Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPCleaner v2015.5.25.252 by Nicolas Coolman (2015\05\25)
~ Run by matteo (Administrator) (26/05/2015 12:43:50)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Netttoyer
~ Report : C:\Users\matteo\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\matteo\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 81, 64-bit (Build 9600)
---\\ Service. (2)
ARRET� : jebixevu (Heuristic.Salus)
ARRET� : jijynofi (Heuristic.Salus)
---\\ Navigateur internet. (2)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Default_Search_URL [hxxp://www.istartsurf.com/web/?type=ds&ts=1432044491&z=087562e4a2f7cd455114014gb[...]] (PUP.IsStart)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Search Page [hxxp://www.istartsurf.com/web/?type=ds&ts=1432044491&z=087562e4a2f7cd455114014gb[...]] (PUP.IsStart)
---\\ Fichier h�te. (1)
~ Le fichier h�te est l�gitime. (21)
---\\ T�che planifi�e. (9)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-1-6] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-1-6.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-1-7] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-1-7.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-10_user] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-10.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-3] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-3.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-5] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-5.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-5_user] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-5.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-6] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-6.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-7] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-7.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [SmartWeb Upgrade Trigger Task] [C:\Users\matteo\AppData\Local\SmartWeb\SmartWebHelper.exe] (PUP.SmartWebSearch)
---\\ Explorateur ( Dossiers, Fichiers ). (103)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk [Bad : C:\Users\matteo\AppData\Local\SmartWeb\SmartWebHelper.exe] (PUP.SmartWebSearch)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55\jnse335B.tmp (Heuristic.Salus)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55\hnsy4ACD.tmp (Heuristic.Salus)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55\nsp859E.tmp (Heuristic.Salus)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-1-6.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-1-7.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-10_user.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-3.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-5.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-5_user.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-6.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-7.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Prefetch\BUBBLE DOCK UNINSTALL.EXE-8494CFE0.pf (PUP.BubbleDock)
DEPLAC� fichier: C:\WINDOWS\Prefetch\BUBBLE DOCK UNINSTALL.EXE-D91E7AA2.pf (PUP.BubbleDock)
DEPLAC� fichier: C:\WINDOWS\Prefetch\BUBBLE DOCK.EXE-BE24F040.pf (PUP.BubbleDock)
DEPLAC� fichier: C:\WINDOWS\Prefetch\GLOBALUPDATE.EXE-BDC3E9A8.pf (PUP.GlobalUpdate)
DEPLAC� fichier: C:\WINDOWS\Prefetch\PACKAGE_BUBBLESOUND_INSTALLER-930BED6A.pf (PUP.BubbleSound)
DEPLAC� fichier: C:\WINDOWS\Prefetch\PREDM.TMP-ADEE0D74.pf (Adware.Downware)
DEPLAC� fichier: C:\WINDOWS\Prefetch\PREDM.TMP-D17D4266.pf (Adware.Downware)
DEPLAC� fichier: C:\WINDOWS\Prefetch\SELECTION TOOLS UNINSTALL.EXE-540118B5.pf (PUP.Nosibay)
DEPLAC� fichier: C:\WINDOWS\Prefetch\SELECTION TOOLS UNINSTALL.EXE-DC3D3115.pf (PUP.Nosibay)
DEPLAC� fichier: C:\WINDOWS\Prefetch\SMARTWEBHELPER.EXE-F3E3DB29.pf (PUP.SmartWebSearch)
DEPLAC� fichier: C:\WINDOWS\Prefetch\VOPACKAGE.EXE-016F746A.pf (Adware.Downware)
DEPLAC� fichier: C:\WINDOWS\Prefetch\WEBBAR_1404--6B0A5844.TMP-1ACD7974.pf (PUP.WebBar)
DEPLAC� fichier: C:\ProgramData\SetStretch.exe (Suspect.Optional)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\Bubble Dock.boostrap.log (PUP.BubbleDock)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\Bubble Dock.installation.log (PUP.BubbleDock)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\Selection Tools.installation.log (PUP.Nosibay)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\WindApp.boostrap.log (PUP.Nosibay)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\WindApp.installation.log (PUP.Nosibay)
DEPLAC� fichier*: C:\Users\matteo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.select-n-go00.select-n-go.com_0.localstorage (PUP.SelectNGo)
DEPLAC� fichier*: C:\Users\matteo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.select-n-go00.select-n-go.com_0.localstorage-journal (PUP.SelectNGo)
DEPLAC� fichier: C:\WINDOWS\SECOH-QAD.exe (PUA.KMSpico)
DEPLAC� dossier: C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55 (Heuristic.Salus)
DEPLAC� dossier: C:\Program Files (x86)\AnyProtectEx (PUP.AnyProtect)
