Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPCleaner v2018.5.2.95 by Nicolas Coolman (2018/05/02)
~ Run by WIYAO (Administrator) (04/05/2018 11:53:38)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Scanner
~ Report : C:\Users\WIYAO\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\WIYAO\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 16299)
---\\ ALTERNATE DATA STREAM (ADS). (0)
~ Aucun élément malicieux ou superflu trouvé.
---\\ SERVICE. (0)
~ Aucun élément malicieux ou superflu trouvé.
---\\ NAVIGATEUR INTERNET. (5)
TROUVÉ Google Chrome Secure Preferences: "http://search.babylon.com/?affID=111789&tt=060612_8_&babsrc=HP_ss&mntrId=0adc322a0000000000000014d1b981c1" =>Adware.Babylon
TROUVÉ Google Chrome Secure Preferences: "http://start.mysearchdial.com/?f=1&a=irmsd54&cd=2XzuyEtN2Y1L1QzutCtDyBzz0DtB0D0FtA0AyE0CtAtBtB0AtN0D0Tzu0SyDtCtCtN1L2XzutBtFtBtFtAtFyCzzzytN1L1Czu1L1C1H1B1QyDyE&cr=1661257510&ir=" =>Adware.MySearchDial
TROUVÉ Google Chrome Secure Preferences: "http://start.mysearchdial.com/?f=1&a=telemsd&cd=2XzuyEtN2Y1L1QzutDtDtCyC0C0EtCtAtByB0C0DtCzztD0EtN0D0Tzu0CyCyBtCtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu2Z1P1I1P1H1B1Q&cr=141263778&ir=" =>Adware.MySearchDial
TROUVÉ Google Chrome Secure Preferences: "http://start.iminent.com/?appId=1445FB08-47DF-4AE2-84E9-CC9E23A3CA6E" =>PUP.Optional.IMBooster
TROUVÉ donnée: HKLM64\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs [C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll] =>PUP.Optional.SearchProtect
---\\ FICHIER HÔTE. (1)
~ Le fichier hôte est légitime. (21)
---\\ TÂCHE PLANIFIÉE. (1)
TROUVÉ tâche: [MySearchDial] [C:\WINDOWS\Tasks\MySearchDial.job] =>PUP.Optional.MySearch
---\\ EXPLORATEUR ( Dossiers, Fichiers ). (63)
TROUVÉ fichier: C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ =>.SUP.Spigot
TROUVÉ fichier: C:\Users\WIYAO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage =>Hijacker.Browser
TROUVÉ dossier: C:\Users\WIYAO\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb =>Hijacker.Browser
TROUVÉ dossier: C:\Users\WIYAO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff =>Hijacker.Browser
TROUVÉ dossier: C:\Users\WIYAO\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff =>Hijacker.Browser
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\BabMaint.exe =>Adware.Pirrit
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\mysearchdial =>Heuristic.InstallCore
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\BabMaint.exe =>Adware.Suspect
TROUVÉ fichier: C:\Windows\Tasks\MySearchDial.job =>PUP.Optional.MySearch
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\BabMaint.exe =>Adware.GenericTask
TROUVÉ fichier: C:\Windows\Tasks\MySearchDial.job =>Adware.MySearchDial
TROUVÉ fichier: C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe [Tarma Software Research Pty Ltd - Tarma® Installer] =>Adware.Tarma
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\BabMaint.exe =>Adware.SocialSkinz
TROUVÉ fichier: C:\Users\WIYAO\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data =>Adware.BProtector
TROUVÉ fichier: C:\Users\WIYAO\AppData\Local\Google\Chrome\User Data\Default\bProtectorPreferences =>Adware.BProtector
TROUVÉ fichier: C:\Users\WIYAO\AppData\Local\mysearchdial_speedial_v9.0.2.crx =>PUP.Optional.SpeedDial
TROUVÉ fichier: C:\Program Files (x86)\Ask.com\config.xml =>Toolbar.Ask
TROUVÉ fichier: C:\Program Files (x86)\Ask.com\mupcfg.xml =>Toolbar.Ask
TROUVÉ dossier: C:\Program Files (x86)\Ask.com\assets =>Toolbar.Ask
TROUVÉ dossier: C:\Program Files (x86)\Ask.com\Updater =>Toolbar.Ask
TROUVÉ dossier: C:\Program Files (x86)\BabylonToolbar\BabylonToolbar =>Adware.Babylon
TROUVÉ dossier: C:\Program Files (x86)\Ask.com =>Toolbar.Ask
TROUVÉ dossier: C:\Program Files (x86)\BabylonToolbar =>Adware.Babylon
TROUVÉ dossier: C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504} =>Adware.Tarma
TROUVÉ dossier: C:\ProgramData\Babylon =>Adware.Babylon
TROUVÉ dossier: C:\ProgramData\Tarma Installer =>Adware.Tarma
TROUVÉ dossier: C:\WINDOWS\System32\SearchProtect\Logs =>PUP.Optional.SearchProtect
TROUVÉ dossier: C:\WINDOWS\System32\SearchProtect =>PUP.Optional.SearchProtect
TROUVÉ dossier: C:\WINDOWS\SysWOW64\SearchProtect\Logs =>PUP.Optional.SearchProtect
TROUVÉ dossier: C:\WINDOWS\SysWOW64\SearchProtect =>PUP.Optional.SearchProtect
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\Babylon\log_file.txt =>Adware.Babylon
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\LowRateVoip\History_olivier121985.dat =>PUP.Optional.LowRate
