~ ZHPCleaner v2017.6.15.99 by Nicolas Coolman (2017/06/15)
~ Run by thibault (Administrator) (16/06/2017 19:15:53)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version KO
~ Certificate: Legal
~ Type : Nettoyer
~ Report : C:\Users\thibault\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\thibault\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 15063)


---\\ Service. (1)
ARRETÉ : MustangService_2015_10_10 =>.Superfluous.MustangBrowser


---\\ Navigateur internet. (5)
REMPLACÉ IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Default_Page_URL [http://www.istartsurf.com/?type=hp&ts=1442474568&z=c41fd8028e9c4f43236f171e2964f[...]] =>PUP.Optional.IsStart
REMPLACÉ IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Default_Search_URL [http://www.istartsurf.com/web/?type=ds&ts=1442474568&z=c41fd8028e9c4f43236f171e2[...]] =>PUP.Optional.IsStart
REMPLACÉ IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Search Page [http://www.istartsurf.com/web/?type=ds&ts=1442474568&z=c41fd8028e9c4f43236f171e2[...]] =>PUP.Optional.IsStart
SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings [Bad : Port=50073 <-Loopback>] =>Hijacker.Proxy
SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings [Bad : Port=50073 <-Loopback>] =>Hijacker.Proxy


---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (60)