DEPLAC� dossier: C:\Program Files (x86)\YoutubeAdblocker (Adware.Multiplug)
DEPLAC� dossier: C:\ProgramData\1489102e00004804 (Adware.CrossRider)
DEPLAC� dossier: C:\ProgramData\Browser (PUP.SpeedBrowser)
DEPLAC� dossier: C:\ProgramData\LolliScan (Adware.Graftor)
DEPLAC� dossier: C:\ProgramData\Safeweb (Adware.Multiplug)
DEPLAC� dossier: C:\ProgramData\YoutubeAdblocker (Adware.Multiplug)
DEPLAC� dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP (Adware.GamesDesktop)
DEPLAC� dossier: C:\Users\matteo\AppData\Roaming\AnyProtectEx (PUP.AnyProtect)
DEPLAC� dossier: C:\Users\matteo\AppData\Roaming\Nosibay (Adware.SPointer)
DEPLAC� dossier: C:\Users\matteo\AppData\Roaming\Store (PUP.Nosibay)
DEPLAC� dossier^: C:\Users\matteo\AppData\LocalLow\SmartWeb (PUP.SmartWebSearch)
DEPLAC� dossier: C:\Users\matteo\AppData\Local\globalUpdate (PUP.GlobalUpdate)
DEPLAC� dossier^: C:\Users\matteo\AppData\Local\gmsd_fr_571 (Adware.CrossRider)
DEPLAC� dossier^: C:\Users\matteo\AppData\Local\SmartWeb (PUP.SmartWebSearch)
DEPLAC� dossier: C:\Users\matteo\AppData\Local\Torch (PUP.Torch)
DEPLAC� dossier: C:\Users\Invit�\AppData\Local\Torch (PUP.Torch)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI1001.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI1015.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI16A.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI2A94.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI2ACE.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI315C.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI3157.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI3351.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI3F62.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI41A.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI442C.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI49CA.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI4D15.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI52B5.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI5778.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI5E55.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI64CE.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI7E4.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI82C2.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI840.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI8AC2.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI8D63.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI8FB6.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI9787.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIA534.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIAA66.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIAC8A.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIAE3.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIAE9E.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIB0A3.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIB42E.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIB7A9.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIBA6A.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIBCFB.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIBF10.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIC4C2.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIC744.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSID927.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIDCA7.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIDC.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIDD20.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIDFA1.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIE271.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIE4B4.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIED02.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIED21.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIEEAA.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIEF45.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIF784.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIF969.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIF998.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIFC87.tmp- (Empty)
---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (111)
REMPLAC� donn�e: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope \\\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} (Hijacker.SearchScopes)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto6_15_21&cd=2XzuyEtN2Y1L1Qzu0EtDtA0FyEzy[...]] [Taplika] (PUP.Taplika)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&fr[...]] [e] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{589B893E-773C-4941-88C2-0DCC718E621C} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&fr[...]] [Bing] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&fr[...]] [Google] (PUP.IsStart)
