cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPCleaner v2017.7.17.123 by Nicolas Coolman (2017/07/17)
~ Run by TBATY (Administrator) (12/08/2017 16:16:16)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Illegal
~ Type : Scanner
~ Report : C:\Users\TBATY\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\TBATY\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Professional, 64-bit Service Pack 1 (Build 7601)


---\\ Service. (1)
[R] TROUVÉ : Update service =>.Superfluous.PopcornTime


---\\ Navigateur internet. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (21)


---\\ Tâche planifiée. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Explorateur ( Dossiers, Fichiers ). (10)
TROUVÉ fichier: C:\Program Files (x86)\Popcorn Time\Updater.exe [Popcorn Time - Updater] =>.Superfluous.PopcornTime
TROUVÉ fichier: C:\Users\TBATY\Desktop\cacaoweb.exe =>.Superfluous.CacaoWeb
TROUVÉ fichier: C:\Users\TBATY\Downloads\cacaoweb.exe =>.Superfluous.CacaoWeb
TROUVÉ fichier: C:\Documents and Settings\Administrateur\Desktop\cacaoweb.exe =>.Superfluous.CacaoWeb
TROUVÉ fichier: C:\Documents and Settings\Administrateur\Downloads\cacaoweb(1).exe =>.Superfluous.CacaoWeb
TROUVÉ fichier: C:\Documents and Settings\Administrateur\Downloads\cacaoweb.exe =>.Superfluous.CacaoWeb
TROUVÉ fichier: C:\Program Files (x86)\Popcorn Time\init.txt =>.Superfluous.PopcornTime
TROUVÉ dossier: C:\Program Files (x86)\Popcorn Time =>.Superfluous.PopcornTime
TROUVÉ dossier: C:\Users\TBATY\AppData\Local\PopcornTimeDesktop\.cache =>.Superfluous.PopcornTime
TROUVÉ dossier: C:\Users\TBATY\AppData\Local\PopcornTimeDesktop =>.Superfluous.PopcornTime


