~ ZHPCleaner v2016.12.24.222 by Nicolas Coolman (2016/12/24)
~ Run by Tahar (Administrator) (01/02/2017 23:00:55)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version :
~ Type : Scanner
~ Report : C:\Users\Tahar\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Tahar\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)


---\\ Service. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Navigateur internet. (2)
TROUVÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings [Bad : Port=50538 <-Loopback>] =>Hijacker.Proxy
TROUVÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings [Bad : Port=50538 <-Loopback>] =>Hijacker.Proxy


---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (21)


---\\ Tâche planifiée. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Explorateur ( Dossiers, Fichiers ). (42)
TROUVÉ fichier: C:\Users\Tahar\AppData\Roaming\IYAAOBBS.exe [Qwerty - TornPlusTV_version1.11 exe] =>PUP.Optional.Pirrit
TROUVÉ fichier: C:\Users\Tahar\AppData\Roaming\OPQHM.exe [Qwerty - TornPlusTV_version1.11 exe] =>PUP.Optional.Pirrit
TROUVÉ fichier: C:\Users\Tahar\AppData\Roaming\IYAAOBBS.exe [Qwerty - TornPlusTV_version1.11 exe] =>Adware.Suspect
TROUVÉ fichier: C:\Users\Tahar\AppData\Roaming\OPQHM.exe [Qwerty - TornPlusTV_version1.11 exe] =>Adware.Suspect
TROUVÉ fichier: C:\Users\Tahar\AppData\Roaming\IYAAOBBS.exe [Qwerty - TornPlusTV_version1.11 exe] =>Adware.GenericTask
TROUVÉ fichier: C:\Users\Tahar\AppData\Roaming\OPQHM.exe [Qwerty - TornPlusTV_version1.11 exe] =>Adware.GenericTask
TROUVÉ fichier: C:\Windows\Installer\wix{CEA21F20-DBF4-464C-8B81-28B8508AFDDD}.SchedServiceConfig.rmi =>.Superfluous.Empty
TROUVÉ fichier: C:\Windows\Installer\wix{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}.SchedServiceConfig.rmi =>.Superfluous.Empty
TROUVÉ fichier: C:\Users\Tahar\Downloads\DriverTool.exe [Driver Tool - This installer database contains the logic] =>.Superfluous.PCDriversHeadQuarters
TROUVÉ fichier: C:\Users\Tahar\Downloads\FLVPlayer-Chrome (1).exe =>PUP.Optional.FLVPlayer
TROUVÉ fichier: C:\Users\Tahar\Downloads\FLVPlayer-Chrome (2).exe =>PUP.Optional.FLVPlayer
TROUVÉ fichier: C:\Users\Tahar\Downloads\FLVPlayer-Chrome (3).exe =>PUP.Optional.FLVPlayer
TROUVÉ fichier: C:\Users\Tahar\Downloads\FLVPlayer-Chrome (4).exe =>PUP.Optional.FLVPlayer
TROUVÉ fichier: C:\Users\Tahar\Downloads\FLVPlayer-Chrome (5).exe =>PUP.Optional.FLVPlayer
TROUVÉ fichier: C:\Users\Tahar\Downloads\FLVPlayer-Chrome (6).exe =>PUP.Optional.FLVPlayer
TROUVÉ fichier: C:\Users\Tahar\Downloads\FLVPlayer-Chrome (7).exe =>PUP.Optional.FLVPlayer
TROUVÉ fichier: C:\Users\Tahar\Downloads\FLVPlayer-Chrome.exe =>PUP.Optional.FLVPlayer
TROUVÉ fichier: C:\Users\Tahar\Downloads\pcmechanicpm.exe [Uniblue Systems Limited - PC Mechanic Setup] =>.Superfluous.SpeedUpMyPC
TROUVÉ fichier: C:\Users\Tahar\Downloads\ReimageRepair (1).exe [Reimage® - Reimage Downloader] =>.Superfluous.ReimageRepair
TROUVÉ fichier: C:\Users\Tahar\Downloads\setup (14).exe [Uniblue Systems Limited - SpeedUpMyPC Setup] =>.Superfluous.SpeedUpMyPC
TROUVÉ fichier: C:\Users\Tahar\Downloads\speedupmypc.exe [Uniblue Systems Limited - SpeedUpMyPC Setup] =>.Superfluous.SpeedUpMyPC
TROUVÉ fichier: C:\Users\Tahar\Downloads\tupp25044.exe [tuneuppro.com - Tuneup Pro] =>.Superfluous.Systweak
TROUVÉ fichier: C:\Users\Tahar\Downloads\pcmechanicpm.exe [Uniblue Systems Limited - PC Mechanic Setup] =>.Superfluous.Uniblue
TROUVÉ fichier: C:\Users\Tahar\Downloads\setup (14).exe [Uniblue Systems Limited - SpeedUpMyPC Setup] =>.Superfluous.Uniblue
TROUVÉ fichier: C:\Users\Tahar\Downloads\speedupmypc.exe [Uniblue Systems Limited - SpeedUpMyPC Setup] =>.Superfluous.Uniblue
TROUVÉ dossier: C:\Windows\System32\config\systemprofile\AppData\Roaming\{90140011-0066-040C-0000-0000000FF1CE} =>Heuristic.Suspect
TROUVÉ dossier: C:\Users\Tahar\AppData\Roaming\PriceFountainUpdateVer\UpdateProc =>PUP.Optional.PriceFountain
TROUVÉ dossier: C:\Users\Tahar\AppData\Roaming\HMYGSetting =>Adware.Suspect
TROUVÉ dossier: C:\Users\Tahar\AppData\Roaming\PriceFountainUpdateVer =>PUP.Optional.PriceFountain
TROUVÉ dossier: C:\Users\Tahar\AppData\Local\{05AD1682-9103-4FE5-8BA7-C646FCCFD9F0} =>.Superfluous.Empty
TROUVÉ dossier: C:\Users\Tahar\AppData\Local\{1B8EADC7-229B-435F-BD48-B6779DB4B92E} =>.Superfluous.Empty
TROUVÉ dossier: C:\Users\Tahar\AppData\Local\{42F1CFCE-A1B8-487C-96E2-5AE40616AA06} =>.Superfluous.Empty
TROUVÉ dossier: C:\Users\Tahar\AppData\Local\{5B37A5D1-0699-456C-A567-E3F5F692D739} =>.Superfluous.Empty
TROUVÉ dossier: C:\Users\Tahar\AppData\Local\{5DFE1190-518E-4E40-B0AA-8944929AF7A8} =>.Superfluous.Empty
TROUVÉ dossier: C:\Users\Tahar\AppData\Local\{6F5C970D-CC49-464B-A9A6-68F675432045} =>.Superfluous.Empty
TROUVÉ dossier: C:\Users\Tahar\AppData\Local\{88C3512B-1007-4927-9458-163D7C898ADF} =>.Superfluous.Empty
TROUVÉ dossier: C:\Users\Tahar\AppData\Local\{AA493161-97FC-4A25-83CE-89014D4093E4} =>.Superfluous.Empty
TROUVÉ dossier: C:\Users\Tahar\AppData\Local\{AA708F22-534F-42F8-9C52-57B8A44986E4} =>.Superfluous.Empty
TROUVÉ dossier: C:\Users\Tahar\AppData\Local\{B366B901-6299-456E-8629-64CC4DB3E5F3} =>.Superfluous.Empty
TROUVÉ dossier: C:\Users\Tahar\AppData\Local\{C81531B0-8158-4E17-BAD4-801868363803} =>.Superfluous.Empty
TROUVÉ dossier: C:\Users\Tahar\AppData\Local\{E1F987F6-019C-40C7-AD0B-D328438E8CB1} =>.Superfluous.Empty
TROUVÉ dossier: C:\Users\Tahar\AppData\Local\{ED2B1ED9-9A8A-4BBD-B660-8FE7826D749E} =>.Superfluous.Empty


