~ ZHPCleaner v2016.1.25.15 by Nicolas Coolman (2016/01/25) ~ Run by New-Tech (Administrator) (26/01/2016 14:14:00) ~ Site : http://www.nicolascoolman.fr ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Nettoyer ~ Report : C:\Users\New-Tech\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\New-Tech\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 7 Professional, 32-bit Service Pack 1 (Build 7601) ---\\ Service. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Navigateur internet. (84) SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.bootstrappedAddons", "{\"_5qMembers_@www.zwinky.com\":{\"version\":\"7.38.8.45[...] =>.Superfluous.MindSpark SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.mywebsearch.prevKwdEnabled", true); =>PUP.Optional.MyWebSearch SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.mywebsearch.prevKwdURL", "http://int.search.tb.ask.com/search/GGmain.jhtml?st=[...] =>PUP.Optional.MyWebSearch SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.BUTTON_STRUCTURE", "[{\"b\":224546730,\"c\":\"mi[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.browser.search.defaultenginename.prev", "Google"[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.browser.search.defaultenginename.savedPrev", "tr[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.browser.search.defaultenginename.tb", "Ask Web S[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.browser.search.selectedEngine.prev", "Google"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.browser.search.selectedEngine.savedPrev", "true"[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.browser.search.selectedEngine.tb", "Ask Web Sear[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.browser.startup.homepage.prev", "https://www.fac[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.browser.startup.homepage.savedPrev", "true"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.browser.startup.homepage.tb", "http://home.tb.as[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.browser.startup.page.savedPrev", 1); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.browser.startup.page.tb", 1); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.browser.version.last", "43.0"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.coId", "c99d4c0aef1a4a26ab2b9b48aa3d6f87"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.competitorDNS", "{\"comment\":\"refresh every 1 [...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.firstKnownVersion", "7.38.8.45270"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.homepage", "http://home.tb.ask.com/index.jhtml?p[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.hp.enabled", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.hp.guardType", "HPR"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.hp.user.defined", false); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.initialized", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.installType", "XPI"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.installation.dlpCountryCode", "DZ"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.installation.installDate", "2016012107"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.installation.partnerId", "^ZJ^xpt571^YYA^dz"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.installation.pixelUrl", "http://free.zwinky.com/[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.installation.success", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.installation.toolbarId", "66B955FD-511A-481C-904[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.lastActivePing", "1453811311261"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.lastKnownVersion", "7.38.8.45270"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.lssState", "{\"previousLocales\":[\"fr\",\"fr-FR[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.options.defaultSearch", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.options.homePageEnabled", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.options.keywordEnabled", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.options.tabEnabled", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.partnerPixelFired", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.productDeliveryOption.language", "en"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.productDeliveryOption.type", "Toolbar"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.successUrl", "http://www.zwinky.com/home/main.jh[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.toolbar.ownSearch", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.toolbarCollapsed", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._5qMembers_.uninstallTasks", "{\"prefBranchesToDelete\":[\"e[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.browser.search.defaultenginename.prev", "Ask Web[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.browser.search.defaultenginename.savedPrev", "tr[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.browser.search.defaultenginename.tb", "Ask Web S[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.browser.search.selectedEngine.prev", "Ask Web Se[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.browser.search.selectedEngine.savedPrev", "true"[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.browser.search.selectedEngine.tb", "Ask Web Sear[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.browser.startup.homepage.prev", "http://home.tb.