cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPCleaner v2015.5.15.237 by Nicolas Coolman (2015\05\15)
~ Run by Yann (Administrator) (15/05/2015 16:02:07)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Netttoyer
~ Report : C:\Users\Yann\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Yann\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 7, 64-bit Service Pack 1 (Build 7601)


---\\ Service. (4)
ARRET� : IHProtect Service (Adware.AgentODR)
SUPPRIM� : {11944e07-3e46-4956-b8c7-7e52c7a44c1d}Gw64 (PUP.LinkiDoo)
ARRET� : fugewybu (Generic.Trojan)
ARRET� : WindowsMangerProtect (PUP.Fuyu)


---\\ Navigateur internet. (34)
SUPPRIM� Firefox: [x7p52t9u.default] URL HomePage : hxxp://www.istartsurf.com/?type=hp&ts=1431630128&z=17bab4f6828b696f0b4916fg5z2c8g4qac2e2g3c8e&from=face&u[...] (PUP.IsStart)
SUPPRIM�: [x7p52t9u.default] - user_pref("browser.search.defaultenginename", "istartsurf"); (PUP.IsStart)
SUPPRIM�: [x7p52t9u.default] - user_pref("browser.search.searchengine.alias", "istartsurf"); (PUP.SearchEngine)
SUPPRIM�: [x7p52t9u.default] - user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine"); (PUP.SearchEngine)
SUPPRIM�: [x7p52t9u.default] - user_pref("browser.search.searchengine.iconURL", "http://www.istartsurf.com/favicon.ico"); (PUP.SearchEngine)
SUPPRIM�: [x7p52t9u.default] - user_pref("browser.search.searchengine.name", "istartsurf"); (PUP.SearchEngine)
SUPPRIM�: [x7p52t9u.default] - user_pref("browser.search.searchengine.ptid", "face"); (PUP.SearchEngine)
SUPPRIM�: [x7p52t9u.default] - user_pref("browser.search.searchengine.uid", "ST9640320AS_5WX144MA"); (PUP.SearchEngine)
SUPPRIM�: [x7p52t9u.default] - user_pref("browser.search.searchengine.url", "http://www.istartsurf.com/web/?type=ds&ts=1431630128&z[...] (PUP.SearchEngine)
SUPPRIM�: [x7p52t9u.default] - user_pref("browser.search.selectedEngine", "istartsurf"); (PUP.IsStart)
SUPPRIM�: [x7p52t9u.default] - user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.__defu[...] (PUP.CrossBrowser)
SUPPRIM�: [x7p52t9u.default] - user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.moneti[...] (PUP.Monetization)
SUPPRIM�: [x7p52t9u.default] - user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.name", "CinemaPlu[...] (Adware.CrossRider)
SUPPRIM�: [x7p52t9u.default] - user_pref("extensions.quick_start.enable_search1", false); (PUP.QuickStart)
SUPPRIM�: [x7p52t9u.default] - user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); (PUP.QuickStart)
DEPLAC� fichier: C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\x7p52t9u.default\searchplugins\istartsurf.xml (PUP.IsStart) [040E4446A2981B05C7E7D913050FF315]
DEPLAC� fichier: C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\x7p52t9u.default\Extensions\sweetsearch@gmail.com\chrome (PUP.SweetSearch) []
DEPLAC� fichier: C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\x7p52t9u.default\Extensions\sweetsearch@gmail.com\chrome.manifest (PUP.SweetSearch) [F68F2B19D21B56532262C0CC543D9ACB]
DEPLAC� fichier: C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\x7p52t9u.default\Extensions\sweetsearch@gmail.com\install.rdf (PUP.SweetSearch) [4CC6F3D8FFB476CA679242A807A87D84]
DEPLAC� fichier: C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\x7p52t9u.default\extensions\sweetsearch@gmail.com (PUP.SweetSearch) []
REMPLAC� Chrome Secure Preferences: hxxp://www.istartsurf.com/?type=hp&ts=1431630128&z=17bab4f6828b696f0b4916fg5z2c8g4qac2e2g3c8e&from=face&uid=ST9640320AS_5WX144MA (PUP.IsStart)
REMPLAC� IE Params: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL [hxxp://www.istartsurf.com/?type=hp&ts=1431630128&z=17bab4f6828b696f0b4916fg5z2c8[...]] (PUP.IsStart)
REMPLAC� IE Params: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page [hxxp://www.istartsurf.com/?type=hp&ts=1431630128&z=17bab4f6828b696f0b4916fg5z2c8[...]] (PUP.IsStart)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Default_Page_URL [hxxp://www.istartsurf.com/?type=hp&ts=1431630128&z=17bab4f6828b696f0b4916fg5z2c8[...]] (PUP.IsStart)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Default_Search_URL [hxxp://www.istartsurf.com/web/?type=ds&ts=1431630128&z=17bab4f6828b696f0b4916fg5[...]] (PUP.IsStart)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Start Page [hxxp://www.istartsurf.com/?type=hp&ts=1431630128&z=17bab4f6828b696f0b4916fg5z2c8[...]] (PUP.IsStart)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Search Page [hxxp://www.istartsurf.com/web/?type=ds&ts=1431630128&z=17bab4f6828b696f0b4916fg5[...]] (PUP.IsStart)
REMPLAC� IE Params: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\\Default_Page_URL [hxxp://www.istartsurf.com/?type=hp&ts=1431630128&z=17bab4f6828b696f0b4916fg5z2c8[...]] (PUP.IsStart)
