~ ZHPCleaner v2015.5.27.258 by Nicolas Coolman (2015\05\27)
~ Run by JessyCh (Administrator) (28/05/2015 14:34:51)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Netttoyer
~ Report : C:\Users\JessyCh\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\JessyCh\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 81, 64-bit (Build 9600)


---\\ Service. (3)
ARRET� : kigopepi (Heuristic.Salus)
ARRET� : pomonuhi (Heuristic.Salus)
ARRET� : zivutuci (Heuristic.Salus)


---\\ Navigateur internet. (5)
SUPPRIM�: [x6z1nxds.default] - user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\"[...] (PUP.LinkeySearch)
SUPPRIM�: [x6z1nxds.default] - user_pref("extensions.a973ba634716b4639a1c150b40c5afc24a09e55466bb60878000com72897.72897.internaldb.[...] (PUP.Monetization)
SUPPRIM�: [x6z1nxds.default] - user_pref("extensions.a973ba634716b4639a1c150b40c5afc24a09e55466bb60878000com72897.72897.name", "Cin[...] (Adware.CrossRider)
SUPPRIM�: [x6z1nxds.default] - user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.moneti[...] (PUP.Monetization)
SUPPRIM�: [x6z1nxds.default] - user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.name", "CinemaPlu[...] (Adware.CrossRider)


---\\ Fichier h�te. (1)
~ Le fichier h�te est l�gitime. (21)


---\\ T�che planifi�e. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ Explorateur ( Dossiers, Fichiers ). (20)
DEPLAC� fichier: C:\Users\JessyCh\AppData\Roaming\00000011-1432676580-0000-0000-10C37BB6C1D3\nsm5763.tmp (Heuristic.Salus)
DEPLAC� fichier: C:\Users\JessyCh\AppData\Roaming\00000011-1432676580-0000-0000-10C37BB6C1D3\hnsqEB5F.tmp (Heuristic.Salus)
DEPLAC� fichier: C:\Users\JessyCh\AppData\Roaming\00000011-1432676580-0000-0000-10C37BB6C1D3\jnsaD0FF.tmp (Heuristic.Salus)
DEPLAC� fichier: C:\Windows\Prefetch\PREDM.TMP-3D425134.pf (Adware.Downware)
DEPLAC� fichier: C:\Windows\System32\Drivers\{848705a5-8a27-403e-9b59-732d0608bcbc}Gw64.sys [StdLib - StdLib] (PUP.LinkiDoo)
DEPLAC� fichier: C:\Windows\Installer\4879377b.msi [APN, LLC - Ask.com � - Install Builder] (Adware.Bandoo)
DEPLAC� fichier: C:\ProgramData\SetStretch.exe (Suspect.Optional)
DEPLAC� fichier: C:\Windows\Installer\{4F524A2D-5350-4500-76A7-A758B70C1C01}\ToolbarIcon.exe (PUP.BrowserTabSearch)
DEPLAC� dossier: C:\Users\JessyCh\AppData\Roaming\00000011-1432676580-0000-0000-10C37BB6C1D3 (Heuristic.Salus)
DEPLAC� dossier: C:\Program Files (x86)\1b55f14c-e369-45fe-a152-4eb0c6c7954e (Adware.CrossRider)
DEPLAC� dossier: C:\Program Files (x86)\8eb6b49d-3c54-4bc8-9a37-e9d20ec0bba8 (Adware.CrossRider)
DEPLAC� dossier: C:\Program Files (x86)\Edu App (PUP.Optional)
DEPLAC� dossier: C:\Program Files (x86)\mbot_fr_634 (Adware.CrossRider)
DEPLAC� dossier: C:\Program Files (x86)\predm (Adware.Downware)
DEPLAC� dossier: C:\Program Files (x86)\Steel Cut (Adware.Sambreel)
DEPLAC� dossier: C:\ProgramData\LizardSales (PUP.LizardSales)
DEPLAC� dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2 (PUP.OptimizerPro)
DEPLAC� dossier: C:\Users\JessyCh\AppData\Roaming\Optimizer Pro (PUP.OptimizerPro)
DEPLAC� dossier: C:\Users\JessyCh\Documents\Optimizer Pro (PUP.OptimizerPro)
DEPLAC� dossier: C:\Program Files (x86)\Software (Adware.Boxore)


---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (21)
SUPPRIM� cl�*: HKLM\SYSTEM\CurrentControlSet\Services\kigopepi [C:\Users\JessyCh\AppData\Roaming\00000011-1432676580-0000-0000-10C37BB6C1D3\nsm5763.tmp (Not File)] (Heuristic.Salus)
SUPPRIM� cl�*: HKLM\SYSTEM\CurrentControlSet\Services\pomonuhi [C:\Users\JessyCh\AppData\Roaming\00000011-1432676580-0000-0000-10C37BB6C1D3\hnsqEB5F.tmp (Not File)] (Heuristic.Salus)
SUPPRIM� cl�*: HKLM\SYSTEM\CurrentControlSet\Services\zivutuci [C:\Users\JessyCh\AppData\Roaming\00000011-1432676580-0000-0000-10C37BB6C1D3\jnsaD0FF.tmp (Not File)] (Heuristic.Salus)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\Crossbrowse [] (PUP.CrossBrowse)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassSvc [Google Update Legacy On Demand] (Adware.Boxore)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassSvc.1.0 [Google Update Legacy On Demand] (Adware.Boxore)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebSvc [SoftwareUpdate Update3Web] (Adware.Boxore)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebSvc.1.0 [SoftwareUpdate Update3Web] (Adware.Boxore)
SUPPRIM� cl�*: [X64] HKLM\Software\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E [globalupdate Helper] (PUP.GlobalUpdate)
SUPPRIM� cl�*: [X64] HKLM\Software\Classes\Installer\Products\D2A425F405350054677A7A857BC0C110 [Search App by Ask] (PUP.BrowserTabSearch)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\028BBEF6A9C7E514DBD346613B4DC0C8 [C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ (Not File)] (Toolbar.Ask)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0A5AC497E6BBC8D45BE8AD6619DA8217 [C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr_x64.exe (Not File)] (Toolbar.Ask)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\SuperClick_1.10.0.16 [] (PUP.SuperClick)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Tutorials [] (PUP.AgenceExclusive)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C1C01} [APN, LLC] (Adware.Bandoo)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{582876EC-A178-44D4-9823-C10D6C62EAFF} [] (Adware.Bandoo)
SUPPRIM� cl�*: [X64] HKLM\Software\Classes\Installer\Features\D2A425F405350054677A7A857BC0C110 [] (PUP.BrowserTabSearch)
SUPPRIM� valeur: HKLM64\Software\Classes\.shtml\OpenWithProgIDs\\CRSBRWSHTML [] (PUP.CrossBrowse)
SUPPRIM� valeur: HKLM64\Software\Classes\.webp\OpenWithProgIDs\\CRSBRWSHTML [] (PUP.CrossBrowse)
SUPPRIM� valeur: HKLM64\Software\Classes\.xht\OpenWithProgIDs\\CRSBRWSHTML [] (PUP.CrossBrowse)
SUPPRIM� valeur: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\gmsd_fr_579 [] (Adware.CrossRider)


---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scann�s : 9357
~ Items trouv�s : 0
~ Items annul�s : 0
~ Items r�par�s : 61


End of clean at 14:35:44
===================
ZHPCleaner-[R]-28052015-14_35_44.txt
ZHPCleaner-[S]-27052015-20_14_00.txt
ZHPCleaner-[S]-28052015-14_34_05.txt