[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.browser.startup.homepage.savedPrev", "true"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.browser.startup.page.savedPrev", 1); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.browser.startup.page.tb", 1); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.browser.version.last", "43.0"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.coId", "990886ac411a43f382de1757a1458608"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.competitorDNS", "{\"comment\":\"refresh every 1 [...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.firstKnownVersion", "7.38.8.56171"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.hp.enabled", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.hp.guardType", "HPR"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.initialized", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.installType", "XPI"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.installation.dlpCountryCode", "DZ"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.installation.installDate", "2016012108"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.installation.partnerId", "^BBQ^xdm103^YYA^dz"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.installation.partnerSubId", "CJiKp8zMu8oCFUESGwo[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.installation.success", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.lastActivePing", "1453811311453"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.lastKnownVersion", "7.38.8.56171"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.lssState", "{\"previousLocales\":[\"fr\",\"fr-FR[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.options.defaultSearch", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.options.homePageEnabled", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.options.keywordEnabled", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.options.tabEnabled", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.partnerPixelFired", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.productDeliveryOption.language", "fr"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.productDeliveryOption.type", "Toolbar"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.successUrl", "http://free.internetspeedtracker.c[...] =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark._9tMembers_.toolbarCollapsed", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark.hp.enabled", true); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "zwinky@mindspark.com"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.toolbar.mindspark.lastInstalled", "internetspeedtracker@mindspark.com"); =>PUP.Optional.Bandoo SUPPRIMÉ: [fqvbdoen.default] - user_pref("extensions.xpiState", "{\"winreg-app-user\":{\"mozilla_cc2@internetdownloadmanager.com\":[...] =>.Superfluous.MindSpark ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (21) ---\\ Tâche planifiée. (2) SUPPRIMÉ tâche: [AutoKMS] [C:\Windows\AutoKMS.exe (Not File) ] =>HackTool.AutoKMS SUPPRIMÉ tâche: [AutoKMSDaily] [C:\Windows\AutoKMS.exe (Not File) ] =>HackTool.AutoKMS ---\\ Explorateur ( Dossiers, Fichiers ). (11) DEPLACÉ fichier: C:\Users\New-Tech\AppData\Roaming\Mozilla\Firefox\Profiles\fqvbdoen.default\Extensions\_9tMembers_@download.internetspeedtracker.com\bootstrap.js =>.Superfluous.MindSpark DEPLACÉ fichier^: C:\Users\New-Tech\AppData\Roaming\Mozilla\Firefox\Profiles\fqvbdoen.default\Extensions\_9tMembers_@download.internetspeedtracker.com\chrome =>.Superfluous.MindSpark DEPLACÉ fichier: C:\Users\New-Tech\AppData\Roaming\Mozilla\Firefox\Profiles\fqvbdoen.default\Extensions\_9tMembers_@download.internetspeedtracker.com\chrome.manifest =>.Superfluous.MindSpark DEPLACÉ fichier: C:\Users\New-Tech\AppData\Roaming\Mozilla\Firefox\Profiles\fqvbdoen.default\Extensions\_9tMembers_@download.internetspeedtracker.com\chrome.manifest.restartless =>.Superfluous.MindSpark DEPLACÉ fichier: C:\Users\New-Tech\AppData\Roaming\Mozilla\Firefox\Profiles\fqvbdoen.default\Extensions\_9tMembers_@download.internetspeedtracker.com\install.rdf =>.Superfluous.MindSpark DEPLACÉ fichier^: C:\Users\New-Tech\AppData\Roaming\Mozilla\Firefox\Profiles\fqvbdoen.default\Extensions\_9tMembers_@download.internetspeedtracker.com\META-INF =>.Superfluous.MindSpark DEPLACÉ fichier: C:\Windows\AutoKMS.exe [CODYQX4 - AutoKMS] =>HackTool.AutoKMS DEPLACÉ fichier: C:\Windows\Tasks\AutoKMS.job =>HackTool.AutoKMS DEPLACÉ fichier: C:\Windows\Tasks\AutoKMSDaily.job =>HackTool.AutoKMS DEPLACÉ fichier: C:\Windows\KMSEmulator.exe [ - Local KMS Host] =>HackTool.AutoKMS DEPLACÉ dossier: C:\Users\New-Tech\AppData\Roaming\Mozilla\Firefox\Profiles\fqvbdoen.default\Extensions\_9tMembers_@download.internetspeedtracker.com =>.Superfluous.MindSpark ---\\ Base de Registres ( Clés, Valeurs, Données ). (1) SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} [ITool] =>Toolbar.Ask ---\\ Récapitulatif des éléments trouvés sur votre station. (5) http://www.nicolascoolman.fr/?p=142 =>.Superfluous.MindSpark http://www.nicolascoolman.fr/?p=220 =>PUP.Optional.MyWebSearch http://www.nicolascoolman.fr/?p=237 =>PUP.Optional.Bandoo http://www.nicolascoolman.fr/?p=1804 =>HackTool.AutoKMS http://www.nicolascoolman.fr/?p=235 =>Toolbar.Ask ---\\ Nettoyage Additionnel. (24) ~ Suppression des Clés de registre Tracing. (24) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Opera Software) ~ Le système a été redémarré. ---\\ Statistiques ~ Items scannés : 719 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 98 ~ End of clean in 00h00mn37s =================== ZHPCleaner-[R]-26012016-14_14_37.txt ZHPCleaner-[S]-26012016-14_13_22.txt