cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPCleaner v2015.10.22.368 by Nicolas Coolman (2015/10/22)
~ Run by Mafra (Administrator) (22/10/2015 17:12:04)
~ Site : http://www.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Users\Mafra\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Mafra\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 8.1, 64-bit (Build 9600)


---\\ Service. (1)
ARRETÉ : vToolbarUpdater18.9.0 =>Toolbar.AVGSafeGuard


---\\ Navigateur internet. (3)
SUPPRIMÉ: [zbtxbbcs.default-1401408531213] - user_pref("extensions.xpiState", "{\"app-profile\":{\"cacaoweb@cacaoweb.org\":{\"d\":\"C:\\\\Users\\[...] =>PUP.Optional.CacaoWeb
SUPPRIMÉ donnée: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings [Bad : Port=13972] =>Hijacker.Proxy
SUPPRIMÉ donnée: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings [Bad : Port=13972] =>Hijacker.Proxy


---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (21)


---\\ Tâche planifiée. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Explorateur ( Dossiers, Fichiers ). (35)
DEPLACÉ fichier: C:\Users\Public\Desktop\eSupport UndeletePlus.lnk [Bad : C:\Program Files (x86)\eSupport.com\eSupport UndeletePlus\UndeletePlus.exe] =>PUP.Optional.eSupport
DEPLACÉ fichier*: C:\Users\Mafra\AppData\Roaming\Mozilla\Firefox\Profiles\zbtxbbcs.default-1401408531213\Extensions\cacaoweb@cacaoweb.org\chrome =>PUP.Optional.CacaoWeb
DEPLACÉ fichier: C:\Users\Mafra\AppData\Roaming\Mozilla\Firefox\Profiles\zbtxbbcs.default-1401408531213\Extensions\cacaoweb@cacaoweb.org\chrome.manifest =>PUP.Optional.CacaoWeb
DEPLACÉ fichier*: C:\Users\Mafra\AppData\Roaming\Mozilla\Firefox\Profiles\zbtxbbcs.default-1401408531213\Extensions\cacaoweb@cacaoweb.org\defaults =>PUP.Optional.CacaoWeb
DEPLACÉ fichier: C:\Users\Mafra\AppData\Roaming\Mozilla\Firefox\Profiles\zbtxbbcs.default-1401408531213\Extensions\cacaoweb@cacaoweb.org\install.rdf =>PUP.Optional.CacaoWeb
DEPLACÉ fichier: C:\ProgramData\InstallMate\{E8A42CCE-ED20-42DA-A031-A50233470E38}\TsuDll.dll [Tarma Software Research Pty Ltd - InstallMate® Setup Library] =>PUP.Optional.Tarma
DEPLACÉ fichier^: C:\ProgramData\InstallMate\{05BDE5CD-E1F2-4B1F-A9F4-A9D0DE5EC73B}\TsuDll.dll [Tarma Software Research Pty Ltd - InstallMate® Setup Library] =>PUP.Optional.Tarma
DEPLACÉ dossier: C:\Users\Mafra\AppData\Roaming\Mozilla\Firefox\Profiles\zbtxbbcs.default-1401408531213\Extensions\cacaoweb@cacaoweb.org =>PUP.Optional.CacaoWeb
DEPLACÉ dossier: C:\Program Files (x86)\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard
DEPLACÉ dossier: C:\Program Files (x86)\AVG Security Toolbar =>Toolbar.AVGSearch
DEPLACÉ dossier: C:\Program Files (x86)\eSupport.com =>PUP.Optional.eSupport
DEPLACÉ dossier*: C:\Program Files\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard
DEPLACÉ dossier: C:\Program Files (x86)\Common Files\AVG Secure Search =>Toolbar.AVGSearch
DEPLACÉ dossier: C:\ProgramData\88f769ddca1ac1c3 =>PUP.Optional.CrossRider
DEPLACÉ dossier*: C:\ProgramData\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard
DEPLACÉ dossier: C:\ProgramData\AVG Secure Search =>Toolbar.AVGSearch
DEPLACÉ dossier: C:\ProgramData\AVG Security Toolbar =>Toolbar.AVGSearch
DEPLACÉ dossier: C:\ProgramData\InstallMate =>PUP.Optional.Tarma
DEPLACÉ dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eSupport.com =>PUP.Optional.eSupport
DEPLACÉ dossier*: C:\Users\Mafra\AppData\LocalLow\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard
DEPLACÉ dossier: C:\Users\Mafra\AppData\LocalLow\Plus-HD-5.7 =>PUP.Optional.CrossRider
DEPLACÉ dossier*: C:\Users\Mafra\AppData\Local\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI1428.tmp- =>Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI1D80.tmp- =>Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI26C8.tmp- =>Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI387A.tmp- =>Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI4A7F.tmp- =>Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI4B3B.tmp- =>Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI4B8A.tmp- =>Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI6F0C.tmp- =>Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI8920.tmp- =>Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI9E30.tmp- =>Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIA5B5.tmp- =>Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIC42E.tmp- =>Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIE7BC.tmp- =>Empty