---\\ Tâche planifiée. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Explorateur ( Dossiers, Fichiers ). (82)
DEPLACÉ fichier: C:\ProgramData\TempMoudleSet\MustangSer1042.exe [MustangService - ] =>.Superfluous.MustangBrowser
DEPLACÉ fichier: C:\ProgramData\JAUpWW\puleVI.exe [Irrational Number Applications - WebShield Service] =>PUP.Optional.WebShield
DEPLACÉ fichier: C:\END =>.Superfluous.Conduit
DEPLACÉ fichier: C:\Windows\Prefetch\PERFORMANCEOPTIMIZER.EXE-0D5E8F18.pf =>Adware.BProtector
DEPLACÉ fichier: C:\Windows\Installer\wix{3DE97849-544D-4D68-9255-11DF6F9F10D8}.SchedServiceConfig.rmi =>.Superfluous.Empty
DEPLACÉ fichier: C:\Windows\Installer\MSI19AB.tmp =>.Superfluous.MSIInstaller
DEPLACÉ fichier: C:\Windows\Installer\MSI96AE.tmp =>.Superfluous.MSIInstaller
DEPLACÉ fichier: C:\Windows\Installer\MSIFFB7.tmp [TODO: <公司名> - IFilter] =>.Superfluous.MSIInstaller
DEPLACÉ fichier: C:\ProgramData\JAUpWW\dat\HFgbknFsZ.exe [Irrational Number Applications - WebShield] =>PUP.Optional.WebShield
DEPLACÉ fichier: C:\ProgramData\JAUpWW\dat\otEflgPkUb.exe [Irrational Number Applications - WebShield] =>PUP.Optional.WebShield
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\CFG8F39.tmp =>.Superfluous.Temporary.Empty
DEPLACÉ fichier^: C:\Users\thibault\AppData\Local\Temp\ClamWin1.log =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\ClamWin2.log =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\ClamWin3.log =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\ClamWin4.log =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\ClamWin_CheckVer_Info =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\ClamWin_CheckVer_Time =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\foxD716.tmp =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\Linda P.bmp =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\Pokki-2017-06-16.log =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\sa.9NBLGGH1ZRPV_0_0010_.Public.InstallAgent.dat =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\sa.9NBLGGH33ZDV_0_0010_.Public.InstallAgent.dat =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\sa.9WZDNCRCWFTB_0_0010_.Public.InstallAgent.dat =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\sa.9WZDNCRCWFTB_0__.Public.InstallAgent.dat =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\sa.9WZDNCRDMPT6_0_0010_.Public.InstallAgent.dat =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\sa.9WZDNCRDMPT6_0__.Public.InstallAgent.dat =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\sa.9WZDNCRFJ140_0_0010_.Public.InstallAgent.dat =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\sa.9WZDNCRFJ140_0__.Public.InstallAgent.dat =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\thibault.bmp =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\wmsetup.log =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\you794E.tmp =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\thibault\AppData\Local\Temp\_iu14D2N.tmp [ - Setup/Uninstall] =>.Superfluous.Temporary.Empty
DEPLACÉ dossier: C:\Program Files (x86)\CinemaPlus-4.2vV25.08 =>Adware.CrossRider
DEPLACÉ dossier: C:\Program Files (x86)\MaxDrivrUpdater =>.Superfluous.MaxDriverUpdater
DEPLACÉ dossier: C:\Program Files (x86)\MaxDrivrUpdater_v62.2282 =>.Superfluous.MaxDriverUpdater
DEPLACÉ dossier: C:\Program Files (x86)\ODBCMAES =>.Superfluous.Empty
DEPLACÉ dossier: C:\WebShield =>PUP.Optional.WebShield
DEPLACÉ dossier: C:\Program Files (x86)\Common Files\Uninstall Files =>PUP.Optional.UniSales
DEPLACÉ dossier: C:\ProgramData\Browser =>.Superfluous.SpeedBrowser
DEPLACÉ dossier: C:\ProgramData\Pokki =>.Superfluous.SweetLabs
DEPLACÉ dossier: C:\ProgramData\WebShield =>PUP.Optional.WebShield
DEPLACÉ dossier: C:\ProgramData\TempMoudleSet =>.Superfluous.MustangBrowser
DEPLACÉ dossier: C:\Users\thibault\AppData\Roaming\csdimedia =>.Superfluous.CSDI
DEPLACÉ dossier: C:\Users\thibault\AppData\Local\Pokki =>.Superfluous.SweetLabs
DEPLACÉ dossier: C:\Users\thibault\AppData\Local\Temp\MAXDriverUpdater =>.Superfluous.MaxDriverUpdater
DEPLACÉ dossier: C:\Users\Default\AppData\Local\Pokki =>.Superfluous.SweetLabs
DEPLACÉ dossier: C:\Users\Default User\AppData\Local\Pokki =>.Superfluous.SweetLabs
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI2287.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI23B6.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI245D.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI265B.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI26FF.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI39B4.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI3E95.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI4262.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI47D6.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI56E1.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI5EF4.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI6C5C.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI79DD.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI7C18.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI8959.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI8988.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI8F0A.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIA20.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIA254.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIAAB.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIAF34.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIB0DE.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIBE98.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIC254.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIC47.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSICADD.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSID0A9.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIDFE4.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIE4F4.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIEF49.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIF227.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIF402.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIFA88.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIFD9.tmp- =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIFFB6.tmp- =>.Superfluous.Empty


