Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPCleaner v2018.3.16.51 by Nicolas Coolman (2018/03/16)
~ Run by Cedric (Administrator) (17/03/2018 19:00:32)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Nettoyer
~ Report : C:\Users\Cedric\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Cedric\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 16299)
---\\ ALTERNATE DATA STREAM (ADS). (0)
~ Aucun élément malicieux ou superflu trouvé.
---\\ SERVICE. (0)
---\\ NAVIGATEUR INTERNET. (6)
SUPPRIMÉ donnée: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer [Bad : http=127.0.0.1:8877;https=127.0.0.1:8877] =>Hijacker.Proxy
SUPPRIMÉ donnée: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable [Bad : 0] =>Hijacker.Proxy
SUPPRIMÉ donnée: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings [Bad : Port=8877] =>Hijacker.Proxy
SUPPRIMÉ donnée: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings [Bad : Port=12000] =>Hijacker.Proxy
SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings [Bad : Port=8877 <-Loopback>] =>Hijacker.Proxy
SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings [Bad : Port=8877 <-Loopback>] =>Hijacker.Proxy
---\\ FICHIER HÔTE. (3)
REMPLACÉ: 92.241.168.10 sendblaster.com
REMPLACÉ: 92.241.168.10 www.sendblaster.com
~ Nombre de redirections trouvées 2/24
---\\ TÂCHE PLANIFIÉE. (1)
SUPPRIMÉ tâche: [AutoPico Daily Restart] [C:\Program Files\KMSpico\AutoPico.exe (Not File) ] =>HackTool.KMSpico
---\\ EXPLORATEUR ( Dossiers, Fichiers ). (33)
DEPLACÉ fichier: C:\Program Files\KMSpico\Service_KMS.exe [ - Service_KMS] =>HackTool.KMSpico
DEPLACÉ fichier: C:\Program Files\KMSpico\AutoPico.exe [ - AutoPico] =>HackTool.KMSpico
DEPLACÉ fichier: C:\Windows\Prefetch\SYSTPLSERVICE.EXE-A60DADF1.pf =>.SUP.sysTPL
DEPLACÉ fichier: C:\ProgramData\InstallMate\{19355D02-0E24-4300-B23F-EC963C772066}\Setup.exe [Tarma Software Research Pty Ltd - Tarma® InstallMate Setup] =>Adware.Tarma
DEPLACÉ fichier^: C:\ProgramData\InstallMate\{19355D02-0E24-4300-B23F-EC963C772066}\TsuDll.dll [Tarma Software Research Pty Ltd - Tarma® InstallMate Setup Library] =>Adware.Tarma
DEPLACÉ fichier^: C:\Program Files (x86)\Conduit =>.SUP.Conduit
DEPLACÉ fichier**: C:\Windows\SECOH-QAD.dll =>HackTool.KMSpico
DEPLACÉ fichier**: C:\Windows\SECOH-QAD.exe =>HackTool.KMSpico
DEPLACÉ fichier^: C:\WINDOWS\System32\dmwu.exe =>PUP.Optional.Perion
DEPLACÉ fichier**: C:\Program Files\KMSpico\KMSELDI.exe [ - KMS GUI ELDI] =>HackTool.KMSpico
DEPLACÉ dossier*: C:\Users\Cedric\AppData\Local\Google\Chrome\User Data\Default\Extensions\afeplgpaegadminidkmfjdjeagjgjjem =>Adware.Bandoo
DEPLACÉ dossier*: C:\Program Files (x86)\1ClickDownload =>PUP.Optional.1ClickDownloader
DEPLACÉ dossier*: C:\Program Files (x86)\Delta =>.SUP.DeltaSearch
DEPLACÉ dossier*: C:\Program Files (x86)\enginesysTPL =>.SUP.sysTPL
DEPLACÉ dossier*: C:\Program Files (x86)\Services x86 =>Adware.CrossRider
DEPLACÉ dossier^: C:\Program Files (x86)\sysTPL =>.SUP.sysTPL
DEPLACÉ dossier*: C:\Kreapixel =>Adware.SocialSkinz
DEPLACÉ dossier*: C:\Program Files\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier*: C:\ProgramData\APN =>Toolbar.Ask
DEPLACÉ dossier*: C:\ProgramData\Babylon =>Adware.Babylon
DEPLACÉ dossier*: C:\ProgramData\InstallMate =>Adware.Tarma
DEPLACÉ dossier*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier*: C:\WINDOWS\System32\WNLT =>PUP.Optional.IncrediBar
DEPLACÉ dossier: C:\WINDOWS\SysWOW64\WNLT =>PUP.Optional.IncrediBar
DEPLACÉ dossier*: C:\Users\Cedric\AppData\Roaming\WebPlayerBdd =>Adware.SocialSkinz
DEPLACÉ dossier*: C:\Users\Cedric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect =>PUP.Optional.Eazel
DEPLACÉ dossier^: C:\WINDOWS\System32\ARFC =>PUP.Optional.Perion
