Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPCleaner v2016.5.13.66 by Nicolas Coolman (2016/05/13)
~ Run by user (Administrator) (14/05/2016 14:24:36)
~ Site : http://www.nicolascoolman.com
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\user\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\user\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Starter, 32-bit Service Pack 1 (Build 7601)
---\\ Services (2)
CLOSED : Service Mgr DiscoveryApp =>Heuristic.DiscoveryApp
CLOSED : Update Mgr DiscoveryApp =>Heuristic.DiscoveryApp
---\\ Browser internet (8)
DELETED: [zxe4ywj3.default] - user_pref("browser.search.searchengine.alias", "istartsurf"); =>PUP.Optional.IsStart
DELETED: [zxe4ywj3.default] - user_pref("browser.search.searchengine.iconURL", "http://www.istartsurf.com/favicon.ico"); =>PUP.Optional.IsStart
DELETED: [zxe4ywj3.default] - user_pref("browser.search.searchengine.name", "istartsurf"); =>PUP.Optional.IsStart
DELETED: [zxe4ywj3.default] - user_pref("browser.search.searchengine.url", "http://www.istartsurf.com/web/?type=ds&ts=1446649213&z[...] =>PUP.Optional.IsStart
DELETED: [zxe4ywj3.default] - user_pref("extensions.MUB-SAE.newTabSearchURL", "\"http://dts.search.ask.com/sr?gct=hp&o=APN11773A&s[...] =>Toolbar.Ask
DELETED: [zxe4ywj3.default] - user_pref("extensions.MUB-SAE.searchURL", "\"http://dts.search.ask.com/sr?gct=ds&o=APN11773&sysid=53[...] =>Toolbar.Ask
DELETED: [zxe4ywj3.default] - user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart
DELETED: [zxe4ywj3.default] - user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart
---\\ Hosts file (1)
~ The hosts file is legitimate (21)
---\\ Scheduled automatic tasks. (4)
DELETED task: [gameo_update] [C:\Users\user\AppData\Roaming\Gameo\gameo.exe (Not File) ] =>.Superfluous.IronSourceLtd
DELETED task: [ReimageUpdater] [C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe (Not File) ] =>.Superfluous.ReimageRepair
DELETED task: [WordFly Auto Updater 1.10.0.28 Core] [C:\Program Files\WordFly_1.10.0.28\Update\WordflyAutoUpdateClient.exe (Not File) ] =>PUP.Optional.WordFly
DELETED task: [WordFly Auto Updater 1.10.0.28 Pending Update] [C:\Program Files\WordFly_1.10.0.28\Update\WordflyAutoUpdateClient.exe (Not File) ] =>PUP.Optional.WordFly
---\\ Explorer ( File, Folder) (49)
MOVED file: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo
MOVED file*: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\Extensions\deskCutv2@gmail.com\chrome =>PUP.Optional.DeskCut
MOVED file: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\Extensions\deskCutv2@gmail.com\chrome.manifest =>PUP.Optional.DeskCut
MOVED file*: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\Extensions\deskCutv2@gmail.com\defaults =>PUP.Optional.DeskCut
MOVED file: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\Extensions\deskCutv2@gmail.com\install.rdf =>PUP.Optional.DeskCut
MOVED file^: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\Extensions\deskCutv2@gmail.com\modules =>PUP.Optional.DeskCut
MOVED file*: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\extensions\deskCutv2@gmail.com =>PUP.Optional.DeskCut
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jhkieiodbdnokopjkcejiaddbkelghje_0.localstorage =>Hijacker.Browser
MOVED file: C:\Program Files\Discovery App\Extensions\ba32987d-db80-4ccb-a8bb-f812b5421c0f.dll =>PUP.Optional.DiscoveryApp
MOVED file: C:\ProgramData\653ac11b-b606-42c5-b357-bca0fd28d1cd\plugincontainer.exe =>Heuristic.DiscoveryApp
MOVED file: C:\Program Files\Common Files\653ac11b-b606-42c5-b357-bca0fd28d1cd\Updater.exe =>Heuristic.DiscoveryApp
MOVED file: C:\Windows\System32\drivers\wfdrvr_vt_1_10_0_28.sys [WF - WF TDI Driver x86] =>PUP.Optional.Generic
MOVED file: C:\Program Files\WordFly_1.10.0.28\Update\WordflyAutoUpdateClient.exe [WF - WF AutoUpdate Client] =>PUP.Optional.WordFly
MOVED file: C:\Windows\Prefetch\BABYLON.EXE-45A68AF1.pf =>PUP.Optional.Babylon
MOVED file: C:\Windows\Prefetch\BABYLON10_SETUP_NS.EXE-25F4001F.pf =>PUP.Optional.Babylon
MOVED file: C:\Windows\Prefetch\BABYLONCHROMEOCREXT.EXE-526F2DA9.pf =>PUP.Optional.Babylon
MOVED file: C:\Windows\System32\drivers\wfdrvr_vw_1_10_0_28.sys [WF - WF WFP Driver x86] =>PUP.Optional.Generic
MOVED file: C:\Users\user\Downloads\Babylon10_setup_ns.exe [Babylon Software Ltd. - Babylon Setup SE] =>PUP.Optional.Babylon
MOVED file: C:\Users\user\AppData\Local\Temp\ReimagePackage.exe [Reimage® - Reimage Package] =>.Superfluous.ReimageRepair
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_discoveryapp-a.akamaihd.net_0.localstorage =>.Superfluous.AkamaiHD
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_discoveryapp-a.akamaihd.net_0.localstorage-journal =>.Superfluous.AkamaiHD
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.kingtopdeals.com_0.localstorage =>PUP.Optional.Multiplug
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.kingtopdeals.com_0.localstorage-journal =>PUP.Optional.Multiplug
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.pricemoon.co_0.localstorage =>PUP.Optional.PriceMoon
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.pricemoon.co_0.localstorage-journal =>PUP.Optional.PriceMoon
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.istartsurf.com_0.localstorage =>PUP.Optional.IsStart
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.istartsurf.com_0.localstorage-journal =>PUP.Optional.IsStart
MOVED file: C:\Users\user\AppData\Local\Temp\reimage.log =>.Superfluous.ReimageRepair
MOVED file: C:\Users\user\AppData\Local\Temp\vitruvian-installer-hardwareprofile-v0001 =>Adware.Vitruvian
MOVED file: C:\Users\user\AppData\Local\Temp\vitruvian-installer-install-v0003 =>Adware.Vitruvian
MOVED file: C:\Users\user\AppData\Local\Temp\vitruvian-installer-processes-v0002 =>Adware.Vitruvian
MOVED file: C:\Users\user\AppData\Local\Temp\vitruvian-installer-scheduledtasks-v0001 =>Adware.Vitruvian
MOVED file: C:\Users\user\AppData\Local\Temp\vitruvian-installer-softwareregkeys-v0002 =>Adware.Vitruvian
MOVED file: C:\Windows\Reimage.ini =>.Superfluous.ReimageRepair
MOVED folder: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\Extensions\deskCutv2@gmail.com =>PUP.Optional.DeskCut
MOVED folder: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhkieiodbdnokopjkcejiaddbkelghje =>Hijacker.Browser [{"background":{"scripts":["background.js"]},"conte]
MOVED folder: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhkieiodbdnokopjkcejiaddbkelghje =>Hijacker.Browser
