cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPCleaner v2015.3.31.148 by Nicolas Coolman (31/03/2015)
~ Run by PC (Administrator) (31/03/2015 16:03:29)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : R�parer
~ Report : C:\Users\PC\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\PC\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
~ Windows 7, 64-bit Service Pack 1 (Build 7601)


---\\ Service. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ Navigateur internet. (14)
REMPLAC� IE Params: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL [hxxp://www.mystartsearch.com/?type=hp&ts=1424958173&from=wpc&uid=WDCXWD6400BEVT-[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL [hxxp://www.mystartsearch.com/web/?type=ds&ts=1424958173&from=wpc&uid=WDCXWD6400B[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Page [hxxp://www.mystartsearch.com/web/?type=ds&ts=1424958173&from=wpc&uid=WDCXWD6400B[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant [hxxp://www.mystartsearch.com/web/?type=ds&ts=1424958173&from=wpc&uid=WDCXWD6400B[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\CustomizeSearch [hxxp://www.mystartsearch.com/web/?type=ds&ts=1424958173&from=wpc&uid=WDCXWD6400B[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Default_Page_URL [hxxp://www.mystartsearch.com/?type=hp&ts=1424958173&from=wpc&uid=WDCXWD6400BEVT-[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant [hxxp://www.mystartsearch.com/web/?type=ds&ts=1424958173&from=wpc&uid=WDCXWD6400B[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\Search\\CustomizeSearch [hxxp://www.mystartsearch.com/web/?type=ds&ts=1424958173&from=wpc&uid=WDCXWD6400B[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\\Default_Page_URL [hxxp://www.mystartsearch.com/?type=hp&ts=1424958173&from=wpc&uid=WDCXWD6400BEVT-[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search\\SearchAssistant [hxxp://www.mystartsearch.com/web/?type=ds&ts=1424958173&from=wpc&uid=WDCXWD6400B[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search\\CustomizeSearch [hxxp://www.mystartsearch.com/web/?type=ds&ts=1424958173&from=wpc&uid=WDCXWD6400B[...]] (PUP.StartSearch)
DEPLAC� fichier: C:\Users\PC\Desktop\MyPC Backup.lnk [Bad : C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Users\PC\Desktop\Sync Folder.lnk [Bad : C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk [Bad : C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe] (PUP.MyPCBackup)


---\\ Fichier h�te. (1)
~ Le fichier h�te est l�gitime. (21)


---\\ T�che planifi�e. (1)
SUPPRIM� t�che: [LaunchSignup] [C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe] (PUP.MyPCBackup)