REMPLAC� IE Params: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\\Default_Search_URL [hxxp://www.istartsurf.com/web/?type=ds&ts=1431630128&z=17bab4f6828b696f0b4916fg5[...]] (PUP.IsStart)
REMPLAC� IE Params: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\\Start Page [hxxp://www.istartsurf.com/?type=hp&ts=1431630128&z=17bab4f6828b696f0b4916fg5z2c8[...]] (PUP.IsStart)
REMPLAC� IE Params: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\\Search Page [hxxp://www.istartsurf.com/web/?type=ds&ts=1431630128&z=17bab4f6828b696f0b4916fg5[...]] (PUP.IsStart)
REMPLAC� Quicklaunch: C:\Users\Yann\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [Bad : http://www.istartsurf.com/?type=sc&ts=1431630128&z=17bab4f6828b696f0b4916fg5z2c8g4qac2e2g3c8e&from=face&uid=ST9640320AS_5WX144MA] (Hijacker.Browser)
REMPLAC� Startup\Programs: C:\Users\Yann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [Bad : http://www.istartsurf.com/?type=sc&ts=1431630128&z=17bab4f6828b696f0b4916fg5z2c8g4qac2e2g3c8e&from=face&uid=ST9640320AS_5WX144MA] (Hijacker.Browser)
REMPLAC� SystemTools: C:\Users\Yann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk [Bad : http://www.istartsurf.com/?type=sc&ts=1431630128&z=17bab4f6828b696f0b4916fg5z2c8g4qac2e2g3c8e&from=face&uid=ST9640320AS_5WX144MA] (Hijacker.Browser)


---\\ Fichier h�te. (1)
~ Le fichier h�te est l�gitime. (21)


---\\ T�che planifi�e. (14)
SUPPRIM� t�che: [1Ef2pn1k] [C:\Users\Yann\AppData\Roaming\1Ef2pn1k.exe (Not File) ] (Heuristic.Pirrit)
SUPPRIM� t�che: [d82b441e-b621-41d5-8422-88d4f4a99a73-1-6] [C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-1-6.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [d82b441e-b621-41d5-8422-88d4f4a99a73-1-7] [C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-1-7.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [d82b441e-b621-41d5-8422-88d4f4a99a73-10_user] [C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-10.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [d82b441e-b621-41d5-8422-88d4f4a99a73-3] [C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-3.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [d82b441e-b621-41d5-8422-88d4f4a99a73-4] [C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-4.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [d82b441e-b621-41d5-8422-88d4f4a99a73-5] [C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-5.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [d82b441e-b621-41d5-8422-88d4f4a99a73-5_user] [C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-5.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [d82b441e-b621-41d5-8422-88d4f4a99a73-6] [C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-6.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [d82b441e-b621-41d5-8422-88d4f4a99a73-7] [C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-7.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [ejgusJ7hqbrTPS] [C:\Users\Yann\AppData\Roaming\ejgusJ7hqbrTPS.exe (Not File) ] (Heuristic.Pirrit)
SUPPRIM� t�che: [kiuWrxnmpPlKJG0oDH9U] [C:\Users\Yann\AppData\Roaming\kiuWrxnmpPlKJG0oDH9U.exe (Not File) ] (Heuristic.Pirrit)
SUPPRIM� t�che: [SmartWeb Upgrade Trigger Task] [C:\Users\Yann\AppData\Local\SmartWeb\SmartWebHelper.exe (Not File) ] (PUP.SmartWebSearch)
SUPPRIM� t�che: [YourFile Update] [C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe (Not File) ] (PUP.YourFileDownloader)


---\\ Explorateur ( Dossiers, Fichiers ). (182)
DEPLAC� fichier: C:\Users\Yann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk [Bad : C:\Users\Yann\AppData\Local\SmartWeb\SmartWebHelper.exe] (PUP.SmartWebSearch)
DEPLAC� fichier: C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\x7p52t9u.default\searchplugins\istartsurf.xml (PUP.IsStart)
DEPLAC� fichier*: C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\x7p52t9u.default\Extensions\sweetsearch@gmail.com\chrome (PUP.SweetSearch)
DEPLAC� fichier: C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\x7p52t9u.default\Extensions\sweetsearch@gmail.com\chrome.manifest (PUP.SweetSearch)
DEPLAC� fichier: C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\x7p52t9u.default\Extensions\sweetsearch@gmail.com\install.rdf (PUP.SweetSearch)
DEPLAC� fichier*: C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\x7p52t9u.default\extensions\sweetsearch@gmail.com (PUP.SweetSearch)
DEPLAC� fichier: C:\Users\Yann\AppData\Roaming\1Ef2pn1k.exe [Copyright 2001 - ] (Adware.Pirrit)
DEPLAC� fichier: C:\Windows\Tasks\1Ef2pn1k.job (Adware.Pirrit)
DEPLAC� fichier: C:\Windows\System32\Tasks\1Ef2pn1k (Adware.Pirrit)
