~ ZHPCleaner v2016.6.6.72 by Nicolas Coolman (2016/06/06)
~ Run by Guillaume (Administrator)  (07/06/2016 22:00:10)
~ Site : http://www.nicolascoolman.com
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : E:\Users\Guillaume\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Guillaume\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Professional, 64-bit Service Pack 1 (Build 7601)


---\\  Service. (0)


---\\  Navigateur internet. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\  Fichier hôte. (1)
~ Le fichier hôte est légitime. (1)


---\\  Tâche planifiée. (1)
SUPPRIMÉ tâche: [AutoPico Daily Restart] [C:\Program Files\KMSpico\AutoPico.exe (Not File) ]  =>HackTool.KMSpico


---\\  Explorateur  ( Dossiers, Fichiers ). (52)
DEPLACÉ fichier: C:\Program Files\KMSpico\Service_KMS.exe [ - Service_KMS]  =>HackTool.KMSpico
DEPLACÉ fichier: C:\Program Files\KMSpico\AutoPico.exe [ - AutoPico]  =>HackTool.KMSpico
DEPLACÉ fichier: C:\Program Files\KMSpico\KMSELDI.exe [ - KMS GUI ELDI]  =>HackTool.KMSpico
DEPLACÉ dossier: C:\Program Files\KMSpico  =>HackTool.KMSpico
DEPLACÉ dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico  =>HackTool.KMSpico
DEPLACÉ dossier: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\LavasoftTcpService  =>PUP.Optional.LavasoftWebCompanion
DEPLACÉ dossier: C:\Program Files (x86)\Software  =>PUP.Optional.Boxore
DEPLACÉ dossier: C:\ProgramData\Software  =>PUP.Optional.Boxore
DEPLACÉ dossier: C:\Users\Guillaume\AppData\Local\Google\Chrome\User Data\Default\File System\008  =>PUP.Optional.DomaIQ
DEPLACÉ dossier: C:\Users\Guillaume\AppData\Local\Software  =>PUP.Optional.Boxore
DEPLACÉ dossier: C:\Windows\Installer\MSI16B1.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI1F1B.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI2025.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI21FA.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI22C6.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI2343.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI24AC.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI279A.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI2C6B.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSI2D08.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIC19D.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIC298.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIC325.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSICBBF.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSICCB9.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSICD75.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSICE41.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSICEDE.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSICF6C.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSICFFA.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSID137.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSID444.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSID4A.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSID510.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSID5BC.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSID688.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIDADD.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIDB99.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIDC27.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIDDDC.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIDE79.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIDF93.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIE09D.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIE1C7.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIE310.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIE67C.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIEAB6.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIED18.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIF702.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIF935.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIF9F1.tmp-  =>Empty
DEPLACÉ dossier: C:\Windows\Installer\MSIFBFA.tmp-  =>Empty


---\\  Base de Registres ( Clés, Valeurs, Données ). (49)
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [C:\Program Files\KMSpico\Service_KMS.exe (Not File)]  =>HackTool.KMSpico
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1d695764-70f9-48f8-abb5-0f568dc6ca3c} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E2C5128-7C6-4079-A855-F1D9DD4CEB2E} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{23323DB5-D3D5-4870-8FC9-DC81F9392D} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31DDF931-2CB7-40EF-A41B-7C87A33932E4} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4A8AFA70-C74B-46F7-AAA4-207E755A6FC} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{64E61CCF-1FA3-453B-878C-FD7F152EF146} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CF07F6-A342-469E-B7E7-685741AAE2E1} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1B71FD7-3FCB-4B40-A356-A9E863B12B} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C14CDA97-A96A-4E69-9A8B-2FF77F5CA7E} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C9E9E692-BAE8-4852-B443-B9DCFEDF17A0} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CA1BBAF0-2C60-4807-9949-E4CA346151DB} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DA5E7BE8-E677-4ADA-BDA3-EE81D7AE1C1} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E16DA22C-E74C-4090-80EF-B0C215918E5} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EB145CAB-5BA3-46DC-8175-EF36BDE0DA59} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EFEEA078-139C-4C91-B45-86F9AD409956} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer [DataContainer Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer.1 [DataContainer Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController [DataController Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController.1 [DataController Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable [DataTable Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable.1 [DataTable Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields [DataTableFields Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields.1 [DataTableFields Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder [DataTableHolder Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder.1 [DataTableHolder Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic [LSPLogic Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic.1 [LSPLogic Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager [ReadOnlyManager Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager.1 [ReadOnlyManager Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController [WFPController Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController.1 [WFPController Class]  =>PUP.Optional.LavasoftWebCompanion
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\TorntvDownloader []  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\Torntv Downloader_RASAPI32 []  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\Torntv Downloader_RASMANCS []  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 [KMSpico v9.0.5.20131112]  =>HackTool.KMSpico
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1d695764-70f9-48f8-abb5-0f568dc6ca3c} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Google Inc.]  =>Heuristic.Suspect
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1d695764-70f9-48f8-abb5-0f568dc6ca3c} [C:\Program Files (x86)\Torntv V9.0 (Not File)]  =>PUP.Optional.TornTV
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{64C137BA-DE89-48B5-9C54-7D8057C15105} [C:\Program Files\KMSpico\KMSELDI.exe]  =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{5765C84E-AC03-4D37-9B16-47CC37757422} [C:\Program Files\KMSpico\KMSELDI.exe]  =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{2A13BD00-8E15-4194-B660-2BC018E086C8} [C:\Program Files\KMSpico\AutoPico.exe]  =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{31CF44AE-B2AB-4AE9-99B7-893F71F23587} [C:\Program Files\KMSpico\AutoPico.exe]  =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{04F0580D-666F-4639-B90F-4B2570C3F714} [C:\Program Files\KMSpico\Service_KMS.exe]  =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{C6ADF3C0-4EA1-493B-A9B8-DE1B8A5EBAB6} [C:\Program Files\KMSpico\Service_KMS.exe]  =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{0A5577DA-C0AD-48C4-BBFB-9DE41A369374} [C:\Program Files\KMSpico\Service_KMS.exe]  =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{031A1827-CB9A-4778-B938-50801C16A1EE} [C:\Program Files\KMSpico\Service_KMS.exe]  =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{B7191885-1774-4B32-B08A-67F9EC5A07AF} [C:\Program Files\KMSpico\AutoPico.exe]  =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{88F9A9E3-FACD-43D9-A5E5-F9530947B777} [C:\Program Files\KMSpico\AutoPico.exe]  =>HackTool.KMSpico


---\\  Récapitulatif des éléments trouvés sur votre station. (6)
http://www.nicolascoolman.fr/?p=989  =>HackTool.KMSpico
https://www.nicolascoolman.info/2016/04/26/superfluous-lavasoftwebcompanion/  =>PUP.Optional.LavasoftWebCompanion
https://www.nicolascoolman.info/2016/05/02/pup-optional-boxore/  =>PUP.Optional.Boxore
http://www.nicolascoolman.fr/?p=679  =>PUP.Optional.DomaIQ
http://www.nicolascoolman.fr/?p=290  =>PUP.Optional.TornTV
https://www.nicolascoolman.info/2016/04/22/heuristic-suspect/  =>Heuristic.Suspect


---\\  Nettoyage Additionnel. (29)
~ Suppression des Clés de registre Tracing. (29)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent  (Opera Software)


---\\ Statistiques
~ Items scannés : 844
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 103


~ End of clean in 00h01mn04s
~====================
ZHPCleaner-[R]-07062016-22_01_14.txt
ZHPCleaner-[S]-07062016-21_59_59.txt