~ ZHPCleaner v2014.10.26.197 by Nicolas Coolman (26/10/2014)
~ Run by Valentin (Administrator) (27/10/2014 20:13:10)
~ WebSite : http://nicolascoolman.fr
~ Forum : http://forum.nicolascoolman.fr
~ State version : Pas de fichier r�seau
~ Type : Scanner
~ Report : C:\Users\Valentin\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Valentin\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Windows VISTA, 32-bit Service Pack 2 (Build 6002)


---\\ Services. (0)


---\\ Navigateurs internet. (51)
TROUV� Proxy: ProxyOverride ( )
TROUV� IE Params: Tabs ( res://ieframe.dll/tabswelcome.htm )
TROUV� Firefox: [u4dqpx4w.default] URL HomePage : hxxp://rts.dsrlte.com?affID=na
TROUV� Firefox: user_pref("browser.search.order.1", "Mysearchdial"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.IFrc4Km4HBl.scode", "(function(){try{var url=(window.self.location.href + docu[...] (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.ekLb8AbqD.scode", "(function(){try{var url=(window.self.location.href + docume[...] (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.ffxtlbr@mysearchdial.com.install-event-fired", true); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.helperbar.BackPageActive", true); (PUP.HelperBar)
TROUV� Firefox: user_pref("extensions.helperbar.DockingPositionDown", false); (PUP.HelperBar)
TROUV� Firefox: user_pref("extensions.helperbar.SmartbarDisabled", false); (PUP.HelperBar)
TROUV� Firefox: user_pref("extensions.helperbar.SmartbarStateMinimaized", false); (PUP.HelperBar)
TROUV� Firefox: user_pref("extensions.helperbar.Visibility", false); (PUP.HelperBar)
TROUV� Firefox: user_pref("extensions.helperbar.keepAliveLastevent", "1396290995"); (PUP.HelperBar)
TROUV� Firefox: user_pref("extensions.helperbar.lastExternalJsUpdate", "1407801868674"); (PUP.HelperBar)
TROUV� Firefox: user_pref("extensions.hiQG8VB.scode", "(function(){try{var url=(window.self.location.href + document[...] (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{20a82645-c095-[...] (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.j3eq4crT9.scode", "(function(){try{var url=(window.self.location.href + docume[...] (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.AL", 2); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.aflt", "msd3_14_11_ch"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutDtDtC0DyBtB0A0EtCyC0A0C0C0BzztBtN0D0Tzu0Sz[...] (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.cntry", "FR"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.cr", "436879078"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.dfltLng", ""); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.dfltSrch", true); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.dnsErr", true); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,6[...] (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.excTlbr", false); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.hdrMd5", "0E185E1FE59F01D62E154410BD97B4C4"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.hmpg", true); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&a=msd3_14_11_ch&cd=[...] (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.id", "001D72AE16ACCB82"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.instlDay", "16144"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.instlRef", "140305_d"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.lastB", "http://start.mysearchdial.com/?f=1&a=msd3_14_11_ch&cd=2X[...] (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.lastVrsnTs", "1.8.29.020:44:52"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearchdial.com/?f=2&a=msd3_14_11_ch&c[...] (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"96\",\"lastVrsn\":\"96\",\"vrsnLoad\":[...] (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.prdct", "mysearchdial"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.sg", "none"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.tlbrId", "base"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearchdial.com/?f=3&a=msd3_14_11_ch[...] (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.vrsn", "1.8.29.0"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial.vrsni", "1.8.29.0"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial_i.newTab", false); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial_i.smplGrp", "none"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.29.020:44:52"); (Adware.MyWebSearch)
TROUV� Firefox: user_pref("extensions.y3ax.scode", "(function(){try{var url=(window.self.location.href + document.co[...] (PUP.Babylon)
TROUV� Firefox: user_pref("extensions.z_mBp.scode", "(function(){try{var url=(window.self.location.href + document.c[...] (Adware.MyWebSearch)


---\\ Fichier h�te. (1)
~ Le fichier h�te est l�gitime. (15150)


---\\ T�ches planifi�es. (0)


