Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPCleaner v2015.3.19.130 by Nicolas Coolman (19/03/2015)
~ Run by jerome (Administrator) (19/03/2015 17:39:26)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : R�parer
~ Report : C:\Documents and Settings\jerome\Bureau\ZHPCleaner.txt
~ Quarantine : C:\Documents and Settings\jerome\Application Data\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
~ Windows XP, 32-bit Service Pack 3 (Build 2600)
---\\ Service. (1)
WINSOCK [Protocol_Catalog9\Catalog_Entries]: Remise � z�ro du socket qui g�re la couche TCP/IP (Hijacker.Winsock)
---\\ Navigateur internet. (4)
DEPLAC� fichier: C:\Documents and Settings\jerome\Bureau\ParetoLogic PC Health Advisor.lnk [Bad : C:\Program Files\ParetoLogic\PCHA\PCHA.exe] (PUP.Paretologic)
DEPLAC� fichier: C:\Documents and Settings\jerome\Bureau\Tencent QQ.lnk [Bad : C:\Program Files\Tencent\QQIntl\Bin\QQ.exe] (Adware.TencentAddressBar)
DEPLAC� fichier: C:\Documents and Settings\jerome\Application Data\Microsoft\Internet Explorer\Quick Launch\Tencent QQ.lnk [Bad : C:\Program Files\Tencent\QQIntl\Bin\QQ.exe] (Adware.TencentAddressBar)
REMPLAC� Chrome URL: hxxp://istart.webssearches.com/?type=hp&ts=1413900871&from=exp&uid=HTS541010G9AT00_MP20MAX0J422BRJ42[...] (Hijacker.WebsSearches)
---\\ Fichier h�te. (1)
~ Le fichier h�te est l�gitime. (19)
---\\ T�che planifi�e. (0)
~ Aucun �l�ment malicieux trouv�.
---\\ Explorateur ( Dossiers, Fichiers ). (9)
DEPLAC� fichier: C:\Documents and Settings\jerome\Local Settings\Application Data\icyth_nav.dat (Heuristic.MagicControl)
DEPLAC� fichier: C:\Documents and Settings\jerome\Local Settings\Application Data\icyth_navps.dat (Heuristic.MagicControl)
DEPLAC� fichier: C:\Documents and Settings\jerome\Local Settings\Application Data\icyth.dat (Heuristic.MagicControl)
DEPLAC� fichier: C:\WINDOWS\Installer\{BC95F9C5-A038-45EE-A739-96B8A6D79F7D}\Boxore.ico (Adware.Boxore)
DEPLAC� fichier: C:\WINDOWS\Prefetch\BOXORE.EXE-279DC933.pf (Adware.Boxore)
DEPLAC� fichier*: C:\Documents and Settings\jerome\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_istart.webssearches.com_0.localstorage (Hijacker.WebsSearches)
DEPLAC� fichier*: C:\Documents and Settings\jerome\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_istart.webssearches.com_0.localstorage-journal (Hijacker.WebsSearches)
DEPLAC� dossier: C:\Program Files\Software (Adware.Boxore)
DEPLAC� dossier: C:\Documents and Settings\jerome\Local Settings\Application Data\Software (Adware.Boxore)
---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (128)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\icyth [Favorit] (Adware.Favorit)
SUPPRIM� cl�*: HKLM\Software\Classes\Installer\Products\5C9F59CB830AEE547A93698B6A7DF9D7 [Boxore Client] (Adware.Boxore)
SUPPRIM� cl�^: HKLM\Software\Classes\Installer\UpgradeCodes\5C9F59CB830AEE547A93698B6A7DF9D7 [Boxore Client] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\Software\Classes\Installer\Features\5C9F59CB830AEE547A93698B6A7DF9D7 [Boxore Client] (Adware.Boxore)
SUPPRIM� donn�e: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations\\Intl [Bad : http://shell.windows.com/fileassoc/fileassoc.asp?LangID=%04x&Ext=%s] (Hijacker.Association)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{192751BF-2639-487D-B97E-67EFFFC62822}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\TXPFProxy.dll] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{1B7F37B4-2CBC-4548-AE26-1B3916F9F607}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\appcom.dll] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{23752AA7-CAD7-40C2-99EE-7A9CD3C20C6D}\InprocServer32 [C:\PROGRA~1\Tencent\QQIntl\Bin\CPHelper.dll] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{2E71FD0F-AAB1-42c0-9146-6D2C4EDCF07D}\InprocServer32 [%SystemRoot%\system32\shdocvw.dll] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{37086F34-1C2B-4282-A09E-8E0A7EF2A8F0}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\appcom.dll] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{4B48FBF2-BA2B-44C5-A20F-8E25D17FEF29}\InprocServer32 [C:\Program Files\Speed Analysis 2\ScriptHost.dll (Not File)] (PUP.SpeedAnalysis)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{4CF088BD-BE95-40A5-BE9B-677F8683EDEA}\InprocServer32 [C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll (Not File)] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{5A2717D2-5F51-4EAE-8722-D637E06E7D03}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\OPIEModule.