cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPCleaner v2016.2.3.21 by Nicolas Coolman (2016/02/03)
~ Run by josette (Administrator) (04/02/2016 12:33:58)
~ Site : http://www.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Users\josette\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\josette\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)


---\\ Service. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Navigateur internet. (8)
REMPLACÉ Chrome Secure Preferences: "http://search.conduit.com/?ctid=CT3297966&SearchSource=48&CUI=UN19439468753251324&UM=1" =>PUP.Optional.Conduit
REMPLACÉ Chrome Secure Preferences: "http://start.mysearchdial.com/?f=1&a=airmsd&cd=2XzuyEtN2Y1L1QzutBtDyC0Azz0AtByBtAyDtB0FyEyE0EtBtN0D0Tzu0CyDtByDtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1B1Q&cr=1797253689&ir=" =>PUP.Optional.MySearchDial
REMPLACÉ Chrome Secure Preferences: "http://www.buenosearch.com/?babsrc=HP_ss&mntrId=F8FA00262D489B96&affID=127850&tt=240414_16&tsp=5231" =>PUP.Optional.BuenoSearch
REMPLACÉ Chrome Secure Preferences: "http://www.awesomehp.com/?type=hp&ts=1394526982&from=sfpsnew1&uid=395049983_1052515_F8FA76CE" =>PUP.Optional.AwesomeHP
REMPLACÉ Chrome Secure Preferences: "http://astromenda.com/?f=7&a=ast_dsites_14_36_ch&cd=2XzuyEtN2Y1L1QzutBtDyC0Azz0AtByBtAyDtB0FyEyE0EtBtN0D0Tzu0SzyyBzytN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyE0DyE0Fzy0Bzz0FtG0DyCzzyBtGyEtC0DtCtG0EyE0FyEtGyEtAtA0D0FyC0D0D0DyE0D0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0AtD0BtCyCyDtB0BtGtC0Bzy0CtGyEtByDyDtG0A0Dzz0AtGtAyE0F0CzzyDyE0ByB0DyDzz2Q&cr=80058129&ir=" =>PUP.Optional.Astromenda
REMPLACÉ Chrome Secure Preferences: "http://astromenda.com/?f=7&a=ast_dsites_14_39_ch&cd=2XzuyEtN2Y1L1QzutBtDyC0Azz0AtByBtAyDtB0FyEyE0EtBtN0D0Tzu0SzyzyzytN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0DyE0Fzy0Bzz0FtG0DyCzzyBtGyEtC0DtCtG0EyE0FyEtGyEtAtA0D0FyC0D0D0DyE0D0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0AtD0BtCyCyDtB0BtGtC0Bzy0CtGyEtByDyDtG0A0Dzz0AtGtAyE0F0CzzyDyE0ByB0DyDzz2Q&cr=54223640&ir=" =>PUP.Optional.Astromenda
REMPLACÉ Chrome Secure Preferences: "http://astromenda.com/?f=7&a=ast_dsites_14_39_ch&cd=2XzuyEtN2Y1L1QzutBtDyC0Azz0AtByBtAyDtB0FyEyE0EtBtN0D0Tzu0StCtDtDtDtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0DyE0Fzy0Bzz0FtG0DyCzzyBtGyEtC0DtCtG0EyE0FyEtGyEtAtA0D0FyC0D0D0DyE0D0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0AtD0BtCyCyDtB0BtGtC0Bzy0CtGyEtByDyDtG0A0Dzz0AtGtAyE0F0CzzyDyE0ByB0DyDzz2Q&cr=1300181690&ir=" =>PUP.Optional.Astromenda
REMPLACÉ Chrome Secure Preferences: "http://astromenda.com/?f=7&a=ast_dsites_14_39_ch&cd=2XzuyEtN2Y1L1QzutBtDyC0Azz0AtByBtAyDtB0FyEyE0EtBtN0D0Tzu0StCtDtDtDtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0DyE0Fzy0Bzz0FtG0DyCzzyBtGyEtC0DtCtG0EyE0FyEtGyEtAtA0D0FyC0D0D0DyE0D0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0AtD0BtCyCyDtB0BtGtC0Bzy0CtGyEtByDyDtG0A0Dzz0AtGtAyE0F0CzzyDyE0ByB0DyDzz2Q&cr=1300181690&uref=308&ir=" =>PUP.Optional.Astromenda