---\\ Explorateur ( Fichiers & Dossiers ). (20)
TROUV�: C:\Windows\Tasks\APSnotifierCA.job (PUP.AnyProtect)
TROUV�: C:\Windows\Tasks\video-high-codedownloader.job (PUP.CrossRider)
TROUV�: C:\Windows\Tasks\video-high-updater.job (PUP.CrossRider)
TROUV�: C:\Windows\Tasks\WSE_Astromenda.job (PUP.Astromenda)
TROUV�: C:\Program Files\RoyalShouppeerApep (PUP.RoyalShopperApp)
TROUV�: C:\Program Files\RoyalShouppeerApep (PUP.RoyalShopperApp)
TROUV�: C:\ProgramData\RoyalShouppeerApep (PUP.RoyalShopperApp)
TROUV�: C:\ProgramData\RoyalShouppeerApep\_UPb8X.exe (PUP.RoyalShopperApp)
TROUV�: C:\ProgramData\TxtMaker (PUP.TxtMaker)
TROUV�: C:\ProgramData\TxtMaker\hB7X7SpDo.dat (PUP.TxtMaker)
TROUV�: C:\ProgramData\TxtMaker\hB7X7SpDo.tlb (PUP.TxtMaker)
TROUV�: C:\Users\Valentin\AppData\LocalLow\IMBooster4web-en (Adware.IMBooster)
TROUV�: C:\Users\Valentin\AppData\LocalLow\IMBooster4web-en\Communities (Adware.IMBooster)
TROUV�: C:\Users\Valentin\AppData\LocalLow\IMBooster4web-en\EmailNotifier (Adware.IMBooster)
TROUV�: C:\Users\Valentin\AppData\LocalLow\IMBooster4web-en\LanguagePack (Adware.IMBooster)
TROUV�: C:\Users\Valentin\AppData\LocalLow\IMBooster4web-en\Logs (Adware.IMBooster)
TROUV�: C:\Users\Valentin\AppData\LocalLow\IMBooster4web-en\MyStuffComponents (Adware.IMBooster)
TROUV�: C:\Users\Valentin\AppData\LocalLow\IMBooster4web-en\RadioPlayer (Adware.IMBooster)
TROUV�: C:\Users\Valentin\AppData\LocalLow\IMBooster4web-en\Repository (Adware.IMBooster)
TROUV�: C:\Users\Valentin\AppData\LocalLow\IMBooster4web-en\Rss (Adware.IMBooster)


---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (27)
TROUV�: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MyWebSearch Email Plugin (Hijacker.SimpleSearches)
TROUV�: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Shockwave Updater (Adware.MyWebSearch)
TROUV�: HKCR\Installer\Products\A07B748F92CF28B478E2852FECD9EE90 [Boxore Client] (Adware.Boxore)
TROUV�: HKCR\Installer\Features\A07B748F92CF28B478E2852FECD9EE90 [Boxore Client] (Adware.Boxore)
TROUV�: HKCR\Installer\UpgradeCodes\A07B748F92CF28B478E2852FECD9EE90 [Boxore Client] (Adware.Boxore)
TROUV�: HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\\http://feed.snapdo.com/?p=mKO_AwFzXIpYRb[...] [Web Search] (Hijacker.SmartBar)
TROUV�: HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\\http://feed.snapdo.com/?p=mKO_AwFzXIpYRb[...] [Web Search] (Hijacker.SmartBar)
TROUV�: HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465} [ShopperReports.dll] (Adware.ShopperReports)
TROUV�: HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754} [ShoppingReport.dll] (Adware.ShoppingReport)
TROUV�: HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} [BabylonToolbar.dll] (PUP.Babylon)
TROUV�: HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} [BabylonToolbar.dll] (PUP.Babylon)
TROUV�: HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} [BabylonToolbarTlbr.dll] (PUP.Babylon)
TROUV�: HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} [ShoppingReport.dll] (Adware.ShoppingReport)
TROUV�: HKCR\TypeLib\{0797625A-9C05-61AD-E0CF-ED16C56DD139} [SupTabLib] (PUP.SupTab)
TROUV�: HKCU\Software\Gameo (PUP.Gameo)
TROUV�: HKCU\Software\Magentic (Toolbar.Magentic)
TROUV�: HKCU\Software\Smartbar (Hijacker.SmartBar)
TROUV�: HKCU\Software\AppDataLow\Software\freeven (PUP.Freeven)
TROUV�: HKCU\Software\AppDataLow\Software\IMBooster4web-en (Adware.IMBooster)
TROUV�: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{e94f51cc-38fe-497b-9e7b-bb8fb2f8de34} [Shopping Helper Smartbar Engine] (Hijacker.SmartBar)
TROUV�: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\freeven (PUP.Freeven)
TROUV�: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IMBooster4web-en Toolbar (Adware.IMBooster)
TROUV�: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PunkBusterSvc (Spyware.AgenceExclusive)
TROUV�: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update Whilokii (PUP.Whilokii)
TROUV�: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util Whilokii (PUP.Whilokii)
TROUV�: HKLM\SOFTWARE\freeven (PUP.Freeven)
TROUV�: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MyWebSearch Email Plugin (Adware.MyWebSearch)



---\\ Bilan de la r�paration
~ Aucune r�paration effectu�e.
~ Ce navigateur est absent (Opera Software)
~ R�paration annul�e par l'utilisateur (Google Chrome)


End of clean at 20:23:53