MOVED folder^: C:\ProgramData\653ac11b-b606-42c5-b357-bca0fd28d1cd =>Heuristic.DiscoveryApp
MOVED folder: C:\Program Files\Common Files\653ac11b-b606-42c5-b357-bca0fd28d1cd =>Heuristic.DiscoveryApp
MOVED folder: C:\Program Files\Babylon =>PUP.Optional.Babylon
MOVED folder: C:\Program Files\Discovery App =>PUP.Optional.DiscoveryApp
MOVED folder: C:\Program Files\FromDocToPDF_65 =>PUP.Optional.MyClearSearch
MOVED folder: C:\Program Files\WordFly_1.10.0.28 =>PUP.Optional.Generic
MOVED folder: C:\ProgramData\Babylon =>PUP.Optional.Babylon
MOVED folder: C:\ProgramData\vWMiniProv =>PUP.Optional.WdsManPro
MOVED folder: C:\Users\user\AppData\Roaming\istartsurf =>PUP.Optional.IsStart
MOVED folder: C:\Users\user\AppData\LocalLow\FromDocToPDF_65 =>PUP.Optional.MyClearSearch
MOVED folder: C:\Users\user\AppData\Local\FromDocToPDF_65 =>PUP.Optional.MyClearSearch
MOVED folder: C:\Users\user\AppData\Local\Gameo =>.Superfluous.IronSourceLtd
---\\ Registry ( Key, Value, Data) (141)
DELETED key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\OldSearch [http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdAAFHFwdFbQoNBwlcFQJBJhQBVgpJDARGI1gBU[...]] [Default] =>.Superfluous.AkamaiHD
DELETED key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdAAFHFwdFbQoNBwlcFQJBJhQBVgpJDARGI1gBU[...]] [Default] =>.Superfluous.AkamaiHD
DELETED key: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdAAFHFwdFbQoNBwlcFQJBJhQBVgpJDARGI1gBU[...]] [Default] =>.Superfluous.AkamaiHD
REPLACED data: HKLM\...\IEXPLORE.EXE\Shell\open\Command\\C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1446649213&z=65d7fdf2a27e029e3115a48gfzfzbq4qcz4b6t9ccq&from=cor&uid=WDCXWD1600BEVT-00A23T0_WD-WX91AB09254092540 =>PUP.Optional.IsStart
DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba32987d-db80-4ccb-a8bb-f812b5421c0f} [Discovery App] =>PUP.Optional.DiscoveryApp
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ba32987d-db80-4ccb-a8bb-f812b5421c0f} [] =>PUP.Optional.DiscoveryApp
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ba32987d-db80-4ccb-a8bb-f812b5421c0f} [] =>PUP.Optional.DiscoveryApp
DELETED key*: HKLM\Software\Classes\CLSID\{ba32987d-db80-4ccb-a8bb-f812b5421c0f} [Discovery App] =>PUP.Optional.DiscoveryApp
DELETED key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\OldSearch [http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdAAFHFwdFbQoNBwlcFQJBJhQBVgpJDARGI1gBUw8SE1cRIR9aFQQTSEcFME0FCFwEURNNfX1REloeV1BROXhIEQ==&q={searchTerms}] =>.Superfluous.AkamaiHD
DELETED key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdAAFHFwdFbQoNBwlcFQJBJhQBVgpJDARGI1gBUw8SE1cRIR9aFQQTSEcFME0FCFwEURNNfX1REloeV1BROXhIEQ==&q={searchTerms}] =>.Superfluous.AkamaiHD
DELETED key: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdAAFHFwdFbQoNBwlcFQJBJhQBVgpJDARGI1gBUw8SE1cRIR9aFQQTSEcFME0FCFwEURNNfX1REloeV1BROXhIEQ==&q={searchTerms}] =>.Superfluous.AkamaiHD
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\ReimageRealTimeProtector [C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe (Not File)] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\DiscoveryApp [] =>Heuristic.DiscoveryApp
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\Service Mgr DiscoveryApp [C:\ProgramData\653ac11b-b606-42c5-b357-bca0fd28d1cd\plugincontainer.exe (Not File)] =>Heuristic.DiscoveryApp
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\Update Mgr DiscoveryApp [C:\Program Files\Common Files\653ac11b-b606-42c5-b357-bca0fd28d1cd\Updater.exe (Not File)] =>Heuristic.DiscoveryApp
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\wfdrvr_vt_1_10_0_28 [C:\Windows\System32\drivers\wfdrvr_vt_1_10_0_28.sys (Not File)] =>PUP.Optional.Generic
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\APN PIP [] =>.Superfluous.Conduit
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\FromDocToPDF_65 [] =>.Superfluous.MindSpark
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\Gameo [] =>.Superfluous.IronSourceLtd
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\ICSW1.14 [] =>Adware.InstallCore
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\ICSW1.17 [] =>Adware.InstallCore
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\Reimage [] =>.Superfluous.ReimageRepair
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\reimagerepair [] =>.Superfluous.ReimageRepair
DELETED key: HKCU\Software\APN PIP [] =>.Superfluous.Conduit
DELETED key: HKCU\Software\FromDocToPDF_65 [] =>.Superfluous.MindSpark
DELETED key: HKCU\Software\Gameo [] =>.Superfluous.IronSourceLtd
DELETED key: HKCU\Software\ICSW1.14 [] =>Adware.InstallCore
DELETED key: HKCU\Software\ICSW1.17 [] =>Adware.InstallCore
DELETED key: HKCU\Software\Reimage [] =>.Superfluous.ReimageRepair
DELETED key: HKCU\Software\reimagerepair [] =>.Superfluous.ReimageRepair
DELETED key*: HKCU\Software\AppDataLow\Software\FromDocToPDF_65 [] =>.Superfluous.MindSpark
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com [] =>Toolbar.Ask
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\reimageplus.com [42] =>.Superfluous.ReimageRepair
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com [1025] =>Toolbar.Ask
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\safepcrepair.com [18] =>PUP.Optional.SafePCRepair
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\softonic.com [161] =>.Superfluous.Softonic
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\soundcloud.com [255] =>PUP.Optional.SoundCloud
DELETED key*: HKCU\Software\undefined [] =>.Superfluous.Downloader
DELETED key*: HKCU\Software\ProductSetup [] =>Adware.InstallCore
DELETED key*: HKCU\Software\Mozilla\Extends [] =>PUP.Optional.FastStart
DELETED key*: HKLM\SOFTWARE\Reimage [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.FeedManager [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.FeedManager.1 [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLMenu [FromDocToPDF_65 HTML Menu] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLMenu.1 [FromDocToPDF_65 HTML Menu] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLPanel [FromDocToPDF_65 HTML Panel] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLPanel.1 [FromDocToPDF_65 HTML Panel] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.MultipleButton [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.MultipleButton.1 [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.PseudoTransparentPlugin [Pseudo Transparent Plugin] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.PseudoTransparentPlugin.1 [Pseudo Transparent Plugin] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.ScriptButton [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.ScriptButton.1 [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.SettingsPlugin [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.SettingsPlugin.1 [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.ToolbarProtector [ProtectorControl Class] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.ToolbarProtector.1 [ProtectorControl Class] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine [ReiEngine Class] =>PUP.Optional.GetLiveSupport
