cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPCleaner v2015.3.12.117 by Nicolas Coolman (12/03/2015)
~ Run by Choucho (Administrator) (13/03/2015 17:36:02)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : R�parer
~ Report : C:\Users\Choucho\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Choucho\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 8, 64-bit (Build 9200)


---\\ Service. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ Navigateur internet. (16)
REMPLAC� Proxy: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride ( )
REMPLAC� IE Params: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL [hxxp://www.mystartsearch.com/?type=hp&ts=1424698511&from=wpc&uid=ST750LM022XHN-M[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page [hxxp://www.mystartsearch.com/?type=hp&ts=1424698511&from=wpc&uid=ST750LM022XHN-M[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Default_Page_URL [hxxp://www.mystartsearch.com/?type=hp&ts=1424698511&from=wpc&uid=ST750LM022XHN-M[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Default_Search_URL [hxxp://www.mystartsearch.com/web/?type=ds&ts=1424698511&from=wpc&uid=ST750LM022X[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Start Page [hxxp://www.mystartsearch.com/?type=hp&ts=1424698511&from=wpc&uid=ST750LM022XHN-M[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Search Page [hxxp://www.mystartsearch.com/web/?type=ds&ts=1424698511&from=wpc&uid=ST750LM022X[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\\Default_Page_URL [hxxp://www.mystartsearch.com/?type=hp&ts=1424698511&from=wpc&uid=ST750LM022XHN-M[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\\Default_Search_URL [hxxp://www.mystartsearch.com/web/?type=ds&ts=1424698511&from=wpc&uid=ST750LM022X[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\\Start Page [hxxp://www.mystartsearch.com/?type=hp&ts=1424698511&from=wpc&uid=ST750LM022XHN-M[...]] (PUP.StartSearch)
REMPLAC� IE Params: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\\Search Page [hxxp://www.mystartsearch.com/web/?type=ds&ts=1424698511&from=wpc&uid=ST750LM022X[...]] (PUP.StartSearch)
DEPLAC� fichier: C:\Program Files (x86)\RAndomuPrice\J23fkGI6lOK8pb.x64.dll [ - ] (PUP.RandomPrice)
DEPLAC� fichier****: C:\Users\Choucho\AppData\Roaming\Mozilla\Firefox\Profiles\d8whifo2.default\Extensions\searchengine@gmail.com\chrome [ - ] (PUP.SearchEngine)
DEPLAC� fichier: C:\Users\Choucho\AppData\Roaming\Mozilla\Firefox\Profiles\d8whifo2.default\Extensions\searchengine@gmail.com\chrome.manifest [ - ] (PUP.SearchEngine)
DEPLAC� fichier: C:\Users\Choucho\AppData\Roaming\Mozilla\Firefox\Profiles\d8whifo2.default\Extensions\searchengine@gmail.com\install.rdf [ - ] (PUP.SearchEngine)
DEPLAC� dossier*: C:\Users\Choucho\AppData\Roaming\Mozilla\Firefox\Profiles\d8whifo2.default\Extensions\searchengine@gmail.com (PUP.SearchEngine)


---\\ Fichier h�te. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ T�che planifi�e. (1)
SUPPRIM� t�che: [LaunchSignup] [C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe (Not File) ] (PUP.MyPCBackup)