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{5FCAE301-17B8-4E3F-A55A-D3CD7AA81E28}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Plugin\Com.Tencent.HDVideo\bin\SendVideo.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{63406263-B1E1-4717-8DA6-7270FFA518A9}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\appcom.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{6FAC4823-815E-4361-836E-46D65ED2550B}\InprocServer32 [C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll (Not File)] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{83335675-FCF0-45CE-A9E6-38C150EFBE63}\InprocServer32 [C:\Program Files\Fichiers communs\Tencent\TXSSO\1.2.1.38\Bin\SSOLUIControl.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{87AF538B-F052-4A0B-BAE0-E686AD921119}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\appcom.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{911F251E-34FD-465E-B6CE-DF00FF49A6BE}\InprocServer32 [C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll (Not File)] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{B07AEC25-2EBE-416C-BC75-7B9134A22DE0}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\OPIEModule.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{B45FF030-4447-11D2-85DE-00C04FA35C89}\InprocServer32 [%SystemRoot%\system32\shdocvw.dll (Not File)] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{DA66DEB8-D878-4DC4-9A6D-8D1A35AE3FA4}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\OPIEModule.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{E65CE95B-56E9-47C9-8707-A1D1DE30760F}\InprocServer32 [C:\Program Files\Speed Analysis 2\ButtonSite.dll (Not File)] (PUP.SpeedAnalysis)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{EAAED308-7322-4b9b-965E-171933ADD473}\InprocServer32 [C:\Program Files\Fichiers communs\Tencent\TXSSO\1.2.1.38\Bin\npSSOAxCtrlForPTLogin.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4}\InprocServer32 [C:\PROGRA~1\Tencent\QQIntl\Bin\Timwp.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{FE4F1649-8909-49C0-87BA-24D65120DB46}\InprocServer32 [C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll (Not File)] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{192751BF-2639-487D-B97E-67EFFFC62822} [PSFactoryBuffer] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{1B7F37B4-2CBC-4548-AE26-1B3916F9F607} [CRichFrameObj Object] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{23752AA7-CAD7-40C2-99EE-7A9CD3C20C6D} [QQCPHelper.CPAdder] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{2E71FD0F-AAB1-42c0-9146-6D2C4EDCF07D} [SearchAssistantOC] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{37086F34-1C2B-4282-A09E-8E0A7EF2A8F0} [CRichOleFrame Object] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{4B48FBF2-BA2B-44C5-A20F-8E25D17FEF29} [Tool Class] (PUP.SpeedAnalysis)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{4CF088BD-BE95-40A5-BE9B-677F8683EDEA} [IEButtonA] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{5A2717D2-5F51-4EAE-8722-D637E06E7D03} [IECtrl Class] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{5FCAE301-17B8-4E3F-A55A-D3CD7AA81E28} [SendVideo] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{63406263-B1E1-4717-8DA6-7270FFA518A9} [CRichPicTSRequest Object] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{6FAC4823-815E-4361-836E-46D65ED2550B} [IEButton] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{83335675-FCF0-45CE-A9E6-38C150EFBE63} [SSOLUICtrl Class] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{87AF538B-F052-4A0B-BAE0-E686AD921119} [CRichPicObj