DEPLACÉ dossier^: C:\WINDOWS\System32\ljkb =>PUP.Optional.Perion
DEPLACÉ dossier: C:\WINDOWS\SysWOW64\ARFC =>PUP.Optional.Perion
DEPLACÉ dossier*: C:\WINDOWS\SysWOW64\jmdp =>PUP.Optional.Perion
DEPLACÉ dossier*: C:\Program Files (x86)\Conduit =>.SUP.Conduit
DEPLACÉ dossier*: C:\Users\Cedric\AppData\Local\Google\Update =>Heuristic.Suspect
DEPLACÉ dossier*: C:\Users\Cedric\AppData\Local\APN =>Toolbar.AskTBar
---\\ BASE DE REGISTRES ( Clés, Valeurs, Données ). (79)
SUPPRIMÉ valeur: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} [Babylon Toolbar] =>Adware.Babylon
SUPPRIMÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} [https://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_dmontlsfs_17_0[...]] [Yahoo! Powered] =>Adware.YahooPowered
SUPPRIMÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} [https://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_dmontlsfs_17_01¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtBtAzztDtCzyzy0DyD0BtN0D0Tzu0StCzztAyEtN1L2XzutAtFtByDtFtCtFzzzytN1L1Czu1ByDtN1L1G1B1V1N2Y1L1Qzu2StAyDyC0C0D0FyByEtGyD0D0D0BtG0C0BtCtBtGtD0D0DzztG0A0CyC0FyCtC0AyDtC0EtB0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEzz0Ezz0DtA0C0BtGyD0B0ByEtGyE0FyDyBtGzytAtC0FtG0A0B0F0E0BtC0EtBtDtBzztD2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyEyByE%26cr%3D561757241%26a%3Dwncy_dmontlsfs_17_01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}] =>Adware.YahooPowered
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011501160} [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011501160} [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} [escortApp] =>Adware.MySearchDial
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [C:\Program Files\KMSpico\Service_KMS.exe (Not File)] =>HackTool.KMSpico
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\sysTPLMonitor.exe [C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe (Not File)] =>.SUP.sysTPL
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\sysTPLService.exe [C:\Program Files (x86)\sysTPL\sysTPLService.exe (Not File)] =>.SUP.sysTPL
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\WinDivert1.1 [\C:\Program Files\KMSpico\WinDivert.sys (Not File)] =>HackTool.KMSpico
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1060516944-309750791-1646837573-1001\SOFTWARE\APN [] =>Toolbar.Ask
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1060516944-309750791-1646837573-1001\SOFTWARE\AskToolbar [] =>Toolbar.Ask
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1060516944-309750791-1646837573-1001\SOFTWARE\ImInstaller [] =>Toolbar.IncrediMail
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1060516944-309750791-1646837573-1001\SOFTWARE\Softonic [] =>.SUP.Softonic
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1060516944-309750791-1646837573-1001\SOFTWARE\sysTPL [] =>.SUP.sysTPL
SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\APN [] =>Toolbar.Ask
SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\Ask.com [] =>Toolbar.Ask
SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\AskToolbar [] =>Toolbar.Ask
SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\ImInstaller [] =>Toolbar.IncrediMail
SUPPRIMÉ clé: HKCU\Software\APN [] =>Toolbar.Ask
SUPPRIMÉ clé: HKCU\Software\AskToolbar [] =>Toolbar.Ask
SUPPRIMÉ clé: HKCU\Software\ImInstaller [] =>Toolbar.IncrediMail
SUPPRIMÉ clé: HKCU\Software\Softonic [] =>.SUP.Softonic
SUPPRIMÉ clé: HKCU\Software\sysTPL [] =>.SUP.sysTPL
SUPPRIMÉ clé*: HKCU\Software\AppDataLow\Software\AskToolbar [] =>Toolbar.Ask
SUPPRIMÉ clé*: HKCU\Software\AppDataLow\Software\Conduit [] =>.SUP.Conduit
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0} [Ask.com] =>Toolbar.Ask
