~ ZHPCleaner v2015.8.9.319 by Nicolas Coolman (2015/08/09)
~ Run by User (Administrator) (10/08/2015 15:14:17)
~ Site : http://www.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Users\User\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\User\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
WindowsVISTA, 64-bit Service Pack 2 (Build 6002)


---\\ Service. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Navigateur internet. (51)
SUPPRIMÉ Firefox: [ouo3ffw3.default] user_pref( extensions.toolbar.mindspark._dqMembers_.browser.startup.homepage.tb , hxxp://home.tb.as[...] =>Toolbar.Ask
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine"); =>PUP.Optional.SearchEngine
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("browser.search.searchengine.ptid", "tugs"); =>PUP.Optional.SearchEngine
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("browser.search.searchengine.uid", "SAMSUNGXHD642JJ_S1GWJ1BQB11553"); =>PUP.Optional.SearchEngine
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\"[...] =>PUP.Optional.BProtector
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.mywebsearch.prevKwdEnabled", true); =>PUP.Optional.MyWebSearch
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.BUTTON_STRUCTURE", "[{\"b\":224510880,\"c\":\"mi[...] =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.browser.search.defaultenginename.prev", "Google"[...] =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.browser.search.defaultenginename.savedPrev", "tr[...] =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.browser.search.defaultenginename.tb", "Ask Web S[...] =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.browser.search.selectedEngine.prev", "Google"); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.browser.search.selectedEngine.savedPrev", "true"[...] =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.browser.search.selectedEngine.tb", "Ask Web Sear[...] =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.browser.startup.homepage.savedPrev", "true"); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.browser.startup.page.savedPrev", 1); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.browser.startup.page.tb", 1); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.browser.version.last", "39.0"); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.competitorDNS", "{\"comment\":\"refresh every 1 [...] =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.firstKnownVersion", "7.18.7.63935"); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.homepage", "http://home.tb.ask.com/index.jhtml?p[...] =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.hp.enabled", false); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.hp.guardType", "HPR"); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.hp.user.defined", false); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.initialized", true); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.installKeysSource", "LocalStorage"); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.installType", "XPI"); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.installation.contextKey", ""); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.installation.dlpCountryCode", "FR"); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.installation.installDate", "2015073106"); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.installation.partnerId", "^BXM^xdm115^YYA^fr"); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.installation.partnerSubId", ""); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.installation.pixelUrl", "http://www.downspeedtes[...] =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.installation.success", true); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.installation.toolbarId", "EB65CEAE-E339-474B-A50[...] =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.isCompliantUninstallImplementation", true); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.lastActivePing", "1438318498649"); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.lastKnownVersion", "7.18.7.63935"); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.options.defaultSearch", true); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.options.homePageEnabled", true); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.options.keywordEnabled", true); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.options.tabEnabled", true); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.partnerPixelFired", true); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.successUrl", "http://www.downspeedtest.com/insta[...] =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.toolbar.ownSearch", true); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark._dqMembers_.toolbarCollapsed", false); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark.hp.enabled", false); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark.hp.enabled.guid", ""); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("extensions.toolbar.mindspark.lastInstalled", "downspeedtest@mindspark.com"); =>PUP.Optional.Bandoo
SUPPRIMÉ: [ouo3ffw3.default] - user_pref("keyword.URL", "http://int.search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=EB65CEAE-E339-[...] =>Toolbar.Ask
SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings [Bad : Port=51545 <-Loopback>] =>PUP.Optional.Proxy
SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings [Bad : Port=51545 <-Loopback>] =>PUP.Optional.Proxy


---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (20)