DELETED key*: HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1 [ReiEngine Class] =>PUP.Optional.GetLiveSupport
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{206DAA08-0036-11D5-80D8-0050DA5F08E3} [Groove WebBrowserView2] =>PUP.Optional.CrossRider
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{5CABA49F-1222-46EF-8EA3-A43834D109C9} [SaveImage Class] =>PUP.Optional.SaveMass
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{947217BD-E967-400A-B14A-BA851A8EDCBB} [Babylon Document Translation Shell Context Menu Class] =>PUP.Optional.Babylon
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{c66a678d-5e6c-4af9-8f57-c6192f42cf74} [FromDocToPDF] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{e1c4699e-5e74-4f30-a4a2-378e45d44f07} [FromDocToPDF_65 HTML] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{FC2B119B-2352-4E7A-9197-B9E1BBADE61B} [FromDocToPDF_65 HTML Menu] =>.Superfluous.MindSpark
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WdsManPro [] =>PUP.Optional.WdsManPro
DELETED key*: HKLM\SOFTWARE\FFPluginHp [] =>PUP.Optional.SweetSearch
DELETED key*: HKLM\SOFTWARE\FromDocToPDF_65 [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\istartsurfSoftware [] =>PUP.Optional.IsStart
DELETED key*: HKLM\SOFTWARE\PIP [] =>Toolbar.Ask
DELETED key*: HKLM\SOFTWARE\WdsManPro [] =>PUP.Optional.WdsManPro
DELETED key*: HKLM\SOFTWARE\WordFly_1.10.0.28 [] =>PUP.Optional.Generic
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\4997_cor_istartsurf_RASAPI32 [] =>PUP.Optional.IsStart
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\4997_cor_istartsurf_RASMANCS [] =>PUP.Optional.IsStart
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32 [] =>PUP.Optional.Babylon
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS [] =>PUP.Optional.Babylon
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\FromDocToPDF_RASAPI32 [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\FromDocToPDF_RASMANCS [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\gameo_RASAPI32 [] =>.Superfluous.IronSourceLtd
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\gameo_RASMANCS [] =>.Superfluous.IronSourceLtd
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimagePackage_RASAPI32 [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimagePackage_RASMANCS [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageReminder_RASAPI32 [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageReminder_RASMANCS [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageRepair(1)_RASAPI32 [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageRepair(1)_RASMANCS [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageRepair(2)_RASAPI32 [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageRepair(2)_RASMANCS [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageRepair_RASAPI32 [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageRepair_RASMANCS [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\Reimage_RASAPI32 [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\Reimage_RASMANCS [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\WMiniPro_RASAPI32 [] =>PUP.Optional.WdsManPro
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\WMiniPro_RASMANCS [] =>PUP.Optional.WdsManPro
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\WordflyAutoUpdateClient_RASAPI32 [] =>PUP.Optional.WordFly
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\WordflyAutoUpdateClient_RASMANCS [] =>PUP.Optional.WordFly
DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Discovery App [Discovery App] =>PUP.Optional.DiscoveryApp
DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FromDocToPDF_65bar Uninstall Internet Explorer [Mindspark Interactive Network] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall [istartsurf] =>PUP.Optional.IsStart
DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WordFly_1.10.0.28 [WordFly] =>PUP.Optional.WordFly
DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6cbf5c01-c876-481b-867e-111cb1d2a7d6} [C:\Program Files\FromDocToPDF_65\bar\1.bin (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a3b975a0-f679-444e-9d94-6d292fa53140} [C:\Program Files\FromDocToPDF_65\bar\1.bin (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e0c3a839-0e5e-4ebc-9f8f-e56f8fc732ce} [C:\Program Files\FromDocToPDF_65\bar\1.bin (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e1035f55-4c0c-4efc-9aae-38f421fce726} [C:\Program Files\FromDocToPDF_65\bar\1.bin (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{017d68f2-19b3-41ae-9d8a-8b09dbd25479} [] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{017d68f2-19b3-41ae-9d8a-8b09dbd25479}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65mlbtn.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484} [ReiEngine Class] =>.Superfluous.ReimageRepair
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}\InprocServer32 [C:\Program Files\Reimage\Reimage Repair\REI_Axcontrol.dll (Not File)] =>.Superfluous.ReimageRepair
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{206DAA08-0036-11D5-80D8-0050DA5F08E3}\InprocServer32 [C:\PROGRA~1\MICROS~2\Office12\GRF080~1.DLL] =>PUP.Optional.CrossRider
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{3700b685-d795-4e17-9b78-73bcee5d4086} [] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{3700b685-d795-4e17-9b78-73bcee5d4086}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65script.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{3e6260ac-bc6f-44b4-942b-1568c367543a} [Popup Menu Plugin] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{3e6260ac-bc6f-44b4-942b-1568c367543a}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65skin.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{4ffa72ec-9fd9-4b2b-92a5-68b60885fd8a} [HttpControl Class] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{4ffa72ec-9fd9-4b2b-92a5-68b60885fd8a}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65httpct.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{72d05120-df65-4c27-921e-899b5267fef2} [Disable Addon Rebuttal Control] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{72d05120-df65-4c27-921e-899b5267fef2}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65dlghk.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB} [CompReg Class] =>.Superfluous.ReimageRepair