SUPPRIM� cl�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto6_15_21&cd=2XzuyEtN2Y1L1Qzu0EtDtA0FyEzy[...]] [Taplika] (PUP.Taplika)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10 [globalUpdate] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4 [globalUpdate] (PUP.GlobalUpdate)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto6_15_21&cd=2XzuyEtN2Y1L1Qzu0EtDtA0FyEzytAyDzz0AyDyD0AyDyC0FtN0D0Tzu0StCtBtAyDtN1L2XzutAtFtCtDtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyCzzzz0AtBtAtBtCtG0D0B0B0FtG0AyC0DtCtG0D0F0CtDtGtCyC0D0BzytByE0FyBzzyByD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0AtBtB0FyCtAtBtG0B0C0A0EtGyEtA0FtBtGzyyEtCtCtGzytCyB0CyCyC0E0B0DyE0FyE2QtN0A0LzuyE&cr=148099858&ir=] (PUP.Taplika)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SamsungXSSDX850XEVOX500GB_S21JNSAG250036B&ts=1432044511&type=default&q={searchTerms}] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{589B893E-773C-4941-88C2-0DCC718E621C} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SamsungXSSDX850XEVOX500GB_S21JNSAG250036B&ts=1432044511&type=default&q={searchTerms}] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SamsungXSSDX850XEVOX500GB_S21JNSAG250036B&ts=1432044511&type=default&q={searchTerms}] (PUP.IsStart)
SUPPRIM� cl�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto6_15_21&cd=2XzuyEtN2Y1L1Qzu0EtDtA0FyEzytAyDzz0AyDyD0AyDyC0FtN0D0Tzu0StCtBtAyDtN1L2XzutAtFtCtDtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyCzzzz0AtBtAtBtCtG0D0B0B0FtG0AyC0DtCtG0D0F0CtDtGtCyC0D0BzytByE0FyBzzyByD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0AtBtB0FyCtAtBtG0B0C0A0EtGyEtA0FtBtGzyyEtCtCtGzytCyB0CyCyC0E0B0DyE0FyE2QtN0A0LzuyE&cr=148099858&ir=] (PUP.Taplika)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\Currentversion\Uninstall\SearchProtect [] (Adware.Sambreel)
SUPPRIM� cl�*: HKLM\SYSTEM\CurrentControlSet\Services\jebixevu [C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55\jnse335B.tmp (Not File)] (Heuristic.Salus)
SUPPRIM� cl�*: HKLM\SYSTEM\CurrentControlSet\Services\jijynofi [C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55\hnsy4ACD.tmp (Not File)] (Heuristic.Salus)
SUPPRIM� cl�*: HKLM\SYSTEM\CurrentControlSet\Services\sowokije [C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55\nsp859E.tmp (Not File)] (Heuristic.Salus)
SUPPRIM� cl�*: HKCU\Software\CinemaPlus-3.4cV19.05-nv [] (Adware.CrossRider)
SUPPRIM� cl�*: HKCU\Software\CinemaPlus-3.4cV19.05-nv-ie [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\f0ce5294-2af1-41ea-a5ce-3f8d275b850f [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\CinemaPlus-3.4cV19.05-nv [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\CinemaPlus-3.4cV19.05-nv-ie [] (Adware.CrossRider)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\AnyProtect [] (PUP.AnyProtect)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\ArenaHD [] (Adware.CrossRider)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\Boost [] (PUP.Boost)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\CinemaPlus-3.4cV19.05 [] (Adware.CrossRider)
SUPPRIM� cl�: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\CinemaPlus-3.4cV19.05-nv [] (Adware.CrossRider)
SUPPRIM� cl�: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\CinemaPlus-3.4cV19.05-nv-ie [] (Adware.CrossRider)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\gamesdesktop [] (Adware.GamesDesktop)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\globalUpdate [] (PUP.GlobalUpdate)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\HighDefAction [] (Adware.CrossRider)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\InstalledBrowserExtensions [] (PUP.BrowserExtensions)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\Nosibay [] (Adware.SPointer)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\Optimizer Pro [] (PUP.OptimizerPro)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\SafeGuardApp [] (PUP.SafeGuard)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\SimplyTech [] (PUP.SimplyTech)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\TNT2 [] (Adware.TidyNetwork)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\Tutorials [] (PUP.AgenceExclusive)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\TutoTag [] (PUP.AgenceExclusive)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\YorkNewCin [] (Adware.CrossRider)
SUPPRIM� cl�: HKCU\Software\AnyProtect [] (PUP.AnyProtect)
SUPPRIM� cl�: HKCU\Software\ArenaHD [] (Adware.CrossRider)
SUPPRIM� cl�: HKCU\Software\Boost [] (PUP.Boost)
SUPPRIM� cl�: HKCU\Software\CinemaPlus-3.4cV19.05 [] (Adware.CrossRider)
SUPPRIM� cl�: HKCU\Software\gamesdesktop [] (Adware.GamesDesktop)
SUPPRIM� cl�: HKCU\Software\globalUpdate [] (PUP.GlobalUpdate)
SUPPRIM� cl�: HKCU\Software\HighDefAction [] (Adware.CrossRider)
SUPPRIM� cl�: HKCU\Software\InstalledBrowserExtensions [] (PUP.BrowserExtensions)
SUPPRIM� cl�: HKCU\Software\Nosibay [] (Adware.SPointer)
SUPPRIM� cl�: HKCU\Software\Optimizer Pro [] (PUP.OptimizerPro)
SUPPRIM� cl�: HKCU\Software\SafeGuardApp [] (PUP.SafeGuard)
SUPPRIM� cl�: HKCU\Software\SimplyTech [] (PUP.SimplyTech)
SUPPRIM� cl�: HKCU\Software\TNT2 [] (Adware.TidyNetwork)