---\\ Base de Registres ( Clés, Valeurs, Données ). (42)
SUPPRIMÉ valeur: HKCU\Software\Mozilla\Firefox\Extensions\\{98D3434F-FACB-4DCB-72DB-FD58E27EC15C} [C:\Program Files (x86)\ViewPassword-soft\171.xpi] =>PUP.Optional.ViewPassword
SUPPRIMÉ valeur: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{95B7759C-8C7F-4BF1-B163-73684A933233} [AVG SafeGuard toolbar] =>Toolbar.AVGSafeGuard
SUPPRIMÉ valeur: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{95B7759C-8C7F-4BF1-B163-73684A933233} [AVG SafeGuard toolbar] =>Toolbar.AVGSafeGuard
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin [] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455905582} [ICrossriderBHO] =>PUP.Optional.CrossRider
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\vToolbarUpdater18.9.0 ["C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.9.0\ToolbarUpdater.exe" (Not File)] =>Toolbar.AVGSafeGuard
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-2675812686-3624653533-3568156172-1001\Software\AVG SafeGuard toolbar [] =>PUP.Optional.SafeGuard
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-2675812686-3624653533-3568156172-1001\Software\AVG Security Toolbar [] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-2675812686-3624653533-3568156172-1001\Software\cacaoweb [C:\Users\Mafra\AppData\Roaming\cacaoweb\cacaoweb.exe (Not File)] =>PUP.Optional.CacaoWeb
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-2675812686-3624653533-3568156172-1001\Software\Conduit [] =>PUP.Optional.Conduit
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-2675812686-3624653533-3568156172-1001\Software\eSupport.com [] =>PUP.Optional.eSupport
SUPPRIMÉ clé: HKCU\Software\AVG SafeGuard toolbar [] =>PUP.Optional.SafeGuard
SUPPRIMÉ clé: HKCU\Software\AVG Security Toolbar [] =>Toolbar.AVGSearch
SUPPRIMÉ clé: HKCU\Software\cacaoweb [C:\Users\Mafra\AppData\Roaming\cacaoweb\cacaoweb.exe (Not File)] =>PUP.Optional.CacaoWeb
SUPPRIMÉ clé: HKCU\Software\Conduit [] =>PUP.Optional.Conduit
SUPPRIMÉ clé: HKCU\Software\eSupport.com [] =>PUP.Optional.eSupport
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\S [] =>Toolbar.Agent
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi [ScriptHelperApi Class] =>Toolbar.Agent
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1 [ScriptHelperApi Class] =>Toolbar.Agent
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE [ViProtocolOLE Class] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1 [ViProtocolOLE Class] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} [IPugiObj] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL [] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI [BrowserWndAPI Class] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI.1 [BrowserWndAPI Class] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj [AVG SafeGuard toolbar] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj.1 [AVG SafeGuard toolbar] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\PROTOCOLS\handler\viprotocol [viprotocol: protocol OLE] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A} [C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.9.0 (Not File)] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} [C:\Program Files\AVG SafeGuard toolbar (Not File)] =>PUP.Optional.SafeGuard
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\AVG SafeGuard toolbar [] =>PUP.Optional.SafeGuard
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\AVG Security Toolbar [] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Conduit [] =>PUP.Optional.Conduit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} [IPugiObj] =>Toolbar.AVGSearch
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\ViProtocol.DLL [] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar [AVG Technologies] =>PUP.Optional.SafeGuard
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\eSupport UndeletePlus_is1 [Copyright © 2011 eSupport.com • All Rights Reserved] =>PUP.Optional.eSupport
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A} [C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.9.0 (Not File)] =>Toolbar.AVGSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} [C:\Program Files (x86)\AVG SafeGuard toolbar (Not File)] =>PUP.Optional.SafeGuard
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468} [BrowserWndAPI Class] =>Toolbar.AVGSafeGuard
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}\InprocServer32 [C:\Program Files\AVG SafeGuard toolbar\18.9.0.231\AVG SafeGuard toolbar_toolbar.dll (Not File)] =>Toolbar.AVGSafeGuard
SUPPRIMÉ valeur: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\vProt ["C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"] =>Toolbar.AVGSearch


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Opera Software)
~ Le système a été redémarré.


---\\ Statistiques
~ Items scannés : 874
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 81


~ End of clean in 1 minutes
===================
ZHPCleaner-[R]-22102015-17_13_16.txt
ZHPCleaner-[S]-22102015-16_58_22.txt

Publicité


Signaler le contenu de ce document

Publicité