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}\InprocServer32 [C:\Program Files\Reimage\Reimage Repair\REI_Axcontrol.dll (Not File)] =>.Superfluous.ReimageRepair
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{947217BD-E967-400A-B14A-BA851A8EDCBB}\InprocServer32 [C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonDocTranslationPI.dll (Not File)] =>PUP.Optional.Babylon
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{ae84501a-2cb6-41d6-b3a7-9679bdbdfa0b} [ProtectorControl Class] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{ae84501a-2cb6-41d6-b3a7-9679bdbdfa0b}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65bprtct.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{afa196f4-80e5-47ad-b7bc-c671487d36fb} [DataCtrl Class] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{afa196f4-80e5-47ad-b7bc-c671487d36fb}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65datact.dll (Not File)] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{ba32987d-db80-4ccb-a8bb-f812b5421c0f}\InprocServer32 [C:\Program Files\Discovery App\Extensions\ba32987d-db80-4ccb-a8bb-f812b5421c0f.dll (Not File)] =>PUP.Optional.DiscoveryApp
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{bc7e25d7-4681-46a3-af5a-9a1b865783ed} [] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{bc7e25d7-4681-46a3-af5a-9a1b865783ed}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65bar.dll (Not File)] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{c66a678d-5e6c-4af9-8f57-c6192f42cf74}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65bar.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{cbbea4b9-b183-47ac-8b1f-fd526ac99a8d} [Pseudo Transparent Plugin] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{cbbea4b9-b183-47ac-8b1f-fd526ac99a8d}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65skin.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{cd1d181e-c654-4ca5-9d09-b3648537fd7d} [] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{cd1d181e-c654-4ca5-9d09-b3648537fd7d}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65feedmg.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{e0c3a839-0e5e-4ebc-9f8f-e56f8fc732ce} [Skin Settings] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{e0c3a839-0e5e-4ebc-9f8f-e56f8fc732ce}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65skin.dll (Not File)] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{e1c4699e-5e74-4f30-a4a2-378e45d44f07}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\T8HTML.DLL (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{f236ca79-3123-4afb-9f74-e98117ad5625} [Search Assistant BHO] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{f236ca79-3123-4afb-9f74-e98117ad5625}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65SrcAs.dll (Not File)] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{FC2B119B-2352-4E7A-9197-B9E1BBADE61B}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65htmlmu.dll (Not File)] =>.Superfluous.MindSpark
DELETED value: HKLM\SOFTWARE\Mozilla\Firefox\Extensions\\ocr@babylon.com [C:\Program Files\Babylon\Babylon-Pro\Utils\ocr@babylon.com] =>PUP.Optional.Babylon
DELETED value: HKLM\SOFTWARE\Mozilla\Firefox\Extensions\\defsearchp@gmail.com [C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\extensions\defsearchp@gmail.com] =>PUP.Optional.PriceFountain
DELETED value: HKLM\SOFTWARE\Mozilla\Firefox\Extensions\\deskCutv2@gmail.com [C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\extensions\deskCutv2@gmail.com] =>PUP.Optional.DeskCut
---\\ Summary of the elements found (33)
http://www.nicolascoolman.fr/?p=4664 =>Heuristic.DiscoveryApp
http://www.nicolascoolman.fr/pup-isstart/ =>PUP.Optional.IsStart
http://www.nicolascoolman.fr/?p=235 =>Toolbar.Ask
http://www.nicolascoolman.fr/?p=666 =>PUP.Optional.QuickStart
http://www.nicolascoolman.info/2016/05/02/superfluous-ironsourceltd/ =>.Superfluous.IronSourceLtd
http://www.nicolascoolman.fr/?p=1075 =>.Superfluous.ReimageRepair
http://www.nicolascoolman.fr/pup-optional-wordfly/ =>PUP.Optional.WordFly
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.BDYahoo
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DeskCut
http://www.nicolascoolman.fr/hijacker-browser/ =>Hijacker.Browser
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DiscoveryApp
http://www.nicolascoolman.info/2016/05/01/definition-dun-logiciel-pup-lpi/ =>PUP.Optional.Generic
http://www.nicolascoolman.fr/?p=170 =>PUP.Optional.Babylon
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.AkamaiHD
http://www.nicolascoolman.info/2016/04/28/pup-optional-multiplug/ =>PUP.Optional.Multiplug
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.PriceMoon
http://www.nicolascoolman.fr/link-652/ =>Adware.Vitruvian
http://www.nicolascoolman.fr/?p=4664 =>Hijacker.Browser [{"background":{"scripts":["background.js"]},"conte]
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.MyClearSearch
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.WdsManPro
http://www.nicolascoolman.fr/?p=210 =>.Superfluous.Conduit
http://www.nicolascoolman.fr/?p=142 =>.Superfluous.MindSpark
http://www.nicolascoolman.info/2016/04/22/adware-installcore/ =>Adware.InstallCore
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SafePCRepair
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Softonic
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SoundCloud
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Downloader
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.FastStart
http://www.nicolascoolman.com/forum/post33206.html#p33206 =>PUP.Optional.GetLiveSupport
http://www.nicolascoolman.info/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SaveMass
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SweetSearch
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.PriceFountain
---\\ Other deletions. (113)
~ Registry Keys Tracing deleted (113)
~ Remove the old reports ZHPCleaner. (0)
---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Opera Software)
~ The system has been restarted.
