~ ZHPCleaner v2014.12.13.255 by Nicolas Coolman (13/12/2014) ~ Run by laurence (Administrator) (13/12/2014 17:08:30) ~ Forum : http://forum.nicolascoolman.fr ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Réparer ~ Report : C:\Users\laurence\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\laurence\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Activate ~ Windows 81, 64-bit (Build 9600) ---\\ Service. (0) ~ Aucun élément malicieux trouvé. ---\\ Navigateur internet. (69) REMPLACÉ Proxy: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride ( <-loopback> ) REMPLACÉ IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\Tabs ( hxxp://services.freshy.com/general/newhometab.php?hometab=home&partner=10817&guid={67112839-3B0B-43B[...] ) REMPLACÉ IE Params: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs\\Tabs ( res://ieframe.dll/tabswelcome.htm ) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.aCUFCV96103896VLCZ37079202com61768.61768.internaldb.monetization_plugin_bundle[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.aCUFCV96103896VLCZ37079202com61768.61768.internaldb.monetization_plugin_bundle[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.aCUFCV96103896VLCZ37079202com61768.61768.internaldb.monetization_plugin_bundle[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.aCUFCV96103896VLCZ37079202com61768.61768.internaldb.monetization_plugin_last_e[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.aCUFCV96103896VLCZ37079202com61768.61768.internaldb.monetization_plugin_last_e[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.aCUFCV96103896VLCZ37079202com61768.61768.internaldb.monetization_plugin_notBun[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.aCUFCV96103896VLCZ37079202com61768.61768.internaldb.monetization_plugin_notBun[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.aCUFCV96103896VLCZ37079202com61768.61768.internaldb.monetization_plugin_regBun[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.aCUFCV96103896VLCZ37079202com61768.61768.internaldb.monetization_plugin_regBun[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.asonnypennaolcom62180.62180.internaldb.monetization_plugin_bundledUrls.expirat[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.asonnypennaolcom62180.62180.internaldb.monetization_plugin_bundledWithHash.exp[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.asonnypennaolcom62180.62180.internaldb.monetization_plugin_bundledWithHash.val[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.asonnypennaolcom62180.62180.internaldb.monetization_plugin_last_executable_req[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.asonnypennaolcom62180.62180.internaldb.monetization_plugin_last_executable_req[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.asonnypennaolcom62180.62180.internaldb.monetization_plugin_notBundledArr_.expi[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.asonnypennaolcom62180.62180.internaldb.monetization_plugin_notBundledArr_.valu[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.asonnypennaolcom62180.62180.internaldb.monetization_plugin_regBundledWithSoftw[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.asonnypennaolcom62180.62180.internaldb.monetization_plugin_regBundledWithSoftw[...] (PUP.Monetization) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.AL", 4); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.aflt", "ast_tele_14_40_ch"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.appId", "{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.cd", "2XzuyEtN2Y1L1QzuyDyEtAyDtAtD0B0F0A0F0CyC0BtBtDzztN0D0Tzu0StCt[...] (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.cr", "68293403"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.data.1475e97c0146bfb1c490339546d9e72ee", "1"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.data._dy", "20141002"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.data.a._dy", "20141002"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.data.a.aliveDate", "20141002"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.data.a.instlDate", "20141002"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.data.cc", "fr"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.data.ccfc1eb13092ea34473c169417eefd00", "1"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.dfltLng", ""); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.dfltSrch", true); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.dnsErr", true); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.excTlbr", false); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.general.guid", "edfa31c1-e3a8-4f3e-8681-ff3b4aa05a14"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.hmpg", true); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.id", "543530BFAFC6B208"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.instlDay", "16345"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.instlRef", "142905_a"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.prdct", "astrmndasr"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.tlbrId", ""); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.vrsn", ""); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr.vrsni", ""); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr_i.newTab", true); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr_i.smplGrp", "none"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.astrmndasr_i.vrsnTs", "11:50:49"); (PUP.Astromenda) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.AL", 4); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.aflt", "vst_coinis_14_50_ch"); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.appId", "{4CB3598A-82E8-4D1F-983F-061238AE696E}"); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.cd", "2XzuyEtN2Y1L1QzuyDyCtAyDtAtD0B0F0A0F0CyD0BtBtDzztN0D0Tzu0StCtD[...] (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.cr", "1496764867"); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.dfltLng", ""); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.dfltSrch", true); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.dnsErr", true); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.excTlbr", false); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.hmpg", true); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.id", "563530BFAFC5B208"); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.instlDay", "16412"); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.instlRef", "142905_b"); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.prdct", "srchvstrn"); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.tlbrId", ""); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.vrsn", ""); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn.vrsni", ""); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn_i.newTab", true); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn_i.smplGrp", "none"); (PUP.Vosteran) REMPLACÉ: [y5apqy1t.default] - user_pref("extensions.srchvstrn_i.vrsnTs", "14:4:26"); (PUP.Vosteran) ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (21) ---\\ Tâche planifiée. (0) ~ Aucun élément malicieux trouvé. ---\\ Explorateur ( Dossiers, Fichiers ). (119) DEPLACÉ dossier: C:\Program Files (x86)\326ccb0f-43fa-45e0-b0e5-1911dd3eba91 (PUP.CrossRider) DEPLACÉ dossier: C:\Program Files (x86)\3D307E69-641A-407D-8AC9-23554A61399B (PUP.CrossRider) DEPLACÉ dossier: C:\Program Files (x86)\e7af092a-3986-48ec-aad1-0bf15127a607 (PUP.CrossRider) DEPLACÉ fichier: C:\Users\laurence\AppData\Roaming\JLI.exe [Browser - Browser App+ v1 exe] (Adware.Pirrit) DEPLACÉ fichier: C:\Users\laurence\AppData\Roaming\LSHLRGPF.exe [Enter - Media+PlayerVidEd2.0 exe] (Adware.Pirrit) DEPLACÉ fichier: C:\Users\laurence\AppData\Roaming\QAKOG.exe [Enter - Media+PlayerVidEd2.0 exe] (Adware.Pirrit) DEPLACÉ fichier: C:\Users\laurence\AppData\Roaming\RRHQCZID.exe [Browser - Browser App+ v1 exe] (Adware.Pirrit) DEPLACÉ: C:\InstaShare (PUP.InstaShare) DEPLACÉ: C:\ProgramData\InstaShare (PUP.InstaShare) DEPLACÉ: C:\ProgramData\InstaShare\InstaShare.ico [ - ] (PUP.InstaShare) DEPLACÉ: C:\ProgramData\InstaShare\uninstall.exe [ - ] (PUP.InstaShare) DEPLACÉ: C:\ProgramData\InstaShare\uninstall.exe.config [ - ] (PUP.InstaShare) DEPLACÉ: C:\Users\laurence\AppData\Roaming\smileyswelove (Adware.SmileyBar) DEPLACÉ: C:\Users\laurence\AppData\Roaming\smileyswelove\channel.json [ - ] (Adware.SmileyBar) DEPLACÉ: C:\Users\laurence\AppData\LocalLow\smileyswelove (Adware.SmileyBar) DEPLACÉ: C:\Users\laurence\AppData\LocalLow\smileyswelove\channel.json [ - ] (Adware.SmileyBar) DEPLACÉ: C:\Users\laurence\AppData\Local\InstaShare (PUP.InstaShare) DEPLACÉ: C:\Users\laurence\AppData\Local\InstaShare\data2.dat [ - ] (PUP.InstaShare) DEPLACÉ: C:\Users\laurence\AppData\Local\Pokki (PUP.Pokki) DEPLACÉ: C:\Users\laurence\AppData\Local\Pokki\analytics.db [ - ] (PUP.Pokki) DEPLACÉ: C:\Users\laurence\AppData\Local\Pokki\Engine [ - ] (PUP.Pokki) DEPLACÉ: C:\Users\laurence\AppData\Local\Pokki\engine_update.db [ - ] (PUP.Pokki) DEPLACÉ: C:\Users\laurence\AppData\Local\Pokki\IconCache [ - ] (PUP.Pokki) DEPLACÉ: C:\Users\laurence\AppData\Local\Pokki\notifications.db [ - ] (PUP.Pokki) DEPLACÉ: C:\Users\laurence\AppData\Local\Pokki\Pokkies [ - ] (PUP.Pokki) DEPLACÉ: C:\Users\laurence\AppData\Local\Pokki\Uninstall.exe [ - ] (PUP.Pokki) DEPLACÉ: C:\Users\laurence\AppData\Local\Pokki\UserData [ - ] (PUP.Pokki) DEPLACÉ: C:\Windows\Prefetch\ANYPROTECT.EXE-53752276.pf[] (PUP.AnyProtect) DEPLACÉ: C:\Windows\Prefetch\COMMONSHARE.BOAS.EXE-D9B4E293.pf[] (PUP.CommonShare) DEPLACÉ: C:\Windows\Prefetch\COMMONSHARE.BOASPRT.EXE-F97A6DA9.pf[] (PUP.CommonShare) DEPLACÉ: C:\Windows\Prefetch\COMMONSHARE.PURBROWSE64.EXE-4DAF5059.pf[] (PUP.CommonShare) DEPLACÉ: C:\Windows\Prefetch\COMMONSHARE_SETUP.EXE-E82ED96A.pf[] (PUP.CommonShare) DEPLACÉ: C:\Windows\Prefetch\COMMONSHARE_SOFT_PARTNER.EXE-60803ECD.pf[] (PUP.CommonShare) DEPLACÉ: C:\Windows\Prefetch\D5SPEEDCHECKERG18.EXE-D8534469.pf[] (PUP.InternetSpeedChecker) DEPLACÉ: C:\Windows\Prefetch\FASTPLAYER.EXE-0583FD29.pf[] (PUP.FastPlayer) DEPLACÉ: C:\Windows\Prefetch\OPTIMIZERPRO.EXE-C2EC0A5A.pf[] (PUP.OptimizerPro) DEPLACÉ: C:\Windows\Prefetch\PACKAGE_COMMONSHARE_INSTALLER-BC18EC0E.pf[] (PUP.CommonShare) DEPLACÉ: C:\Windows\Prefetch\PACKAGE_PLUMOWEB_INSTALLER_MU-8FE59FAA.pf[] (PUP.PlumoWeb) DEPLACÉ: C:\Windows\Prefetch\PLUMOWEB.BOAS.EXE-99676859.pf[] (PUP.PlumoWeb) DEPLACÉ: C:\Windows\Prefetch\PLUMOWEB.BOASPRT.EXE-1A00B61F.pf[] (PUP.PlumoWeb) DEPLACÉ: C:\Windows\Prefetch\PLUMOWEB.PURBROWSE64.EXE-B7674C0F.pf[] (PUP.PlumoWeb) DEPLACÉ: C:\Windows\Prefetch\PLUMOWEB_SETUP.EXE-646189F8.pf[] (PUP.PlumoWeb) DEPLACÉ: C:\Windows\Prefetch\PREDM.TMP-479CF766.pf[] (Adware.Downware) DEPLACÉ: C:\Windows\Prefetch\SPEEDCHECKER.EXE-81711E6C.pf[] (PUP.InternetSpeedChecker) DEPLACÉ: C:\Windows\Prefetch\SYSTWEAKASP.TMP-022A334E.pf[] (PUP.Systweak) DEPLACÉ: C:\Windows\Prefetch\VOPACKAGE.EXE-2246559C.pf[] (Adware.Downware) DEPLACÉ: C:\Windows\Prefetch\VOPACKAGE.EXE-F040E204.pf[] (Adware.Downware) DEPLACÉ: C:\Windows\Prefetch\VOSTERAN.EXE-A77C263C.pf[] (PUP.Vosteran) DEPLACÉ: C:\Windows\Installer\1e9dac96.msi [ - ] (Adware.SmileyBar) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_api.commonshare.net_0.localstorage[] (PUP.CommonShare) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_api.commonshare.net_0.localstorage-journal[] (PUP.CommonShare) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_api.plumoweb.net_0.localstorage[] (PUP.PlumoWeb) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_api.plumoweb.net_0.localstorage-journal[] (PUP.PlumoWeb) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage[] (PUP.AkamaiHD) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage-journal[] (PUP.AkamaiHD) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage[] (PUP.AkamaiHD) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage-journal[] (PUP.AkamaiHD) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage[] (PUP.SpecialSavings) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal[] (PUP.SpecialSavings) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_bobrowser.com_0.localstorage[] (PUP.BoBrowser) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_bobrowser.com_0.localstorage-journal[] (PUP.BoBrowser) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_fr.ask.com_0.localstorage[] (Toolbar.Ask) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_fr.ask.com_0.localstorage-journal[] (Toolbar.Ask) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_fr.iminent.com_0.localstorage[] (Adware.IMBooster) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_fr.iminent.com_0.localstorage-journal[] (Adware.IMBooster) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_francais.babylon.com_0.localstorage[] (PUP.Babylon) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_francais.babylon.com_0.localstorage-journal[] (PUP.Babylon) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_serviceama-a.akamaihd.net_0.localstorage[] (PUP.AkamaiHD) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_serviceama-a.akamaihd.net_0.localstorage-journal[] (PUP.AkamaiHD) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_smileyswelove.com_0.localstorage[] (Adware.SmileyBar) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_smileyswelove.com_0.localstorage-journal[] (Adware.SmileyBar) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.select-n-go00.select-n-go.com_0.localstorage[] (PUP.SelectNGo) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.select-n-go00.select-n-go.com_0.localstorage-journal[] (PUP.SelectNGo) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.01net.com_0.localstorage[] (Toolbar.Conduit) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.01net.com_0.localstorage-journal[] (Toolbar.Conduit) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.anyprotect.com_0.localstorage[] (PUP.AnyProtect) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.anyprotect.com_0.localstorage-journal[] (PUP.AnyProtect) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.astromendabarand.com_0.localstorage[] (PUP.Astromenda) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.astromendabarand.com_0.localstorage-journal[] (PUP.Astromenda) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage[] (PUP.SpecialSavings) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal[] (PUP.SpecialSavings) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.sweet-page.com_0.localstorage[] (PUP.SweetPage) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.sweet-page.com_0.localstorage-journal[] (PUP.SweetPage) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.systweak.com_0.localstorage[] (PUP.Systweak) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.systweak.com_0.localstorage-journal[] (PUP.Systweak) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.vosteransearch.com_0.localstorage[] (PUP.Vosteran) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.vosteransearch.com_0.localstorage-journal[] (PUP.Vosteran) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www1.fastplayerpro.com_0.localstorage[] (PUP.FastPlayer) DEPLACÉ: C:\Users\laurence\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www1.fastplayerpro.com_0.localstorage-journal[] (PUP.FastPlayer) DEPLACÉ fichier: C:\Users\laurence\Downloads\ZHPCleaner.exe [Nicolas Coolman - ZHPCleaner] (PUP.Essai) DEPLACÉ fichier: C:\Users\laurence\Downloads\ZHPDiag2.exe [Nicolas Coolman - ZHPDiag Setup ] (PUP.Essai) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.46906\goopdate.