cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPCleaner v2015.4.2.153 by Nicolas Coolman (03/04/2015)
~ Run by Catherine (Administrator) (03/04/2015 14:13:55)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Netttoyer
~ Report : C:\Users\Catherine\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Catherine\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 7, 64-bit Service Pack 1 (Build 7601)


---\\ Service. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ Navigateur internet. (48)
SUPPRIM�: [gle80khy.default] - user_pref("browser.search.order.1", "Mysearchdial"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.Mega Browse.aul", "1395601819452"); (PUP.MegaBrowse)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.Mega Browse.irl", true); (PUP.MegaBrowse)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.Mega Browse.is", "isgiwhFR"); (PUP.MegaBrowse)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.Mega Browse.ug", "10A8B58B-09C0-49BF-B762-EA84ABC3E537"); (PUP.MegaBrowse)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.irmysearch.aflt", "telemsd1103"); (Adware.MyWebSearch)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1QzuyCtD0E0ByCzyyD0AyDyB0ByDzy0CtB0DtN0D0Tzu0SyCz[...] (Adware.MyWebSearch)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.irmysearch.cr", "1725665658"); (Adware.MyWebSearch)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.irmysearch.instlRef", ""); (Adware.MyWebSearch)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.aflt", "telemsd1103"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzuyCtD0E0ByCzyyD0AyDyB0ByDzy0CtB0DtN0D0Tzu0Sy[...] (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.cntry", "FR"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.cr", "1725665658"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.dfltLng", ""); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.dfltSrch", true); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.dnsErr", true); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,6[...] (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.excTlbr", false); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.hdrMd5", "DE8BE134AC8767886D1BCF9CDDA4A2B7"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.hmpg", true); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&a=telemsd1103&cd=2X[...] (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.id", "60EB695A57B59C2D"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.instlDay", "16033"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.instlRef", ""); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.lastB", "http://start.mysearchdial.com/?f=1&a=telemsd1103&cd=2Xzu[...] (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.lastVrsnTs", "1.8.21.021:43:26"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearchdial.com/?f=2&a=telemsd1103&cd=[...] (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"89\",\"lastVrsn\":\"89\",\"vrsnLoad\":[...] (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.prdct", "mysearchdial"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.sg", "none"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.tlbrId", "base"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearchdial.com/?f=3&a=telemsd1103&c[...] (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.vrsn", "1.8.21.0"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial.vrsni", "1.8.21.0"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial_i.hmpg", true); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial_i.newTab", false); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial_i.smplGrp", "none"); (PUP.MySearchDial)
SUPPRIM�: [gle80khy.default] - user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.021:43:26"); (PUP.MySearchDial)
REMPLAC� IE Params: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page [hxxp://start.mysearchdial.com/?f=1&a=telemsd1103&cd=2XzuyEtN2Y1L1QzuyCtD0E0ByCzy[...]] (PUP.MySearchDial)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Start Page [hxxp://start.mysearchdial.com/?f=1&a=telemsd1103&cd=2XzuyEtN2Y1L1QzuyCtD0E0ByCzy[...]] (PUP.MySearchDial)
REMPLAC� IE Params: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\\Start Page [hxxp://start.mysearchdial.com/?f=1&a=telemsd1103&cd=2XzuyEtN2Y1L1QzuyCtD0E0ByCzy[...]] (PUP.MySearchDial)
REMPLAC� IE Params: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs\\Tabs [hxxp://start.mysearchdial.com/?f=2&a=telemsd1103&cd=2XzuyEtN2Y1L1QzuyCtD0E0ByCzy[...]] (PUP.MySearchDial)
REMPLAC� Proxy: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride ( <-loopback> )
SUPPRIM� donn�e: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings [Bad : Port=50695 <-Loopback>] (Hijacker.Proxy)
SUPPRIM� donn�e: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings [Bad : Port=50695 <-Loopback>] (Hijacker.Proxy)


---\\ Fichier h�te. (1)
~ Le fichier h�te est l�gitime. (1)