---\\ Statistics
~ Items scanned : 654
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 205
~ End of clean in 00h04mn19s
~====================
ZHPCleaner-[R]-14052016-14_28_55.txt
ZHPCleaner-[S]-14052016-14_02_38.txt
~ Run by user (Administrator) (14/05/2016 14:24:36)
~ Site : http://www.nicolascoolman.com
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\user\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\user\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Starter, 32-bit Service Pack 1 (Build 7601)
---\\ Services (2)
CLOSED : Service Mgr DiscoveryApp =>Heuristic.DiscoveryApp
CLOSED : Update Mgr DiscoveryApp =>Heuristic.DiscoveryApp
---\\ Browser internet (8)
DELETED: [zxe4ywj3.default] - user_pref("browser.search.searchengine.alias", "istartsurf"); =>PUP.Optional.IsStart
DELETED: [zxe4ywj3.default] - user_pref("browser.search.searchengine.iconURL", "http://www.istartsurf.com/favicon.ico"); =>PUP.Optional.IsStart
DELETED: [zxe4ywj3.default] - user_pref("browser.search.searchengine.name", "istartsurf"); =>PUP.Optional.IsStart
DELETED: [zxe4ywj3.default] - user_pref("browser.search.searchengine.url", "http://www.istartsurf.com/web/?type=ds&ts=1446649213&z[...] =>PUP.Optional.IsStart
DELETED: [zxe4ywj3.default] - user_pref("extensions.MUB-SAE.newTabSearchURL", "\"http://dts.search.ask.com/sr?gct=hp&o=APN11773A&s[...] =>Toolbar.Ask
DELETED: [zxe4ywj3.default] - user_pref("extensions.MUB-SAE.searchURL", "\"http://dts.search.ask.com/sr?gct=ds&o=APN11773&sysid=53[...] =>Toolbar.Ask
DELETED: [zxe4ywj3.default] - user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart
DELETED: [zxe4ywj3.default] - user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart
---\\ Hosts file (1)
~ The hosts file is legitimate (21)
---\\ Scheduled automatic tasks. (4)
DELETED task: [gameo_update] [C:\Users\user\AppData\Roaming\Gameo\gameo.exe (Not File) ] =>.Superfluous.IronSourceLtd
DELETED task: [ReimageUpdater] [C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe (Not File) ] =>.Superfluous.ReimageRepair
DELETED task: [WordFly Auto Updater 1.10.0.28 Core] [C:\Program Files\WordFly_1.10.0.28\Update\WordflyAutoUpdateClient.exe (Not File) ] =>PUP.Optional.WordFly
DELETED task: [WordFly Auto Updater 1.10.0.28 Pending Update] [C:\Program Files\WordFly_1.10.0.28\Update\WordflyAutoUpdateClient.exe (Not File) ] =>PUP.Optional.WordFly
---\\ Explorer ( File, Folder) (49)
MOVED file: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo
MOVED file*: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\Extensions\deskCutv2@gmail.com\chrome =>PUP.Optional.DeskCut
MOVED file: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\Extensions\deskCutv2@gmail.com\chrome.manifest =>PUP.Optional.DeskCut
MOVED file*: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\Extensions\deskCutv2@gmail.com\defaults =>PUP.Optional.DeskCut
MOVED file: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\Extensions\deskCutv2@gmail.com\install.rdf =>PUP.Optional.DeskCut
MOVED file^: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\Extensions\deskCutv2@gmail.com\modules =>PUP.Optional.DeskCut
MOVED file*: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\extensions\deskCutv2@gmail.com =>PUP.Optional.DeskCut
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jhkieiodbdnokopjkcejiaddbkelghje_0.localstorage =>Hijacker.Browser
MOVED file: C:\Program Files\Discovery App\Extensions\ba32987d-db80-4ccb-a8bb-f812b5421c0f.dll =>PUP.Optional.DiscoveryApp
MOVED file: C:\ProgramData\653ac11b-b606-42c5-b357-bca0fd28d1cd\plugincontainer.exe =>Heuristic.DiscoveryApp
MOVED file: C:\Program Files\Common Files\653ac11b-b606-42c5-b357-bca0fd28d1cd\Updater.exe =>Heuristic.DiscoveryApp
MOVED file: C:\Windows\System32\drivers\wfdrvr_vt_1_10_0_28.sys [WF - WF TDI Driver x86] =>PUP.Optional.Generic
MOVED file: C:\Program Files\WordFly_1.10.0.28\Update\WordflyAutoUpdateClient.exe [WF - WF AutoUpdate Client] =>PUP.Optional.WordFly
MOVED file: C:\Windows\Prefetch\BABYLON.EXE-45A68AF1.pf =>PUP.Optional.Babylon
MOVED file: C:\Windows\Prefetch\BABYLON10_SETUP_NS.EXE-25F4001F.pf =>PUP.Optional.Babylon
MOVED file: C:\Windows\Prefetch\BABYLONCHROMEOCREXT.EXE-526F2DA9.pf =>PUP.Optional.Babylon
MOVED file: C:\Windows\System32\drivers\wfdrvr_vw_1_10_0_28.sys [WF - WF WFP Driver x86] =>PUP.Optional.Generic
MOVED file: C:\Users\user\Downloads\Babylon10_setup_ns.exe [Babylon Software Ltd. - Babylon Setup SE] =>PUP.Optional.Babylon
MOVED file: C:\Users\user\AppData\Local\Temp\ReimagePackage.exe [Reimage® - Reimage Package] =>.Superfluous.ReimageRepair
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_discoveryapp-a.akamaihd.net_0.localstorage =>.Superfluous.AkamaiHD
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_discoveryapp-a.akamaihd.net_0.localstorage-journal =>.Superfluous.AkamaiHD
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.kingtopdeals.com_0.localstorage =>PUP.Optional.Multiplug
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.kingtopdeals.com_0.localstorage-journal =>PUP.Optional.Multiplug
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.pricemoon.co_0.localstorage =>PUP.Optional.PriceMoon
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.pricemoon.co_0.localstorage-journal =>PUP.Optional.PriceMoon
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.istartsurf.com_0.localstorage =>PUP.Optional.IsStart
MOVED file: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.istartsurf.com_0.localstorage-journal =>PUP.Optional.IsStart
MOVED file: C:\Users\user\AppData\Local\Temp\reimage.log =>.Superfluous.ReimageRepair
MOVED file: C:\Users\user\AppData\Local\Temp\vitruvian-installer-hardwareprofile-v0001 =>Adware.Vitruvian
MOVED file: C:\Users\user\AppData\Local\Temp\vitruvian-installer-install-v0003 =>Adware.Vitruvian
MOVED file: C:\Users\user\AppData\Local\Temp\vitruvian-installer-processes-v0002 =>Adware.Vitruvian
MOVED file: C:\Users\user\AppData\Local\Temp\vitruvian-installer-scheduledtasks-v0001 =>Adware.Vitruvian
MOVED file: C:\Users\user\AppData\Local\Temp\vitruvian-installer-softwareregkeys-v0002 =>Adware.Vitruvian
MOVED file: C:\Windows\Reimage.ini =>.Superfluous.ReimageRepair
MOVED folder: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\Extensions\deskCutv2@gmail.com =>PUP.Optional.DeskCut
MOVED folder: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhkieiodbdnokopjkcejiaddbkelghje =>Hijacker.Browser [{"background":{"scripts":["background.js"]},"conte]
MOVED folder: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhkieiodbdnokopjkcejiaddbkelghje =>Hijacker.Browser