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.46906\goopdateres_en.dll [globalUpdate - globalUpdate Update Resource DLL] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.46906\npGoogleUpdate4.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.46906\psmachine.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.46906\psuser.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.256886\goopdate.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.256886\goopdateres_en.dll [globalUpdate - globalUpdate Update Resource DLL] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.256886\npGoogleUpdate4.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.256886\psmachine.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.256886\psuser.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.164500\goopdate.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.164500\goopdateres_en.dll [globalUpdate - globalUpdate Update Resource DLL] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.164500\npGoogleUpdate4.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.164500\psmachine.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.164500\psuser.dll [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.46906\GoogleCrashHandler.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.46906\GoogleUpdate.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.46906\GoogleUpdateBroker.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.46906\GoogleUpdateOnDemand.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.256886\GoogleCrashHandler.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.256886\GoogleUpdate.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.256886\GoogleUpdateBroker.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.256886\GoogleUpdateOnDemand.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.164500\GoogleCrashHandler.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.164500\GoogleUpdate.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.164500\GoogleUpdateBroker.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\comh.164500\GoogleUpdateOnDemand.exe [globalUpdate - globalUpdate Update] (PUP.GlobalUpdate) DEPLACÉ fichier: C:\Users\laurence\AppData\Local\Temp\20B8tmp\boxoreinstaller.exe [The Software Group - Software Update Setup] (Adware.Boxore) ---\\ Base de Registres ( Clés, Valeurs, Données ). (19) SUPPRIMÉ: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465} [ShopperReports.dll] (Adware.ShopperReports) SUPPRIMÉ: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754} [ShoppingReport.dll] (Adware.ShoppingReport) SUPPRIMÉ: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} [BabylonToolbar.dll] (PUP.Babylon) SUPPRIMÉ: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} [BabylonToolbar.dll] (PUP.Babylon) SUPPRIMÉ: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} [BabylonToolbarTlbr.dll] (PUP.Babylon) SUPPRIMÉ: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} [ShoppingReport.dll] (Adware.ShoppingReport) SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\af5075f8-591f-4a60-9a8f-82bb4fceb219 [] (PUP.CrossRider) SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\b5095163-8528-4ba1-9e8f-cd3e659492b6 [] (PUP.CrossRider) SUPPRIMÉ: HKCU\Software\GoHD-nv [] (PUP.CrossRider) SUPPRIMÉ: HKCU\Software\AppDataLow\Software\SpeedChecker [] (PUP.InternetSpeedChecker) SUPPRIMÉ: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Registry Helper Service [] (PUP.RegistryHelper) SUPPRIMÉ: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update CommonShare [] (PUP.CommonShare) SUPPRIMÉ: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update PlumoWeb [] (PUP.PlumoWeb) SUPPRIMÉ: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util CommonShare [] (PUP.CommonShare) SUPPRIMÉ: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util PlumoWeb [] (PUP.PlumoWeb) SUPPRIMÉ: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{944610C8-DCBA-45A1-B48D-EB4CEA2A943C} [31.168.224.106,5.135.12.52] (Hijacker.Browser) SUPPRIMÉ: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A22C0D26-4C82-4EE7-AA43-315C9BFF3D1B} [31.168.224.106,5.135.12.52] (Hijacker.Browser) SUPPRIMÉ: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C3F84BD2-BA9E-4F3A-853C-B685F9E07C9A} [31.168.224.106,5.135.12.52] (Hijacker.Browser) SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\GoHD-nv [] (PUP.CrossRider) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Opera Software) ---\\ Statistiques ~ Items scannés : 65391 ~ Items trouvés : 0 ~ Items réparés : 207 End of clean at 17:29:41