DEPLAC� fichier: C:\Users\Yann\AppData\Roaming\inst.exe (Adware.Pirrit)
DEPLAC� fichier: C:\Users\Yann\AppData\Roaming\kiuWrxnmpPlKJG0oDH9U.exe [Copyright 2001 - ] (Adware.Pirrit)
DEPLAC� fichier: C:\Windows\Tasks\kiuWrxnmpPlKJG0oDH9U.job (Adware.Pirrit)
DEPLAC� fichier: C:\Windows\System32\Tasks\kiuWrxnmpPlKJG0oDH9U (Adware.Pirrit)
DEPLAC� fichier: C:\Program Files (x86)\XTab\ProtectService.exe [XTab system - ProtectSvc.exe] (Adware.AgentODR)
DEPLAC� fichier: C:\Windows\System32\drivers\{11944e07-3e46-4956-b8c7-7e52c7a44c1d}Gw64.sys [StdLib - StdLib] (PUP.LinkiDoo)
DEPLAC� fichier: C:\Users\Yann\AppData\Roaming\30464E43-1431017037-3646-5247-60EB694D5945\nsf27C6.tmp (Generic.Trojan)
DEPLAC� fichier: C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [SysTool PasSame LIMITED - Windows SysTool Svr] (PUP.Fuyu)
DEPLAC� fichier: C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-1-6.exe [Cinema PlusV14.05 - CinemaPlus-3.2cV14.05 exe] (Adware.CrossRider)
DEPLAC� fichier: C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-1-7.exe [Cinema PlusV14.05 - CinemaPlus-3.2cV14.05 exe] (Adware.CrossRider)
DEPLAC� fichier: C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-10.exe [Cinema PlusV14.05 - CinemaPlus-3.2cV14.05 exe] (Adware.CrossRider)
DEPLAC� fichier: C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-3.exe [Cinema PlusV14.05 - CinemaPlus-3.2cV14.05 exe] (Adware.CrossRider)
DEPLAC� fichier: C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-4.exe [Cinema PlusV14.05 - CinemaPlus-3.2cV14.05 exe] (Adware.CrossRider)
DEPLAC� fichier: C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-5.exe [Cinema PlusV14.05 - CinemaPlus-3.2cV14.05 exe] (Adware.CrossRider)
DEPLAC� fichier: C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-6.exe [Cinema PlusV14.05 - CinemaPlus-3.2cV14.05 exe] (Adware.CrossRider)
DEPLAC� fichier: C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-7.exe [Cinema PlusV14.05 - CinemaPlus-3.2cV14.05 exe] (Adware.CrossRider)
DEPLAC� fichier: C:\Windows\Tasks\ejgusJ7hqbrTPS.job (Heuristic.Pirrit)
DEPLAC� fichier: C:\Windows\System32\Tasks\ejgusJ7hqbrTPS (Heuristic.Pirrit)
DEPLAC� fichier: C:\Windows\Tasks\d82b441e-b621-41d5-8422-88d4f4a99a73-1-6.job (Adware.CrossRider)
DEPLAC� fichier: C:\Windows\Tasks\d82b441e-b621-41d5-8422-88d4f4a99a73-1-7.job (Adware.CrossRider)
DEPLAC� fichier: C:\Windows\Tasks\d82b441e-b621-41d5-8422-88d4f4a99a73-10_user.job (Adware.CrossRider)
DEPLAC� fichier: C:\Windows\Tasks\d82b441e-b621-41d5-8422-88d4f4a99a73-3.job (Adware.CrossRider)
DEPLAC� fichier: C:\Windows\Tasks\d82b441e-b621-41d5-8422-88d4f4a99a73-4.job (Adware.CrossRider)
DEPLAC� fichier: C:\Windows\Tasks\d82b441e-b621-41d5-8422-88d4f4a99a73-5.job (Adware.CrossRider)
DEPLAC� fichier: C:\Windows\Tasks\d82b441e-b621-41d5-8422-88d4f4a99a73-5_user.job (Adware.CrossRider)
DEPLAC� fichier: C:\Windows\Tasks\d82b441e-b621-41d5-8422-88d4f4a99a73-6.job (Adware.CrossRider)
DEPLAC� fichier: C:\Windows\Tasks\d82b441e-b621-41d5-8422-88d4f4a99a73-7.job (Adware.CrossRider)
DEPLAC� fichier: C:\Program Files (x86)\CinemaPlus-3.2cV14.05\d82b441e-b621-41d5-8422-88d4f4a99a73-64.exe [Cinema PlusV14.05 - CinemaPlus-3.2cV14.05 exe] (Adware.CrossRider)
DEPLAC� fichier: C:\Windows\Installer\30e67f.msi [globalupdate - Windows Installer XML Toolset (3.9.1208.0)] (PUP.GlobalUpdate)
DEPLAC� fichier: C:\Users\Yann\AppData\Local\Temp\nsr6E3F.tmp\Bubble Dock BSetup.exe [Nosibay - ] (PUP.Nosibay)
DEPLAC� fichier: C:\Users\Yann\AppData\Local\Temp\nsm96F4.tmp\63100.Bubble_Dock.BBD023.no.exe [Nosibay - Bubble Dock Installer] (PUP.Nosibay)
DEPLAC� fichier: C:\Users\Yann\AppData\Local\Temp\is-T7KSP.tmp\bubbledock_soft_partner.exe [Nosibay - ] (PUP.Nosibay)
DEPLAC� fichier: C:\Users\Yann\AppData\Local\Temp\comh.303544\globalupdateCrashHandler.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate)
DEPLAC� fichier*: C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage (Adware.PricePeep)
DEPLAC� fichier*: C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage-journal (Adware.PricePeep)
DEPLAC� fichier*: C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage (PUP.Re-Markable)
DEPLAC� fichier*: C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markable00.re-markable.net_0.localstorage-journal (PUP.Re-Markable)
DEPLAC� fichier: C:\Users\Yann\AppData\Local\Temp\Bubble Dock.txt (PUP.BubbleDock)
DEPLAC� fichier: C:\Users\Yann\AppData\Local\Temp\LBubble Dock.txt (PUP.BubbleDock)
DEPLAC� fichier: C:\Users\Yann\AppData\Local\Temp\nsf805B.tmp [CMI Limited - Setup] (PUP.CMILimited)
DEPLAC� fichier: C:\Users\Yann\AppData\Local\Temp\nsyF610.tmp [CMI Limited - Setup] (PUP.CMILimited)