---\\ T�che planifi�e. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ Explorateur ( Dossiers, Fichiers ). (19)
DEPLAC� fichier: C:\ProgramData\Partner\debug.log (Toolbar.Yahoo!)
DEPLAC� dossier: C:\ProgramData\Partner (Toolbar.Yahoo!)
DEPLAC� dossier: C:\Users\Catherine\AppData\Roaming\1H1Q\Pdf Creator Packages (Adware.InstallCore)
DEPLAC� dossier: C:\Users\Catherine\AppData\Roaming\1H1Q (Adware.InstallCore)
DEPLAC� fichier: C:\Users\Catherine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam\Settings.lnk (PUP.Wajam)
DEPLAC� fichier: C:\Users\Catherine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam\SignIn with Facebook.lnk (PUP.Wajam)
DEPLAC� fichier: C:\Users\Catherine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam\SignIn with Twitter.lnk (PUP.Wajam)
DEPLAC� fichier: C:\Users\Catherine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam\Wajam Website.lnk (PUP.Wajam)
DEPLAC� dossier: C:\Users\Catherine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Search (PUP.Wajam)
DEPLAC� dossier: C:\Users\Catherine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam\Explore Social Shopping (PUP.Wajam)
DEPLAC� dossier: C:\Users\Catherine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam\Uninstall Wajam (PUP.Wajam)
DEPLAC� dossier: C:\Users\Catherine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam (PUP.Wajam)
DEPLAC� dossier: C:\Users\Catherine\AppData\Local\Bundled software uninstaller (Adware.MegaSearch)
DEPLAC� dossier: C:\Users\Catherine\AppData\Local\Lollipop (Adware.Lollipop)
DEPLAC� fichier: C:\Users\Catherine\Downloads\free-easy-cd-dvd-burner_free_easy_cd_dvd_burner_5.0_francais_anglais_55986.exe [Bandoo Media Inc - Free Easy CD DVD Burner Install] (Adware.Bandoo)
DEPLAC� fichier: C:\END (Toolbar.Conduit)
DEPLAC� dossier: C:\Users\Catherine\Documents\Updater (PUP.Optional)
DEPLAC� dossier: C:\Users\Catherine\AppData\Local\{16BEA126-DF71-46D1-BEBD-FEC85166EC56} (Empty)
DEPLAC� dossier: C:\Users\Catherine\AppData\Local\{FB1C846B-3F4E-4FEE-802E-49544E8C52B5} (Empty)


---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (19)
SUPPRIM� valeur: HKCU\Software\Mozilla\Firefox\Extensions\\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2} [C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi] (PUP.Wajam)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} [http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=telemsd1103&cd=2XzuyEtN2Y1L1QzuyCtD0[...]] [Mysearchdial] (PUP.MySearchDial)
SUPPRIM� cl�*: HKCU\Software\InstallCore\1I1T1Q1S [] (Heuristic.InstallCore)
SUPPRIM� cl�*: HKCU\Software\InstallCore\Uninstall [] (Heuristic.InstallCore)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2529566462-1101065229-2766043068-1001\Software\BI [] (Adware.MegaSearch)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2529566462-1101065229-2766043068-1001\Software\InstallCore [] (Adware.InstallCore)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2529566462-1101065229-2766043068-1001\Software\lollipop [] (Adware.Lollipop)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2529566462-1101065229-2766043068-1001\Software\mysearchdial.com [] (Adware.Hotbar)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0} [esrv] (PUP.MySearchDial)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ApnStub_RASAPI32 [] (Toolbar.Ask)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ApnStub_RASMANCS [] (Toolbar.Ask)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MegaBrowse_RASAPI32 [] (PUP.MegaBrowse)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MegaBrowse_RASMANCS [] (PUP.MegaBrowse)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateMegaBrowse_RASAPI32 [] (PUP.MegaBrowse)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateMegaBrowse_RASMANCS [] (PUP.MegaBrowse)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilMegaBrowse_RASAPI32 [] (PUP.MegaBrowse)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilMegaBrowse_RASMANCS [] (PUP.MegaBrowse)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WajamInternetEnhancer_RASAPI32 [] (PUP.Wajam)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WajamInternetEnhancer_RASMANCS [] (PUP.Wajam)



---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scann�s : 62860
~ Items trouv�s : 0
~ Items r�par�s : 86


End of clean at 14:27:21
===================
ZHPCleaner-[R]-03042015-14_27_21.txt

Publicité


Signaler le contenu de ce document

Publicité