Object] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{911F251E-34FD-465E-B6CE-DF00FF49A6BE} [HbAx] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{B07AEC25-2EBE-416C-BC75-7B9134A22DE0} [PSFactoryBuffer] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{B45FF030-4447-11D2-85DE-00C04FA35C89} [SearchAssistantOC] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{DA66DEB8-D878-4DC4-9A6D-8D1A35AE3FA4} [ROTHelper Class] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{E65CE95B-56E9-47C9-8707-A1D1DE30760F} [Navbar Class] (PUP.SpeedAnalysis)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{EAAED308-7322-4b9b-965E-171933ADD473} [SSOForPTLogin2 Class] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4} [TimwpDll.TimwpCheck] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{FE4F1649-8909-49C0-87BA-24D65120DB46} [IEButtonB] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3557934932-4241109686-4134516529-1006\Software\fcn [] (Adware.Navipromo)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3557934932-4241109686-4134516529-1006\Software\Live-Player [C:\Program Files\Live-Player (Not File)] (Adware.Navipromo)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3557934932-4241109686-4134516529-1006\Software\Smart-Shopper [ (Not File)] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3557934932-4241109686-4134516529-1006\Software\TENCENT [ (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3557934932-4241109686-4134516529-1006\Software\Classes\Tencent [TencentProtocol] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Update Service YourFileDownloader [] (PUP.YourFileDownloader)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} [C:\Program Files\Ask.com\ (Not File)] (Toolbar.Ask)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ilivid.com [574] (Adware.Bandoo)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\keepvid.com [574] (PUP.KeepVid)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\softonic.fr [566] (PUP.Softonic)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.keepvid [574] (PUP.KeepVid)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\asktoolbar.settingsplugin [Ask Toolbar Settings Plugin] (Toolbar.AskTBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\asktoolbar.settingsplugin.1 [Ask Toolbar Settings Plugin] (Toolbar.AskTBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\AskIBar.PopSwatterBarButton [Bar Button Class] (Toolbar.AskTBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\AskIBar.PopSwatterBarButton.1 [Bar Button Class] (Toolbar.AskTBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl [Settings Class] (Toolbar.AskTBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl.1 [Settings Class] (Toolbar.AskTBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SearchAssistantOC.SearchAssistantOC [SearchAssistantOC] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SearchAssistantOC.SearchAssistantOC.1 [SearchAssistantOC] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.HbAx [HbAx] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.HbAx.1 [HbAx] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.HbInfoBand [SmartShopper] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.HbInfoBand.1 [SmartShopper] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.IEButton [IEButton] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.IEButton.1 [IEButton] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.IEButtonA [IEButtonA] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.IEButtonA.1 [IEButtonA] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.IEButtonB [IEButtonB] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.IEButtonB.1 [IEButtonB] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.Smrt-ShprCtrl [Smart-Shopper] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.Smrt-ShprCtrl.1 [Smart-Shopper] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassSvc [Google Update Legacy On Demand] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassSvc.1.0 [Google Update Legacy On Demand] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3COMClassService [Update3COMClass] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3COMClassService.1.0 [Update3COMClass] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebSvc [SoftwareUpdate Update3Web] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebSvc.1.0 [SoftwareUpdate Update3Web] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SrchUI.SearchAssistant [Search Assistant Control] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SrchUI.SearchAssistant.1 [Search Assistant Control] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Applications\iLividSetup[1].exe [] (Adware.Bandoo)
