~ ZHPCleaner v2016.5.25.69 by Nicolas Coolman (2016/05/25) ~ Run by Quentin (Administrator) (29/05/2016 20:34:34) ~ Site : http://www.nicolascoolman.com ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Nettoyer ~ Report : C:\Users\Quentin\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Quentin\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 10586) ---\\ Service. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Navigateur internet. (4) SUPPRIMÉ: [osjrry8n.default] - user_pref("browser.search.hiddenOneOffs", "Yahoo,Bing,Amazon.fr,DuckDuckGo,eBay France,mystartsearch[...] =>PUP.Optional.StartSearch SUPPRIMÉ: [osjrry8n.default] - user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart SUPPRIMÉ: [osjrry8n.default] - user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart REMPLACÉ Quicklaunch: C:\Users\Quentin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [Bad : http://www.mystartsearch.com/?type=sc&ts=1418325526&from=smt&uid=HGSTXHTS721010A9E630_JR10006P0T7YSF0T7YSFX] =>Hijacker.Browser ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (21) ---\\ Tâche planifiée. (1) SUPPRIMÉ tâche: [ParetoLogic Registration3] [C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\UUS3.dll RunUns (Not File) ] =>.Superfluous.Paretologic ---\\ Explorateur ( Dossiers, Fichiers ). (29) DEPLACÉ fichier: C:\Windows\Tasks\ParetoLogic Registration3.job =>.Superfluous.Paretologic DEPLACÉ fichier: C:\Users\Quentin\Downloads\RegCureProSetup_BEE53F1F-2C2E-40FC-AB9C-6FCD73E86FE5_.exe [ParetoLogic, Inc. - RegCure Pro Installer] =>.Superfluous.Paretologic DEPLACÉ fichier: C:\Users\Quentin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage =>.Superfluous.AudienceInsights DEPLACÉ fichier: C:\Users\Quentin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage-journal =>.Superfluous.AudienceInsights DEPLACÉ dossier: C:\Program Files (x86)\ParetoLogic =>.Superfluous.Paretologic DEPLACÉ dossier: C:\Program Files (x86)\Common Files\ParetoLogic =>.Superfluous.Paretologic DEPLACÉ dossier: C:\ProgramData\ParetoLogic =>.Superfluous.Paretologic DEPLACÉ dossier: C:\Users\Quentin\AppData\Roaming\ParetoLogic =>.Superfluous.Paretologic DEPLACÉ dossier: C:\Users\Quentin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ParetoLogic =>.Superfluous.Paretologic DEPLACÉ dossier: C:\WINDOWS\Installer\MSI3E14.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSI4345.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSI7713.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSI7AAE.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSI7B5B.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSI7DAE.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSI7F84.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSI80D0.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSI816D.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSI93E2.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSI94BE.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSI99D3.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSI9AEF.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSIA80F.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSID375.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSIE32F.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSIE4A8.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSIE6A0.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSIE78E.tmp- =>Empty DEPLACÉ dossier: C:\WINDOWS\Installer\MSIEACC.tmp- =>Empty ---\\ Base de Registres ( Clés, Valeurs, Données ). (27) SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-2384028675-1186066499-781038166-1002\SOFTWARE\ParetoLogic [] =>.Superfluous.Paretologic SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-2384028675-1186066499-781038166-1002\SOFTWARE\Softonic [] =>.Superfluous.Softonic SUPPRIMÉ clé: HKCU\Software\ParetoLogic [] =>.Superfluous.Paretologic SUPPRIMÉ clé: HKCU\Software\Softonic [] =>.Superfluous.Softonic SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esri3DAnalystUI.DeltaXYZSketch3DMenuItem [esri3DAnalystUI.DeltaXYZSketch3DMenuItem] =>.Superfluous.DeltaSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esri3DAnalystUI.DeltaXYZSketch3DMenuItem.1 [esri3DAnalystUI.DeltaXYZSketch3DMenuItem] =>.Superfluous.DeltaSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriArcScan.RasterShapeRecognitionTool [esriArcScan.RasterShapeRecognitionTool] =>.Superfluous.YahooDetect SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriArcScan.RasterShapeRecognitionTool.1 [esriArcScan.RasterShapeRecognitionTool] =>.Superfluous.YahooDetect SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriCadastralUI.DeltaXYConstructionMenuItem [esriCadastralUI.DeltaXYConstructionMenuItem] =>.Superfluous.DeltaSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriCadastralUI.DeltaXYConstructionMenuItem.1 [esriCadastralUI.DeltaXYConstructionMenuItem] =>.Superfluous.DeltaSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriControls.ControlsEditingSketchDeltaXYCommand [esriControls.ControlsEditingSketchDeltaXYCommand] =>.Superfluous.DeltaSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriControls.ControlsEditingSketchDeltaXYCommand.1 [esriControls.ControlsEditingSketchDeltaXYCommand] =>.Superfluous.DeltaSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriDataSourcesRaster.ConstantFunction [esriDataSourcesRaster.ConstantFunction] =>Adware.BrowseFox SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriDataSourcesRaster.ConstantFunction.1 [esriDataSourcesRaster.ConstantFunction] =>Adware.BrowseFox SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriDataSourcesRaster.ConstantFunctionArguments [esriDataSourcesRaster.ConstantFunctionArguments] =>Adware.BrowseFox SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriDataSourcesRaster.ConstantFunctionArguments.1 [esriDataSourcesRaster.ConstantFunctionArguments] =>Adware.BrowseFox SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriGeoDatabaseDistributed.DeltaDataChanges [esriGeoDatabaseDistributed.DeltaDataChanges] =>.Superfluous.DeltaSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriGeoDatabaseDistributed.DeltaDataChanges.1 [esriGeoDatabaseDistributed.DeltaDataChanges] =>.Superfluous.DeltaSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriGeoprocessing.GPCheckInDeltaDatabase [esriGeoprocessing.GPCheckInDeltaDatabase] =>.Superfluous.DeltaSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriGeoprocessing.GPCheckInDeltaDatabase.1 [esriGeoprocessing.GPCheckInDeltaDatabase] =>.Superfluous.DeltaSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriGeoprocessing.GPExportDeltaDatabase [esriGeoprocessing.GPExportDeltaDatabase] =>.Superfluous.DeltaSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\esriGeoprocessing.GPExportDeltaDatabase.1 [esriGeoprocessing.GPExportDeltaDatabase] =>.Superfluous.DeltaSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Record\{C4B4BDF5-B32A-44A0-9F15-88E46C7A5093} [XTools.AttributeInfo.Independent.Enums.DrawFeatureImageModeStub] =>.Superfluous.ReimageRepair SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\ParetoLogic [] =>.Superfluous.Paretologic SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\SupDp [] =>PUP.Optional.SupTab SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Google Inc.] =>Heuristic.Suspect SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C547F361-5750-4CD1-9FB6-BC93827CB6C1} [ParetoLogic, Inc.] =>.Superfluous.Paretologic ---\\ Récapitulatif des éléments trouvés sur votre station. (12) http://www.nicolascoolman.fr/pup-optional-startsearch/ =>PUP.Optional.StartSearch http://www.nicolascoolman.fr/?p=666 =>PUP.Optional.QuickStart http://www.nicolascoolman.fr/hijacker-browser/ =>Hijacker.Browser http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Paretologic http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.AudienceInsights http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Softonic http://www.nicolascoolman.fr/?p=273 =>.Superfluous.DeltaSearch http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.YahooDetect http://www.nicolascoolman.fr/?p=347 =>Adware.BrowseFox http://www.nicolascoolman.fr/?p=1075 =>.Superfluous.ReimageRepair http://www.nicolascoolman.fr/?p=297 =>PUP.Optional.SupTab http://www.nicolascoolman.info/2016/04/22/heuristic-suspect/ =>Heuristic.Suspect ---\\ Nettoyage Additionnel. (42) ~ Suppression des Clés de registre Tracing. (42) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Opera Software) ---\\ Statistiques ~ Items scannés : 1122 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 61 ~ End of clean in 00h00mn52s ~==================== ZHPCleaner-[R]-29052016-20_35_26.txt ZHPCleaner-[S]-29052016-20_31_49.txt