---\\ Base de Registres ( Clés, Valeurs, Données ). (43)
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\1916A2AF346D399F50313C393200F14140456616 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\2A83E9020591A55FC6DDAD3FB102794C52B24E70 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\2B84BFBB34EE2EF949FE1CBE30AA026416EB2216 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\305F8BD17AA2CBC483A4C41B19A39A0C75DA39D6 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\367D4B3B4FCBBC0B767B2EC0CDB2A36EAB71A4EB [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3A850044D8A195CD401A680C012CB0A3B5F8DC08 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\40AA38731BD189F9CDB5B9DC35E2136F38777AF4 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\43D9BCB568E039D073A74A71D8511F7476089CC3 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\471C949A8143DB5AD5CDF1C972864A2504FA23C9 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\51C3247D60F356C7CA3BAF4C3F429DAC93EE7B74 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\5DE83EE82AC5090AEA9D6AC4E7A6E213F946E179 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\61793FCBFA4F9008309BBA5FF12D2CB29CD4151A [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\63FEAE960BAA91E343CE2BD8B71798C76BDB77D0 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\6431723036FD26DEA502792FA595922493030F97 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\80962AE4D6C5B442894E95A13E4A699E07D694CF [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\86E817C81A5CA672FE000F36F878C19518D6F844 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\8E5BD50D6AE686D65252F843A9D4B96D197730AB [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9845A431D51959CAF225322B4A4FE9F223CE6D15 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\B533345D06F64516403C00DA03187D3BFEF59156 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\B86E791620F759F17B8D25E38CA8BE32E7D5EAC2 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\C060ED44CBD881BD0EF86C0BA287DDCF8167478C [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\CEA586B2CE593EC7D939898337C57814708AB2BE [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\D018B62DC518907247DF50925BB09ACF4A5CB3AD [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\F8A54E03AADC5692B850496A4C4630FFEAA29D83 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\FA6660A94AB45F6A88C0D7874D89A863D74DEE97 [Avast Software] =>PUM.Misplaced.Certificate
TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\Update service [C:\Program Files (x86)\Popcorn Time\Updater.exe](.Popcorn Time.) =>.Superfluous.PopcornTime
TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\Update service [C:\Program Files (x86)\Popcorn Time\Updater.exe] =>.Superfluous.PopcornTime
TROUVÉ clé: HKEY_USERS\S-1-5-21-1911395721-2807879827-101493910-1001\SOFTWARE\cacaoweb [C:\Users\TBATY\AppData\Roaming\cacaoweb\cacaoweb.exe (Not File)] =>.Superfluous.CacaoWeb
TROUVÉ clé: HKEY_USERS\S-1-5-21-1911395721-2807879827-101493910-1001\SOFTWARE\Popcorn Time [ (Not File)] =>.Superfluous.PopcornTime
TROUVÉ clé: HKEY_USERS\S-1-5-21-1911395721-2807879827-101493910-1001\SOFTWARE\PopcornTime [ (Not File)] =>.Superfluous.PopcornTime
TROUVÉ clé: HKCU\Software\cacaoweb [C:\Users\TBATY\AppData\Roaming\cacaoweb\cacaoweb.exe (Not File)] =>.Superfluous.CacaoWeb
TROUVÉ clé: HKCU\Software\Popcorn Time [ (Not File)] =>.Superfluous.PopcornTime
TROUVÉ clé: HKCU\Software\PopcornTime [ (Not File)] =>.Superfluous.PopcornTime
TROUVÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{96856554-7CAC-4FCD-A29C-BC6F3FB44DCD}C:\users\administrateur\appdata\roaming\cacaoweb\cacaoweb.exe [C:\users\administrateur\appdata\roaming\cacaoweb\cacaoweb.exe] =>.Superfluous.CacaoWeb
TROUVÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{E2EA243A-DF16-43B3-84F1-FACA0CE98639}C:\users\administrateur\appdata\roaming\cacaoweb\cacaoweb.exe [C:\users\administrateur\appdata\roaming\cacaoweb\cacaoweb.exe] =>.Superfluous.CacaoWeb
TROUVÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{1E2A3C41-F24C-4412-8CB7-0E0839177430}C:\users\administrateur\appdata\roaming\cacaoweb\cacaoweb.exe [C:\users\administrateur\appdata\roaming\cacaoweb\cacaoweb.exe] =>.Superfluous.CacaoWeb
TROUVÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{49A84883-2B30-43D4-9435-1866313E0040}C:\users\administrateur\appdata\roaming\cacaoweb\cacaoweb.exe [C:\users\administrateur\appdata\roaming\cacaoweb\cacaoweb.exe] =>.Superfluous.CacaoWeb
TROUVÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{482FE67C-AE54-41C1-B583-55D76A7B3050} [C:\Program Files (x86)\Popcorn Time\Updater.exe] =>.Superfluous.PopcornTime
TROUVÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{83635C07-CD42-442A-89D4-029CA1B4AD57} [C:\Program Files (x86)\Popcorn Time\Updater.exe] =>.Superfluous.PopcornTime
TROUVÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\TCP Query User{F3878ACA-732F-4327-A192-19FBA1BB7415}C:\program files (x86)\popcorn time\chromecast\node.exe [C:\program files (x86)\popcorn time\chromecast\node.exe] =>.Superfluous.PopcornTime
TROUVÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\UDP Query User{C25C6846-069A-4509-9CA1-251C0657C96A}C:\program files (x86)\popcorn time\chromecast\node.exe [C:\program files (x86)\popcorn time\chromecast\node.exe] =>.Superfluous.PopcornTime


---\\ Récapitulatif des éléments trouvés sur votre station. (3)
https://nicolascoolman.eu/2017/02/26/superfluous-popcorntime/ =>.Superfluous.PopcornTime
https://nicolascoolman.eu/2017/01/15/superfluous-cacaoweb/ =>.Superfluous.CacaoWeb
https://nicolascoolman.eu/2017/06/26/trojan-certlock/ =>PUM.Misplaced.Certificate


---\\ Bilan de la réparation
~ Aucune réparation effectuée.
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scannés : 63835
~ Items trouvés : 59
~ Items annulés : 0
~ Items réparés : 0


~ End of search in 01h04mn22s
~====================
ZHPCleaner-[S]-12082017-17_20_38.txt

Publicité


Signaler le contenu de ce document

Publicité