SUPPRIM� cl�*: HKLM\SOFTWARE\Live-Player [C:\Program Files\Live-Player (Not File)] (Adware.Navipromo)
SUPPRIM� cl�*: HKLM\SOFTWARE\Smart-Shopper [ (Not File)] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Tencent [ (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Live-Player [Favorit Network S.L.] (Adware.Navipromo)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart-Shopper [SmartShopper] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3CA54984-A14B-42FE-9FF1-7EA90151D725} [Tencent Technology (Shenzhen) Company Limited] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Live-Player [] (Adware.Navipromo)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Smart-Shopper [] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\5320fcbd-7d73-4bf6-9a03-04f1f08d6799 [C:\Program Files\myBabylon_English] (PUP.Babylon)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\9c2e57b5-2faf-4df8-b7f4-7f1f9a17ee3b [C:\Program Files\myBabylon_English] (PUP.Babylon)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\a9657269-2c35-4324-809c-caa9e526d9af [C:\Program Files\myBabylon_English] (PUP.Babylon)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\f09e7a21-6df0-4aed-bed8-8193663f0fcf [C:\Program Files\myBabylon_English] (PUP.Babylon)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{088B5F31-517F-4f46-BD9D-AB1805307930} [C:\Program Files\Speed Analysis 2 (Not File)] (PUP.SpeedAnalysis)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86648673-F8F6-4b81-8706-C88DBB469FA1} [C:\Program Files\Speed Analysis 2 (Not File)] (PUP.SpeedAnalysis)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3557934932-4241109686-4134516529-1006\Products\48945AC3B41AEF24F91FE79A10157D52 [Tencent QQ] (Adware.TencentAddressBar)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000022 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000023 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000024 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000025 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000026 [ (Not File) ] (Hijacker.Winsock)
---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Opera Software)
~ Le syst�me a �t� red�marr�.
---\\ Statistiques
~ Items scann�s : 51579
~ Items trouv�s : 0
~ Items r�par�s : 142
End of clean at 17:47:23
===================
ZHPCleaner-[S]-19032015-17_20_11.txt
ZHPCleaner-[R]-19032015-17_47_23.txt
~ Run by jerome (Administrator) (19/03/2015 17:39:26)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : R�parer
~ Report : C:\Documents and Settings\jerome\Bureau\ZHPCleaner.txt
~ Quarantine : C:\Documents and Settings\jerome\Application Data\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
~ Windows XP, 32-bit Service Pack 3 (Build 2600)
---\\ Service. (1)
WINSOCK [Protocol_Catalog9\Catalog_Entries]: Remise � z�ro du socket qui g�re la couche TCP/IP (Hijacker.Winsock)
---\\ Navigateur internet. (4)
DEPLAC� fichier: C:\Documents and Settings\jerome\Bureau\ParetoLogic PC Health Advisor.lnk [Bad : C:\Program Files\ParetoLogic\PCHA\PCHA.exe] (PUP.Paretologic)
DEPLAC� fichier: C:\Documents and Settings\jerome\Bureau\Tencent QQ.lnk [Bad : C:\Program Files\Tencent\QQIntl\Bin\QQ.exe] (Adware.TencentAddressBar)
DEPLAC� fichier: C:\Documents and Settings\jerome\Application Data\Microsoft\Internet Explorer\Quick Launch\Tencent QQ.lnk [Bad : C:\Program Files\Tencent\QQIntl\Bin\QQ.exe] (Adware.TencentAddressBar)
REMPLAC� Chrome URL: hxxp://istart.webssearches.com/?type=hp&ts=1413900871&from=exp&uid=HTS541010G9AT00_MP20MAX0J422BRJ42[...] (Hijacker.WebsSearches)
---\\ Fichier h�te. (1)
~ Le fichier h�te est l�gitime. (19)
---\\ T�che planifi�e. (0)
~ Aucun �l�ment malicieux trouv�.