---\\ Explorateur ( Dossiers, Fichiers ). (83)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\BackupStack.exe [Just Develop It - Backup Stack] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe [MyPC Backup - Signup Wizard] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\AliLSavuer\AliLSavuer.dat (PUP.AllSaver)
DEPLAC� fichier: C:\Program Files (x86)\AlLCheapPPrice\4UEVVUbuHnaJjk.dat (PUP.AllCheapPrice)
DEPLAC� fichier: C:\Program Files (x86)\AlLCheapPPrice\4UEVVUbuHnaJjk.tlb (PUP.AllCheapPrice)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\aff.conf (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\AlphaFS.dll (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\AlphaVSS.51.x86.dll [Alphaleonis - Alphaleonis Windows Volume Shadow Copy Service .NET Library] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\AlphaVSS.52.x64.dll [Alphaleonis - Alphaleonis Windows Volume Shadow Copy Service .NET Library] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\AlphaVSS.52.x86.dll [Alphaleonis - Alphaleonis Windows Volume Shadow Copy Service .NET Library] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\AlphaVSS.60.x64.dll [Alphaleonis - Alphaleonis Windows Volume Shadow Copy Service .NET Library] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\AlphaVSS.60.x86.dll [Alphaleonis - Alphaleonis Windows Volume Shadow Copy Service .NET Library] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\AlphaVSS.Common.dll (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\BackupStackUI.dll [JDIBackup - BackupStack] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\BplusDotNet.dll (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\Configuration Updater.exe [Copyright � Configuration Updater 2013 - Configuration Updater] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\de_DE.mo (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\es_ES.mo (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\fr_FR.mo (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\GetText.dll [Copyright � 2013 - GetText] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\InstMgr.dll [Microsoft - InstMgr] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\Ionic.Zip.dll [Dino Chiesa - Ionic's Zip Library] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\it_IT.mo (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\LogicNP.EZShellExtensions.dll (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\Microsoft.Win32.TaskScheduler.dll [CodePlex Community - Task Scheduler Wrapper] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\MPCBClient.dll [Microsoft - MPCBClient] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\MPCBContextMenu.dll [Microsoft - ContextMenu_mpcb] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe [MyPCBackup.com - MyPC Backup] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\mypcbackup.ico (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\NativeHashWrapper.dll [john.haines - NativeHashWrapper] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\Newtonsoft.Json.dll [Newtonsoft - Json.NET .NET 4.0] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\ObjectListView.dll [Bright Ideas Software - ObjectListView] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\PipeDiff.dll [HexaD - Duplicati.SharpRSync] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\pt_PT.mo (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\RegisterExtensionDotNet20_x64.exe (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\RegisterExtensionDotNet20_x86.exe (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\RegisterExtensionDotNet40_x64.exe (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\RegisterExtensionDotNet40_x86.exe (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\Service Start.exe [MyPCBackup.com - MyPC Backup Service] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\Shared Stack.dll [mypcbackup.com - Shared Stack] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\SignupWizard.dll [Microsoft - Signup Wizard] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\syncicon.ico (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\System.Data.SQLite.DLL [http://system.data.sqlite.org/ - System.Data.SQLite Core] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\uninst.exe (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\UnRegisterExtensions.exe [mypcbackup.com - UnRegisterExtensions] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\Updater.exe [Microsoft - Updater_mpcb] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\Updater_.dll [My PC Backup - My PC Backup Software Update] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\MyPC Backup\websocket-sharp.dll [sta.blockhead - websocket-sharp] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Program Files (x86)\NetoCaoupon\Ty1jTaG25rBAsA.dat (PUP.NetCoupon)
DEPLAC� fichier: C:\Program Files (x86)\NetoCaoupon\Ty1jTaG25rBAsA.tlb (PUP.NetCoupon)
DEPLAC� fichier: C:\Program Files (x86)\UniDeals\mKkNPLifurSGNY.dat (PUP.UniDeals)
DEPLAC� fichier: C:\Program Files (x86)\UniDeals\mKkNPLifurSGNY.tlb (PUP.UniDeals)
DEPLAC� fichier: C:\Program Files (x86)\UniDealsa\EJer3mxc83lmoQ.dat (PUP.UniDeals)
DEPLAC� fichier: C:\Program Files (x86)\UniDealsa\EJer3mxc83lmoQ.tlb (PUP.UniDeals)
DEPLAC� fichier: C:\Program Files (x86)\UniDuealsoe\UniDuealsoe.dat (PUP.UniDeals)
DEPLAC� fichier: C:\Program Files (x86)\youtubeadblocker\JzvdtosFMDTvT8.dat (PUP.YouTubeAdBlock)
DEPLAC� fichier: C:\Program Files (x86)\youtubeadblocker\JzvdtosFMDTvT8.tlb (PUP.YouTubeAdBlock)
DEPLAC� dossier: C:\Program Files (x86)\MyPC Backup\Config (PUP.MyPCBackup)
DEPLAC� dossier: C:\Program Files (x86)\MyPC Backup\Database (PUP.MyPCBackup)
DEPLAC� dossier: C:\Program Files (x86)\MyPC Backup\log (PUP.MyPCBackup)
DEPLAC� dossier: C:\Program Files (x86)\MyPC Backup\Resources (PUP.MyPCBackup)
DEPLAC� dossier: C:\Program Files (x86)\MyPC Backup\x64 (PUP.MyPCBackup)
DEPLAC� dossier: C:\Program Files (x86)\MyPC Backup\x86 (PUP.MyPCBackup)
DEPLAC� dossier: C:\Program Files (x86)\AliLSavuer (PUP.AllSaver)
DEPLAC� dossier: C:\Program Files (x86)\AlLCheapPPrice (PUP.AllCheapPrice)
DEPLAC� dossier**: C:\Program Files (x86)\MyPC Backup (PUP.MyPCBackup)
DEPLAC� dossier: C:\Program Files (x86)\NetoCaoupon (PUP.NetCoupon)
DEPLAC� dossier: C:\Program Files (x86)\UniDeals (PUP.UniDeals)
DEPLAC� dossier: C:\Program Files (x86)\UniDealsa (PUP.UniDeals)
DEPLAC� dossier: C:\Program Files (x86)\UniDuealsoe (PUP.UniDeals)
DEPLAC� dossier: C:\Program Files (x86)\youtubeadblocker (PUP.YouTubeAdBlock)
DEPLAC� fichier: C:\ProgramData\15555166602038530698\4775d99c57b1799e7a6aba197a4ffd3d.ini (PUP.CrossRider)
DEPLAC� fichier: C:\ProgramData\15555166602038530698\954accd1ef18255b7a6aba197a4ffd3d.ini (PUP.CrossRider)
DEPLAC� fichier: C:\ProgramData\15555166602038530698\c5dda881163646777a6aba197a4ffd3d.ini (PUP.CrossRider)
DEPLAC� fichier: C:\ProgramData\15555166602038530698\cd5b15e575e1c3d07a6aba197a4ffd3d.ini (PUP.CrossRider)
DEPLAC� fichier: C:\ProgramData\15555166602038530698\d1b823d8a4cc41497a6aba197a4ffd3d.ini (PUP.CrossRider)
DEPLAC� fichier: C:\ProgramData\BlockIt Ad remover\BlockIt Ad remover.exe [Igor Pavlov - 7z ?????] (Trojan.ADH)
DEPLAC� dossier: C:\ProgramData\15555166602038530698 (PUP.CrossRider)
DEPLAC� dossier: C:\ProgramData\BlockIt Ad remover (Trojan.ADH)
DEPLAC� fichier: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup\MyPC Backup.lnk (PUP.MyPCBackup)
DEPLAC� fichier: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup\Uninstall.lnk (PUP.MyPCBackup)
DEPLAC� dossier: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup (PUP.MyPCBackup)
DEPLAC� fichier: C:\Users\PC\AppData\Roaming\appdataFr3.bin (PUP.Optional)


