~ ZHPCleaner v2017.10.10.179 by Nicolas Coolman (2017/10/10) ~ Run by hugov (Administrator) (11/10/2017 15:16:40) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version KO ~ Certificate ZHPCleaner: Legal ~ Type : Nettoyer ~ Report : C:\Users\hugov\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\hugov\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 15063) ---\\ Service. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Navigateur internet. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (21) ---\\ Tâche planifiée. (5) SUPPRIMÉ tâche: [Scheduled Update for Ask Toolbar] [C:\Program Files (x86)\Ask.com\UpdateTask.exe (Not File) ] =>Toolbar.AskTBar SUPPRIMÉ tâche: [DropboxUpdateTaskMachineCore] [C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job (Not File) ] =>PUP.Optional.MySearch SUPPRIMÉ tâche: [DropboxUpdateTaskMachineUA] [C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job (Not File) ] =>PUP.Optional.MySearch SUPPRIMÉ tâche: [WpsNotifyTask_Administrator] [C:\WINDOWS\Tasks\WpsNotifyTask_Administrator.job (Not File) ] =>PUP.Optional.MySearch SUPPRIMÉ tâche: [WpsUpdateTask_Administrator] [C:\WINDOWS\Tasks\WpsUpdateTask_Administrator.job (Not File) ] =>PUP.Optional.MySearch ---\\ Explorateur ( Dossiers, Fichiers ). (26) DEPLACÉ fichier: C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [Ask.com - Ask.com Toolbar] =>PUP.Optional.MySearch DEPLACÉ fichier: C:\Program Files (x86)\Ask.com\UpdateTask.exe =>Toolbar.AskTBar DEPLACÉ fichier: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job =>PUP.Optional.MySearch DEPLACÉ fichier: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job =>PUP.Optional.MySearch DEPLACÉ fichier: C:\Windows\Tasks\WpsNotifyTask_Administrator.job =>PUP.Optional.MySearch DEPLACÉ fichier: C:\Windows\Tasks\WpsUpdateTask_Administrator.job =>PUP.Optional.MySearch DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\HearthstoneDeckTracker =>Adware¨Pirrit DEPLACÉ dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HearthstoneDeckTracker =>Adware¨Pirrit DEPLACÉ dossier*: C:\Program Files (x86)\Ask.com =>Toolbar.Ask DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsign07545f0e54e30d96 =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsign0836e2f11c3f165e =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsign14b74b1893337dfd =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsign29ca6167b70a5db4 =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsign450c277e0a28b07d =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsign578b6ed59b5cc159 =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsign637adeb3fd0963b3 =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsign6c5388926cf19bfe =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsign7461dc2206cec4aa =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsign75bb893bbf361e69 =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsign7b2962270f8e8d83 =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsignb7c56fd158544952 =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsignc1cc4af6c7f89608 =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsigncbc4a4a55235c3d0 =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsignd27dd6a8e2c6c13e =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsigne1cfd80846849c25 =>.SUP.Temporary DEPLACÉ dossier*: C:\Users\hugov\AppData\Local\Tempzxpsignef04ca30f9fba26c =>.SUP.Temporary ---\\ Base de Registres ( Clés, Valeurs, Données ). (26) SUPPRIMÉ valeur: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} [Ask Toolbar] =>Toolbar.AskTBar SUPPRIMÉ donnée: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3b18cf30-3cad-40f6-8028-7f46274213e7}\\DhcpNameServer [Bad : 202.112.128.51 202.112.128.50] =>Hijacker.Browser SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} [Ask Toolbar BHO] =>PUP.Optional.MySearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} [Ask Toolbar] =>PUP.Optional.MySearch SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3666053722-3734980805-3705833619-1001\SOFTWARE\Ask.com [] =>Toolbar.Ask SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\AskToolbar [] =>Toolbar.Ask SUPPRIMÉ clé: HKCU\Software\Ask.com [] =>Toolbar.Ask SUPPRIMÉ clé*: HKCU\Software\AppDataLow\AskToolbarInfo [] =>Toolbar.Ask SUPPRIMÉ clé*: HKCU\Software\AppDataLow\Software\AskToolbar [] =>Toolbar.Ask SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} [C:\Program Files (x86)\Ask.com\ (Not File)] =>Toolbar.Ask SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd [ToolbarWnd Class] =>PUP.Optional.AsksBar SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1 [Ask Toolbar] =>PUP.Optional.AsksBar SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL [] =>PUP.Optional.AsksBar SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56} [GenericAskToolbar 1.0 Type Library] =>Toolbar.Ask SUPPRIMÉ clé*: [X64] HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF [Ask Toolbar] =>Toolbar.AskTBar SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7 [C:\Program Files (x86)\Ask.com\ (Not File)] =>Toolbar.Ask SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8 [] =>Toolbar.Ask SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01 [] =>Toolbar.Ask SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED [] =>Toolbar.Ask SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472 [] =>Toolbar.Ask SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296 [] =>Toolbar.Ask SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888 [] =>Toolbar.Ask SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\GenericAskToolbar.DLL [] =>PUP.Optional.AsksBar SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56} [GenericAskToolbar 1.0 Type Library] =>Toolbar.Ask SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE} [Ask.com] =>Toolbar.Ask SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} [C:\Program Files (x86)\Ask.com\ (Not File)] =>Toolbar.Ask ---\\ Récapitulatif des éléments trouvés sur votre station. (7) https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>Toolbar.AskTBar https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.MySearch https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Adware¨Pirrit https://nicolascoolman.eu/2017/02/28/toolbar-ask/ =>Toolbar.Ask https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Temporary https://nicolascoolman.eu/2017/02/02/hijacker-browser-2/ =>Hijacker.Browser https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.AsksBar ---\\ Nettoyage Additionnel. (24) ~ Suppression des Clés de registre Tracing. (24) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Mozilla Firefox) ~ Ce navigateur est absent (Opera Software) ---\\ Statistiques ~ Items scannés : 659 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 57 ~ End of clean in 00h00mn46s ~==================== ZHPCleaner-[R]-11102017-15_17_26.txt ZHPCleaner-[S]-10102017-18_33_09.txt ZHPCleaner-[S]-11102017-00_49_41.txt ZHPCleaner-[S]-11102017-15_14_22.txt