---\\ Explorateur ( Dossiers, Fichiers ). (9)
DEPLAC� fichier: C:\Documents and Settings\jerome\Local Settings\Application Data\icyth_nav.dat (Heuristic.MagicControl)
DEPLAC� fichier: C:\Documents and Settings\jerome\Local Settings\Application Data\icyth_navps.dat (Heuristic.MagicControl)
DEPLAC� fichier: C:\Documents and Settings\jerome\Local Settings\Application Data\icyth.dat (Heuristic.MagicControl)
DEPLAC� fichier: C:\WINDOWS\Installer\{BC95F9C5-A038-45EE-A739-96B8A6D79F7D}\Boxore.ico (Adware.Boxore)
DEPLAC� fichier: C:\WINDOWS\Prefetch\BOXORE.EXE-279DC933.pf (Adware.Boxore)
DEPLAC� fichier*: C:\Documents and Settings\jerome\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_istart.webssearches.com_0.localstorage (Hijacker.WebsSearches)
DEPLAC� fichier*: C:\Documents and Settings\jerome\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_istart.webssearches.com_0.localstorage-journal (Hijacker.WebsSearches)
DEPLAC� dossier: C:\Program Files\Software (Adware.Boxore)
DEPLAC� dossier: C:\Documents and Settings\jerome\Local Settings\Application Data\Software (Adware.Boxore)
---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (128)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\icyth [Favorit] (Adware.Favorit)
SUPPRIM� cl�*: HKLM\Software\Classes\Installer\Products\5C9F59CB830AEE547A93698B6A7DF9D7 [Boxore Client] (Adware.Boxore)
SUPPRIM� cl�^: HKLM\Software\Classes\Installer\UpgradeCodes\5C9F59CB830AEE547A93698B6A7DF9D7 [Boxore Client] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\Software\Classes\Installer\Features\5C9F59CB830AEE547A93698B6A7DF9D7 [Boxore Client] (Adware.Boxore)
SUPPRIM� donn�e: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations\\Intl [Bad : http://shell.windows.com/fileassoc/fileassoc.asp?LangID=%04x&Ext=%s] (Hijacker.Association)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{192751BF-2639-487D-B97E-67EFFFC62822}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\TXPFProxy.dll] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{1B7F37B4-2CBC-4548-AE26-1B3916F9F607}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\appcom.dll] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{23752AA7-CAD7-40C2-99EE-7A9CD3C20C6D}\InprocServer32 [C:\PROGRA~1\Tencent\QQIntl\Bin\CPHelper.dll] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{2E71FD0F-AAB1-42c0-9146-6D2C4EDCF07D}\InprocServer32 [%SystemRoot%\system32\shdocvw.dll] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{37086F34-1C2B-4282-A09E-8E0A7EF2A8F0}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\appcom.dll] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{4B48FBF2-BA2B-44C5-A20F-8E25D17FEF29}\InprocServer32 [C:\Program Files\Speed Analysis 2\ScriptHost.dll (Not File)] (PUP.SpeedAnalysis)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{4CF088BD-BE95-40A5-BE9B-677F8683EDEA}\InprocServer32 [C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll (Not File)] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{5A2717D2-5F51-4EAE-8722-D637E06E7D03}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\OPIEModule.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{5FCAE301-17B8-4E3F-A55A-D3CD7AA81E28}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Plugin\Com.Tencent.HDVideo\bin\SendVideo.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{63406263-B1E1-4717-8DA6-7270FFA518A9}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\appcom.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{6FAC4823-815E-4361-836E-46D65ED2550B}\InprocServer32 [C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll (Not File)] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{83335675-FCF0-45CE-A9E6-38C150EFBE63}\InprocServer32 [C:\Program Files\Fichiers communs\Tencent\TXSSO\1.2.1.38\Bin\SSOLUIControl.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{87AF538B-F052-4A0B-BAE0-E686AD921119}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\appcom.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{911F251E-34FD-465E-B6CE-DF00FF49A6BE}\InprocServer32 [C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll (Not File)] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{B07AEC25-2EBE-416C-BC75-7B9134A22DE0}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\OPIEModule.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{B45FF030-4447-11D2-85DE-00C04FA35C89}\InprocServer32 [%SystemRoot%\system32\shdocvw.dll (Not File)] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{DA66DEB8-D878-4DC4-9A6D-8D1A35AE3FA4}\InprocServer32 [C:\Program Files\Tencent\QQIntl\Bin\OPIEModule.