---\\ Base de Registres ( Clés, Valeurs, Données ). (27)
TROUVÉ valeur: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\fst_fr_280 [] =>PUP.Optional.FreeSoftToday
TROUVÉ clé: HKEY_USERS\S-1-5-21-1786971838-499516532-3462231648-1000\SOFTWARE\Ad-Aware Search Protection [] =>.Superfluous.Spigot
TROUVÉ clé: HKCU\Software\Ad-Aware Search Protection [] =>.Superfluous.Spigot
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1274060-FFD6-4007-9A1C-43D7CDA7D0B4} [C:\Program Files (x86)\The weDownload Manager (Not File)] =>PUP.Optional.weDownloadManager
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{54EED858-490E-495F-ABE2-7EDF6D4DD43} [C:\Program Files (x86)\Browsers Apps (Not File)] =>PUP.Optional.CrossRider
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6CA0CFDB-3AF3-42C4-AEF0-5ABA7855D416} [C:\Program Files (x86)\The weDownload Manager (Not File)] =>PUP.Optional.weDownloadManager
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86003A59-5119-4A59-812B-D22D92C6E3A} [C:\Program Files (x86)\The weDownload Manager (Not File)] =>PUP.Optional.weDownloadManager
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8D96231F-D72C-431F-94A8-13525A63E4B} [C:\Program Files (x86)\Browsers Apps (Not File)] =>PUP.Optional.CrossRider
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D9659164-AD83-42FF-B0B4-95C055D916CE} [C:\Program Files (x86)\The weDownload Manager (Not File)] =>PUP.Optional.weDownloadManager
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBE13E7F-3085-4652-87BA-52C24A4D18E9} [C:\Program Files (x86)\Browsers Apps (Not File)] =>PUP.Optional.CrossRider
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7C75391-4452-4792-885B-32FB8B8A5834} [C:\Program Files (x86)\Browsers Apps (Not File)] =>PUP.Optional.CrossRider
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E81E00EA-E8F4-4127-8780-3D7DB355E5EC} [C:\Program Files (x86)\Browsers Apps (Not File)] =>PUP.Optional.CrossRider
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E9BA1338-A629-49B4-A6B7-1C117BA0725} [C:\Program Files (x86)\Browsers Apps (Not File)] =>PUP.Optional.CrossRider
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EA3383CC-7051-4241-90E8-DEBFBC601C4C} [C:\Program Files (x86)\Browsers Apps (Not File)] =>PUP.Optional.CrossRider
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F0D8BF53-718D-427E-85CC-84F6442B3666} [C:\Program Files (x86)\Browsers Apps (Not File)] =>PUP.Optional.CrossRider
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akamaihd.net [] =>.Superfluous.AkamaiHD
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cdncache-a.akamaihd.net [259] =>.Superfluous.AkamaiHD
TROUVÉ clé: HKCU\Software\undefined [] =>.Superfluous.Downloader
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\f [f] =>PUP.Optional.Funmoods
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\CLSID\{58C0B8BC-3F11-AC45-2497-EE40E56476E2} [CostMin] =>PUP.Optional.CostMin
TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Driver Detective [] =>PUP.Optional.DriverDetective
TROUVÉ donnée: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{50C978F0-DC4C-46D2-A3D0-212B832133F2}\\DhcpNameServer [Bad : 82.163.143.157] =>PUP.Optional.DNSUnlocker
TROUVÉ donnée: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\\NameServer [Bad : 82.163.143.157 82.163.142.159] =>PUP.Optional.DNSUnlocker
TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 [] =>.Superfluous.ByteFence
TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS [] =>.Superfluous.ByteFence
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Google Inc.] =>Heuristic.Suspect
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ba20b5da-0f48-40c5-b8c9-2cda4ecf75c2} [C:\Program Files (x86)\Toolbar Cleaner (Not File)] =>PUP.Optional.ToolbarCleaner