MOVED folder^: C:\ProgramData\653ac11b-b606-42c5-b357-bca0fd28d1cd =>Heuristic.DiscoveryApp
MOVED folder: C:\Program Files\Common Files\653ac11b-b606-42c5-b357-bca0fd28d1cd =>Heuristic.DiscoveryApp
MOVED folder: C:\Program Files\Babylon =>PUP.Optional.Babylon
MOVED folder: C:\Program Files\Discovery App =>PUP.Optional.DiscoveryApp
MOVED folder: C:\Program Files\FromDocToPDF_65 =>PUP.Optional.MyClearSearch
MOVED folder: C:\Program Files\WordFly_1.10.0.28 =>PUP.Optional.Generic
MOVED folder: C:\ProgramData\Babylon =>PUP.Optional.Babylon
MOVED folder: C:\ProgramData\vWMiniProv =>PUP.Optional.WdsManPro
MOVED folder: C:\Users\user\AppData\Roaming\istartsurf =>PUP.Optional.IsStart
MOVED folder: C:\Users\user\AppData\LocalLow\FromDocToPDF_65 =>PUP.Optional.MyClearSearch
MOVED folder: C:\Users\user\AppData\Local\FromDocToPDF_65 =>PUP.Optional.MyClearSearch
MOVED folder: C:\Users\user\AppData\Local\Gameo =>.Superfluous.IronSourceLtd
---\\ Registry ( Key, Value, Data) (141)
DELETED key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\OldSearch [http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdAAFHFwdFbQoNBwlcFQJBJhQBVgpJDARGI1gBU[...]] [Default] =>.Superfluous.AkamaiHD
DELETED key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdAAFHFwdFbQoNBwlcFQJBJhQBVgpJDARGI1gBU[...]] [Default] =>.Superfluous.AkamaiHD
DELETED key: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdAAFHFwdFbQoNBwlcFQJBJhQBVgpJDARGI1gBU[...]] [Default] =>.Superfluous.AkamaiHD
REPLACED data: HKLM\...\IEXPLORE.EXE\Shell\open\Command\\C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1446649213&z=65d7fdf2a27e029e3115a48gfzfzbq4qcz4b6t9ccq&from=cor&uid=WDCXWD1600BEVT-00A23T0_WD-WX91AB09254092540 =>PUP.Optional.IsStart
DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba32987d-db80-4ccb-a8bb-f812b5421c0f} [Discovery App] =>PUP.Optional.DiscoveryApp
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ba32987d-db80-4ccb-a8bb-f812b5421c0f} [] =>PUP.Optional.DiscoveryApp
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ba32987d-db80-4ccb-a8bb-f812b5421c0f} [] =>PUP.Optional.DiscoveryApp
DELETED key*: HKLM\Software\Classes\CLSID\{ba32987d-db80-4ccb-a8bb-f812b5421c0f} [Discovery App] =>PUP.Optional.DiscoveryApp
DELETED key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\OldSearch [http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdAAFHFwdFbQoNBwlcFQJBJhQBVgpJDARGI1gBUw8SE1cRIR9aFQQTSEcFME0FCFwEURNNfX1REloeV1BROXhIEQ==&q={searchTerms}] =>.Superfluous.AkamaiHD
DELETED key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdAAFHFwdFbQoNBwlcFQJBJhQBVgpJDARGI1gBUw8SE1cRIR9aFQQTSEcFME0FCFwEURNNfX1REloeV1BROXhIEQ==&q={searchTerms}] =>.Superfluous.AkamaiHD
DELETED key: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdAAFHFwdFbQoNBwlcFQJBJhQBVgpJDARGI1gBUw8SE1cRIR9aFQQTSEcFME0FCFwEURNNfX1REloeV1BROXhIEQ==&q={searchTerms}] =>.Superfluous.AkamaiHD
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\ReimageRealTimeProtector [C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe (Not File)] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\DiscoveryApp [] =>Heuristic.DiscoveryApp
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\Service Mgr DiscoveryApp [C:\ProgramData\653ac11b-b606-42c5-b357-bca0fd28d1cd\plugincontainer.exe (Not File)] =>Heuristic.DiscoveryApp
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\Update Mgr DiscoveryApp [C:\Program Files\Common Files\653ac11b-b606-42c5-b357-bca0fd28d1cd\Updater.exe (Not File)] =>Heuristic.DiscoveryApp
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\wfdrvr_vt_1_10_0_28 [C:\Windows\System32\drivers\wfdrvr_vt_1_10_0_28.sys (Not File)] =>PUP.Optional.Generic
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\APN PIP [] =>.Superfluous.Conduit
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\FromDocToPDF_65 [] =>.Superfluous.MindSpark
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\Gameo [] =>.Superfluous.IronSourceLtd
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\ICSW1.14 [] =>Adware.InstallCore
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\ICSW1.17 [] =>Adware.InstallCore
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\Reimage [] =>.Superfluous.ReimageRepair
DELETED key*: HKEY_USERS\S-1-5-21-2144182461-4012399078-821567738-1000\SOFTWARE\reimagerepair [] =>.Superfluous.ReimageRepair
DELETED key: HKCU\Software\APN PIP [] =>.Superfluous.Conduit
DELETED key: HKCU\Software\FromDocToPDF_65 [] =>.Superfluous.MindSpark
DELETED key: HKCU\Software\Gameo [] =>.Superfluous.IronSourceLtd
DELETED key: HKCU\Software\ICSW1.14 [] =>Adware.InstallCore
DELETED key: HKCU\Software\ICSW1.17 [] =>Adware.InstallCore
DELETED key: HKCU\Software\Reimage [] =>.Superfluous.ReimageRepair
DELETED key: HKCU\Software\reimagerepair [] =>.Superfluous.ReimageRepair
DELETED key*: HKCU\Software\AppDataLow\Software\FromDocToPDF_65 [] =>.Superfluous.MindSpark
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com [] =>Toolbar.Ask
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\reimageplus.com [42] =>.Superfluous.ReimageRepair
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com [1025] =>Toolbar.Ask
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\safepcrepair.com [18] =>PUP.Optional.SafePCRepair
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\softonic.com [161] =>.Superfluous.Softonic
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\soundcloud.com [255] =>PUP.Optional.SoundCloud
DELETED key*: HKCU\Software\undefined [] =>.Superfluous.Downloader
DELETED key*: HKCU\Software\ProductSetup [] =>Adware.InstallCore
DELETED key*: HKCU\Software\Mozilla\Extends [] =>PUP.Optional.FastStart
DELETED key*: HKLM\SOFTWARE\Reimage [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.FeedManager [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.FeedManager.1 [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLMenu [FromDocToPDF_65 HTML Menu] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLMenu.1 [FromDocToPDF_65 HTML Menu] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLPanel [FromDocToPDF_65 HTML Panel] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLPanel.1 [FromDocToPDF_65 HTML Panel] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.MultipleButton [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.MultipleButton.1 [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.PseudoTransparentPlugin [Pseudo Transparent Plugin] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.PseudoTransparentPlugin.1 [Pseudo Transparent Plugin] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.ScriptButton [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.ScriptButton.1 [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.SettingsPlugin [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.SettingsPlugin.1 [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.ToolbarProtector [ProtectorControl Class] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\FromDocToPDF_65.ToolbarProtector.1 [ProtectorControl Class] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine [ReiEngine Class] =>PUP.Optional.GetLiveSupport