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{E65CE95B-56E9-47C9-8707-A1D1DE30760F}\InprocServer32 [C:\Program Files\Speed Analysis 2\ButtonSite.dll (Not File)] (PUP.SpeedAnalysis)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{EAAED308-7322-4b9b-965E-171933ADD473}\InprocServer32 [C:\Program Files\Fichiers communs\Tencent\TXSSO\1.2.1.38\Bin\npSSOAxCtrlForPTLogin.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4}\InprocServer32 [C:\PROGRA~1\Tencent\QQIntl\Bin\Timwp.dll (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{FE4F1649-8909-49C0-87BA-24D65120DB46}\InprocServer32 [C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll (Not File)] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{192751BF-2639-487D-B97E-67EFFFC62822} [PSFactoryBuffer] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{1B7F37B4-2CBC-4548-AE26-1B3916F9F607} [CRichFrameObj Object] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{23752AA7-CAD7-40C2-99EE-7A9CD3C20C6D} [QQCPHelper.CPAdder] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{2E71FD0F-AAB1-42c0-9146-6D2C4EDCF07D} [SearchAssistantOC] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{37086F34-1C2B-4282-A09E-8E0A7EF2A8F0} [CRichOleFrame Object] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{4B48FBF2-BA2B-44C5-A20F-8E25D17FEF29} [Tool Class] (PUP.SpeedAnalysis)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{4CF088BD-BE95-40A5-BE9B-677F8683EDEA} [IEButtonA] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{5A2717D2-5F51-4EAE-8722-D637E06E7D03} [IECtrl Class] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{5FCAE301-17B8-4E3F-A55A-D3CD7AA81E28} [SendVideo] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{63406263-B1E1-4717-8DA6-7270FFA518A9} [CRichPicTSRequest Object] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{6FAC4823-815E-4361-836E-46D65ED2550B} [IEButton] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{83335675-FCF0-45CE-A9E6-38C150EFBE63} [SSOLUICtrl Class] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{87AF538B-F052-4A0B-BAE0-E686AD921119} [CRichPicObj Object] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{911F251E-34FD-465E-B6CE-DF00FF49A6BE} [HbAx] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{B07AEC25-2EBE-416C-BC75-7B9134A22DE0} [PSFactoryBuffer] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{B45FF030-4447-11D2-85DE-00C04FA35C89} [SearchAssistantOC] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{DA66DEB8-D878-4DC4-9A6D-8D1A35AE3FA4} [ROTHelper Class] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{E65CE95B-56E9-47C9-8707-A1D1DE30760F} [Navbar Class] (PUP.SpeedAnalysis)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{EAAED308-7322-4b9b-965E-171933ADD473} [SSOForPTLogin2 Class] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4} [TimwpDll.TimwpCheck] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\CLSID\{FE4F1649-8909-49C0-87BA-24D65120DB46} [IEButtonB] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3557934932-4241109686-4134516529-1006\Software\fcn [] (Adware.Navipromo)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3557934932-4241109686-4134516529-1006\Software\Live-Player [C:\Program Files\Live-Player (Not File)] (Adware.Navipromo)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3557934932-4241109686-4134516529-1006\Software\Smart-Shopper [ (Not File)] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3557934932-4241109686-4134516529-1006\Software\TENCENT [ (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3557934932-4241109686-4134516529-1006\Software\Classes\Tencent [TencentProtocol] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Update Service YourFileDownloader [] (PUP.YourFileDownloader)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} [C:\Program Files\Ask.com\ (Not File)] (Toolbar.Ask)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ilivid.com [574] (Adware.Bandoo)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\keepvid.com [574] (PUP.KeepVid)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\softonic.fr [566] (PUP.Softonic)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.keepvid [574] (PUP.KeepVid)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\asktoolbar.settingsplugin [Ask Toolbar Settings Plugin] (Toolbar.AskTBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\asktoolbar.settingsplugin.1 [Ask Toolbar Settings Plugin] (Toolbar.AskTBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\AskIBar.PopSwatterBarButton [Bar Button Class] (Toolbar.AskTBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\AskIBar.PopSwatterBarButton.1 [Bar Button Class] (Toolbar.AskTBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl [Settings