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3770184B-B75C-4AFD-8415-6CE5FC7B71} [C:\Program Files (x86)\Plus-HD-4.9 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3B67C4E9-809C-43DD-A9EA-581BE3E59C1} [C:\Program Files (x86)\Plus-HD-4.9 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{630699D1-F9EB-4D23-801A-C4A189246559} [C:\Program Files (x86)\Plus-HD-4.9 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7C9657F8-3CAC-49B5-8BD5-D7A6539C4ED3} [C:\Program Files (x86)\Plus-HD-4.9 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C0F06F8C-4F65-4AA1-9A6D-0C910D8CE2C} [C:\Program Files (x86)\Plus-HD-4.9 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBBE4ED7-54E4-467E-8CF1-353BBFFE26C1} [C:\Program Files (x86)\Plus-HD-4.9 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: HKU\.DEFAULT\Software\IBUpdaterService [] =>PUP.Optional.Boxore
SUPPRIMÉ clé: HKU\S-1-5-18\Software\IBUpdaterService [] =>PUP.Optional.Boxore
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Prod.cap [] =>PUP.Optional.ClaroSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL [] =>PUP.Optional.AsksBar
SUPPRIMÉ clé*: [X64] HKLM\Software\Classes\Installer\Products\708B3E95A5D2EAA46A7C269F1A16E548 [sysTPL] =>.SUP.sysTPL
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\sysTPLMonitor [] =>.SUP.sysTPL
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\sysTPLService [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Web Assistant [] =>PUP.Optional.IncrediBar
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\incredibar [] =>PUP.Optional.IncrediBar
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1060516944-309750791-1646837573-1001\Products\B55E73991336408439FE779E292F40DB [Webplayer] =>PUP.Optional.WebPlayer
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\047A9D791AB002C4D9B4E4FCD1B90737 [C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe (Not File)] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2 [C:\Program Files (x86)\Ask.com\ (Not File)] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7 [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8 [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01 [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472 [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296 [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888 [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\APN [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\AskToolbar [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Babylon [] =>Adware.Babylon
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Services x86 [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Web Assistant [] =>PUP.Optional.IncrediBar
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\GenericAskToolbar.DLL [] =>PUP.Optional.AsksBar
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9937E55B-6331-4804-93EF-77E992F204BD} [Kreapixel] =>Adware.SocialSkinz
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPLMonitor_RASAPI32 [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPLMonitor_RASMANCS [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPLService_RASAPI32 [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPLService_RASMANCS [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPL_RASAPI32 [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPL_RASMANCS [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} [C:\Program Files (x86)\Ask.com\ (Not File)] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{dec91c92-408d-4a41-97b6-34befcec5fee} [C:\Program Files (x86)\Services x86 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48f1-99C2-A712C21F8D5F} [C:\Program Files (x86)\Ask.com\ (Not File)] =>Toolbar.Ask