---\\ Récapitulatif des éléments trouvés sur votre station. (25)
https://www.anti-malware.top/2016/06/09/pirate-de-serveur-proxy-hijacker-proxy/ =>Hijacker.Proxy
https://www.nicolascoolman.com/fr/pup-pirritsuggestor/ =>PUP.Optional.Pirrit
https://www.anti-malware.top/2016/05/01/definition-dun-logiciel-pup-lpi/ =>Adware.Suspect
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>Adware.GenericTask
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Empty
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.PCDriversHeadQuarters
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.FLVPlayer
https://www.anti-malware.top/2016/08/15/speedupmypc/ =>.Superfluous.SpeedUpMyPC
https://www.anti-malware.top/2016/08/06/superfluous-reimagerepair/ =>.Superfluous.ReimageRepair
https://www.nicolascoolman.com/fr/pup-systweak/ =>.Superfluous.Systweak
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Uniblue
https://www.anti-malware.top/2016/04/22/heuristic-suspect/ =>Heuristic.Suspect
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.PriceFountain
https://www.nicolascoolman.com/fr/adware-freesofttoday/ =>PUP.Optional.FreeSoftToday
https://www.anti-malware.top/2016/05/08/superfluous-spigot/ =>.Superfluous.Spigot
https://www.nicolascoolman.com/fr/pup-wedownloadmanager/ =>PUP.Optional.weDownloadManager
https://www.anti-malware.top/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.AkamaiHD
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Downloader
https://www.nicolascoolman.com/fr/pup-funmoods/ =>PUP.Optional.Funmoods
https://www.nicolascoolman.com/fr/pup-costmin/ =>PUP.Optional.CostMin
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.DriverDetective
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.DNSUnlocker
https://www.anti-malware.top/2016/04/29/superfluous-bytefence/ =>.Superfluous.ByteFence
https://www.nicolascoolman.com/fr/pup-toolbarcleaner/ =>PUP.Optional.ToolbarCleaner


---\\ Bilan de la réparation
~ Aucune réparation effectuée.
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scannés : 68407
~ Items trouvés : 74
~ Items annulés : 0
~ Items réparés : 0


~ End of search in 00h05mn41s
~====================
ZHPCleaner-[S]-01022017-22_57_13.txt
ZHPCleaner-[S]-01022017-23_06_36.txt