~ ZHPCleaner v2017.9.13.156 by Nicolas Coolman (2017/09/13)
~ Run by MSI H61M-P20(G3) (Administrator) (01/10/2017 23:05:27)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Illegal
~ Type : Nettoyer
~ Report : C:\Users\MSI H61M-P20(G3)\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\MSI H61M-P20(G3)\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 15063)


---\\ Service. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Navigateur internet. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (21)


---\\ Tâche planifiée. (1)
SUPPRIMÉ tâche: [AutoPico Daily Restart] [C:\Program Files\KMSpico\AutoPico.exe (Not File) ] =>HackTool.KMSpico


---\\ Explorateur ( Dossiers, Fichiers ). (19)
DEPLACÉ fichier: C:\Users\MSI H61M-P20(G3)\AppData\Roaming\Bubble Dock.boostrap.log =>Adware.BubbleDock
DEPLACÉ fichier: C:\Users\MSI H61M-P20(G3)\AppData\Roaming\Bubble Dock.installation.log =>Adware.BubbleDock
DEPLACÉ fichier: C:\Users\MSI H61M-P20(G3)\AppData\Roaming\Selection Tools.installation.log =>.SUP.Nosibay
DEPLACÉ fichier: C:\Users\MSI H61M-P20(G3)\AppData\Roaming\WindApp.boostrap.log =>.SUP.Nosibay
DEPLACÉ fichier: C:\Users\MSI H61M-P20(G3)\AppData\Roaming\WindApp.installation.log =>.SUP.Nosibay
DEPLACÉ fichier: C:\Users\MSI H61M-P20(G3)\AppData\Local\Temp\offer17pg.exe [Gold Click Ltd - ProxyGate Setup] =>.SUP.GoldClick
DEPLACÉ fichier: C:\Windows\SECOH-QAD.exe =>HackTool.KMSpico
DEPLACÉ dossier*: C:\Users\MSI H61M-P20(G3)\AppData\Roaming\Store =>.SUP.Nosibay
DEPLACÉ dossier*: C:\Users\MSI H61M-P20(G3)\AppData\Roaming\WTools =>.SUP.Nosibay
DEPLACÉ dossier*: C:\Program Files (x86)\DriverToolkit =>.SUP.DriverToolkit
DEPLACÉ dossier*: C:\Program Files (x86)\Max Driver Updater =>.SUP.MaxDriverUpdater
DEPLACÉ dossier*: C:\Program Files (x86)\MaxDrivrUpdater =>.SUP.MaxDriverUpdater
DEPLACÉ dossier*: C:\Program Files (x86)\MaxDrivrUpdater_v71.9359 =>.SUP.MaxDriverUpdater
DEPLACÉ dossier*: C:\Program Files\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier*: C:\Users\MSI H61M-P20(G3)\AppData\Roaming\Nosibay =>PUP.Optional.SPointer
DEPLACÉ dossier*: C:\Users\MSI H61M-P20(G3)\AppData\Local\DriverToolkit =>.SUP.DriverToolkit
DEPLACÉ dossier*: C:\Program Files (x86)\Microsoft Toolkit Final =>HackTool.WinActivator
DEPLACÉ dossier*: C:\Users\MSI H61M-P20(G3)\AppData\Local\Programs\GEN =>.SUP.Funfeedr