SUPPRIMÉ clé*: HKCU\SOFTWARE\5b2dfd0bd68e913 [videomngr.exe] =>Hijacker.Browser
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{8F5BE81E-5E74-49C4-BF9A-2DB09B2BA954} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{2AB93FB6-6F46-4BA3-8E98-A8FCC5E66E1C} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{410B40D7-5CBC-4B30-B868-C7E13901F5E9} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{E1385462-7245-49BB-A8F9-391F48D18967} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{8D178C58-7217-4FC0-ABC2-F5206C563811} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{F1E065D5-E729-4325-83B5-D63CCD0478CD} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{C9638AE1-C802-4282-864C-45E730793F9E} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{DFBD1C22-445D-4465-8228-927F11F5BD03} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{0E61F4E2-70CC-4D45-8956-7434E35911F0} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{10393CFF-D3B6-4A37-9394-D3572D94E9B3} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
---\\ RÉCAPITULATIF DES ÉLÉMENTS TROUVÉS SUR VOTRE STATION. (26)
https://nicolascoolman.eu/2017/04/03/hijacker-proxy/ =>Hijacker.Proxy
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.sysTPL
https://nicolascoolman.eu/2017/09/09/adware-tarma/ =>Adware.Tarma
https://nicolascoolman.eu/2017/02/06/superfluous-conduit/ =>.SUP.Conduit
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Perion
https://nicolascoolman.eu/2017/02/23/adware-bandoo/ =>Adware.Bandoo
https://www.nicolascoolman.com/fr/pup-1clickdownloader/ =>PUP.Optional.1ClickDownloader
https://nicolascoolman.eu/2017/09/29/sup-deltasearch/ =>.SUP.DeltaSearch
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider
https://nicolascoolman.eu/2017/09/27/adware-socialskinz/ =>Adware.SocialSkinz
https://nicolascoolman.eu/2017/02/28/toolbar-ask/ =>Toolbar.Ask
https://nicolascoolman.eu/2017/03/03/adware-babylon/ =>Adware.Babylon
https://www.nicolascoolman.com/fr/adware-incredibar/ =>PUP.Optional.IncrediBar
https://nicolascoolman.eu/2017/09/27/pup-optional-browserdefender/ =>PUP.Optional.Eazel
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>Toolbar.AskTBar
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Adware.YahooPowered
https://nicolascoolman.eu/2017/12/23/adware-mysearchdial/ =>Adware.MySearchDial
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>Toolbar.IncrediMail
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Softonic
https://nicolascoolman.eu/2017/03/14/pup-optional-boxore/ =>PUP.Optional.Boxore
https://www.nicolascoolman.com/fr/pup-clarosearch/ =>PUP.Optional.ClaroSearch
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.AsksBar
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.WebPlayer
https://nicolascoolman.eu/2017/11/10/hijacker-browser-3/ =>Hijacker.Browser
---\\ NETTOYAGE ADDITIONNEL. (22)
~ Suppression des Clés de registre Tracing. (22)
~ Suppression des anciens rapports ZHPCleaner. (0)
---\\ BILAN DE LA REPARATION
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Mozilla Firefox)
~ Ce navigateur est absent (Opera Software)
~ Le système a été redémarré.
---\\ STATISTIQUES
~ Items scannés : 1730
~ Items trouvés : 0
~ Items annulés : 0
~ Items options : 0/7
~ Gain de place (Octets) : 0
~ End of clean in 00h01mn58s
---\\ LISTE DES RAPPORTS (2)
ZHPCleaner-[S]-17032018-18_56_54.txt
ZHPCleaner-[R]-17032018-19_02_30.txt
~ Run by Cedric (Administrator) (17/03/2018 19:00:32)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Nettoyer
~ Report : C:\Users\Cedric\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Cedric\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 16299)
---\\ ALTERNATE DATA STREAM (ADS). (0)
~ Aucun élément malicieux ou superflu trouvé.