DELETED key*: HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1 [ReiEngine Class] =>PUP.Optional.GetLiveSupport
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{206DAA08-0036-11D5-80D8-0050DA5F08E3} [Groove WebBrowserView2] =>PUP.Optional.CrossRider
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{5CABA49F-1222-46EF-8EA3-A43834D109C9} [SaveImage Class] =>PUP.Optional.SaveMass
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{947217BD-E967-400A-B14A-BA851A8EDCBB} [Babylon Document Translation Shell Context Menu Class] =>PUP.Optional.Babylon
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{c66a678d-5e6c-4af9-8f57-c6192f42cf74} [FromDocToPDF] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{e1c4699e-5e74-4f30-a4a2-378e45d44f07} [FromDocToPDF_65 HTML] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{FC2B119B-2352-4E7A-9197-B9E1BBADE61B} [FromDocToPDF_65 HTML Menu] =>.Superfluous.MindSpark
DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WdsManPro [] =>PUP.Optional.WdsManPro
DELETED key*: HKLM\SOFTWARE\FFPluginHp [] =>PUP.Optional.SweetSearch
DELETED key*: HKLM\SOFTWARE\FromDocToPDF_65 [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\istartsurfSoftware [] =>PUP.Optional.IsStart
DELETED key*: HKLM\SOFTWARE\PIP [] =>Toolbar.Ask
DELETED key*: HKLM\SOFTWARE\WdsManPro [] =>PUP.Optional.WdsManPro
DELETED key*: HKLM\SOFTWARE\WordFly_1.10.0.28 [] =>PUP.Optional.Generic
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\4997_cor_istartsurf_RASAPI32 [] =>PUP.Optional.IsStart
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\4997_cor_istartsurf_RASMANCS [] =>PUP.Optional.IsStart
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32 [] =>PUP.Optional.Babylon
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS [] =>PUP.Optional.Babylon
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\FromDocToPDF_RASAPI32 [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\FromDocToPDF_RASMANCS [] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\gameo_RASAPI32 [] =>.Superfluous.IronSourceLtd
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\gameo_RASMANCS [] =>.Superfluous.IronSourceLtd
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimagePackage_RASAPI32 [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimagePackage_RASMANCS [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageReminder_RASAPI32 [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageReminder_RASMANCS [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageRepair(1)_RASAPI32 [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageRepair(1)_RASMANCS [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageRepair(2)_RASAPI32 [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageRepair(2)_RASMANCS [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageRepair_RASAPI32 [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ReimageRepair_RASMANCS [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\Reimage_RASAPI32 [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\Reimage_RASMANCS [] =>.Superfluous.ReimageRepair
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\WMiniPro_RASAPI32 [] =>PUP.Optional.WdsManPro
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\WMiniPro_RASMANCS [] =>PUP.Optional.WdsManPro
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\WordflyAutoUpdateClient_RASAPI32 [] =>PUP.Optional.WordFly
DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\WordflyAutoUpdateClient_RASMANCS [] =>PUP.Optional.WordFly
DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Discovery App [Discovery App] =>PUP.Optional.DiscoveryApp
DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FromDocToPDF_65bar Uninstall Internet Explorer [Mindspark Interactive Network] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall [istartsurf] =>PUP.Optional.IsStart
DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WordFly_1.10.0.28 [WordFly] =>PUP.Optional.WordFly
DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6cbf5c01-c876-481b-867e-111cb1d2a7d6} [C:\Program Files\FromDocToPDF_65\bar\1.bin (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a3b975a0-f679-444e-9d94-6d292fa53140} [C:\Program Files\FromDocToPDF_65\bar\1.bin (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e0c3a839-0e5e-4ebc-9f8f-e56f8fc732ce} [C:\Program Files\FromDocToPDF_65\bar\1.bin (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e1035f55-4c0c-4efc-9aae-38f421fce726} [C:\Program Files\FromDocToPDF_65\bar\1.bin (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{017d68f2-19b3-41ae-9d8a-8b09dbd25479} [] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{017d68f2-19b3-41ae-9d8a-8b09dbd25479}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65mlbtn.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484} [ReiEngine Class] =>.Superfluous.ReimageRepair
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}\InprocServer32 [C:\Program Files\Reimage\Reimage Repair\REI_Axcontrol.dll (Not File)] =>.Superfluous.ReimageRepair
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{206DAA08-0036-11D5-80D8-0050DA5F08E3}\InprocServer32 [C:\PROGRA~1\MICROS~2\Office12\GRF080~1.DLL] =>PUP.Optional.CrossRider
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{3700b685-d795-4e17-9b78-73bcee5d4086} [] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{3700b685-d795-4e17-9b78-73bcee5d4086}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65script.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{3e6260ac-bc6f-44b4-942b-1568c367543a} [Popup Menu Plugin] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{3e6260ac-bc6f-44b4-942b-1568c367543a}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65skin.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{4ffa72ec-9fd9-4b2b-92a5-68b60885fd8a} [HttpControl Class] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{4ffa72ec-9fd9-4b2b-92a5-68b60885fd8a}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65httpct.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{72d05120-df65-4c27-921e-899b5267fef2} [Disable Addon Rebuttal Control] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{72d05120-df65-4c27-921e-899b5267fef2}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65dlghk.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB} [CompReg Class] =>.Superfluous.ReimageRepair