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\LowRateVoip\VoiceEngine.xml =>PUP.Optional.LowRate
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\OfferBox\config.xml =>PUP.Optional.OfferBox
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabSolution\Shared =>PUP.Optional.BabSolution
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabylonToolbar\CR =>Adware.Babylon
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabylonToolbar\FF =>Adware.Babylon
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabylonToolbar\IE =>Adware.Babylon
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabylonToolbar\Shared =>Adware.Babylon
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\LowRateVoip\Display Pictures =>PUP.Optional.LowRate
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\LowRateVoip\olivier121985 =>PUP.Optional.LowRate
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\mysearchdial\icons_2.2.3.689 =>Adware.MySearchDial
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\mysearchdial\UpdateProc =>Adware.MySearchDial
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\OfferBox\http_app.offerbox.com =>PUP.Optional.OfferBox
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\OpenCandy\3371006657E044ED9217153AC69E0FA2 =>Adware.OpenCandy
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\OpenCandy\AB2710E2649A4CD295DA1D059488C15C =>Adware.OpenCandy
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabSolution =>PUP.Optional.BabSolution
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\Babylon =>Adware.Babylon
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabylonToolbar =>Adware.Babylon
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\LowRateVoip =>PUP.Optional.LowRate
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\mysearchdial =>Adware.MySearchDial
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\OfferBox =>PUP.Optional.OfferBox
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\OpenCandy =>Adware.OpenCandy
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender =>PUP.Optional.BrowserDefender
TROUVÉ fichier: C:\Users\WIYAO\AppData\LocalLow\AskToolbar\cache.dat =>Toolbar.Ask
TROUVÉ fichier: C:\Users\WIYAO\AppData\LocalLow\AskToolbar\config.xml =>Toolbar.Ask
TROUVÉ fichier: C:\Users\WIYAO\AppData\LocalLow\AskToolbar\osearch.xml =>Toolbar.Ask
TROUVÉ dossier: C:\Users\WIYAO\AppData\LocalLow\AskToolbar\APNU =>Toolbar.Ask
TROUVÉ dossier: C:\Users\WIYAO\AppData\LocalLow\AskToolbar =>Toolbar.Ask
TROUVÉ fichier: C:\Users\WIYAO\AppData\Local\messengerdusexe\.config =>.SUP.Rentabiliweb
TROUVÉ dossier: C:\Users\WIYAO\AppData\Local\messengerdusexe =>.SUP.Rentabiliweb
TROUVÉ dossier: C:\ProgramData\Ask =>Toolbar.Ask
TROUVÉ dossier: C:\Users\WIYAO\AppData\Local\Google\Update =>Heuristic.Suspect
---\\ BASE DE REGISTRES ( Clés, Valeurs, Données ). (83)
TROUVÉ valeur: [X64] HKLM\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\\fmconverter@gmail.com [C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\] =>.SUP.Spigot
TROUVÉ clé: HKCU\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff [] =>Hijacker.Browser
TROUVÉ clé: [X64] HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff [] =>Hijacker.Browser
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb [] =>Hijacker.Browser
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff [] =>Hijacker.Browser
TROUVÉ clé: HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff [C:\Users\WIYAO\AppData\Local\mysearchdial_speedial_v9.0.2.crx] =>PUP.Optional.MyWebSearch
TROUVÉ clé: [X64] HKLM\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff [C:\Users\WIYAO\AppData\Local\mysearchdial_speedial_v9.0.2.crx] =>PUP.Optional.MyWebSearch
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B} [Babylon toolbar helper] =>Adware.Babylon
TROUVÉ clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B} [] =>Adware.Babylon
TROUVÉ clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B} [] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B} [Babylon toolbar helper] =>Adware.Babylon
TROUVÉ valeur: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} [Babylon Toolbar] =>Adware.Babylon
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} [http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=0ADC1078D2DF3A4C&affID=119357&tsp=[...]] [Delta Search] =>.SUP.DeltaSearch
TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd54&cd=2XzuyEtN2Y1L1QzutCtDyBzz0[...]] [Mysearchdial] =>Adware.MySearchDial