---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (33)
SUPPRIM� cl�*: HKCU\Software\WajIntEnhance [] (PUP.Wajam)
SUPPRIM� cl�^: HKLM\SYSTEM\CurrentControlSet\Services\BackupStack [C:\Program Files (x86)\MyPC Backup\BackupStack.exe (Not File)] (PUP.MyPCBackup)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\SearchProtect [] (Adware.Sambreel)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\Currentversion\Uninstall\SearchProtect [] (Adware.Sambreel)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\adddf477-1b45-d928-a5a3-61611be39886 [] (PUP.CrossRider)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2372355005-3768093591-4045408897-1000\Software\APN PIP [] (Toolbar.Agent)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2372355005-3768093591-4045408897-1000\Software\HomeTab [] (PUP.CertifiedToolbar)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2372355005-3768093591-4045408897-1000\Software\SearchProtectWS [] (PUP.SearchProtect)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2372355005-3768093591-4045408897-1000\Software\SimplyTech [] (PUP.SimplyTech)
SUPPRIM� cl�*: HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} [] (Adware.Graftor)
SUPPRIM� cl�*: HKCU\Software\Mozilla\Extends [] (PUP.FastStart)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\Pf153d42b_3574_44d9_a50f_fc570b493a77_.Pf153d42b_3574_44d9_a50f_fc570b493a77_ [youtubeadblocker] (PUP.YoutubeAdBlocker)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\Pf153d42b_3574_44d9_a50f_fc570b493a77_.Pf153d42b_3574_44d9_a50f_fc570b493a77_.9 [youtubeadblocker] (PUP.YoutubeAdBlocker)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\CLSID\{3d64bb55-b5cd-43d5-bd8a-bed301446002} [AlLCheapPPrice] (PUP.AllCheapPrice)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\CLSID\{776198ea-265f-432d-b997-a756013ef38f} [NetoCaoupon] (PUP.NetCoupon)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\CLSID\{8aef6977-edcd-4330-a95b-daaf9e3f9247} [UniDealsa] (PUP.UniDeals)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\CLSID\{f00a8f15-3942-4888-aae3-8f59fb69b082} [UniDeals] (PUP.UniDeals)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\CLSID\{f153d42b-3574-44d9-a50f-fc570b493a77} [youtubeadblocker] (PUP.YoutubeAdBlocker)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32 [] (PUP.MyPCBackup)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS [] (PUP.MyPCBackup)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup [JDi Backup Ltd] (PUP.MyPCBackup)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MyPC Backup [C:\Program Files (x86)\MyPC Backup\BackupStack.exe (Not File)] (PUP.MyPCBackup)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\AskPartnerNetwork [] (Toolbar.AskBar)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Conduit [] (Toolbar.Conduit)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Iminent [] (Adware.IMBooster)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\mystartsearchSoftware [] (PUP.StartSearch)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\WajIntEnhance [] (PUP.WaEnhance)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} [] (Adware.Graftor)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP [] (Adware.IMBooster)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar [] (Adware.IMBooster)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com [] (PUP.Vosteran)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance [] (PUP.WaEnhance)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{ff39eb65} [RegisterCrawler] (Adware.Graftor)



---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Opera Software)
~ Le syst�me a �t� red�marr�.


---\\ Statistiques
~ Items scann�s : 64737
~ Items trouv�s : 0
~ Items r�par�s : 132


End of clean at 16:11:04
===================
ZHPCleaner-[R]-31032015-16_11_04.txt

Publicité


Signaler le contenu de ce document

Publicité