---\\ SERVICE. (0)
---\\ NAVIGATEUR INTERNET. (6)
SUPPRIMÉ donnée: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer [Bad : http=127.0.0.1:8877;https=127.0.0.1:8877] =>Hijacker.Proxy
SUPPRIMÉ donnée: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable [Bad : 0] =>Hijacker.Proxy
SUPPRIMÉ donnée: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings [Bad : Port=8877] =>Hijacker.Proxy
SUPPRIMÉ donnée: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings [Bad : Port=12000] =>Hijacker.Proxy
SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings [Bad : Port=8877 <-Loopback>] =>Hijacker.Proxy
SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings [Bad : Port=8877 <-Loopback>] =>Hijacker.Proxy
---\\ FICHIER HÔTE. (3)
REMPLACÉ: 92.241.168.10 sendblaster.com
REMPLACÉ: 92.241.168.10 www.sendblaster.com
~ Nombre de redirections trouvées 2/24
---\\ TÂCHE PLANIFIÉE. (1)
SUPPRIMÉ tâche: [AutoPico Daily Restart] [C:\Program Files\KMSpico\AutoPico.exe (Not File) ] =>HackTool.KMSpico
---\\ EXPLORATEUR ( Dossiers, Fichiers ). (33)
DEPLACÉ fichier: C:\Program Files\KMSpico\Service_KMS.exe [ - Service_KMS] =>HackTool.KMSpico
DEPLACÉ fichier: C:\Program Files\KMSpico\AutoPico.exe [ - AutoPico] =>HackTool.KMSpico
DEPLACÉ fichier: C:\Windows\Prefetch\SYSTPLSERVICE.EXE-A60DADF1.pf =>.SUP.sysTPL
DEPLACÉ fichier: C:\ProgramData\InstallMate\{19355D02-0E24-4300-B23F-EC963C772066}\Setup.exe [Tarma Software Research Pty Ltd - Tarma® InstallMate Setup] =>Adware.Tarma
DEPLACÉ fichier^: C:\ProgramData\InstallMate\{19355D02-0E24-4300-B23F-EC963C772066}\TsuDll.dll [Tarma Software Research Pty Ltd - Tarma® InstallMate Setup Library] =>Adware.Tarma
DEPLACÉ fichier^: C:\Program Files (x86)\Conduit =>.SUP.Conduit
DEPLACÉ fichier**: C:\Windows\SECOH-QAD.dll =>HackTool.KMSpico
DEPLACÉ fichier**: C:\Windows\SECOH-QAD.exe =>HackTool.KMSpico
DEPLACÉ fichier^: C:\WINDOWS\System32\dmwu.exe =>PUP.Optional.Perion
DEPLACÉ fichier**: C:\Program Files\KMSpico\KMSELDI.exe [ - KMS GUI ELDI] =>HackTool.KMSpico
DEPLACÉ dossier*: C:\Users\Cedric\AppData\Local\Google\Chrome\User Data\Default\Extensions\afeplgpaegadminidkmfjdjeagjgjjem =>Adware.Bandoo
DEPLACÉ dossier*: C:\Program Files (x86)\1ClickDownload =>PUP.Optional.1ClickDownloader
DEPLACÉ dossier*: C:\Program Files (x86)\Delta =>.SUP.DeltaSearch
DEPLACÉ dossier*: C:\Program Files (x86)\enginesysTPL =>.SUP.sysTPL
DEPLACÉ dossier*: C:\Program Files (x86)\Services x86 =>Adware.CrossRider
DEPLACÉ dossier^: C:\Program Files (x86)\sysTPL =>.SUP.sysTPL
DEPLACÉ dossier*: C:\Kreapixel =>Adware.SocialSkinz
DEPLACÉ dossier*: C:\Program Files\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier*: C:\ProgramData\APN =>Toolbar.Ask
DEPLACÉ dossier*: C:\ProgramData\Babylon =>Adware.Babylon
DEPLACÉ dossier*: C:\ProgramData\InstallMate =>Adware.Tarma
DEPLACÉ dossier*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier*: C:\WINDOWS\System32\WNLT =>PUP.Optional.IncrediBar
DEPLACÉ dossier: C:\WINDOWS\SysWOW64\WNLT =>PUP.Optional.IncrediBar
DEPLACÉ dossier*: C:\Users\Cedric\AppData\Roaming\WebPlayerBdd =>Adware.SocialSkinz
DEPLACÉ dossier*: C:\Users\Cedric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect =>PUP.Optional.Eazel
DEPLACÉ dossier^: C:\WINDOWS\System32\ARFC =>PUP.Optional.Perion
DEPLACÉ dossier^: C:\WINDOWS\System32\ljkb =>PUP.Optional.Perion
DEPLACÉ dossier: C:\WINDOWS\SysWOW64\ARFC =>PUP.Optional.Perion
DEPLACÉ dossier*: C:\WINDOWS\SysWOW64\jmdp =>PUP.Optional.Perion
DEPLACÉ dossier*: C:\Program Files (x86)\Conduit =>.SUP.Conduit