DEPLAC� fichier: C:\Users\Yann\AppData\Local\Temp\vitruvian-installer-hardwareprofile-v0001 (PUP.Vitruvian)
DEPLAC� fichier: C:\Users\Yann\AppData\Local\Temp\vitruvian-installer-install-v0003 (PUP.Vitruvian)
DEPLAC� fichier: C:\Users\Yann\AppData\Local\Temp\vitruvian-installer-processes-v0002 (PUP.Vitruvian)
DEPLAC� fichier: C:\Users\Yann\AppData\Local\Temp\Uninstall.exe [Copyright 2013 - ] (PUP.Optional)
DEPLAC� dossier: C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\x7p52t9u.default\Extensions\sweetsearch@gmail.com (PUP.SweetSearch)
DEPLAC� dossier: C:\Program Files (x86)\13c0c15a-7b86-4a21-b72b-22bb68b6e93f (Adware.CrossRider)
DEPLAC� dossier: C:\Program Files (x86)\1c7846eb-e798-4a28-ab52-399816f1117a (Adware.CrossRider)
DEPLAC� dossier: C:\Program Files (x86)\b364275f-e517-4f10-919c-79c293439219 (Adware.CrossRider)
DEPLAC� dossier: C:\Users\Yann\AppData\Roaming\30464E43-1431017037-3646-5247-60EB694D5945 (Generic.Trojan)
DEPLAC� dossier: C:\Program Files (x86)\AnyProtectEx (PUP.AnyProtect)
DEPLAC� dossier: C:\Program Files (x86)\CinemaPlus-3.2cV14.05 (Adware.CrossRider)
DEPLAC� dossier: C:\Program Files (x86)\gmsd_fr_539 (Adware.CrossRider)
DEPLAC� dossier: C:\Program Files (x86)\XTab (Adware.AgentODR)
DEPLAC� dossier: C:\ProgramData\IHProtectUpDate (Adware.AgentODR)
DEPLAC� dossier: C:\ProgramData\WindowsMangerProtect (PUP.Fuyu)
DEPLAC� dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP (Adware.GamesDesktop)
DEPLAC� dossier: C:\Users\Yann\AppData\Roaming\AnyProtectEx (PUP.AnyProtect)
DEPLAC� dossier: C:\Users\Yann\AppData\Roaming\istartsurf (PUP.IsStart)
DEPLAC� dossier: C:\Users\Yann\AppData\LocalLow\SmartWeb (PUP.SmartWebSearch)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\gmsd_fr_539 (Adware.CrossRider)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\SmartWeb (PUP.SmartWebSearch)
DEPLAC� dossier: C:\Program Files (x86)\Software (Adware.Boxore)
DEPLAC� dossier: C:\ProgramData\Software (Adware.Boxore)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{005EC628-078E-4BE1-B6C6-E4B91B32D353} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{01E9B7C1-4F6A-46C0-B7C6-02D445A199A5} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{05DA0E89-4DF2-4E33-BC48-B42B44BFDC0F} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{066AAA85-CAC9-482F-9625-862F33D22A6C} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{0735CEDD-53F7-4143-ADE6-1EF45105B141} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{0A4297F2-70D1-4D25-ABA7-2BBD42E6655D} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{0C0572E3-48C3-47EA-830B-2DD486065887} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{1054C581-86D0-490C-BF58-67B072344813} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{1326A17C-AC22-4403-AB8E-B63B7A978D88} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{14A05E33-5F05-4305-BC7C-C598B147107E} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{1CF84443-6752-478D-9A14-5250E6042B7D} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{1E11F8FA-79BE-457F-9E72-AE75AE540AA9} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{1F5E9EBC-31A3-414D-83CF-05F93C591B78} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{27D30EB9-3A77-42A3-AC0D-40578B532E87} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{2981AF8F-1C5D-4765-9A8C-B0935857D3FD} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{2A98EAFE-8B57-407A-9457-89EF295FF866} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{2B8567EA-BF8E-42F6-8172-A7A673C0B3BB} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{2C3EACCF-82B4-46FB-A98E-FEA97AAC8162} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{2C57EEB6-50D8-445E-92AF-DBC97BBAADB3} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{30F893F8-5EBB-4377-8FAA-EF1C86BDCF2A} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{313FFFD1-AD94-48F8-B9C5-0ABB6DEDC5C8} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{32CB3C38-8EFF-43E5-8727-DA6D8CFABB0B} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{34646D1D-ADAD-4BB0-A3B6-0D2205EBDFB1} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{377D0684-7FB3-44E2-B563-13A814D37111} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{394E6133-E260-4B5A-8147-48A5F4F04CD2} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{396DD313-5F79-4D90-B06C-AA0F685FDEC7} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{39E29440-4C6D-436E-8D04-574AB1369AAB} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{3AB7E526-81B6-4792-A088-B478C0A2E8B3} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{3BBAD3A8-24C2-4530-95EB-3A9250D06929} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