SUPPRIM� cl�: HKCU\Software\Tutorials [] (PUP.AgenceExclusive)
SUPPRIM� cl�: HKCU\Software\TutoTag [] (PUP.AgenceExclusive)
SUPPRIM� cl�: HKCU\Software\YorkNewCin [] (Adware.CrossRider)
SUPPRIM� cl�*: HKCU\Software\AppDataLow\Software\Crossrider [] (Adware.CrossRider)
SUPPRIM� cl�*: HKCU\Software\AppDataLow\Software\DynConIE [] (PUP.DynConIE)
SUPPRIM� cl�*: HKCU\Software\AppDataLow\Software\SmartWeb [] (PUP.SmartWebSearch)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP [] (Adware.IMBooster)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar [] (Adware.IMBooster)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey [] (PUP.LinkeySearch)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect [] (PUP.SearchProtect)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com [] (PUP.Vosteran)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance [] (Adware.Multiplug)
SUPPRIM� cl�*: HKCU\Software\Store [] (PUP.Optional)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass [Google Update Core Class] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1 [Google Update Core Class] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc [Google Update Legacy On Demand] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0 [Google Update Legacy On Demand] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc [GoogleUpdate Update3Web] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0 [GoogleUpdate Update3Web] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect [] (PUP.Fuyu)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\ArenaHD [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\HighDefAction [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\InstalledBrowserExtensions [] (PUP.BrowserExtensions)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\WebBar [] (PUP.WebBar)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\YorkNewCin [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\SafeGuard_RASAPI32 [] (PUP.SafeGuard)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\SafeGuard_RASMANCS [] (PUP.SafeGuard)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\globalupdate.exe [] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\ArenaHD [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Boost [] (PUP.Boost)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\CinemaPlus-3.4cV19.05 [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Conduit [] (PUP.Conduit)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\GAMESDESKTOP [] (Adware.GamesDesktop)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\GlobalUpdate [] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\HighDefAction [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\IHProtect [] (Adware.AgentODR)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Infonaut_1.10.0.14 [] (PUP.Infonaut)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions [] (PUP.BrowserExtensions)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\istartsurfSoftware [] (PUP.IsStart)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\SpeedBrowser [] (PUP.SpeedBrowser)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\SupDp [] (Adware.SupTab)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\supTab [] (Adware.SupTab)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect [] (PUP.Fuyu)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Tutorials [] (PUP.AgenceExclusive)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\YorkNewCin [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_fr_571_is1 [GAMESDESKTOP] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP [] (Adware.IMBooster)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar [] (Adware.IMBooster)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Linkey [] (PUP.LinkeySearch)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartWeb [SoftBrain Technologies Ltd.] (PUP.SmartWebSearch)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage [] (Adware.Downware)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com [] (PUP.Vosteran)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance [] (Adware.Multiplug)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613} [] (Adware.Multiplug)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A} [C:\Program Files (x86)\globalUpdate\Update\1.3.25.0 (Not File)] (PUP.GlobalUpdate)
SUPPRIM� valeur: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_A4FBB820DBA7CF6023C4734B6902171A ["C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window] (PUP.Vosteran)
SUPPRIM� valeur: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\Update [C:\Users\matteo\AppData\Roaming\VOPackage\VOPackage.exe /runonce] (Adware.Downware)
SUPPRIM� valeur: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\upgmsd_fr_571.exe [C:\Users\matteo\AppData\Local\gmsd_fr_571\upgmsd_fr_571.exe -runonce] (Adware.CrossRider)
---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Mozilla Firefox)
~ Ce navigateur est absent (Opera Software)
~ Le syst�me a �t� red�marr�.
