stemmer Resources] (Toolbar.Conduit)
SUPPRIM�: HKCR\CLSID\{59e09848-8099-101b-8df3-00000b65c3b5} [French_French Word Breaker Resources] (Toolbar.Conduit)
SUPPRIM�: HKCU\Software\DSiteproducts (Hijacker.DSite)
SUPPRIM�: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\FindRight (PUP.FindRight)
SUPPRIM�: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup (PUP.MyPCBackup)
SUPPRIM�: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\mysearchdial (Adware.MyWebSearch)
SUPPRIM�: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PC Speed Maximizer_is1 (Rogue.PCSpeedMaximizer)



---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Opera Software)
~ R�paration annul�e par l'utilisateur (Mozilla Firefox)
~ R�paration annul�e par l'utilisateur (Internet Explorer)


End of clean at 15:30:12