{3D865AC2-28A7-428C-AEDF-C5E187A2FC21} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{3E851430-8122-4A6E-948E-5F07D8D4AA11} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{40553EFF-4C7E-4750-83C7-787D63C4A862} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{426D5FB2-8602-4C0E-8181-C8451F572601} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{44783930-ADA4-411A-8210-30A163A194DF} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{46C69A62-53B8-4EBA-9DE6-0122C9B6E6F6} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{485BF24B-93B9-4C01-9AD4-0E3AFF80E7D9} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{4A3BBEA1-E5C4-4425-8F64-2D2FCFF12104} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{4ABE5BAC-6FDF-4D9D-8713-000601436380} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{4B33FB57-65FA-4F7E-B776-1526076DB0B4} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{4BEF9C77-7CA2-4137-A839-C266CC0AFC99} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{4D4595C2-930F-4D69-B1C0-B2351257CED0} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{4F732979-823C-4108-BF36-759E968DF967} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{584E7D93-B191-4006-9E82-49D9ED5BA1EF} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{588D9200-8AC1-4F3C-B575-E51C636E9961} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{5B350ED2-B952-4A9E-8F15-E8984B20D34F} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{60B7816B-8780-4E11-9CE0-090B9D49B162} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{654F73B0-EC2C-40E1-9DC7-6498013DBFE1} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{6786C8CC-EA4F-48E0-BC52-F0C150F574A2} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{68BE5AEC-1164-4480-95BB-CE84D440FC02} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{74E04412-4698-4D51-9F64-4B9DD7F29715} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{77360539-3ACF-4B60-BDA1-0ACD7D71FA94} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{7772F0D1-E1EB-4543-94D4-38246587EDD9} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{78823FE7-EA30-4CFC-8A5E-4A5E3A931848} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{7A2108A1-E6FE-4CFC-99EE-B5A809DE2B42} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{7A73F981-B968-4F61-928D-F9ED510F2F29} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{7D6EC49B-E2DC-4A99-A14E-EB051D27C61B} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{7EDD5598-397D-4405-A051-A6EE2824240C} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{7FD663D6-7F3E-4AB2-AD97-D0D0D0095113} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{82AEEF46-8DA9-431C-A957-030ACA916936} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{8BEAB080-99E5-4A80-A72F-38B4EB83DA8E} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{8E920084-159A-44FD-B99A-31CC4665378C} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{8EB4A365-2165-40EF-9E6C-97DF6A112B6D} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{939417A9-20A6-4B65-BC9F-68B6E412003D} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{93E076AC-6039-477A-B2B6-AE05F5E0E855} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{9500C8D1-F8F4-4CE0-90CE-9222FDDDAF94} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{963019AA-8EE3-42E7-9BF4-B3AC59C21DC5} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{96915AB7-CD79-4EB7-8A61-B05F85E032B0} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{9755BECF-D491-4D36-B2E9-6FFDF7C6AAF0} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{98D6006D-EA45-4F6A-80F1-ACCB43C2E5CB} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{9BCF6FD8-ED4B-4F8A-A450-81AC5E54BF23} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{9EBA9CE0-24E9-46E6-8713-3A609276ABC1} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{A0B345CD-EF72-4FA3-B647-F404CB1330CF} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{A46BE65C-3AF7-4238-9FA8-7938B7721AC9} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{A522161C-1CC1-47C2-B6C9-5754C737D3BF} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{A583B5AE-4F3B-4657-BD4A-3FDD4592FC81} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{A640A94A-5F11-4E48-A9AC-EB67EE698C83} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{A8059885-3A5F-42A7-9CB3-8F7A18EF863A} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{A8FBCC7C-3F92-4CB9-B9D7-0F26735E389D} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{AA531D4B-5DF2-4ADB-BDB9-3AF293DF39B8} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{ADCDC178-7A8A-4DE5-912B-B0097DC0D41B} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