~ ZHPCleaner v2017.12.1.208 by Nicolas Coolman (2017/12/01) ~ Run by Hour (Administrator) (01/12/2017 12:13:05) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Legal ~ Type : Nettoyer ~ Report : C:\Users\Hour\Desktop\ZHPCleaner.txtccc ~ Quarantine : C:\Users\Hour\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 8.1, 64-bit (Build 9600) ---\\ Service. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Navigateur internet. (41) SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.irmysearch.aflt", "tele_14_18_ff"); =>PUP.Optional.MyWebSearch SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDtByDyC0A0AyDtAyC0E0AtN0D0Tzu0Szzy[...] =>PUP.Optional.MyWebSearch SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.irmysearch.cr", "128937056"); =>PUP.Optional.MyWebSearch SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.irmysearch.instlRef", "140305_a"); =>PUP.Optional.MyWebSearch SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.homepage.prev", "www.google.fr")[...] =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.homepage.savedPrev", "true"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.homepage.tb", "http://hp.myway.c[...] =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.page.savedPrev", 1); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.browser.startup.page.tb", 1); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.browser.version.last", "56.0"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.firefoxSearchExtensionEnabled", "false"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.firstKnownVersion", "7.800.11.27119"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.homepage", "http://hp.myway.com/productivityboss[...] =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.hp.enabled", false); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.hp.guardType", "HPR"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.hp.user.defined", true); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.initialized", true); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.installType", "XPI"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.installation.dlpCountryCode", "99"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.installation.installDate", "2017081313"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.installation.partnerId", "^BYM^xpi000^LMFRFR^"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.installation.success", false); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.installation.toolbarDataSource", "[]"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.installation.toolbarId", "3232703c-bc2a-4703-bc6[...] =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.lastActivePing", "1510497547040"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.lastKnownVersion", "7.800.11.27119"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.lssState", "{\"previousLocales\":[\"fr\",\"fr-FR[...] =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.options.defaultSearch", false); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.options.homePageEnabled", false); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.options.keywordEnabled", false); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.options.tabEnabled", false); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.productDeliveryOption.language", "en"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.productDeliveryOption.newTabURL", "http://hp.myw[...] =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.productDeliveryOption.type", "ToolTab"); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.successUrl", "http://productivityboss.dl.tb.ask.[...] =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.toolbar.versionChanged", false); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.toolbarCollapsed", false); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.uninstallSurveyUrl", "http://www.research.net/r/[...] =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark._e5Members_.uninstallTasks", "{\"prefBranchesToDelete\":[\"e[...] =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark.hp.enabled", false); =>Adware.Bandoo SUPPRIMÉ: [zcgsciqi.default] - user_pref("extensions.toolbar.mindspark.lastInstalled", "productivityboss@mindspark.com"); =>Adware.Bandoo ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (21) ---\\ Tâche planifiée. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Explorateur ( Dossiers, Fichiers ). (27) DEPLACÉ fichier: C:\Users\Hour\AppData\Roaming\Mozilla\Firefox\Profiles\zcgsciqi.default\Extensions\_e5Members_@www.productivityboss.com.xpi =>.SUP.ProductivityBoss DEPLACÉ fichier: C:\Users\Hour\AppData\Roaming\Mozilla\Firefox\Profiles\zcgsciqi.default\ProductivityBoss_e5\3232703c-bc2a-4703-bc6f-dab5123de8d8.sqlite =>.SUP.ProductivityBoss DEPLACÉ fichier: C:\Users\Hour\AppData\Roaming\Mozilla\Firefox\Profiles\zcgsciqi.default\browser-extension-data\_e5Members_@www.productivityboss.com\storage.js =>.SUP.ProductivityBoss DEPLACÉ fichier: C:\END =>.SUP.Conduit DEPLACÉ fichier: C:\Windows\Prefetch\CPUGUARDIAN.EXE-5438CD56.pf =>.SUP.CPUGuardian DEPLACÉ fichier: C:\Windows\Prefetch\CPUGUARDIANSETUP.EXE-C39C35BD.pf =>.SUP.CPUGuardian DEPLACÉ fichier: C:\Users\Hour\Downloads\CPUGuardianSetup.exe [CPU Guardian - CPU Guardian] =>.SUP.CPUGuardian DEPLACÉ fichier: C:\Users\Hour\Downloads\PCPrivacyProtectInstall.exe [Secure Software Center - PC Privacy Protect Setup] =>.SUP.CPUGuardian DEPLACÉ fichier: C:\Users\Hour\AppData\Local\Temp\oct4833.tmp [SweetLabs,Inc. - Pokki] =>.SUP.SweetLabs DEPLACÉ fichier: C:\Users\Hour\AppData\Local\Temp\oct4833.tmp.exe [SweetLabs,Inc. - Pokki] =>.SUP.SweetLabs DEPLACÉ fichier: C:\Users\Hour\AppData\Local\Temp\oct5A3D.tmp [SweetLabs,Inc. - Pokki] =>.SUP.SweetLabs DEPLACÉ fichier: C:\Users\Hour\AppData\Local\Temp\oct5A3D.tmp.exe [SweetLabs,Inc. - Pokki] =>.SUP.SweetLabs DEPLACÉ fichier: C:\Users\Hour\AppData\Local\Temp\oct622C.tmp [SweetLabs,Inc. - Pokki] =>.SUP.SweetLabs DEPLACÉ fichier: C:\Users\Hour\AppData\Local\Temp\oct622C.tmp.exe [SweetLabs,Inc. - Pokki] =>.SUP.SweetLabs DEPLACÉ fichier: C:\Users\Hour\AppData\Local\Temp\octDECA.tmp.exe [SweetLabs,Inc. - Pokki] =>.SUP.SweetLabs DEPLACÉ fichier: C:\Users\Hour\AppData\Local\Temp\octE6AA.tmp.exe [SweetLabs,Inc. - Pokki] =>.SUP.SweetLabs DEPLACÉ fichier: C:\Users\Hour\AppData\Local\Temp\Pokki-2017-11-28.log =>.SUP.SweetLabs DEPLACÉ fichier: C:\Users\Hour\AppData\Local\Temp\Pokki-2017-11-29.log =>.SUP.SweetLabs DEPLACÉ fichier: C:\Users\Hour\AppData\Local\Temp\Pokki-2017-11-30.log =>.SUP.SweetLabs DEPLACÉ fichier: C:\Users\Hour\AppData\Local\Temp\Pokki-2017-12-01.log =>.SUP.SweetLabs DEPLACÉ dossier*: C:\Program Files (x86)\CPU Guardian =>.SUP.CPUGuardian DEPLACÉ dossier*: C:\ProgramData\CPU Guardian =>.SUP.CPUGuardian DEPLACÉ dossier*: C:\Users\Hour\Documents\CPUGuardian =>.SUP.CPUGuardian DEPLACÉ dossier*: C:\Users\Hour\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CPU Guardian =>.SUP.CPUGuardian DEPLACÉ dossier*: C:\Users\Default\AppData\Local\Pokki =>.SUP.SweetLabs DEPLACÉ dossier: C:\Users\Default User\AppData\Local\Pokki =>.SUP.SweetLabs DEPLACÉ dossier^: C:\Users\Hour\AppData\Local\SweetLabs App Platform =>.SUP.SweetLabs ---\\ Base de Registres ( Clés, Valeurs, Données ). (14) SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{00473E08-3F8E-4305-8228-DEF549C9932A} [http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=tele_14_18_ff&cd=2XzuyEtN2Y1L1Qzu0Ay[...]] [Mysearchdial] =>PUP.Optional.MySearchDial SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{00473E08-3F8E-4305-8228-DEF549C9932A} [http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=tele_14_18_ff&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDtByDyC0A0AyDtAyC0E0AtN0D0Tzu0SzzyEzytN1L2XzutBtFtBtDtFyDtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StBtB0DyC0B0E0EyEtGtDyBzzyBtGtDyD0E0EtG0C0EtDyEtGyBtAtAyEyCtDtBzytB0D0D0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCyD0E0C0C0AtBzytGyEyCyDtBtGzytDtAtAtGyCyD0F0CtGtA0AyBtB0FtAzy0FtDyD0BtC2Q&cr=128937056&ir=] =>PUP.Optional.MySearchDial SUPPRIMÉ clé*: HKCU\Software\CPU Guardian [] =>.SUP.CPUGuardian SUPPRIMÉ clé*: HKCU\Software\CPUGuardianConfig [] =>.SUP.CPUGuardian SUPPRIMÉ clé*: HKCU\Software\CPUGuardianLanguage [] =>.SUP.CPUGuardian SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_AP [Pokki] =>.SUP.SweetLabs SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_Start_Menu [Pokki] =>.SUP.SweetLabs SUPPRIMÉ clé*: HKCU\Software\TeleCharger [] =>.SUP.Downloader SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\CPUGuardian_RASAPI32 [] =>.SUP.CPUGuardian SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\CPUGuardian_RASMANCS [] =>.SUP.CPUGuardian SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\CPU Guardian [] =>.SUP.CPUGuardian SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\CPU Guardian [] =>.SUP.CPUGuardian SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\CPU Guardian [CPU Guardian] =>.SUP.CPUGuardian SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\CPU Guardian [] =>.SUP.CPUGuardian ---\\ Récapitulatif des éléments trouvés sur votre station. (8) https://www.nicolascoolman.com/fr/adware-mywebsearch/ =>PUP.Optional.MyWebSearch https://nicolascoolman.eu/2017/02/23/adware-bandoo/ =>Adware.Bandoo https://nicolascoolman.eu/2017/11/18/sup-productivityboss/ =>.SUP.ProductivityBoss https://nicolascoolman.eu/2017/02/06/superfluous-conduit/ =>.SUP.Conduit https://nicolascoolman.eu/2017/07/03/superfluous-cpuguardian/ =>.SUP.CPUGuardian https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.SweetLabs https://www.anti-malware.top/2016/04/29/superfluous-montiera/ =>PUP.Optional.MySearchDial https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Downloader ---\\ Nettoyage Additionnel. (25) ~ Suppression des Clés de registre Tracing. (25) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Opera Software) ~ Le système a été redémarré. ---\\ Statistiques ~ Items scannés : 992 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 82 ~ End of clean in 00h01mn27s ~==================== ZHPCleaner-[R]-01122017-12_14_32.txt ZHPCleaner-[S]-01122017-12_10_22.txt