DEPLACÉ dossier*: C:\Users\Cedric\AppData\Local\Google\Update =>Heuristic.Suspect
DEPLACÉ dossier*: C:\Users\Cedric\AppData\Local\APN =>Toolbar.AskTBar
---\\ BASE DE REGISTRES ( Clés, Valeurs, Données ). (79)
SUPPRIMÉ valeur: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} [Babylon Toolbar] =>Adware.Babylon
SUPPRIMÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} [https://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_dmontlsfs_17_0[...]] [Yahoo! Powered] =>Adware.YahooPowered
SUPPRIMÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} [https://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_dmontlsfs_17_01¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtBtAzztDtCzyzy0DyD0BtN0D0Tzu0StCzztAyEtN1L2XzutAtFtByDtFtCtFzzzytN1L1Czu1ByDtN1L1G1B1V1N2Y1L1Qzu2StAyDyC0C0D0FyByEtGyD0D0D0BtG0C0BtCtBtGtD0D0DzztG0A0CyC0FyCtC0AyDtC0EtB0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEzz0Ezz0DtA0C0BtGyD0B0ByEtGyE0FyDyBtGzytAtC0FtG0A0B0F0E0BtC0EtBtDtBzztD2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyEyByE%26cr%3D561757241%26a%3Dwncy_dmontlsfs_17_01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}] =>Adware.YahooPowered
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011501160} [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011501160} [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} [escortApp] =>Adware.MySearchDial
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI [C:\Program Files\KMSpico\Service_KMS.exe (Not File)] =>HackTool.KMSpico
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\sysTPLMonitor.exe [C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe (Not File)] =>.SUP.sysTPL
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\sysTPLService.exe [C:\Program Files (x86)\sysTPL\sysTPLService.exe (Not File)] =>.SUP.sysTPL
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\WinDivert1.1 [\C:\Program Files\KMSpico\WinDivert.sys (Not File)] =>HackTool.KMSpico
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1060516944-309750791-1646837573-1001\SOFTWARE\APN [] =>Toolbar.Ask
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1060516944-309750791-1646837573-1001\SOFTWARE\AskToolbar [] =>Toolbar.Ask
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1060516944-309750791-1646837573-1001\SOFTWARE\ImInstaller [] =>Toolbar.IncrediMail
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1060516944-309750791-1646837573-1001\SOFTWARE\Softonic [] =>.SUP.Softonic
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1060516944-309750791-1646837573-1001\SOFTWARE\sysTPL [] =>.SUP.sysTPL
SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\APN [] =>Toolbar.Ask
SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\Ask.com [] =>Toolbar.Ask
SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\AskToolbar [] =>Toolbar.Ask
SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\ImInstaller [] =>Toolbar.IncrediMail
SUPPRIMÉ clé: HKCU\Software\APN [] =>Toolbar.Ask
SUPPRIMÉ clé: HKCU\Software\AskToolbar [] =>Toolbar.Ask
SUPPRIMÉ clé: HKCU\Software\ImInstaller [] =>Toolbar.IncrediMail
SUPPRIMÉ clé: HKCU\Software\Softonic [] =>.SUP.Softonic
SUPPRIMÉ clé: HKCU\Software\sysTPL [] =>.SUP.sysTPL
SUPPRIMÉ clé*: HKCU\Software\AppDataLow\Software\AskToolbar [] =>Toolbar.Ask
SUPPRIMÉ clé*: HKCU\Software\AppDataLow\Software\Conduit [] =>.SUP.Conduit
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0} [Ask.com] =>Toolbar.Ask