{AF8D1285-02CE-4503-B2C3-7C94854850B9} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{BA3EA5EE-629B-4115-97F9-31D7E9330567} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{BA42B79B-E881-4574-9154-0A1AD4D0AF7E} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{BAB59E80-A201-44B6-9340-C63D0E82F9E8} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{BC4FD939-88CD-4CD5-8497-FB3F01AB68F3} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{C1E8438F-C7F0-49BA-9520-502C8CD2978D} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{C4AC5F1D-70A9-4BD9-800A-F5DA02304D9D} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{C5B41584-547F-4FE0-992B-01FC6686805E} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{C8DDDDC0-969C-481D-A8D8-EFB544EF65CF} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{CB5EEAD0-6C01-46EF-A204-3F1CF666D182} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{CB815E90-ED92-4EB0-99AA-4E982095C708} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{CB87A241-44D1-4A96-9248-B6CDA7351483} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{CE010743-3CB5-43C0-989E-237010BCDA43} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{D371FDCD-FADC-4147-BA57-AC83DB282D06} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{D451CABA-4E7E-402F-8F3A-EDFC51EEE31D} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{D64304ED-C452-4A16-BF3E-F5681A5245FB} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{D7A09F5B-4107-41DA-8C36-21F6820F781B} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{D8D7BE68-DD50-4974-9B47-527384631E6F} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{D964146E-633A-40B5-819E-B8ED20229706} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{E42A2719-F9CF-4384-8AA6-1768EB025433} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{E72C8CC2-6BFB-4365-9C74-30DBCEF978F0} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{E8518E4F-7A06-4C3D-997C-DBCAA7FD4297} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{E8ED812D-9416-409B-A731-15C05D06551C} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{EB15644C-34FA-40C8-BD82-7240B380D537} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{F0FF137A-B301-4BC0-841A-16F08488EC03} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{F1D1A343-3B3A-419A-BF7F-6B59540045A7} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{F296E675-91F9-4690-9479-CC4F99323E7D} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{F425B3B0-0F34-4E65-BC16-66F28D59597D} (Empty)
DEPLAC� dossier: C:\Users\Yann\AppData\Local\{F4DCEF69-3339-478B-8C9C-B045195341F5} (Empty)


---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (109)
REMPLAC� donn�e: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope \\\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} (Hijacker.SearchScopes)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&f[...]] [Bing] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&f[...]] [e] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&f[...]] [istartsurf] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&f[...]] [Google] (PUP.IsStart)
SUPPRIM� donn�e: HKCR\CRSBRWSHTML\Shell\Open\Command\\Default [Bad : [html] ] (Broken.OpenCommand)
REMPLAC� donn�e: HKLM\...\Google Chrome\Shell\open\Command\\"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.istartsurf.com/?type=sc&ts=1431630128&z=17bab4f6828b696f0b4916fg5z2c8g4qac2e2g3c8e&from=face&uid=ST9640320AS_5WX144MA (PUP.IsStart)
REMPLAC� donn�e: HKLM\...\IEXPLORE.EXE\Shell\open\Command\\C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1431630128&z=17bab4f6828b696f0b4916fg5z2c8g4qac2e2g3c8e&from=face&uid=ST9640320AS_5WX144MA (PUP.IsStart)
SUPPRIM� donn�e: HKCR\.html\\Default [Bad : CRSBRWSHTML] (PUP.CrossBrowse)
SUPPRIM� donn�e: [X64] HKLM\SOFTWARE\Classes\.html\\Default [Bad : CRSBRWSHTML] (PUP.CrossBrowse)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=ST9640320AS_5WX144MA&ts=1431630245&type=default&q={searchTerms}] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=ST9640320AS_5WX144MA&ts=1431630245&type=default&q={searchTerms}] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=ST9640320AS_5WX144MA&ts=1431630245&type=default&q={searchTerms}] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=face&utm_campaign=install_ie&utm_content=ds&from=face&uid=ST9640320AS_5WX144MA&ts=1431630245&type=default&q={searchTerms}] (PUP.IsStart)
SUPPRIM� cl�*: HKCU\Software\WajIntEnhance [] (PUP.Wajam)
SUPPRIM� cl�*: HKCU\Software\1Ef2pn1k [] (Adware.Pirrit)
SUPPRIM� cl�*: HKCU\Software\kiuWrxnmpPlKJG0oDH9U [] (Adware.Pirrit)