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd54&cd=2XzuyEtN2Y1L1QzutCtDyBzz0[...]] [Mysearchdial] =>Adware.MySearchDial
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550255185502} [ICrossriderBHO] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660266186602} [ISandBox] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440244184402} [] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{55555555-5555-5555-5555-550255185502} [ICrossriderBHO] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66666666-6666-6666-6666-660266186602} [ISandBox] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{44444444-4444-4444-4444-440244184402} [] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211181102} [] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110211181102} [] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211181102} [] =>Adware.CrossRider
TROUVÉ clé: HKCU\Software\InstallCore\1I1T1Q1S [] =>Heuristic.InstallCore
TROUVÉ clé: HKCU\Software\InstallCore\Custom [] =>Heuristic.InstallCore
TROUVÉ clé: HKCU\Software\InstallCore\mysearchdial [] =>Heuristic.InstallCore
TROUVÉ clé: HKCU\Software\InstallCore\Uninstall [] =>Heuristic.InstallCore
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\InstallCore\mysearchdial [] =>Heuristic.InstallCore
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\BabSolution [] =>PUP.Optional.BabSolution
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\BabylonToolbar [] =>Adware.Babylon
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\DataMngr [] =>Adware.Searchqu
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\InstallCore [] =>Adware.InstallCore
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\InstalledBrowserExtensions [] =>PUP.Optional.VidSaver
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\mysearchdial [] =>PUP.Optional.Hotbar
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\OfferBox [] =>PUP.Optional.OfferBox
TROUVÉ clé: HKCU\Software\BabSolution [] =>PUP.Optional.BabSolution
TROUVÉ clé: HKCU\Software\BabylonToolbar [] =>Adware.Babylon
TROUVÉ clé: HKCU\Software\DataMngr [] =>Adware.Searchqu
TROUVÉ clé: HKCU\Software\InstallCore [] =>Adware.InstallCore
TROUVÉ clé: HKCU\Software\InstalledBrowserExtensions [] =>PUP.Optional.VidSaver
TROUVÉ clé: HKCU\Software\mysearchdial [] =>PUP.Optional.Hotbar
TROUVÉ clé: HKCU\Software\OfferBox [] =>PUP.Optional.OfferBox
TROUVÉ clé: HKCU\Software\TeleCharger_v2 [] =>.SUP.Downloader
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\Prod.cap [] =>PUP.Optional.ClaroSearch
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\Babylon.dskBnd [CDskBnd Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\Babylon.dskBnd.1 [CDskBnd Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\bbylnApp.appCore [appCore Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\bbylnApp.appCore.1 [appCore Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\escort.escrtBtn.1 [escrtBtn Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE [] =>PUP.Optional.VShareRedir
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} [] =>PUP.Optional.Wajam
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8} [] =>Adware.MySearchDial
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0} [esrv] =>Adware.MySearchDial
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} [] =>.SUP.DeltaSearch
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr [CescrtHlpr Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1 [CescrtHlpr Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\Software\Classes\Installer\Products\3192AA38321C641458DBDAF83979D193 [BabylonObjectInstaller] =>Adware.Babylon
TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WebCakeUpdaterService [] =>PUP.Optional.WebCake
TROUVÉ clé: [X64] HKLM\SOFTWARE\Tarma Installer [] =>Adware.Tarma
TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DropboxUpdateTaskUserS-1-5-21-1585671971-3633617115-168381053-1000Core [] =>PUP.Optional.UpdateTask
TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DropboxUpdateTaskUserS-1-5-21-1585671971-3633617115-168381053-1000UA [] =>PUP.Optional.UpdateTask
TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MySearchDial [] =>PUP.Optional.Hotbar
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Babylon [] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\BabylonToolbar [] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\DataMngr [] =>Adware.Searchqu