---\\ Tâche planifiée. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Explorateur ( Dossiers, Fichiers ). (33)
DEPLACÉ fichier: C:\Users\User\AppData\Local\5D7A6375-F022-4DD5-B44B-DFC053F27D\5D7A6375-F022-4DD5-B44B-DFC053F27D.exe =>Adware¨Pirrit
DEPLACÉ fichier: C:\Windows\Prefetch\PC-MECHANIC.EXE-FBCF6CAC.pf =>PUP.Optional.Uniblue
DEPLACÉ fichier: C:\Users\User\Downloads\FLVPlayer-Chrome (5).exe =>PUP.Optional.FLVPlayer
DEPLACÉ fichier: C:\Users\User\Downloads\FLVPlayer-Chrome.exe =>PUP.Optional.FLVPlayer
DEPLACÉ fichier: C:\Users\User\AppData\Roaming\desktop.ini =>Suspect.Random
DEPLACÉ fichier: C:\Users\User\AppData\Local\Temp\is-T4ARB.tmp\pm-standalone-setup.exe [Uniblue Systems Limited - PC Mechanic Setup] =>PUP.Optional.Uniblue
DEPLACÉ fichier: C:\Users\User\AppData\Local\Temp\is-3N5S8.tmp\pm-standalone-setup.exe [Uniblue Systems Limited - PC Mechanic Setup] =>PUP.Optional.Uniblue
DEPLACÉ fichier: C:\Users\User\AppData\Local\Temp\486f0e1d-2397-4af9-b024-13fde3ba15bb\bc.exe [The Software Group - Software Update Setup] =>PUP.Optional.Boxore
DEPLACÉ fichier: C:\Users\User\AppData\Local\d3d9caps64.dat =>Suspect.Optional
DEPLACÉ fichier: C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini =>Suspect.Optional
DEPLACÉ fichier: C:\Users\User\AppData\Local\dd_depcheck_NETFX_EXP_35.txt =>Suspect.Optional
DEPLACÉ fichier: C:\Users\User\AppData\Local\dd_dotnetfx35error.txt =>Suspect.Optional
DEPLACÉ fichier: C:\Users\User\AppData\Local\dd_dotnetfx35error_lp.txt =>Suspect.Optional
DEPLACÉ fichier: C:\Users\User\AppData\Local\dd_dotnetfx35install.txt =>Suspect.Optional
DEPLACÉ fichier: C:\Users\User\AppData\Local\dd_dotnetfx35install_lp.txt =>Suspect.Optional
DEPLACÉ fichier: C:\Users\User\AppData\Local\dd_vcredistUI652D.txt =>Suspect.Optional
DEPLACÉ fichier: C:\Users\User\AppData\Local\desktop.ini =>Suspect.Optional
DEPLACÉ fichier: C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT =>Suspect.Optional
DEPLACÉ fichier: C:\Users\User\AppData\Local\setup.log =>Suspect.Optional
DEPLACÉ fichier: C:\Users\User\AppData\Local\uxeventlog.txt =>Suspect.Optional
DEPLACÉ fichier: C:\Users\User\AppData\Local\Temp\645f75ae-2af4-40ee-a048-4fcc972d1f28\bundle_flowsurfcb.exe =>PUP.Optional.FlowSurf
DEPLACÉ fichier: C:\Users\User\AppData\Local\Temp\7385ef43-9735-40a0-a4c1-355c57ea8ea8\maxdrivrupdater.exe =>PUP.Optional.MaxDriverUpdater
DEPLACÉ fichier: C:\Users\User\AppData\Local\Temp\97e830b2-53ca-4e66-aeaf-148a8b602872\5555-1007_checkmeup.exe [Copyright (c) 2015 - Designed for Windows] =>PUP.Optional.CheckMeUp
DEPLACÉ fichier: C:\Users\User\AppData\Local\Temp\c0f936bb-2ae1-440e-89ff-40cd38f64b37\lly_istartsurf.exe [Software Removal tool - Software Removal tool] =>PUP.Optional.IsStart
DEPLACÉ fichier: C:\Users\User\AppData\Local\Temp\f47e5fb0-4c1b-4da7-8d94-4646b98d0066\mixvideoplayersetup.exe =>PUP.Optional.MixVideoPlayer
DEPLACÉ dossier: C:\Users\User\AppData\Local\5D7A6375-F022-4DD5-B44B-DFC053F27D =>Adware¨Pirrit
DEPLACÉ dossier: C:\Users\User\AppData\Local\Temp\645f75ae-2af4-40ee-a048-4fcc972d1f28 =>PUP.Optional.FlowSurf
DEPLACÉ dossier: C:\Users\User\AppData\Local\Temp\7385ef43-9735-40a0-a4c1-355c57ea8ea8 =>PUP.Optional.MaxDriverUpdater
DEPLACÉ dossier: C:\Users\User\AppData\Local\Temp\97e830b2-53ca-4e66-aeaf-148a8b602872 =>PUP.Optional.CheckMeUp
DEPLACÉ dossier: C:\Users\User\AppData\Local\Temp\c0f936bb-2ae1-440e-89ff-40cd38f64b37 =>PUP.Optional.IsStart
DEPLACÉ dossier: C:\Users\User\AppData\Local\Temp\f47e5fb0-4c1b-4da7-8d94-4646b98d0066 =>PUP.Optional.MixVideoPlayer
DEPLACÉ dossier: C:\Program Files (x86)\Software =>PUP.Optional.Boxore
DEPLACÉ dossier: C:\Users\User\AppData\Local\Software =>PUP.Optional.Boxore


---\\ Base de Registres ( Clés, Valeurs, Données ). (5)
SUPPRIMÉ clé*: HKCU\Software\MediaPlayerVid2.4-nv-ie [] =>PUP.Optional.CrossRider
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1261353385-1350163109-4255820148-1000\Software\ForumerIT [] =>Toolbar.Forumer
SUPPRIMÉ clé: HKEY_USERS\S-1-5-21-1261353385-1350163109-4255820148-1000\Software\MediaPlayerVid2.4-nv-ie [] =>PUP.Optional.CrossRider
SUPPRIMÉ clé: HKCU\Software\ForumerIT [] =>Toolbar.Forumer
SUPPRIMÉ clé*: HKLM\SOFTWARE\Wow6432Node\Policies\Google\Update [] =>PUM.Security.Hijack


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.


---\\ Statistiques
~ Items scannés : 1739
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 89


~ End of clean in 0 minutes
===================
ZHPCleaner-[R]-10082015-15_14_44.txt
ZHPCleaner-[S]-10082015-15_13_52.txt