---\\ Base de Registres ( Clés, Valeurs, Données ). (25)
SUPPRIMÉ clé*: HKCU\Software\WajIEnhance [] =>PUP.Optional.Wajam
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-4290891581-3530163042-2180644226-1001\SOFTWARE\Conduit [] =>.SUP.Conduit
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-4290891581-3530163042-2180644226-1001\SOFTWARE\DriverToolkit [] =>.SUP.DriverToolkit
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-4290891581-3530163042-2180644226-1001\SOFTWARE\Nosibay [] =>PUP.Optional.SPointer
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-4290891581-3530163042-2180644226-1001\SOFTWARE\SwytShop [1] =>PUP.Optional.SwytShop
SUPPRIMÉ clé: HKEY_USERS\S-1-5-21-4290891581-3530163042-2180644226-1001\SOFTWARE\WajIEnhance [] =>PUP.Optional.WaEnhance
SUPPRIMÉ clé: HKCU\Software\Conduit [] =>.SUP.Conduit
SUPPRIMÉ clé: HKCU\Software\DriverToolkit [] =>.SUP.DriverToolkit
SUPPRIMÉ clé: HKCU\Software\Nosibay [] =>PUP.Optional.SPointer
SUPPRIMÉ clé: HKCU\Software\SwytShop [1] =>PUP.Optional.SwytShop
SUPPRIMÉ clé*: HKCU\Software\csastats [] =>Adware.InstallCore
SUPPRIMÉ clé*: HKCU\Software\WTools [] =>.SUP.Nosibay
SUPPRIMÉ clé*: HKCU\Software\ProductSetup [] =>Adware.InstallCore
SUPPRIMÉ clé*: HKCU\Software\Store [] =>PUP.Optional.Generic
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} [secman] =>PUP.Optional.Camec
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Soci2Sear Browser Enhancer [] =>PUP.Optional.Wajam
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\695ff0bbe9892243bc8956b893811f29 [Social2Search] =>PUP.Optional.Social2Search
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1 [KMSpico] =>HackTool.KMSpico
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Conduit [] =>.SUP.Conduit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\csdimedia [] =>.SUP.CSDI
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\MaxDrivrUpdater [] =>.SUP.MaxDriverUpdater
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Soci2Sear Browser Enhancer [] =>PUP.Optional.Wajam
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} [secman] =>PUP.Optional.Camec
SUPPRIMÉ valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Bubble Dock [0x03000000B75AEAAEF922D101] =>Adware.BubbleDock
SUPPRIMÉ valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Selection Tools [0x020000000000000000000000] =>.SUP.Nosibay


---\\ Récapitulatif des éléments trouvés sur votre station. (18)
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico
https://nicolascoolman.eu/2017/09/08/adware-bubbledock/ =>Adware.BubbleDock
https://www.anti-malware.top/2016/05/03/superfluous-nosibay/ =>.SUP.Nosibay
https://www.anti-malware.top/2016/07/31/superfluous-goldclick/ =>.SUP.GoldClick
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.DriverToolkit
https://www.anti-malware.top/2016/05/07/superfluous-maxdriverupdater/ =>.SUP.MaxDriverUpdater
https://www.nicolascoolman.com/fr/adware-spointer/ =>PUP.Optional.SPointer
https://nicolascoolman.eu/2017/01/13/hacktool-winactivator/ =>HackTool.WinActivator
https://www.anti-malware.top/2016/05/05/superfluous-funfeedr/ =>.SUP.Funfeedr
https://nicolascoolman.eu/2017/02/24/pup-optional-wajam/ =>PUP.Optional.Wajam
https://nicolascoolman.eu/2017/02/06/superfluous-conduit/ =>.SUP.Conduit
https://nicolascoolman.eu/2017/04/08/pup-optional-swytshop/ =>PUP.Optional.SwytShop
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.WaEnhance
https://nicolascoolman.eu/2017/03/12/adware-installcore-2/ =>Adware.InstallCore
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Generic
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Camec
https://nicolascoolman.eu/2017/01/17/wajam-social2search/ =>PUP.Optional.Social2Search
https://www.anti-malware.top/2016/05/03/superfluous-csdi/ =>.SUP.CSDI


---\\ Nettoyage Additionnel. (10)
~ Suppression des Clés de registre Tracing. (10)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scannés : 1521
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 45


~ End of clean in 00h00mn45s
~====================
ZHPCleaner-[R]-01102017-23_06_12.txt
ZHPCleaner-[S]-01102017-23_04_20.txt