---\\ Explorateur ( Dossiers, Fichiers ). (39)
DEPLAC� fichier: C:\Users\Choucho\AppData\Roaming\Mozilla\Firefox\Profiles\d8whifo2.default\searchplugins\mystartsearch.xml [] (PUP.StartSearch)
DEPLAC� fichier: C:\Program Files (x86)\RAndomuPrice\J23fkGI6lOK8pb.dat [ - ] (PUP.RandomPrice)
DEPLAC� fichier: C:\Program Files (x86)\RAndomuPrice\J23fkGI6lOK8pb.tlb [ - ] (PUP.RandomPrice)
DEPLAC� fichier: C:\Program Files (x86)\SAvaeerExtensieOn\SAvaeerExtensieOn.dat [ - ] (PUP.SaverExtension)
DEPLAC� fichier: C:\Program Files (x86)\UniDeals\5VxCB06GPK5vrm.dat [ - ] (PUP.UniDeals)
DEPLAC� fichier: C:\Program Files (x86)\UniDeals\5VxCB06GPK5vrm.tlb [ - ] (PUP.UniDeals)
DEPLAC� fichier: C:\Program Files (x86)\UniDeals\5VxCB06GPK5vrm.x64.dll [ - ] (PUP.UniDeals)
DEPLAC� fichier: C:\Program Files (x86)\UnIDealsi\UnIDealsi.dat [ - ] (PUP.UniDeals)
DEPLAC� fichier: C:\Program Files (x86)\youtubeadblocker\NwaeeLKqObS2gZ.dat [ - ] (PUP.YouTubeAdBlock)
DEPLAC� fichier: C:\Program Files (x86)\youtubeadblocker\NwaeeLKqObS2gZ.tlb [ - ] (PUP.YouTubeAdBlock)
DEPLAC� fichier: C:\Program Files (x86)\youtubeadblocker\NwaeeLKqObS2gZ.x64.dll [ - ] (PUP.YouTubeAdBlock)
DEPLAC� dossier*: C:\Program Files (x86)\RAndomuPrice (PUP.RandomPrice)
DEPLAC� dossier*: C:\Program Files (x86)\SAvaeerExtensieOn (PUP.SaverExtension)
DEPLAC� dossier*: C:\Program Files (x86)\UniDeals (PUP.UniDeals)
DEPLAC� dossier*: C:\Program Files (x86)\UnIDealsi (PUP.UniDeals)
DEPLAC� dossier*: C:\Program Files (x86)\youtubeadblocker (PUP.YouTubeAdBlock)
DEPLAC� fichier: C:\ProgramData\738965013293040189\2544e9905b19ed481432d8fc6c83d49c.ini [ - ] (PUP.CrossRider)
DEPLAC� fichier: C:\ProgramData\738965013293040189\cd5b15e575e1c3d01432d8fc6c83d49c.ini [ - ] (PUP.CrossRider)
DEPLAC� fichier: C:\ProgramData\738965013293040189\f6f6eb7fa6ec98571432d8fc6c83d49c.ini [ - ] (PUP.CrossRider)
DEPLAC� fichier: C:\ProgramData\bfe9a10f0000544b\bfe9a10f0000544b.dll [ - ] (PUP.CrossRider)
DEPLAC� fichier: C:\ProgramData\Yellow AdBlocker\Yellow AdBlocker.exe [Igor Pavlov - 7z ?????] (PUP.Adblocker)
DEPLAC� dossier*: C:\ProgramData\738965013293040189 (PUP.CrossRider)
DEPLAC� dossier*: C:\ProgramData\bfe9a10f0000544b (PUP.CrossRider)
DEPLAC� dossier*: C:\ProgramData\Yellow AdBlocker (PUP.Adblocker)
DEPLAC� fichier: C:\Windows\Prefetch\KMSPICO_SETUP.TMP-29005F01.pf [ - ] (PUA.KMSpico)
DEPLAC� fichier: C:\Windows\Prefetch\KMSPICO_SETUP.TMP-F3D167EE.pf [ - ] (PUA.KMSpico)
DEPLAC� fichier: C:\Windows\Prefetch\SIGNUP WIZARD.EXE-9554BD21.pf [ - ] (PUP.MyPCBackup)
DEPLAC� fichier: C:\Windows\Prefetch\YELLOW ADBLOCKER.EXE-129FEF19.pf [ - ] (PUP.Adblocker)
DEPLAC� fichier*: C:\Users\Choucho\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage [ - ] (PUP.Optional)
DEPLAC� fichier*: C:\Users\Choucho\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal [ - ] (PUP.Optional)
DEPLAC� fichier*: C:\Users\Choucho\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.re-markit00.re-markit.co_0.localstorage [ - ] (PUP.ReMarkIt)
DEPLAC� fichier*: C:\Users\Choucho\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.re-markit00.re-markit.co_0.localstorage-journal [ - ] (PUP.ReMarkIt)
DEPLAC� fichier*: C:\Users\Choucho\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_fr.reimageplus.com_0.localstorage [ - ] (PUP.ReimageRepair)
DEPLAC� fichier*: C:\Users\Choucho\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_fr.reimageplus.com_0.localstorage-journal [ - ] (PUP.ReimageRepair)
DEPLAC� fichier*: C:\Users\Choucho\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markit00.re-markit.co_0.localstorage [ - ] (PUP.ReMarkIt)
DEPLAC� fichier*: C:\Users\Choucho\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markit00.re-markit.co_0.localstorage-journal [ - ] (PUP.ReMarkIt)
DEPLAC� fichier*: C:\Users\Choucho\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage [ - ] (PUP.StartSearch)
DEPLAC� fichier*: C:\Users\Choucho\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage-journal [ - ] (PUP.StartSearch)
DEPLAC� fichier: C:\Users\Choucho\AppData\Roaming\appdataFr3.bin [ - ] (PUP.Optional)


