cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Rapport de ZHPFix 2014.3.25.5 par Nicolas Coolman, Update du 25/03/2014
Fichier d'export Registre :
Run by boissiete at 28-03-14 16:33:47
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vid�e (00mn 11s)
R�paration des raccourcis navigateur

========== Processus m�moire ==========
SUPPRIM� Red�marrage: Memory Process: C:\Program Files (x86)\PC Speed Maximizer\SPMGuard.exe
SUPPRIM�: Memory Process: C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe

========== Cl�s du Registre ==========
SUPPRIM�: CLSID BHO: {549B5CA7-4A86-11D7-A4DF-000874180BB3}
SUPPRIM�: HKCU\Software\BabSolution
SUPPRIM�:* HKCU\Software\DataMngr
SUPPRIM�: HKCU\Software\FileScout
SUPPRIM�: HKCU\Software\TutoTag
SUPPRIM�: HKCU\Software\Tutorials
SUPPRIM�: HKCU\Software\d4d88bb56ee517
SUPPRIM�: HKLM\Software\Wow6432Node\Babylon
SUPPRIM�:* HKLM\Software\Wow6432Node\DataMngr
SUPPRIM�: HKLM\Software\Wow6432Node\d4d88bb56ee517
SUPPRIM�: SearchScopes :{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SUPPRIM�: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011501160}
SUPPRIM�: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{549b5ca7-4a86-11d7-a4df-000874180bb3}
SUPPRIM�: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}
SUPPRIM�: HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
SUPPRIM�: HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32
SUPPRIM�: HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS
SUPPRIM�: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
SUPPRIM�: HKLM\Software\Classes\Prod.cap
SUPPRIM�: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
SUPPRIM�: HKLM\Software\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}
SUPPRIM�: HKLM\Software\Wow6432Node\Microsoft\Tracing\Savings Sidekick_RASAPI32
SUPPRIM�: HKLM\Software\Wow6432Node\Microsoft\Tracing\Savings Sidekick_RASMANCS
SUPPRIM�: HKCU\Software\AppDataLow\Software\Crossrider
SUPPRIM�: HKLM\Software\Classes\protector_dll.protectorbho
SUPPRIM�: HKLM\Software\Classes\protector_dll.protectorbho.1
SUPPRIM�: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011501160}
SUPPRIM�: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011501160}
SUPPRIM�: CLSID BHO: {450e038b-78fa-4006-9bba-e764bcd7de20}
SUPPRIM�: [HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}]
SUPPRIM�: HKCU\Software\Conduit
SUPPRIM�: HKCU\Software\Softonic
SUPPRIM�: HKLM\Software\Wow6432Node\Conduit
SUPPRIM�: HKCU\Software\AppDataLow\Software\ConduitSearchScopes
SUPPRIM�: HKCU\Software\AppDataLow\Toolbar
SUPPRIM�: HKLM\Software\Wow6432Node\Microsoft\Tracing\ConduitInstaller_RASAPI32
SUPPRIM�: HKLM\Software\Wow6432Node\Microsoft\Tracing\ConduitInstaller_RASMANCS
SUPPRIM�: HKLM\Software\Classes\Toolbar.CT3192877
SUPPRIM�: HKLM\Software\Wow6432Node\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}

========== Valeurs du Registre ==========
SUPPRIM� RunValue: PC Speed Maximizer
SUPPRIM� [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar]:{9E131A93-EED7-4BEB-B015-A0ADB30B5646}
SUPPRIM�: URLSearchHook: {450e038b-78fa-4006-9bba-e764bcd7de20}
SUPPRIM�: Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F}
SUPPRIM� RunValue: swg

========== Dossiers ==========
SUPPRIM�: C:\Users\boissiete\AppData\Local\{09AD94C4-4599-4D17-9417-B89D00BE8789}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{1082F376-6457-4AC0-A419-AFC67BAC954B}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{1954463A-5F99-471A-A114-BE8267DBE45B}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{22090BF5-2FD6-49F0-B2DF-853C15157E82}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{25EAFF83-17EF-4425-AB2B-F712F05742E6}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{299995C8-D39A-4731-B526-291F57458E88}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{360BED32-EF6E-4A9A-9C5A-3E46C3FBE4C3}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{3666ACCF-3348-498C-B5DF-BE628BEC9ED2}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{3B57786F-5235-4495-BCFC-5EC6E5B7DE07}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{AC3E7F9C-7C70-4C0F-9274-E06F638F0555}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{C939650A-A89A-4288-9FC7-CF2D4011F40A}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{C97D796F-11A8-4567-AAEF-C5B1EF89FFCF}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{CC3338B0-765D-40BC-BFF4-F45067B3D000}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{CE43390A-F22B-4E81-ACD2-6FA5B0274B23}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{D072D24D-2018-4892-8109-BB25D6CD8516}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{E013B2F2-09FB-444D-A268-6CC33A153975}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{E61FF041-435C-4414-973A-08917B6CA0E2}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{F8C278C7-A771-4B48-8B5F-D703902D7691}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{FD2F5D14-E8B7-4556-B543-C0466C389E28}
SUPPRIM�: C:\Users\boissiete\AppData\Local\{FE6411C6-1007-47DC-AB55-9CA1631E3B94}
SUPPRIM�: C:\ProgramData\Babylon
SUPPRIM�: C:\ProgramData\Browser Manager
SUPPRIM�: C:\ProgramData\IBUpdaterService
SUPPRIM�: C:\ProgramData\Partner
SUPPRIM�: C:\Users\boissiete\AppData\Roaming\Babylon
SUPPRIM�: C:\Users\boissiete\AppData\Roaming\File Scout
SUPPRIM�: C:\Users\boissiete\AppData\Roaming\OpenCandy
SUPPRIM�: C:\Program Files (x86)\Conduit
SUPPRIM�: C:\Users\boissiete\AppData\Local\Conduit
SUPPRIM�: c:\users\boissiete\appdata\locallow\conduit

========== Fichiers ==========
SUPPRIM�S Flash Cookies (0) (0 octets)
SUPPRIM�S Temporaires Windows (27) (5�237�703 octets)
SUPPRIM�: c:\program files (x86)\pc speed maximizer\spmlauncher.exe

========== Autre ==========
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/33449013-rogue-pcspeedmaximizer
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/26678994-hijacker-babsolution
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/27583992-pup-datamngr
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/34311830-pup-filescout
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/26627641-spyware-agenceexclusive
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/26907365-adware-installbrain
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/26770694-adware-opencandy
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/27563212-pup-clarosearch
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/26686441-pup-specialsavings
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/33655822-trojan-agentadsa
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/26611092-adware-bandoo
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/28133096-pup-bprotector
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/27583526-pup-crossrider
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/28193283-spyware-partner
NON TRAIT� Malware (94)
NON TRAIT� http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit
NON TRAIT� Toolbar (32)


========== R�capitulatif ==========
2 : Processus m�moire
39 : Cl�s du Registre
5 : Valeurs du Registre
30 : Dossiers
3 : Fichiers
18 : Autre


End of clean in 00mn 17s

========== Chemin de fichier rapport ==========
C:\Users\boissiete\AppData\Roaming\ZHP\ZHPFix[R1].txt - 28-03-14 16:33:59 [7595]

Publicité


Signaler le contenu de ce document

Publicité