~ ZHPCleaner v2015.5.28.261 by Nicolas Coolman (2015\05\28)
~ Run by Geoffrey (Administrator) (29/05/2015 16:11:42)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Pas de fichier r�seau
~ Type : Netttoyer
~ Report : C:\Users\Geoffrey\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Geoffrey\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 81, 64-bit (Build 9600)


---\\ Service. (1)
ARRET� : WtuSystemSupport (Toolbar.AVGSafeGuard)


---\\ Navigateur internet. (4)
SUPPRIM�: [9uyn9cpc.default] - user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{2D3F3651-74B9-[...] (PUP.MySearchDial)
SUPPRIM� donn�e: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyHttp1.1 [Bad : 1] (Hijacker.Proxy)
SUPPRIM� donn�e: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride [Bad : ] (Hijacker.Proxy)
SUPPRIM� donn�e: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride [Bad : <-loopback>] (Hijacker.Proxy)


---\\ Fichier h�te. (1)
~ Le fichier h�te est l�gitime. (21)


---\\ T�che planifi�e. (2)
SUPPRIM� t�che: [AutoKMS] [C:\WINDOWS\AutoKMS\AutoKMS.exe (Not File) ] (HackTool.AutoKMS)
SUPPRIM� t�che: [KMSpico Updater] [C:\WINDOWS\system32\wscript.exe] (PUA.KMSpico)


---\\ Explorateur ( Dossiers, Fichiers ). (20)
DEPLAC� fichier: C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe (Toolbar.AVGSafeGuard)
DEPLAC� fichier: C:\WINDOWS\AutoKMS\AutoKMS.exe [CODYQX4 - AutoKMS] (HackTool.AutoKMS)
DEPLAC� fichier: C:\WINDOWS\Tasks\KMSpico Updater.job (PUA.KMSpico)
DEPLAC� fichier: C:\WINDOWS\Prefetch\AVG WEB TUNEUP-0E5A15ED.pf (Toolbar.AVGSafeGuard)
DEPLAC� fichier: C:\WINDOWS\Prefetch\BUBBLE DOCK.EXE-F6E2C1D9.pf (PUP.BubbleDock)
DEPLAC� fichier: C:\WINDOWS\Prefetch\SIGNUP WIZARD.EXE-9554BD21.pf (PUP.MyPCBackup)
DEPLAC� fichier: C:\ProgramData\MakeMarkerFile.exe [Samsung Electronics - Samsung Marker] (Suspect.Optional)
DEPLAC� fichier: C:\Users\Geoffrey\Downloads\feuille de notation.pdf (Hijacker.Proxy)
DEPLAC� fichier: C:\WINDOWS\SECOH-QAD.exe (PUA.KMSpico)
DEPLAC� fichier: C:\WINDOWS\AutoKMS\AutoKMS.log (HackTool.AutoKMS)
DEPLAC� dossier: C:\Program Files (x86)\AVG Web TuneUp (Toolbar.AVGSafeGuard)
DEPLAC� dossier: C:\Program Files (x86)\KMSpico Updater (PUA.KMSpico)
DEPLAC� dossier*: C:\Program Files\AVG Web TuneUp (Toolbar.AVGSafeGuard)
DEPLAC� dossier: C:\Program Files\KMSpico (PUA.KMSpico)
DEPLAC� dossier*: C:\ProgramData\AVG Web TuneUp (Toolbar.AVGSafeGuard)
DEPLAC� dossier: C:\WINDOWS\AutoKMS (HackTool.AutoKMS)
DEPLAC� dossier*: C:\Users\Geoffrey\AppData\LocalLow\AVG Web TuneUp (Toolbar.AVGSafeGuard)
DEPLAC� dossier*: C:\Users\Geoffrey\AppData\Local\AVG Web TuneUp (Toolbar.AVGSafeGuard)
DEPLAC� dossier: C:\Program Files (x86)\Software (Adware.Boxore)
DEPLAC� dossier: C:\Users\Geoffrey\AppData\Local\Software (Adware.Boxore)


---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (22)
SUPPRIM� donn�e: HKCR\AutoCADScriptFile\Shell\Open\Command\\Default [Bad : [scr] ] (Broken.OpenCommand)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422392206} [CrossriderApp0043906.Sandbox] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455395506} [ICrossriderBHO] (Adware.CrossRider)
SUPPRIM� cl�*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\WtuSystemSupport [C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe (Not File)] (Toolbar.AVGSafeGuard)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2710196674-1561009495-2148570843-1002\Software\AVG Web TuneUp [] (Toolbar.AVGSafeGuard)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2710196674-1561009495-2148570843-1002\Software\Classes\.7z [PepperZip] (PUP.PepperZip)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2710196674-1561009495-2148570843-1002\Software\Classes\.bubbledock [bubbledock] (PUP.BubbleDock)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2710196674-1561009495-2148570843-1002\Software\Classes\.rar [PepperZip] (PUP.PepperZip)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2710196674-1561009495-2148570843-1002\Software\Classes\.zip [PepperZip] (PUP.PepperZip)
SUPPRIM� cl�*: HKEY_USERS\S-1-5-21-2710196674-1561009495-2148570843-1002\Software\Classes\bubbledock [Bubble Dock add-in] (PUP.BubbleDock)
SUPPRIM� cl�: HKCU\Software\AVG Web TuneUp [] (Toolbar.AVGSafeGuard)
SUPPRIM� cl�*: HKCU\Software\AppDataLow\Software\LyricsSay-15 [] (Adware.CrossRider)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_12032227 [Lollipop Network, S.L.] (Adware.Lollipop)
SUPPRIM� cl�*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PhotoFiltre [PhotoFiltre] (Adware.Lollipop)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj [AVG Web TuneUp] (Toolbar.AVGSafeGuard)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj.1 [AVG Web TuneUp] (Toolbar.AVGSafeGuard)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A} [C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.4.0 (Not File)] (Toolbar.AVGSearch)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\AVG Web TuneUp [] (Toolbar.AVGSafeGuard)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\ErrorLists-crcodedownloader [] (PUP.SoftwareEngine)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\KMSpico [] (PUA.KMSpico)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Web TuneUp [AVG Technologies] (Toolbar.AVGSafeGuard)
SUPPRIM� cl�*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A} [C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.4.0 (Not File)] (Toolbar.AVGSearch)


---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Google Chrome)
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scann�s : 1162
~ Items trouv�s : 0
~ Items annul�s : 0
~ Items r�par�s : 49


End of clean at 16:12:14
===================
ZHPCleaner-[R]-29052015-16_12_14.txt
ZHPCleaner-[S]-29052015-16_11_26.txt