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3770184B-B75C-4AFD-8415-6CE5FC7B71} [C:\Program Files (x86)\Plus-HD-4.9 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3B67C4E9-809C-43DD-A9EA-581BE3E59C1} [C:\Program Files (x86)\Plus-HD-4.9 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{630699D1-F9EB-4D23-801A-C4A189246559} [C:\Program Files (x86)\Plus-HD-4.9 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7C9657F8-3CAC-49B5-8BD5-D7A6539C4ED3} [C:\Program Files (x86)\Plus-HD-4.9 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C0F06F8C-4F65-4AA1-9A6D-0C910D8CE2C} [C:\Program Files (x86)\Plus-HD-4.9 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBBE4ED7-54E4-467E-8CF1-353BBFFE26C1} [C:\Program Files (x86)\Plus-HD-4.9 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: HKU\.DEFAULT\Software\IBUpdaterService [] =>PUP.Optional.Boxore
SUPPRIMÉ clé: HKU\S-1-5-18\Software\IBUpdaterService [] =>PUP.Optional.Boxore
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Prod.cap [] =>PUP.Optional.ClaroSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL [] =>PUP.Optional.AsksBar
SUPPRIMÉ clé*: [X64] HKLM\Software\Classes\Installer\Products\708B3E95A5D2EAA46A7C269F1A16E548 [sysTPL] =>.SUP.sysTPL
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\sysTPLMonitor [] =>.SUP.sysTPL
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\sysTPLService [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Web Assistant [] =>PUP.Optional.IncrediBar
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\incredibar [] =>PUP.Optional.IncrediBar
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1060516944-309750791-1646837573-1001\Products\B55E73991336408439FE779E292F40DB [Webplayer] =>PUP.Optional.WebPlayer
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\047A9D791AB002C4D9B4E4FCD1B90737 [C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe (Not File)] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2 [C:\Program Files (x86)\Ask.com\ (Not File)] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7 [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8 [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01 [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472 [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296 [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888 [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\APN [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\AskToolbar [] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Babylon [] =>Adware.Babylon
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Services x86 [] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Web Assistant [] =>PUP.Optional.IncrediBar
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\GenericAskToolbar.DLL [] =>PUP.Optional.AsksBar
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9937E55B-6331-4804-93EF-77E992F204BD} [Kreapixel] =>Adware.SocialSkinz
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPLMonitor_RASAPI32 [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPLMonitor_RASMANCS [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPLService_RASAPI32 [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPLService_RASMANCS [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPL_RASAPI32 [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\sysTPL_RASMANCS [] =>.SUP.sysTPL
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} [C:\Program Files (x86)\Ask.com\ (Not File)] =>Toolbar.Ask
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{dec91c92-408d-4a41-97b6-34befcec5fee} [C:\Program Files (x86)\Services x86 (Not File)] =>Adware.CrossRider