---\\ Statistiques
~ Items scann�s : 702
~ Items trouv�s : 0
~ Items annul�s : 0
~ Items r�par�s : 228
End of clean at 12:44:14
===================
ZHPCleaner-[R]-26052015-12_44_14.txt
ZHPCleaner-[S]-26052015-12_42_55.txt
~ Run by matteo (Administrator) (26/05/2015 12:43:50)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Netttoyer
~ Report : C:\Users\matteo\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\matteo\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 81, 64-bit (Build 9600)
---\\ Service. (2)
ARRET� : jebixevu (Heuristic.Salus)
ARRET� : jijynofi (Heuristic.Salus)
---\\ Navigateur internet. (2)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Default_Search_URL [hxxp://www.istartsurf.com/web/?type=ds&ts=1432044491&z=087562e4a2f7cd455114014gb[...]] (PUP.IsStart)
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Search Page [hxxp://www.istartsurf.com/web/?type=ds&ts=1432044491&z=087562e4a2f7cd455114014gb[...]] (PUP.IsStart)
---\\ Fichier h�te. (1)
~ Le fichier h�te est l�gitime. (21)
---\\ T�che planifi�e. (9)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-1-6] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-1-6.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-1-7] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-1-7.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-10_user] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-10.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-3] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-3.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-5] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-5.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-5_user] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-5.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-6] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-6.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [e6293279-1d8c-4ad4-8d24-3dba21cd91c6-7] [C:\Program Files (x86)\CinemaPlus-3.4cV19.05\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-7.exe (Not File) ] (Adware.CrossRider)
SUPPRIM� t�che: [SmartWeb Upgrade Trigger Task] [C:\Users\matteo\AppData\Local\SmartWeb\SmartWebHelper.exe] (PUP.SmartWebSearch)
---\\ Explorateur ( Dossiers, Fichiers ). (103)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk [Bad : C:\Users\matteo\AppData\Local\SmartWeb\SmartWebHelper.exe] (PUP.SmartWebSearch)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55\jnse335B.tmp (Heuristic.Salus)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55\hnsy4ACD.tmp (Heuristic.Salus)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55\nsp859E.tmp (Heuristic.Salus)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-1-6.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-1-7.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-10_user.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-3.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-5.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-5_user.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-6.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Tasks\e6293279-1d8c-4ad4-8d24-3dba21cd91c6-7.job (Adware.CrossRider)
DEPLAC� fichier: C:\WINDOWS\Prefetch\BUBBLE DOCK UNINSTALL.EXE-8494CFE0.pf (PUP.BubbleDock)
DEPLAC� fichier: C:\WINDOWS\Prefetch\BUBBLE DOCK UNINSTALL.EXE-D91E7AA2.pf (PUP.BubbleDock)
DEPLAC� fichier: C:\WINDOWS\Prefetch\BUBBLE DOCK.EXE-BE24F040.pf (PUP.BubbleDock)
DEPLAC� fichier: C:\WINDOWS\Prefetch\GLOBALUPDATE.EXE-BDC3E9A8.pf (PUP.GlobalUpdate)
DEPLAC� fichier: C:\WINDOWS\Prefetch\PACKAGE_BUBBLESOUND_INSTALLER-930BED6A.pf (PUP.BubbleSound)
DEPLAC� fichier: C:\WINDOWS\Prefetch\PREDM.TMP-ADEE0D74.pf (Adware.Downware)
DEPLAC� fichier: C:\WINDOWS\Prefetch\PREDM.TMP-D17D4266.pf (Adware.Downware)
DEPLAC� fichier: C:\WINDOWS\Prefetch\SELECTION TOOLS UNINSTALL.EXE-540118B5.pf (PUP.Nosibay)
DEPLAC� fichier: C:\WINDOWS\Prefetch\SELECTION TOOLS UNINSTALL.EXE-DC3D3115.pf (PUP.Nosibay)
DEPLAC� fichier: C:\WINDOWS\Prefetch\SMARTWEBHELPER.EXE-F3E3DB29.pf (PUP.SmartWebSearch)
DEPLAC� fichier: C:\WINDOWS\Prefetch\VOPACKAGE.EXE-016F746A.pf (Adware.Downware)
DEPLAC� fichier: C:\WINDOWS\Prefetch\WEBBAR_1404--6B0A5844.TMP-1ACD7974.pf (PUP.WebBar)
DEPLAC� fichier: C:\ProgramData\SetStretch.exe (Suspect.Optional)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\Bubble Dock.boostrap.log (PUP.BubbleDock)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\Bubble Dock.installation.log (PUP.BubbleDock)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\Selection Tools.installation.log (PUP.Nosibay)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\WindApp.boostrap.log (PUP.Nosibay)
DEPLAC� fichier: C:\Users\matteo\AppData\Roaming\WindApp.installation.log (PUP.Nosibay)
DEPLAC� fichier*: C:\Users\matteo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.select-n-go00.select-n-go.com_0.localstorage (PUP.SelectNGo)
DEPLAC� fichier*: C:\Users\matteo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.select-n-go00.select-n-go.com_0.localstorage-journal (PUP.SelectNGo)
DEPLAC� fichier: C:\WINDOWS\SECOH-QAD.exe (PUA.KMSpico)
DEPLAC� dossier: C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55 (Heuristic.Salus)