---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (23)


---\\ Tâche planifiée. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Explorateur ( Dossiers, Fichiers ). (3)
DEPLACÉ fichier: C:\Users\josette\Desktop\cacaoweb.exe =>.Superfluous.CacaoWeb
DEPLACÉ fichier: C:\Users\josette\Downloads\cacaoweb.exe =>.Superfluous.CacaoWeb
DEPLACÉ dossier: C:\ProgramData\Partner =>Toolbar.YahooPartner


---\\ Base de Registres ( Clés, Valeurs, Données ). (12)
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-2128937101-1398735637-238558291-1001\SOFTWARE\cacaoweb [C:\Users\josette\AppData\Roaming\cacaoweb\cacaoweb.exe (Not File)] =>.Superfluous.CacaoWeb
SUPPRIMÉ clé: HKCU\Software\cacaoweb [C:\Users\josette\AppData\Roaming\cacaoweb\cacaoweb.exe (Not File)] =>.Superfluous.CacaoWeb
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\protector_dll.protectorbho [Google Toolbar Notifier BHO] =>PUP.Optional.BProtector
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 [Google Toolbar Notifier BHO] =>PUP.Optional.BProtector
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\kt_bho.kettlebho [Partner BHO Class] =>PUP.Optional.BHO
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\kt_bho.kettlebho.1 [Partner BHO Class] =>PUP.Optional.BHO
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AppID\kt_bho_dll.dll [] =>PUP.Optional.BHO
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\kt_bho_dll.dll [] =>PUP.Optional.BHO
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{61DDDC34-5C53-4C43-88BB-52EB57F61EF2}C:\users\josette\appdata\roaming\cacaoweb\cacaoweb.exe [C:\users\josette\appdata\roaming\cacaoweb\cacaoweb.exe] =>.Superfluous.CacaoWeb
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{5DBA1830-1A59-477C-818F-9F833C907785}C:\users\josette\appdata\roaming\cacaoweb\cacaoweb.exe [C:\users\josette\appdata\roaming\cacaoweb\cacaoweb.exe] =>.Superfluous.CacaoWeb
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{1CDC3814-85B9-4711-A01B-35D4137D9B7D}C:\users\josette\appdata\roaming\cacaoweb\cacaoweb.exe [C:\users\josette\appdata\roaming\cacaoweb\cacaoweb.exe] =>.Superfluous.CacaoWeb
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{97882AC0-F702-4158-9FE6-A45CD8FDAE22}C:\users\josette\appdata\roaming\cacaoweb\cacaoweb.exe [C:\users\josette\appdata\roaming\cacaoweb\cacaoweb.exe] =>.Superfluous.CacaoWeb


---\\ Récapitulatif des éléments trouvés sur votre station. (9)
http://www.nicolascoolman.fr/?p=210 =>PUP.Optional.Conduit
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.MySearchDial
http://www.nicolascoolman.fr/?p=438 =>PUP.Optional.BuenoSearch
http://www.nicolascoolman.fr/?p=328 =>PUP.Optional.AwesomeHP
http://www.nicolascoolman.fr/pup-astromenda/ =>PUP.Optional.Astromenda
http://www.nicolascoolman.fr/?p=338 =>.Superfluous.CacaoWeb
http://www.nicolascoolman.fr/?p=5143 =>Toolbar.YahooPartner
http://www.nicolascoolman.fr/?p=533 =>PUP.Optional.BProtector
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.BHO


---\\ Nettoyage Additionnel. (52)
~ Suppression des Clés de registre Tracing. (52)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Mozilla Firefox)
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scannés : 329
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 23


~ End of clean in 00h00mn17s
===================
ZHPCleaner-[R]-04022016-12_34_15.txt
ZHPCleaner-[S]-04022016-12_25_38.txt

Publicité


Signaler le contenu de ce document

Publicité