---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (35)
SUPPRIM� cl�*: HKCU\Software\WajIntEnhance [] (PUP.Wajam)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{dd31cb98-ae7c-4c23-84b9-bc0150e401a0} [RAndomuPrice] (PUP.RandomPrice)
SUPPRIM� cl�: [X64] HKLM\Software\Classes\CLSID\{dd31cb98-ae7c-4c23-84b9-bc0150e401a0} [RAndomuPrice] (PUP.RandomPrice)
SUPPRIM� cl�: [X64] HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{dd31cb98-ae7c-4c23-84b9-bc0150e401a0} [] (PUP.RandomPrice)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [http://www.mystartsearch.com/web/?type=ds&ts=1424698511&from=wpc&uid=ST750LM022XHN-M750MBB_S2SUJ9FCC[...]] [mystartsearch] (PUP.StartSearch)
SUPPRIM� cl�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [http://www.mystartsearch.com/web/?type=ds&ts=1424698511&from=wpc&uid=ST750LM022XHN-M750MBB_S2SUJ9FCC[...]] [mystartsearch] (PUP.StartSearch)
SUPPRIM� cl�: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [http://www.mystartsearch.com/web/?type=ds&ts=1424698511&from=wpc&uid=ST750LM022XHN-M750MBB_S2SUJ9FCC[...]] [mystartsearch] (PUP.StartSearch)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\CLSID\{1e6dba57-1ee6-4e08-9073-3094cd232aae}\InprocServer32 [C:\Program Files (x86)\youtubeadblocker\NwaeeLKqObS2gZ.x64.dll] (PUP.YoutubeAdBlocker)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\CLSID\{1e6dba57-1ee6-4e08-9073-3094cd232aae} [youtubeadblocker] (PUP.YoutubeAdBlocker)
SUPPRIM� cl�*: HKCU\SOFTWARE\SearchProtectWS [] (PUP.SearchProtect)
SUPPRIM� cl�*: HKLM\SOFTWARE\Wow6432Node\SearchProtect [] (PUP.SearchProtect)
SUPPRIM� cl�*: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\Currentversion\Uninstall\SearchProtect [] (PUP.SearchProtect)
SUPPRIM� cl�*: HKLM\SOFTWARE\Wow6432Node\1b8ee6d5-54d7-cdf4-3feb-87487a5f6000 [] (PUP.CrossRider)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-636325092-2117367055-3165021334-1001\Software\APN PIP [] (Toolbar.Agent)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-636325092-2117367055-3165021334-1001\Software\HomeTab [] (PUP.CertifiedToolbar)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-636325092-2117367055-3165021334-1001\Software\SimplyTech [] (PUP.SimplyTech)
SUPPRIM� cl�*: HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} [] (Adware.Graftor)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\bobrowser.com [0] (PUP.BoBrowser)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\mystartsearch.com [4263] (PUP.StartSearch)
SUPPRIM� cl�*: HKCU\Software\Mozilla\Extends [] (PUP.FastStart)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\P1e6dba57_1ee6_4e08_9073_3094cd232aae_.P1e6dba57_1ee6_4e08_9073_3094cd232aae_ [youtubeadblocker] (PUP.YoutubeAdBlocker)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\P1e6dba57_1ee6_4e08_9073_3094cd232aae_.P1e6dba57_1ee6_4e08_9073_3094cd232aae_.9 [youtubeadblocker] (PUP.YoutubeAdBlocker)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\CLSID\{f4a17e1a-bc45-4496-9796-bd62190d7023} [UniDeals] (PUP.UniDeals)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32 [] (PUP.MyPCBackup)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS [] (PUP.MyPCBackup)
SUPPRIM� cl�*: HKLM\SOFTWARE\Wow6432Node\AskPartnerNetwork [] (Toolbar.AskBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Wow6432Node\Conduit [] (Toolbar.Conduit)
SUPPRIM� cl�*: HKLM\SOFTWARE\Wow6432Node\Iminent [] (Adware.IMBooster)
SUPPRIM� cl�*: HKLM\SOFTWARE\Wow6432Node\mystartsearchSoftware [] (PUP.StartSearch)
SUPPRIM� cl�*: HKLM\SOFTWARE\Wow6432Node\WajIntEnhance [] (PUP.WajEnhance)
SUPPRIM� cl�*: HKLM\SOFTWARE\Wow6432Node\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} [] (Adware.Graftor)
SUPPRIM� cl�*: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP [] (Adware.IMBooster)
SUPPRIM� cl�*: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar [] (Adware.IMBooster)
SUPPRIM� cl�*: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com [] (PUP.Vosteran)
SUPPRIM� cl�*: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance [] (PUP.WajEnhance)



---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scann�s : 79884
~ Items trouv�s : 0
~ Items r�par�s : 62


End of clean at 17:54:30
===================
ZHPCleaner-[R]-13032015-17_54_30.txt

Publicité


Signaler le contenu de ce document

Publicité