DEPLAC� dossier: C:\Program Files (x86)\AnyProtectEx (PUP.AnyProtect)
DEPLAC� dossier: C:\Program Files (x86)\YoutubeAdblocker (Adware.Multiplug)
DEPLAC� dossier: C:\ProgramData\1489102e00004804 (Adware.CrossRider)
DEPLAC� dossier: C:\ProgramData\Browser (PUP.SpeedBrowser)
DEPLAC� dossier: C:\ProgramData\LolliScan (Adware.Graftor)
DEPLAC� dossier: C:\ProgramData\Safeweb (Adware.Multiplug)
DEPLAC� dossier: C:\ProgramData\YoutubeAdblocker (Adware.Multiplug)
DEPLAC� dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP (Adware.GamesDesktop)
DEPLAC� dossier: C:\Users\matteo\AppData\Roaming\AnyProtectEx (PUP.AnyProtect)
DEPLAC� dossier: C:\Users\matteo\AppData\Roaming\Nosibay (Adware.SPointer)
DEPLAC� dossier: C:\Users\matteo\AppData\Roaming\Store (PUP.Nosibay)
DEPLAC� dossier^: C:\Users\matteo\AppData\LocalLow\SmartWeb (PUP.SmartWebSearch)
DEPLAC� dossier: C:\Users\matteo\AppData\Local\globalUpdate (PUP.GlobalUpdate)
DEPLAC� dossier^: C:\Users\matteo\AppData\Local\gmsd_fr_571 (Adware.CrossRider)
DEPLAC� dossier^: C:\Users\matteo\AppData\Local\SmartWeb (PUP.SmartWebSearch)
DEPLAC� dossier: C:\Users\matteo\AppData\Local\Torch (PUP.Torch)
DEPLAC� dossier: C:\Users\Invit�\AppData\Local\Torch (PUP.Torch)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI1001.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI1015.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI16A.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI2A94.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI2ACE.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI315C.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI3157.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI3351.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI3F62.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI41A.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI442C.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI49CA.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI4D15.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI52B5.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI5778.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI5E55.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI64CE.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI7E4.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI82C2.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI840.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI8AC2.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI8D63.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI8FB6.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSI9787.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIA534.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIAA66.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIAC8A.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIAE3.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIAE9E.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIB0A3.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIB42E.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIB7A9.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIBA6A.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIBCFB.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIBF10.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIC4C2.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIC744.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSID927.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIDCA7.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIDC.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIDD20.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIDFA1.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIE271.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIE4B4.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIED02.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIED21.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIEEAA.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIEF45.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIF784.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIF969.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIF998.tmp- (Empty)
DEPLAC� dossier: C:\WINDOWS\Installer\MSIFC87.tmp- (Empty)
---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (111)
REMPLAC� donn�e: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope \\\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} (Hijacker.SearchScopes)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto6_15_21&cd=2XzuyEtN2Y1L1Qzu0EtDtA0FyEzy[...]] [Taplika] (PUP.Taplika)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&fr[...]] [e] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{589B893E-773C-4941-88C2-0DCC718E621C} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&fr[...]] [Bing] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&fr[...]] [Google] (PUP.IsStart)