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\InstallCore [] =>Adware.InstallCore
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\OfferBox [] =>PUP.Optional.OfferBox
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\ScriptHelper.EXE [] =>PUP.Optional.VShareRedir
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} [] =>PUP.Optional.Wajam
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8} [] =>Adware.MySearchDial
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0} [esrv] =>Adware.MySearchDial
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} [] =>.SUP.DeltaSearch
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar [Babylon toolbar on IE] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Shopping Sidekick Plugin [215 Apps] =>PUP.Optional.VidSaver
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} [Bit89 Inc] =>PUP.Optional.BrowserDefender
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39} [Babylon Ltd] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211181102} [C:\Program Files (x86)\Shopping Sidekick Plugin] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110211181102} [C:\Program Files (x86)\Shopping Sidekick Plugin] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8} [C:\Program Files (x86)\Mysearchdial\\ (Not File)] =>PUP.Optional.Hotbar
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542} [C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17 (Not File)] =>Adware.Babylon
TROUVÉ clé: HKCU\SOFTWARE\5b578a8ab73eee10 [] =>Hijacker.Browser
TROUVÉ valeur: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\\bProtectorDefaultScope [{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}] =>Adware.BProtector
---\\ RÉCAPITULATIF DES ÉLÉMENTS TROUVÉS SUR VOTRE STATION. (36)
https://nicolascoolman.eu/2017/03/03/adware-babylon/ =>Adware.Babylon
https://nicolascoolman.eu/2017/12/23/adware-mysearchdial/ =>Adware.MySearchDial
https://nicolascoolman.eu/2017/09/08/adware-imbooster/ =>PUP.Optional.IMBooster
https://nicolascoolman.eu/2017/02/07/pup-optional-searchprotect/ =>PUP.Optional.SearchProtect
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.MySearch
https://www.anti-malware.top/2016/05/08/superfluous-spigot/ =>.SUP.Spigot
https://nicolascoolman.eu/2017/11/10/hijacker-browser-3/ =>Hijacker.Browser
https://nicolascoolman.eu/2017/02/25/adware-pirrit/ =>Adware.Pirrit
https://nicolascoolman.eu/2017/09/19/adware-installcore-3/ =>Heuristic.InstallCore
https://nicolascoolman.eu/2017/03/02/adware-suspect/ =>Adware.Suspect
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Adware.GenericTask
https://nicolascoolman.eu/2017/09/09/adware-tarma/ =>Adware.Tarma
https://nicolascoolman.eu/2017/09/27/adware-socialskinz/ =>Adware.SocialSkinz
https://nicolascoolman.eu/2017/04/12/adware-bprotector/ =>Adware.BProtector
https://www.anti-malware.top/2016/06/01/pup-optional-speeddial/ =>PUP.Optional.SpeedDial
https://nicolascoolman.eu/2017/02/28/toolbar-ask/ =>Toolbar.Ask
https://www.nicolascoolman.com/fr/pup-optional-lowrate/ =>PUP.Optional.LowRate
https://nicolascoolman.eu/2017/10/15/adware-offerbox/ =>PUP.Optional.OfferBox
https://www.nicolascoolman.com/fr/hijacker-babsolution/ =>PUP.Optional.BabSolution
https://nicolascoolman.eu/2017/02/24/adware-opencandy/ =>Adware.OpenCandy
https://nicolascoolman.eu/2017/09/27/pup-optional-browserdefender/ =>PUP.Optional.BrowserDefender
https://www.anti-malware.top/2016/05/02/superfluous-rentabiliweb/ =>.SUP.Rentabiliweb
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect
https://nicolascoolman.eu/2017/12/17/adware-mywebsearch/ =>PUP.Optional.MyWebSearch
https://nicolascoolman.eu/2017/09/29/sup-deltasearch/ =>.SUP.DeltaSearch
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider
https://nicolascoolman.eu/2017/10/15/adware-searchqu/ =>Adware.Searchqu
https://nicolascoolman.eu/2017/09/19/adware-installcore-3/ =>Adware.InstallCore
https://nicolascoolman.eu/2017/10/23/adware-vidsaver/ =>PUP.Optional.VidSaver
https://www.nicolascoolman.com/fr/adware-hotbar/ =>PUP.Optional.Hotbar
https://nicolascoolman.eu/2017/12/22/sup-downloader/ =>.SUP.Downloader
https://www.nicolascoolman.com/fr/pup-clarosearch/ =>PUP.Optional.ClaroSearch
https://www.nicolascoolman.com/fr/pup-vshareredir/ =>PUP.Optional.VShareRedir
https://nicolascoolman.eu/2017/02/24/pup-optional-wajam/ =>PUP.Optional.Wajam
https://www.nicolascoolman.com/fr/adware-webcake/ =>PUP.Optional.WebCake
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.UpdateTask
---\\ BILAN DE LA REPARATION
~ Aucune réparation effectuée.