---\\ Base de Registres ( Clés, Valeurs, Données ). (33)
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [http://www.istartsurf.com/web/?type=ds&ts=1442474568&z=c41fd8028e9c4f43236f171e2964f5c1gzzozmzwqb&fr[...]] [istartsurf] =>PUP.Optional.IsStart
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [http://www.istartsurf.com/web/?type=ds&ts=1442474568&z=c41fd8028e9c4f43236f171e2964f5c1gzzozmzwqb&fr[...]] [istartsurf] =>PUP.Optional.IsStart
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [http://www.istartsurf.com/web/?type=ds&ts=1442474568&z=c41fd8028e9c4f43236f171e2964f5c1gzzozmzwqb&from=tugs&uid=wdcxwd10jpvx-22jc3t0_wd-wx81ab4f17a2f17a2&q={searchTerms}] =>PUP.Optional.IsStart
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [http://www.istartsurf.com/web/?type=ds&ts=1442474568&z=c41fd8028e9c4f43236f171e2964f5c1gzzozmzwqb&from=tugs&uid=wdcxwd10jpvx-22jc3t0_wd-wx81ab4f17a2f17a2&q={searchTerms}] =>PUP.Optional.IsStart
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\MustangService_2015_10_10 [C:\ProgramData\TempMoudleSet\MustangSer1042.exe (Not File)] =>.Superfluous.MustangBrowser
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\puleVI [C:\ProgramData\JAUpWW\puleVI.exe (Not File)] =>PUP.Optional.WebShield
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1520791508-2612296529-3449326455-1005\SOFTWARE\Pokki [] =>.Superfluous.SweetLabs
SUPPRIMÉ clé: HKCU\Software\Pokki [] =>.Superfluous.SweetLabs
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki [Pokki] =>.Superfluous.SweetLabs
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\protector_dll.Protector [Protector Class] =>Adware.BProtector
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\protector_dll.Protector.1 [Protector Class] =>Adware.BProtector
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib [ProtectorLib Class] =>Adware.BProtector
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1 [ProtectorLib Class] =>Adware.BProtector
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\ArenaHD [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\HighDefAction [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\InstalledBrowserExtensions [] =>PUP.Optional.BrowserExtensions
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\YorkNewCin [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\ArenaHD [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\CinemaPlus-4.2vV25.08 [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\GlobalUpdate [] =>PUP.Optional.GlobalUpdate
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\HighDefAction [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\ihpmserver [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions [] =>PUP.Optional.BrowserExtensions
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\istartsurfSoftware [] =>PUP.Optional.IsStart
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\MaxDrivrUpdater [] =>.Superfluous.MaxDriverUpdater
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\RayDld [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\SpeedBrowser [] =>.Superfluous.SpeedBrowser
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\YorkNewCin [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WebShield [Irrational Number Applications] =>PUP.Optional.WebShield
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\zz.2282.mdu [CSDI] =>.Superfluous.CSDI
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PerformanceOptimizer_RASAPI32 [] =>Adware.BProtector
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PerformanceOptimizer_RASMANCS [] =>Adware.BProtector
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{44A46850-E603-49CC-9DD9-2AD79E96A5C5} [C:\Program Files (x86)\Max Driver Updater\maxdu.exe] =>.Superfluous.MaxDriverUpdater


---\\ Récapitulatif des éléments trouvés sur votre station. (17)
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.MustangBrowser
https://www.nicolascoolman.com/fr/pup-isstart/ =>PUP.Optional.IsStart
https://nicolascoolman.eu/2017/04/03/hijacker-proxy/ =>Hijacker.Proxy
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.WebShield
https://nicolascoolman.eu/2017/02/06/superfluous-conduit/ =>.Superfluous.Conduit
https://nicolascoolman.eu/2017/04/12/adware-bprotector/ =>Adware.BProtector
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Empty
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.MSIInstaller
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Temporary.Empty
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider
https://www.anti-malware.top/2016/05/07/superfluous-maxdriverupdater/ =>.Superfluous.MaxDriverUpdater
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.UniSales
https://www.anti-malware.top/2016/07/28/superfluousspeedbrowser/ =>.Superfluous.SpeedBrowser
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.SweetLabs
https://www.anti-malware.top/2016/05/03/superfluous-csdi/ =>.Superfluous.CSDI
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.BrowserExtensions
https://www.nicolascoolman.com/fr/pup-globalupdate/ =>PUP.Optional.GlobalUpdate


---\\ Nettoyage Additionnel. (16)
~ Suppression des Clés de registre Tracing. (16)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Google Chrome)
~ Ce navigateur est absent (Opera Software)
~ Le système a été redémarré.


---\\ Statistiques
~ Items scannés : 754
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 122


~ End of clean in 00h01mn17s
~====================
ZHPCleaner-[R]-16062017-19_17_10.txt
ZHPCleaner-[S]-16062017-19_13_28.txt