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}\InprocServer32 [C:\Program Files\Reimage\Reimage Repair\REI_Axcontrol.dll (Not File)] =>.Superfluous.ReimageRepair
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{947217BD-E967-400A-B14A-BA851A8EDCBB}\InprocServer32 [C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonDocTranslationPI.dll (Not File)] =>PUP.Optional.Babylon
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{ae84501a-2cb6-41d6-b3a7-9679bdbdfa0b} [ProtectorControl Class] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{ae84501a-2cb6-41d6-b3a7-9679bdbdfa0b}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65bprtct.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{afa196f4-80e5-47ad-b7bc-c671487d36fb} [DataCtrl Class] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{afa196f4-80e5-47ad-b7bc-c671487d36fb}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65datact.dll (Not File)] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{ba32987d-db80-4ccb-a8bb-f812b5421c0f}\InprocServer32 [C:\Program Files\Discovery App\Extensions\ba32987d-db80-4ccb-a8bb-f812b5421c0f.dll (Not File)] =>PUP.Optional.DiscoveryApp
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{bc7e25d7-4681-46a3-af5a-9a1b865783ed} [] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{bc7e25d7-4681-46a3-af5a-9a1b865783ed}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65bar.dll (Not File)] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{c66a678d-5e6c-4af9-8f57-c6192f42cf74}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65bar.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{cbbea4b9-b183-47ac-8b1f-fd526ac99a8d} [Pseudo Transparent Plugin] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{cbbea4b9-b183-47ac-8b1f-fd526ac99a8d}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65skin.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{cd1d181e-c654-4ca5-9d09-b3648537fd7d} [] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{cd1d181e-c654-4ca5-9d09-b3648537fd7d}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65feedmg.dll (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{e0c3a839-0e5e-4ebc-9f8f-e56f8fc732ce} [Skin Settings] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{e0c3a839-0e5e-4ebc-9f8f-e56f8fc732ce}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65skin.dll (Not File)] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{e1c4699e-5e74-4f30-a4a2-378e45d44f07}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\T8HTML.DLL (Not File)] =>.Superfluous.MindSpark
DELETED key*: HKLM\SOFTWARE\Classes\CLSID\{f236ca79-3123-4afb-9f74-e98117ad5625} [Search Assistant BHO] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{f236ca79-3123-4afb-9f74-e98117ad5625}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65SrcAs.dll (Not File)] =>.Superfluous.MindSpark
DELETED key: HKLM\SOFTWARE\Classes\CLSID\{FC2B119B-2352-4E7A-9197-B9E1BBADE61B}\InprocServer32 [C:\Program Files\FromDocToPDF_65\bar\1.bin\65htmlmu.dll (Not File)] =>.Superfluous.MindSpark
DELETED value: HKLM\SOFTWARE\Mozilla\Firefox\Extensions\\ocr@babylon.com [C:\Program Files\Babylon\Babylon-Pro\Utils\ocr@babylon.com] =>PUP.Optional.Babylon
DELETED value: HKLM\SOFTWARE\Mozilla\Firefox\Extensions\\defsearchp@gmail.com [C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\extensions\defsearchp@gmail.com] =>PUP.Optional.PriceFountain
DELETED value: HKLM\SOFTWARE\Mozilla\Firefox\Extensions\\deskCutv2@gmail.com [C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\zxe4ywj3.default\extensions\deskCutv2@gmail.com] =>PUP.Optional.DeskCut
---\\ Summary of the elements found (33)
http://www.nicolascoolman.fr/?p=4664 =>Heuristic.DiscoveryApp
http://www.nicolascoolman.fr/pup-isstart/ =>PUP.Optional.IsStart
http://www.nicolascoolman.fr/?p=235 =>Toolbar.Ask
http://www.nicolascoolman.fr/?p=666 =>PUP.Optional.QuickStart
http://www.nicolascoolman.info/2016/05/02/superfluous-ironsourceltd/ =>.Superfluous.IronSourceLtd
http://www.nicolascoolman.fr/?p=1075 =>.Superfluous.ReimageRepair
http://www.nicolascoolman.fr/pup-optional-wordfly/ =>PUP.Optional.WordFly
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.BDYahoo
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DeskCut
http://www.nicolascoolman.fr/hijacker-browser/ =>Hijacker.Browser
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DiscoveryApp
http://www.nicolascoolman.info/2016/05/01/definition-dun-logiciel-pup-lpi/ =>PUP.Optional.Generic
http://www.nicolascoolman.fr/?p=170 =>PUP.Optional.Babylon
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.AkamaiHD
http://www.nicolascoolman.info/2016/04/28/pup-optional-multiplug/ =>PUP.Optional.Multiplug
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.PriceMoon
http://www.nicolascoolman.fr/link-652/ =>Adware.Vitruvian
http://www.nicolascoolman.fr/?p=4664 =>Hijacker.Browser [{"background":{"scripts":["background.js"]},"conte]
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.MyClearSearch
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.WdsManPro
http://www.nicolascoolman.fr/?p=210 =>.Superfluous.Conduit
http://www.nicolascoolman.fr/?p=142 =>.Superfluous.MindSpark
http://www.nicolascoolman.info/2016/04/22/adware-installcore/ =>Adware.InstallCore
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SafePCRepair
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Softonic
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SoundCloud
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Downloader
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.FastStart
http://www.nicolascoolman.com/forum/post33206.html#p33206 =>PUP.Optional.GetLiveSupport
http://www.nicolascoolman.info/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SaveMass
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SweetSearch
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.PriceFountain
---\\ Other deletions. (113)
~ Registry Keys Tracing deleted (113)
~ Remove the old reports ZHPCleaner. (0)
---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Opera Software)
~ The system has been restarted.
---\\ Statistics
~ Items scanned : 654
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 205
~ End of clean in 00h04mn19s
~====================
ZHPCleaner-[R]-14052016-14_28_55.txt
ZHPCleaner-[S]-14052016-14_02_38.txt