SUPPRIM� cl�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto6_15_21&cd=2XzuyEtN2Y1L1Qzu0EtDtA0FyEzy[...]] [Taplika] (PUP.Taplika)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10 [globalUpdate] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4 [globalUpdate] (PUP.GlobalUpdate)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto6_15_21&cd=2XzuyEtN2Y1L1Qzu0EtDtA0FyEzytAyDzz0AyDyD0AyDyC0FtN0D0Tzu0StCtBtAyDtN1L2XzutAtFtCtDtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyCzzzz0AtBtAtBtCtG0D0B0B0FtG0AyC0DtCtG0D0F0CtDtGtCyC0D0BzytByE0FyBzzyByD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0AtBtB0FyCtAtBtG0B0C0A0EtGyEtA0FtBtGzyyEtCtCtGzytCyB0CyCyC0E0B0DyE0FyE2QtN0A0LzuyE&cr=148099858&ir=] (PUP.Taplika)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SamsungXSSDX850XEVOX500GB_S21JNSAG250036B&ts=1432044511&type=default&q={searchTerms}] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{589B893E-773C-4941-88C2-0DCC718E621C} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SamsungXSSDX850XEVOX500GB_S21JNSAG250036B&ts=1432044511&type=default&q={searchTerms}] (PUP.IsStart)
SUPPRIM� cl�: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} [http://www.istartsurf.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SamsungXSSDX850XEVOX500GB_S21JNSAG250036B&ts=1432044511&type=default&q={searchTerms}] (PUP.IsStart)
SUPPRIM� cl�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://taplika.com/results.php?f=4&q={searchTerms}&a=tpl_tuto6_15_21&cd=2XzuyEtN2Y1L1Qzu0EtDtA0FyEzytAyDzz0AyDyD0AyDyC0FtN0D0Tzu0StCtBtAyDtN1L2XzutAtFtCtDtFtBtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyCzzzz0AtBtAtBtCtG0D0B0B0FtG0AyC0DtCtG0D0F0CtDtGtCyC0D0BzytByE0FyBzzyByD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0AtBtB0FyCtAtBtG0B0C0A0EtGyEtA0FtBtGzyyEtCtCtGzytCyB0CyCyC0E0B0DyE0FyE2QtN0A0LzuyE&cr=148099858&ir=] (PUP.Taplika)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\Currentversion\Uninstall\SearchProtect [] (Adware.Sambreel)
SUPPRIM� cl�*: HKLM\SYSTEM\CurrentControlSet\Services\jebixevu [C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55\jnse335B.tmp (Not File)] (Heuristic.Salus)
SUPPRIM� cl�*: HKLM\SYSTEM\CurrentControlSet\Services\jijynofi [C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55\hnsy4ACD.tmp (Not File)] (Heuristic.Salus)
SUPPRIM� cl�*: HKLM\SYSTEM\CurrentControlSet\Services\sowokije [C:\Users\matteo\AppData\Roaming\00000011-1432378565-0000-0000-E03F49358A55\nsp859E.tmp (Not File)] (Heuristic.Salus)
SUPPRIM� cl�*: HKCU\Software\CinemaPlus-3.4cV19.05-nv [] (Adware.CrossRider)
SUPPRIM� cl�*: HKCU\Software\CinemaPlus-3.4cV19.05-nv-ie [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\f0ce5294-2af1-41ea-a5ce-3f8d275b850f [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\CinemaPlus-3.4cV19.05-nv [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\CinemaPlus-3.4cV19.05-nv-ie [] (Adware.CrossRider)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\AnyProtect [] (PUP.AnyProtect)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\ArenaHD [] (Adware.CrossRider)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\Boost [] (PUP.Boost)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\CinemaPlus-3.4cV19.05 [] (Adware.CrossRider)
SUPPRIM� cl�: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\CinemaPlus-3.4cV19.05-nv [] (Adware.CrossRider)
SUPPRIM� cl�: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\CinemaPlus-3.4cV19.05-nv-ie [] (Adware.CrossRider)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\gamesdesktop [] (Adware.GamesDesktop)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\globalUpdate [] (PUP.GlobalUpdate)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\HighDefAction [] (Adware.CrossRider)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\InstalledBrowserExtensions [] (PUP.BrowserExtensions)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\Nosibay [] (Adware.SPointer)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\Optimizer Pro [] (PUP.OptimizerPro)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\SafeGuardApp [] (PUP.SafeGuard)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\SimplyTech [] (PUP.SimplyTech)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\TNT2 [] (Adware.TidyNetwork)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\Tutorials [] (PUP.AgenceExclusive)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\TutoTag [] (PUP.AgenceExclusive)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-1077702981-61500757-984125282-1002\Software\YorkNewCin [] (Adware.CrossRider)
SUPPRIM� cl�: HKCU\Software\AnyProtect [] (PUP.AnyProtect)
SUPPRIM� cl�: HKCU\Software\ArenaHD [] (Adware.CrossRider)
SUPPRIM� cl�: HKCU\Software\Boost [] (PUP.Boost)
SUPPRIM� cl�: HKCU\Software\CinemaPlus-3.4cV19.05 [] (Adware.CrossRider)
SUPPRIM� cl�: HKCU\Software\gamesdesktop [] (Adware.GamesDesktop)
SUPPRIM� cl�: HKCU\Software\globalUpdate [] (PUP.GlobalUpdate)
SUPPRIM� cl�: HKCU\Software\HighDefAction [] (Adware.CrossRider)
SUPPRIM� cl�: HKCU\Software\InstalledBrowserExtensions [] (PUP.BrowserExtensions)
SUPPRIM� cl�: HKCU\Software\Nosibay [] (Adware.SPointer)
SUPPRIM� cl�: HKCU\Software\Optimizer Pro [] (PUP.OptimizerPro)
SUPPRIM� cl�: HKCU\Software\SafeGuardApp [] (PUP.SafeGuard)
SUPPRIM� cl�: HKCU\Software\SimplyTech [] (PUP.SimplyTech)
SUPPRIM� cl�: HKCU\Software\TNT2 [] (Adware.TidyNetwork)
SUPPRIM� cl�: HKCU\Software\Tutorials [] (PUP.AgenceExclusive)
