cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPCleaner v2015.8.24.331 by Nicolas Coolman (2015/08/24)
~ Run by Tony (Administrator) (24/08/2015 23:49:42)
~ Site : http://www.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Users\Tony\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Tony\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)


---\\ Service. (0)


---\\ Navigateur internet. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (21)


---\\ Tâche planifiée. (1)
SUPPRIMÉ tâche: [AutoPico Daily Restart] [C:\Program Files\KMSpico\AutoPico.exe (Not File) ] =>HackTool.KMSpico


---\\ Explorateur ( Dossiers, Fichiers ). (11)
DEPLACÉ fichier: C:\Users\Tony\Desktop\Marine Aquarium 3.lnk [Bad : C:\Windows\System32\MarineAquarium3.scr] =>PUP.Optional.MarineAquarium
DEPLACÉ fichier: C:\Program Files\KMSpico\Service_KMS.exe [@ByELDI - Service_KMS] =>HackTool.KMSpico
DEPLACÉ fichier: C:\Program Files\KMSpico\AutoPico.exe [@ByELDI - AutoPico] =>HackTool.KMSpico
DEPLACÉ dossier: C:\Program Files\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier: C:\Users\Tony\AppData\Local\{06A3594C-BEFE-41F7-9479-88B6CFA7A090} =>Empty
DEPLACÉ dossier: C:\Users\Tony\AppData\Local\{22CACC70-D7FF-4F6B-9A73-68EC05C38433} =>Empty
DEPLACÉ dossier: C:\Users\Tony\AppData\Local\{4F935B4A-94FA-481B-9D15-EC844E128F75} =>Empty
DEPLACÉ dossier: C:\Users\Tony\AppData\Local\{64958A9F-4E34-4A82-83F1-B68E8850A5E9} =>Empty
DEPLACÉ dossier: C:\Users\Tony\AppData\Local\{799B99C0-041F-4CC4-8D82-FF3C44D427D6} =>Empty
DEPLACÉ dossier: C:\Users\Tony\AppData\Local\{F6835E5F-D5E7-4148-84F1-E16467266670} =>Empty


