~ ZHPCleaner v2017.6.26.105 by Nicolas Coolman (2017/06/26)
~ Run by romai (Administrator)  (14/07/2017 15:17:53)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Illegal
~ Type : Scanner
~ Report : C:\Users\romai\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\romai\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit  (Build 14393)


---\\  Service. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\  Navigateur internet. (1)
TROUVÉ fichier: C:\Users\romai\AppData\Roaming\Mozilla\Firefox\Profiles\hswfplh6.default\searchplugins\search provided by bing.xml    =>.Superfluous.SearchProvided


---\\  Fichier hôte. (2)
TROUVÉ: 0.0.0.1	mssplus.mcafee.com  =>Hijacker.Hosts
~ Nombre de redirections trouvées 1/25


---\\  Tâche planifiée. (1)
TROUVÉ tâche: [App Explorer] [C:\Users\romai\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe]  =>.Superfluous.SweetLabs


---\\  Explorateur  ( Dossiers, Fichiers ). (31)
TROUVÉ fichier: C:\Users\romai\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [SweetLabs, Inc - Host App Service Updater]  =>.Superfluous.SweetLabs
TROUVÉ fichier: C:\Users\romai\AppData\Local\Host App Service\.defaultRegistry    =>.Superfluous.SweetLabs
TROUVÉ fichier: C:\Users\romai\AppData\Local\Host App Service\analytics.db    =>.Superfluous.SweetLabs
TROUVÉ fichier: C:\Users\romai\AppData\Local\Host App Service\engine_update.db    =>.Superfluous.SweetLabs
TROUVÉ fichier: C:\Users\romai\AppData\Local\Host App Service\Uninstall.exe [SweetLabs,Inc. - App Explorer]  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Users\romai\AppData\Local\CrashRpt\UnsentCrashReports  =>.Superfluous.CrashReports
TROUVÉ dossier: C:\Users\romai\AppData\Local\Host App Service\Apps  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Users\romai\AppData\Local\Host App Service\Engine  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Users\romai\AppData\Local\Host App Service\IconCache  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Users\romai\AppData\Local\Host App Service\Setup  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Users\romai\AppData\Local\CrashRpt  =>.Superfluous.CrashReports
TROUVÉ dossier: C:\Users\romai\AppData\Local\Host App Service  =>.Superfluous.SweetLabs
TROUVÉ fichier: C:\Users\Default\AppData\Local\Host App Service\.defaultRegistry    =>.Superfluous.SweetLabs
TROUVÉ fichier: C:\Users\Default\AppData\Local\Host App Service\Uninstall.exe [SweetLabs,Inc. - App Explorer]  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Users\Default\AppData\Local\Host App Service\Apps  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Users\Default\AppData\Local\Host App Service\Engine  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Users\Default\AppData\Local\Host App Service\IconCache  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Users\Default\AppData\Local\Host App Service  =>.Superfluous.SweetLabs
TROUVÉ fichier: C:\Users\Default User\AppData\Local\Host App Service\.defaultRegistry    =>.Superfluous.SweetLabs
TROUVÉ fichier: C:\Users\Default User\AppData\Local\Host App Service\Uninstall.exe [SweetLabs,Inc. - App Explorer]  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Users\Default User\AppData\Local\Host App Service\Apps  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Users\Default User\AppData\Local\Host App Service\Engine  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Users\Default User\AppData\Local\Host App Service\IconCache  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Users\Default User\AppData\Local\Host App Service  =>.Superfluous.SweetLabs
TROUVÉ dossier: C:\Program Files (x86)\Firefox  =>Hijacker.Browser
TROUVÉ dossier: C:\ProgramData\BIT  =>.Superfluous.Elex
TROUVÉ dossier: C:\Users\romai\AppData\Local\Firefox  =>Hijacker.Browser
TROUVÉ dossier: C:\Users\romai\AppData\Local\kitty  =>.Superfluous.Elex
TROUVÉ dossier: C:\Users\romai\AppData\Local\MicrosoftUpdater  =>PUP.Optional.Y2Go
TROUVÉ dossier: C:\Users\romai\AppData\Local\MicrosoftHelper  =>PUP.Optional.Y2Go
TROUVÉ dossier: C:\Users\romai\AppData\Roaming\Firefox  =>Hijacker.Browser


---\\  Base de Registres ( Clés, Valeurs, Données ). (15)
TROUVÉ clé: HKEY_USERS\S-1-5-21-1565367524-1893669246-8039642-1001\SOFTWARE\Host App Service []  =>.Superfluous.SweetLabs
TROUVÉ clé: HKCU\Software\Host App Service []  =>.Superfluous.SweetLabs
TROUVÉ clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service [SweetLabs]  =>.Superfluous.SweetLabs
TROUVÉ clé: HKCU\Software\undefined []  =>.Superfluous.Downloader
TROUVÉ clé: HKLM\SOFTWARE\Wow6432Node\Firefox []  =>Adware.GhokswaBrowser
TROUVÉ clé: HKLM\SOFTWARE\Firefox []  =>Adware.GhokswaBrowser
TROUVÉ clé: [X64] HKLM\SOFTWARE\InterSect Alliance []  =>.Superfluous.InterSect
TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\23E4C6D00564386418B357E6097ECF3E [02:\Software\Microleaves\ (Not File)]  =>.Superfluous.Microleaves
TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2AE9B3C0743B7184F8583F011120670B [02:\Software\Microleaves\Online.io Application\Version (Not File)]  =>.Superfluous.Microleaves
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\initialpage123Software []  =>Hijacker.Browser
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microleaves []  =>.Superfluous.Microleaves
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\ourluckysitesSoftware []  =>Hijacker.OurLuckySites
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Socia2S Browser Enhancer []  =>PUP.Optional.Wajam
TROUVÉ clé: HKCU\SOFTWARE\ED059CF1868DD9B92467200E0A3682B7 []  =>Hijacker.Browser
TROUVÉ clé: [X64] HKLM\SOFTWARE\ED059CF1868DD9B92467200E0A3682B7 []  =>Hijacker.Browser


---\\  Récapitulatif des éléments trouvés sur votre station. (13)
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.SearchProvided
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>Hijacker.Hosts
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.SweetLabs
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.CrashReports
https://nicolascoolman.eu/2017/02/02/hijacker-browser-2/  =>Hijacker.Browser
https://nicolascoolman.eu/2017/03/28/superfluous-elex/  =>.Superfluous.Elex
https://nicolascoolman.eu/2017/04/08/pup-optional-y2go/  =>PUP.Optional.Y2Go
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.Downloader
https://nicolascoolman.eu/2017/02/19/adware-ghokswabrowser/  =>Adware.GhokswaBrowser
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.InterSect
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.Microleaves
https://nicolascoolman.eu/2017/05/16/hijacker-ourluckysites/  =>Hijacker.OurLuckySites
https://nicolascoolman.eu/2017/02/24/pup-optional-wajam/  =>PUP.Optional.Wajam


---\\ Bilan de la réparation
~ Aucune réparation effectuée.
~ Ce navigateur est absent  (Google Chrome)
~ Ce navigateur est absent  (Opera Software)


---\\ Statistiques
~ Items scannés : 100107
~ Items trouvés : 52
~ Items annulés : 0
~ Items réparés : 0


~ End of search in 00h09mn35s
~====================
ZHPCleaner-[S]-14072017-15_27_28.txt