Class] (Toolbar.AskTBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\AskIBar.PopSwatterSettingsControl.1 [Settings Class] (Toolbar.AskTBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SearchAssistantOC.SearchAssistantOC [SearchAssistantOC] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SearchAssistantOC.SearchAssistantOC.1 [SearchAssistantOC] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.HbAx [HbAx] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.HbAx.1 [HbAx] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.HbInfoBand [SmartShopper] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.HbInfoBand.1 [SmartShopper] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.IEButton [IEButton] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.IEButton.1 [IEButton] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.IEButtonA [IEButtonA] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.IEButtonA.1 [IEButtonA] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.IEButtonB [IEButtonB] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.IEButtonB.1 [IEButtonB] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.Smrt-ShprCtrl [Smart-Shopper] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Smart-Shopper.Smrt-ShprCtrl.1 [Smart-Shopper] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassSvc [Google Update Legacy On Demand] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassSvc.1.0 [Google Update Legacy On Demand] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3COMClassService [Update3COMClass] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3COMClassService.1.0 [Update3COMClass] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebSvc [SoftwareUpdate Update3Web] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebSvc.1.0 [SoftwareUpdate Update3Web] (Adware.Boxore)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SrchUI.SearchAssistant [Search Assistant Control] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\SrchUI.SearchAssistant.1 [Search Assistant Control] (PUP.SearchAssist)
SUPPRIM� cl�*: HKLM\SOFTWARE\Classes\Applications\iLividSetup[1].exe [] (Adware.Bandoo)
SUPPRIM� cl�*: HKLM\SOFTWARE\Live-Player [C:\Program Files\Live-Player (Not File)] (Adware.Navipromo)
SUPPRIM� cl�*: HKLM\SOFTWARE\Smart-Shopper [ (Not File)] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Tencent [ (Not File)] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Live-Player [Favorit Network S.L.] (Adware.Navipromo)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Smart-Shopper [SmartShopper] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3CA54984-A14B-42FE-9FF1-7EA90151D725} [Tencent Technology (Shenzhen) Company Limited] (Adware.TencentAddressBar)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Live-Player [] (Adware.Navipromo)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Smart-Shopper [] (Adware.ShoppingReport)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\5320fcbd-7d73-4bf6-9a03-04f1f08d6799 [C:\Program Files\myBabylon_English] (PUP.Babylon)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\9c2e57b5-2faf-4df8-b7f4-7f1f9a17ee3b [C:\Program Files\myBabylon_English] (PUP.Babylon)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\a9657269-2c35-4324-809c-caa9e526d9af [C:\Program Files\myBabylon_English] (PUP.Babylon)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\f09e7a21-6df0-4aed-bed8-8193663f0fcf [C:\Program Files\myBabylon_English] (PUP.Babylon)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{088B5F31-517F-4f46-BD9D-AB1805307930} [C:\Program Files\Speed Analysis 2 (Not File)] (PUP.SpeedAnalysis)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86648673-F8F6-4b81-8706-C88DBB469FA1} [C:\Program Files\Speed Analysis 2 (Not File)] (PUP.SpeedAnalysis)
SUPPRIM� cl�*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3557934932-4241109686-4134516529-1006\Products\48945AC3B41AEF24F91FE79A10157D52 [Tencent QQ] (Adware.TencentAddressBar)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000022 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000023 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000024 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000025 [ (Not File) ] (Hijacker.Winsock)
REMPLAC� : HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000026 [ (Not File) ] (Hijacker.Winsock)
---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Opera Software)
~ Le syst�me a �t� red�marr�.
---\\ Statistiques
~ Items scann�s : 51579
~ Items trouv�s : 0
~ Items r�par�s : 142
End of clean at 17:47:23
===================
ZHPCleaner-[S]-19032015-17_20_11.txt
ZHPCleaner-[R]-19032015-17_47_23.txt