SUPPRIM� cl�*: HKLM\SYSTEM\CurrentControlSet\Services\IHProtect Service [C:\Program Files (x86)\XTab\ProtectService.exe (Not File)] (Adware.AgentODR)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\SearchProtect [] (Adware.Sambreel)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\Currentversion\Uninstall\SearchProtect [] (Adware.Sambreel)
SUPPRIM� cl�*: HKCU\Software\CinemaPlus-3.2cV14.05-nv [] (Adware.CrossRider)
SUPPRIM� cl�*: HKCU\Software\CinemaPlus-3.2cV14.05-nv-ie [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\f440bd9e-fafe-4909-8958-3530ea97e93b [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\CinemaPlus-3.2cV14.05-nv [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\CinemaPlus-3.2cV14.05-nv-ie [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\{11944e07-3e46-4956-b8c7-7e52c7a44c1d}Gw64 [C:\Windows\System32\drivers\{11944e07-3e46-4956-b8c7-7e52c7a44c1d}Gw64.sys (Not File)] (PUP.LinkiDoo)
SUPPRIM� cl�*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\fugewybu [C:\Users\Yann\AppData\Roaming\30464E43-1431017037-3646-5247-60EB694D5945\nsf27C6.tmp (Not File)] (Generic.Trojan)
SUPPRIM� cl�*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\insvc_1.10.0.14 ["C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe" (Not File)] (Heuristic.Optional)
SUPPRIM� cl�: [X64] HKLM\SYSTEM\CurrentControlSet\Services\IHProtect Service [C:\Program Files (x86)\XTab\ProtectService.exe (Not File)] (Adware.AgentODR)
SUPPRIM� cl�*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\WindowsMangerProtect [C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (Not File)] (PUP.Fuyu)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\AnyProtect [] (PUP.AnyProtect)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\APN PIP [] (Toolbar.Agent)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\CinemaPlus-3.2cV14.05 [] (Adware.CrossRider)
SUPPRIM� cl�: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\CinemaPlus-3.2cV14.05-nv [] (Adware.CrossRider)
SUPPRIM� cl�: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\CinemaPlus-3.2cV14.05-nv-ie [] (Adware.CrossRider)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\HomeTab [] (PUP.CertifiedToolbar)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\Linkey [] (PUP.LinkeySearch)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\SearchProtectWS [] (PUP.SearchProtect)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\SimplyTech [] (PUP.SimplyTech)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\TNT2 [] (Adware.TidyNetwork)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\Tutorials [] (PUP.AgenceExclusive)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\TutoTag [] (PUP.AgenceExclusive)
SUPPRIM� cl�: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\WajIntEnhance [] (Adware.Multiplug)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\Classes\.htm [CRSBRWSHTML] (PUP.CrossBrowse)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\Classes\.html [CRSBRWSHTML] (PUP.CrossBrowse)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\Classes\.shtml [CRSBRWSHTML] (PUP.CrossBrowse)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\Classes\.xht [CRSBRWSHTML] (PUP.CrossBrowse)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-3958569604-1539736429-1853792751-1000\Software\Classes\.xhtml [CRSBRWSHTML] (PUP.CrossBrowse)
SUPPRIM� cl�: HKCU\Software\AnyProtect [] (PUP.AnyProtect)
SUPPRIM� cl�: HKCU\Software\APN PIP [] (Toolbar.Agent)
SUPPRIM� cl�: HKCU\Software\CinemaPlus-3.2cV14.05 [] (Adware.CrossRider)
SUPPRIM� cl�: HKCU\Software\HomeTab [] (PUP.CertifiedToolbar)
SUPPRIM� cl�: HKCU\Software\Linkey [] (PUP.LinkeySearch)
SUPPRIM� cl�: HKCU\Software\SearchProtectWS [] (PUP.SearchProtect)
SUPPRIM� cl�: HKCU\Software\SimplyTech [] (PUP.SimplyTech)
SUPPRIM� cl�: HKCU\Software\TNT2 [] (Adware.TidyNetwork)
SUPPRIM� cl�*: HKCU\Software\Tutorials [] (PUP.AgenceExclusive)
SUPPRIM� cl�: HKCU\Software\TutoTag [] (PUP.AgenceExclusive)
SUPPRIM� cl�*: HKCU\Software\AppDataLow\Software\MessengerPlusLive_France_TB [] (PUP.Conduit)
SUPPRIM� cl�*: HKCU\Software\AppDataLow\Software\SmartBar [] (PUP.QuickShare)
SUPPRIM� cl�*: HKCU\Software\AppDataLow\Software\SmartWeb [] (PUP.SmartWebSearch)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP [] (Adware.IMBooster)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar [] (Adware.IMBooster)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey [] (PUP.LinkeySearch)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect [] (PUP.SearchProtect)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com [] (PUP.Vosteran)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance [] (Adware.Multiplug)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\re-markable.net [] (PUP.Re-Markable)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\static.re-markable00.re-markable.net [1812] (PUP.Re-Markable)