SUPPRIM� cl�: HKCU\Software\TutoTag [] (PUP.AgenceExclusive)
SUPPRIM� cl�: HKCU\Software\YorkNewCin [] (Adware.CrossRider)
SUPPRIM� cl�*: HKCU\Software\AppDataLow\Software\Crossrider [] (Adware.CrossRider)
SUPPRIM� cl�*: HKCU\Software\AppDataLow\Software\DynConIE [] (PUP.DynConIE)
SUPPRIM� cl�*: HKCU\Software\AppDataLow\Software\SmartWeb [] (PUP.SmartWebSearch)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP [] (Adware.IMBooster)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar [] (Adware.IMBooster)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey [] (PUP.LinkeySearch)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect [] (PUP.SearchProtect)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com [] (PUP.Vosteran)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance [] (Adware.Multiplug)
SUPPRIM� cl�*: HKCU\Software\Store [] (PUP.Optional)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass [Google Update Core Class] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1 [Google Update Core Class] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc [Google Update Legacy On Demand] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0 [Google Update Legacy On Demand] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc [GoogleUpdate Update3Web] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0 [GoogleUpdate Update3Web] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect [] (PUP.Fuyu)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\ArenaHD [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\HighDefAction [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\InstalledBrowserExtensions [] (PUP.BrowserExtensions)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\WebBar [] (PUP.WebBar)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\YorkNewCin [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\SafeGuard_RASAPI32 [] (PUP.SafeGuard)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\SafeGuard_RASMANCS [] (PUP.SafeGuard)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\globalupdate.exe [] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\ArenaHD [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Boost [] (PUP.Boost)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\CinemaPlus-3.4cV19.05 [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Conduit [] (PUP.Conduit)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\GAMESDESKTOP [] (Adware.GamesDesktop)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\GlobalUpdate [] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\HighDefAction [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\IHProtect [] (Adware.AgentODR)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Infonaut_1.10.0.14 [] (PUP.Infonaut)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions [] (PUP.BrowserExtensions)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\istartsurfSoftware [] (PUP.IsStart)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\SpeedBrowser [] (PUP.SpeedBrowser)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\SupDp [] (Adware.SupTab)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\supTab [] (Adware.SupTab)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect [] (PUP.Fuyu)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Tutorials [] (PUP.AgenceExclusive)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\YorkNewCin [] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_fr_571_is1 [GAMESDESKTOP] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP [] (Adware.IMBooster)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar [] (Adware.IMBooster)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Linkey [] (PUP.LinkeySearch)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartWeb [SoftBrain Technologies Ltd.] (PUP.SmartWebSearch)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage [] (Adware.Downware)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com [] (PUP.Vosteran)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance [] (Adware.Multiplug)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613} [] (Adware.Multiplug)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A} [C:\Program Files (x86)\globalUpdate\Update\1.3.25.0 (Not File)] (PUP.GlobalUpdate)
SUPPRIM� valeur: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_A4FBB820DBA7CF6023C4734B6902171A ["C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window] (PUP.Vosteran)
SUPPRIM� valeur: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\Update [C:\Users\matteo\AppData\Roaming\VOPackage\VOPackage.exe /runonce] (Adware.Downware)
SUPPRIM� valeur: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\upgmsd_fr_571.exe [C:\Users\matteo\AppData\Local\gmsd_fr_571\upgmsd_fr_571.exe -runonce] (Adware.CrossRider)
---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Mozilla Firefox)
~ Ce navigateur est absent (Opera Software)
~ Le syst�me a �t� red�marr�.
---\\ Statistiques
~ Items scann�s : 702
~ Items trouv�s : 0
~ Items annul�s : 0
~ Items r�par�s : 228
End of clean at 12:44:14
===================
ZHPCleaner-[R]-26052015-12_44_14.txt
ZHPCleaner-[S]-26052015-12_42_55.txt