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48f1-99C2-A712C21F8D5F} [C:\Program Files (x86)\Ask.com\ (Not File)] =>Toolbar.Ask
SUPPRIMÉ clé*: HKCU\SOFTWARE\5b2dfd0bd68e913 [videomngr.exe] =>Hijacker.Browser
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{8F5BE81E-5E74-49C4-BF9A-2DB09B2BA954} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{2AB93FB6-6F46-4BA3-8E98-A8FCC5E66E1C} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{410B40D7-5CBC-4B30-B868-C7E13901F5E9} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{E1385462-7245-49BB-A8F9-391F48D18967} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{8D178C58-7217-4FC0-ABC2-F5206C563811} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{F1E065D5-E729-4325-83B5-D63CCD0478CD} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{C9638AE1-C802-4282-864C-45E730793F9E} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{DFBD1C22-445D-4465-8228-927F11F5BD03} [C:\Program Files\KMSpico\Service_KMS.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{0E61F4E2-70CC-4D45-8956-7434E35911F0} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{10393CFF-D3B6-4A37-9394-D3572D94E9B3} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
---\\ RÉCAPITULATIF DES ÉLÉMENTS TROUVÉS SUR VOTRE STATION. (26)
https://nicolascoolman.eu/2017/04/03/hijacker-proxy/ =>Hijacker.Proxy
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.sysTPL
https://nicolascoolman.eu/2017/09/09/adware-tarma/ =>Adware.Tarma
https://nicolascoolman.eu/2017/02/06/superfluous-conduit/ =>.SUP.Conduit
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Perion
https://nicolascoolman.eu/2017/02/23/adware-bandoo/ =>Adware.Bandoo
https://www.nicolascoolman.com/fr/pup-1clickdownloader/ =>PUP.Optional.1ClickDownloader
https://nicolascoolman.eu/2017/09/29/sup-deltasearch/ =>.SUP.DeltaSearch
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider
https://nicolascoolman.eu/2017/09/27/adware-socialskinz/ =>Adware.SocialSkinz
https://nicolascoolman.eu/2017/02/28/toolbar-ask/ =>Toolbar.Ask
https://nicolascoolman.eu/2017/03/03/adware-babylon/ =>Adware.Babylon
https://www.nicolascoolman.com/fr/adware-incredibar/ =>PUP.Optional.IncrediBar
https://nicolascoolman.eu/2017/09/27/pup-optional-browserdefender/ =>PUP.Optional.Eazel
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>Toolbar.AskTBar
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Adware.YahooPowered
https://nicolascoolman.eu/2017/12/23/adware-mysearchdial/ =>Adware.MySearchDial
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>Toolbar.IncrediMail
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Softonic
https://nicolascoolman.eu/2017/03/14/pup-optional-boxore/ =>PUP.Optional.Boxore
https://www.nicolascoolman.com/fr/pup-clarosearch/ =>PUP.Optional.ClaroSearch
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.AsksBar
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.WebPlayer
https://nicolascoolman.eu/2017/11/10/hijacker-browser-3/ =>Hijacker.Browser
---\\ NETTOYAGE ADDITIONNEL. (22)
~ Suppression des Clés de registre Tracing. (22)
~ Suppression des anciens rapports ZHPCleaner. (0)
---\\ BILAN DE LA REPARATION
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Mozilla Firefox)
~ Ce navigateur est absent (Opera Software)
~ Le système a été redémarré.
---\\ STATISTIQUES
~ Items scannés : 1730
~ Items trouvés : 0
~ Items annulés : 0
~ Items options : 0/7
~ Gain de place (Octets) : 0
~ End of clean in 00h01mn58s
---\\ LISTE DES RAPPORTS (2)
ZHPCleaner-[S]-17032018-18_56_54.txt
ZHPCleaner-[R]-17032018-19_02_30.txt