---\\ Base de Registres ( Clés, Valeurs, Données ). (59)
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [C:\Program Files\KMSpico\Service_KMS.exe (Not File)] =>HackTool.KMSpico
SUPPRIMÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [C:\Program Files\KMSpico\Service_KMS.exe (Not File)] =>HackTool.KMSpico
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1371546336-444658520-3716415940-1000\Software\sysTPL [] =>.Legitimate.sysTPL
SUPPRIMÉ clé: HKCU\Software\sysTPL [] =>.Legitimate.sysTPL
SUPPRIMÉ clé*: HKCU\Software\AppDataLow\Software\SmartBar [] =>PUP.Optional.QuickShare
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E86BDDD-9038-4f12-8572-4A859C76F21F} [C:\Program Files (x86)\RewardsArcade (Not File)] =>PUP.Optional.RewardsArcade
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\ACEngSvr.ACEngineCtrl [ACEngineCtrl Class] =>PUP.Optional.Abengine
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\ACEngSvr.ACEngineCtrl.1 [ACEngineCtrl Class] =>PUP.Optional.Abengine
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{34ABA258-14C1-4290-B2EF-5787B6218996} [ACEngineCtrl Class] =>PUP.Optional.Abengine
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Applications\iLividSetup-r394-n-bi.exe [] =>PUP.Optional.Bandoo
SUPPRIMÉ clé*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\sysTPLMonitor [] =>.Legitimate.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\sysTPLService [] =>.Legitimate.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\mamverifier [] =>Toolbar.Mamverifier
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1 [KMSpico v9.3.3] =>HackTool.KMSpico
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1672163f-8651-4c0d-9c05-4ba941123972} [C:\Users\Tony\AppData\Roaming\BrowserExtensions (Not File)] =>PUP.Optional.BrowserExtensions
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{61db39d5-034c-45c0-8bb2-daf857edcf3b} [C:\Users\Tony\AppData\Roaming\BrowserExtensions (Not File)] =>PUP.Optional.BrowserExtensions
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SereneScreen Marine Aquarium 3_is1 [Prolific Publishing, Inc.] =>PUP.Optional.MarineAquarium
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ApnStub_RASAPI32 [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ApnStub_RASMANCS [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Babylon_RASAPI32 [] =>PUP.Optional.Babylon
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Babylon_RASMANCS [] =>PUP.Optional.Babylon
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BrowserSafeguard_RASAPI32 [] =>PUP.Optional.SafeGuard
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BrowserSafeguard_RASMANCS [] =>PUP.Optional.SafeGuard
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\bundlesweetimsetup_RASAPI32 [] =>PUP.Optional.SweetIM
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\bundlesweetimsetup_RASMANCS [] =>PUP.Optional.SweetIM
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ConduitInstallerStub_RASAPI32 [] =>PUP.Optional.Conduit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ConduitInstallerStub_RASMANCS [] =>PUP.Optional.Conduit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ConduitInstaller_RASAPI32 [] =>PUP.Optional.Conduit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ConduitInstaller_RASMANCS [] =>PUP.Optional.Conduit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExtensionUpdaterService_RASAPI32 [] =>PUP.Optional.IncrediBar
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExtensionUpdaterService_RASMANCS [] =>PUP.Optional.IncrediBar
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IncrediMail_MediaBar_2ToolbarHelper_RASAPI32 [] =>PUP.Optional.IncrediMediaBar
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IncrediMail_MediaBar_2ToolbarHelper_RASMANCS [] =>PUP.Optional.IncrediMediaBar
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\kujytuo_RASAPI32 [] =>Virus.Kujytuo
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\kujytuo_RASMANCS [] =>Virus.Kujytuo
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASAPI32 [] =>PUP.Optional.Babylon
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASMANCS [] =>PUP.Optional.Babylon
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PriceGong_RASAPI32 [] =>PUP.Optional.PriceGong
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PriceGong_RASMANCS [] =>PUP.Optional.PriceGong
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\RewardsArcade_RASAPI32 [] =>PUP.Optional.RewardsArcade
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\RewardsArcade_RASMANCS [] =>PUP.Optional.RewardsArcade
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SweetIM_RASAPI32 [] =>PUP.Optional.SweetIM
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SweetIM_RASMANCS [] =>PUP.Optional.SweetIM
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPLMonitor_RASAPI32 [] =>.Legitimate.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPLMonitor_RASMANCS [] =>.Legitimate.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPLService_RASAPI32 [] =>.Legitimate.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPLService_RASMANCS [] =>.Legitimate.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPL_RASAPI32 [] =>.Legitimate.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPL_RASMANCS [] =>.Legitimate.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WiseConvert_1_RASAPI32 [] =>Toolbar.Agent
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WiseConvert_1_RASMANCS [] =>Toolbar.Agent
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-231C_RASAPI32 [] =>PUP.Optional.Yontoo
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-231C_RASMANCS [] =>PUP.Optional.Yontoo
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1672163f-8651-4c0d-9c05-4ba941123972} [C:\Users\Tony\AppData\Roaming\BrowserExtensions (Not File)] =>PUP.Optional.BrowserExtensions
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{226BC1C7-9100-4B87-80AD-960C7DE7D15E} [C:\Program Files (x86)\WiseConvert_1.5 (Not File)] =>Toolbar.Agent
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{61db39d5-034c-45c0-8bb2-daf857edcf3b} [C:\Users\Tony\AppData\Roaming\BrowserExtensions (Not File)] =>PUP.Optional.BrowserExtensions
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90E4CD0C-426F-4207-805B-7885AB32D43F} [C:\Users\Tony\AppData\Roaming\BrowserExtensions (Not File)] =>PUP.Optional.BrowserExtensions
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CAE9BEC8-4723-4347-AFC6-25EE3326BA5B} [C:\Users\Tony\AppData\Roaming\BrowserExtensions (Not File)] =>PUP.Optional.BrowserExtensions
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EF6FE19C-C35B-456A-83EF-0ACCBC14F55D} [C:\Users\Tony\AppData\Roaming\2YourFace (Not File)] =>PUP.Optional.2YourFace


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Mozilla Firefox)
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scannés : 784
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 72


~ End of clean in 1 minutes
===================
ZHPCleaner-[R]-24082015-23_50_55.txt
ZHPCleaner-[S]-24082015-23_48_56.txt

Publicité


Signaler le contenu de ce document

Publicité