~ ZHPCleaner v2016.5.21.68 by Nicolas Coolman (2016/05/21) ~ Run by home (Administrator) (23/05/2016 14:07:26) ~ Site : http://www.nicolascoolman.com ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Repair ~ Report : C:\Users\home\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\home\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 7 Ultimate, 64-bit Service Pack 1 (Build 7601) ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (1) DELETED data: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride [Bad : local] =>Hijacker.Proxy ---\\ Hosts file (1) ~ The hosts file is legitimate (21) ---\\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. ---\\ Explorer ( File, Folder) (3) MOVED folder: C:\ProgramData\APN =>Toolbar.Ask MOVED folder: C:\Users\home\AppData\Local\CrashRpt =>.Superfluous.CrashReports MOVED folder: C:\Users\home\AppData\Local\Temp\APN =>.Superfluous.Conduit ---\\ Registry ( Key, Value, Data) (45) DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d10lpsik1i8c69.cloudfront.net [1067] =>.Superfluous.CloudfrontNet DELETED key*: [X64] HKLM\SOFTWARE\Classes\protector_dll.Protector [Protector Class] =>PUP.Optional.BProtector DELETED key*: [X64] HKLM\SOFTWARE\Classes\protector_dll.Protector.1 [Protector Class] =>PUP.Optional.BProtector DELETED key*: [X64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib [ProtectorLib Class] =>PUP.Optional.BProtector DELETED key*: [X64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1 [ProtectorLib Class] =>PUP.Optional.BProtector DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\04B5BFBFDCA83074BBF1504566811203 [C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965 [02:\SOFTWARE\AskPartnerNetwork\Toolbar\Updater\Shutdown\ (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4 [02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\VersionCompareDigits (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B [C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E [02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\InvokePath (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\235CDDD4FAA2BCE4C9E578A53866F91E [C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\tbnhlpr_x64.exe (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414 [02:\SOFTWARE\AskPartnerNetwork\PackageService\ (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA [02:\SOFTWARE\AskPartnerNetwork\Toolbar\Updater\ (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4 [C:\Program Files (x86)\AskPartnerNetwork\Toolbar\UpdateManager.exe (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36 [01:\SOFTWARE\AskPartnerNetwork\Toolbar\Updater\ (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173 [02:\SOFTWARE\AskPartnerNetwork\Toolbar\shared\TotalTBEverLanded (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4 [02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\CheckInterval (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03 [C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29 [C:\Program Files (x86)\AskPartnerNetwork\ChromeUtils\APNNativeMsgHost.exe (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4 [01:\SOFTWARE\AskPartnerNetwork\Toolbar\shared\EnableSA (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB9AD9C4759E4D24E940AD04A0AF85F9 [02:\SOFTWARE\AskPartnerNetwork\Toolbar\shared\osDetail (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677A0850AB47487C [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\timeinstalled_cr (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677A0850AB4748E6 [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\timeinstalled (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677A0850AB477508 [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\lastInstallOperation (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677A0850AB478757 [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\Reporting_URL (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677A0850AB47877E [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\ProductVersion (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677A0850AB47C77A [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\productguid (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677A0850AB47F670 [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\ (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677A0850AB67CA07 [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Macro\ (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677A0CF64469657A [C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\REAL-TG\config.xml (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677A7A8684D4677A [02:\SOFTWARE\AskPartnerNetwork\Toolbar\Updater\REAL-TG\Macro\apnuguid (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677A7B7987A75C7A [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\Browsers (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677AA75C6CAD4777 [02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\REAL-TG\CmdArgs (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677AA75CE8770476 [02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\REAL-TG\Version (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677AB8640F7C487A [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\ua_cr (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677AB8640F7C7477 [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\hpr_cr (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677AB8640F7CA77A [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\sa_cr (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677AB8640FD798E7 [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\ProductType (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677AB8646F7C7C79 [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\Cr_Crx_Ids (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C414542545D20074677AB8647F787A78 [02:\SOFTWARE\AskPartnerNetwork\Toolbar\REAL-TG\Info\SupportedAssets (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F [C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\ask-search.xml (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7 [02:\SOFTWARE\AskPartnerNetwork\PackageService\Register\ApnSetupV6\UpdateAllSubPackageToVersion (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D724C31774C34347F4D787E3D2D46337 [C:\Program Files (x86)\AskPartnerNetwork\ChromeUtils\com.apn.native_messaging_host_fhnobihfdnklhoilcilfogdcegekpgfn.json (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D724C31774C34347F4D7B41474B4CA54 [C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\fhnobihfdnklhoilcilfogdcegekpgfn.crx (Not File)] =>PUP.Optional.APNToolBar DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48 [02:\SOFTWARE\AskPartnerNetwork\Toolbar\shared\ (Not File)] =>PUP.Optional.APNToolBar ---\\ Summary of the elements found (7) http://www.nicolascoolman.fr/?p=4664 =>Hijacker.Proxy http://www.nicolascoolman.fr/?p=235 =>Toolbar.Ask http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.CrashReports http://www.nicolascoolman.fr/?p=210 =>.Superfluous.Conduit http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.CloudfrontNet http://www.nicolascoolman.info/2016/04/30/pup-optional-bprotector/ =>PUP.Optional.BProtector http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.APNToolBar ---\\ Other deletions. (31) ~ Registry Keys Tracing deleted (31) ~ Remove the old reports ZHPCleaner. (0) ---\\ Result of repair ~ Repair carried out successfully ~ Browser not found (Mozilla Firefox) ~ Browser not found (Opera Software) ---\\ Statistics ~ Items scanned : 619 ~ Items found : 0 ~ Items cancelled : 0 ~ Items repaired : 49 ~ End of clean in 00h00mn49s ~==================== ZHPCleaner-[R]-23052016-14_08_15.txt ZHPCleaner-[S]-23052016-14_06_48.txt