cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPCleaner v2015.3.18.128 by Nicolas Coolman (18/03/2015)
~ Run by litscher (Administrator) (18/03/2015 20:40:29)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : R�parer
~ Report : C:\Users\litscher\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\litscher\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 81, 64-bit (Build 9600)


---\\ Service. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ Navigateur internet. (32)
REMPLAC� Desktop: C:\Users\Public\Desktop\Photos Snapfish.lnk [Bad : http://www.snapfish.com/hp_notebook_desktopicon_2012_fr] (Hijacker.Browser)
SUPPRIM� Firefox: [iq04tk1k.default] URL HomePage : hxxp://astromenda.com/?f=1&a=ast_tele_14_43_ff&cd=2XzuyEtN2Y1L1QzutBzzzytByE0AyDtAtB0FtCyBzzyEtA0CtN0D0Tz[...] (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.AL", 4); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.aflt", "ast_tele_14_43_ff"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.appId", "{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.cd", "2XzuyEtN2Y1L1QzutBzzzytByE0AyDtAtB0FtCyBzzyEtA0CtN0D0Tzu0StCt[...] (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.cr", "1267671876"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.data.1475e97c0146bfb1c490339546d9e72ee", "1"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.data._dy", "20141021"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.data.cc", "fr"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.data.ccfc1eb13092ea34473c169417eefd00", "1"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.dfltLng", ""); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.dfltSrch", true); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.dnsErr", true); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.excTlbr", false); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.general.guid", "cc73db5b-a4dc-4385-b6f6-690ea78bd8c9"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.hmpg", true); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.hmpgUrl", "http://astromenda.com/?f=1&a=ast_tele_14_43_ff&cd=2XzuyE[...] (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.id", "28924A532F17843C"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.instlDay", "16364"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.instlRef", "142905_a"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.newTabUrl", "http://astromenda.com/?f=2&a=ast_tele_14_43_ff&cd=2Xzu[...] (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.prdct", "astrmndasr"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.tlbrId", ""); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.tlbrSrchUrl", "http://astromenda.com/?f=3&a=ast_tele_14_43_ff&cd=2X[...] (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.vrsn", ""); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr.vrsni", ""); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr_i.newTab", true); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr_i.smplGrp", "none"); (PUP.Astromenda)
REMPLAC�: [iq04tk1k.default] - user_pref("extensions.astrmndasr_i.vrsnTs", "17:25:48"); (PUP.Astromenda)


---\\ Fichier h�te. (1)
~ Le fichier h�te est l�gitime. (21)


---\\ T�che planifi�e. (2)
SUPPRIM� t�che: [WSE_Astromenda] [C:\Users\litscher\AppData\Roaming\WSE_AS~1\UPDATE~1\UPDATE~1.EXE (Not File) ] (PUP.Astromenda)
SUPPRIM� t�che: [WSE_Astromenda] [C:\WINDOWS\Tasks\WSE_Astromenda.job] (PUP.Astromenda)


---\\ Explorateur ( Dossiers, Fichiers ). (3)
DEPLAC� dossier: C:\Users\litscher\AppData\Roaming\WSE_Astromenda (Heuristic.InstallCore)
DEPLAC� fichier: C:\Users\litscher\AppData\Roaming\Mozilla\Firefox\Profiles\iq04tk1k.default\searchplugins\Astromenda.xml [] (PUP.Astromenda)
DEPLAC� fichier*: C:\WINDOWS\Tasks\WSE_Astromenda.job (PUP.Astromenda)


---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (12)
SUPPRIM� cl�*: HKCU\Software\InstallCore\1I1T1Q1S [] (Heuristic.InstallCore)
SUPPRIM� cl�*: HKCU\Software\InstallCore\Uninstall [] (Heuristic.InstallCore)
SUPPRIM� cl�*: HKCU\Software\InstallCore\WSE_Astromenda [] (Heuristic.InstallCore)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\InstallCore\WSE_Astromenda [] (Heuristic.InstallCore)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_tele_14_43_ff&cd=2XzuyEtN2Y1L1QzutBzzzyt[...]] [Astromenda] (PUP.Astromenda)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827} [http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF] [Ask.com] (Toolbar.Ask)
SUPPRIM� cl�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_tele_14_43_ff&cd=2XzuyEtN2Y1L1QzutBzzzyt[...]] [Astromenda] (PUP.Astromenda)
SUPPRIM� cl�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827} [http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF] [Ask.com] (Toolbar.Ask)
SUPPRIM� cl�: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827} [http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF] [Ask.com] (Toolbar.Ask)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-182586733-3989339552-3841706629-1001\Software\InstallCore [ (Not File)] (Adware.InstallCore)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-182586733-3989339552-3841706629-1001\Software\wse_astromenda [ (Not File)] (PUP.Astromenda)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\InstallCore [ (Not File)] (Adware.InstallCore)



---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scann�s : 75821
~ Items trouv�s : 0
~ Items r�par�s : 49


End of clean at 20:47:32
===================
ZHPCleaner-[R]-18032015-20_47_32.txt

Publicité


Signaler le contenu de ce document

Publicité