SUPPRIM� cl�*: HKCU\Software\Mozilla\Extends [] (PUP.FastStart)
SUPPRIM� cl�*: [X64] HKLM\Software\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E [globalupdate Helper] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect [] (PUP.Fuyu)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MediaSmartWebcam [C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\HPMediaSmartWebcam.exe] (PUP.SmartWebSearch)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\AskPartnerNetwork [] (Toolbar.AskBar)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\CinemaPlus-3.2cV14.05 [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Conduit [] (PUP.Conduit)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\FFPluginHp [] (PUP.SweetSearch)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\GAMESDESKTOP [] (Adware.GamesDesktop)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\IHProtect [] (Adware.AgentODR)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Iminent [] (Adware.IMBooster)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\istartsurfSoftware [] (PUP.IsStart)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\SupDp [] (Adware.SupTab)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\supTab [] (Adware.SupTab)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect [] (PUP.Fuyu)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Tutorials [] (PUP.AgenceExclusive)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\WajIntEnhance [] (Adware.Multiplug)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-3.2cV14.05 [Cinema PlusV14.05] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_fr_539_is1 [GAMESDESKTOP] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP [] (Adware.IMBooster)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar [] (Adware.IMBooster)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall [istartsurf] (PUP.IsStart)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Linkey [] (PUP.LinkeySearch)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartWeb [SoftBrain Technologies Ltd.] (PUP.SmartWebSearch)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage [] (Adware.Downware)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com [] (PUP.Vosteran)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance [] (Adware.Multiplug)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [globalupdate Inc.] (PUP.GlobalUpdate)
SUPPRIM� cl�: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\MediaSmartWebcam [C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\HPMediaSmartWebcam.exe] (PUP.SmartWebSearch)
SUPPRIM� valeur: [X64] HKLM\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\\sweetsearch@gmail.com [C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\x7p52t9u.default\extensions\sweetsearch@gmail.com] (PUP.SweetSearch)
SUPPRIM� valeur: [X64] HKLM\Software\Classes\.htm\OpenWithProgIDs\\CRSBRWSHTML [] (PUP.CrossBrowse)
SUPPRIM� valeur: [X64] HKLM\Software\Classes\.html\OpenWithProgIDs\\CRSBRWSHTML [] (PUP.CrossBrowse)
SUPPRIM� valeur: [X64] HKLM\Software\Classes\.shtml\OpenWithProgIDs\\CRSBRWSHTML [] (PUP.CrossBrowse)
SUPPRIM� valeur: [X64] HKLM\Software\Classes\.webp\OpenWithProgIDs\\CRSBRWSHTML [] (PUP.CrossBrowse)
SUPPRIM� valeur: [X64] HKLM\Software\Classes\.xht\OpenWithProgIDs\\CRSBRWSHTML [] (PUP.CrossBrowse)
SUPPRIM� valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_E83B571DF135D266683AB463E417C8DF ["C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window] (PUP.Vosteran)
SUPPRIM� valeur: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\3D BubbleSound ["C:\Program Files\BubbleSound\3D BubbleSound.exe"] (PUP.BubbleSound)
SUPPRIM� valeur: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\SmartWeb [C:\Users\Yann\AppData\Local\SmartWeb\SmartWebHelper.exe] (PUP.SmartWeb)
SUPPRIM� valeur: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_fr_539 ["C:\Program Files (x86)\gmsd_fr_539\gmsd_fr_539.exe"] (Adware.CrossRider)
SUPPRIM� valeur: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\upgmsd_fr_539.exe [C:\Users\Yann\AppData\Local\gmsd_fr_539\upgmsd_fr_539.exe -runonce] (Adware.CrossRider)


---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scann�s : 5544
~ Items trouv�s : 0
~ Items annul�s : 0
~ Items r�par�s : 351


End of clean at 16:03:06
===================
ZHPCleaner-[R]-15052015-16_03_06.txt
ZHPCleaner-[S]-15052015-16_01_22.txt

Publicité


Signaler le contenu de ce document

Publicité