~ Ce navigateur est absent (Opera Software)
---\\ STATISTIQUES
~ Items scannés : 112431
~ Items trouvés : 170
~ Items annulés : 0
~ Items options : 0/7
~ Gain de place (Octets) : 0
~ End of search in 00h06mn46s
ZHPCleaner-[S]-04052018-12_00_24.txt
~ Run by WIYAO (Administrator) (04/05/2018 11:53:38)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Scanner
~ Report : C:\Users\WIYAO\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\WIYAO\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 16299)
---\\ ALTERNATE DATA STREAM (ADS). (0)
~ Aucun élément malicieux ou superflu trouvé.
---\\ SERVICE. (0)
~ Aucun élément malicieux ou superflu trouvé.
---\\ NAVIGATEUR INTERNET. (5)
TROUVÉ Google Chrome Secure Preferences: "http://search.babylon.com/?affID=111789&tt=060612_8_&babsrc=HP_ss&mntrId=0adc322a0000000000000014d1b981c1" =>Adware.Babylon
TROUVÉ Google Chrome Secure Preferences: "http://start.mysearchdial.com/?f=1&a=irmsd54&cd=2XzuyEtN2Y1L1QzutCtDyBzz0DtB0D0FtA0AyE0CtAtBtB0AtN0D0Tzu0SyDtCtCtN1L2XzutBtFtBtFtAtFyCzzzytN1L1Czu1L1C1H1B1QyDyE&cr=1661257510&ir=" =>Adware.MySearchDial
TROUVÉ Google Chrome Secure Preferences: "http://start.mysearchdial.com/?f=1&a=telemsd&cd=2XzuyEtN2Y1L1QzutDtDtCyC0C0EtCtAtByB0C0DtCzztD0EtN0D0Tzu0CyCyBtCtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu2Z1P1I1P1H1B1Q&cr=141263778&ir=" =>Adware.MySearchDial
TROUVÉ Google Chrome Secure Preferences: "http://start.iminent.com/?appId=1445FB08-47DF-4AE2-84E9-CC9E23A3CA6E" =>PUP.Optional.IMBooster
TROUVÉ donnée: HKLM64\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs [C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll] =>PUP.Optional.SearchProtect
---\\ FICHIER HÔTE. (1)
~ Le fichier hôte est légitime. (21)
---\\ TÂCHE PLANIFIÉE. (1)
TROUVÉ tâche: [MySearchDial] [C:\WINDOWS\Tasks\MySearchDial.job] =>PUP.Optional.MySearch
---\\ EXPLORATEUR ( Dossiers, Fichiers ). (63)
TROUVÉ fichier: C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ =>.SUP.Spigot
TROUVÉ fichier: C:\Users\WIYAO\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage =>Hijacker.Browser
TROUVÉ dossier: C:\Users\WIYAO\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb =>Hijacker.Browser
TROUVÉ dossier: C:\Users\WIYAO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff =>Hijacker.Browser
TROUVÉ dossier: C:\Users\WIYAO\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff =>Hijacker.Browser
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\BabMaint.exe =>Adware.Pirrit
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\mysearchdial =>Heuristic.InstallCore
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\BabMaint.exe =>Adware.Suspect
TROUVÉ fichier: C:\Windows\Tasks\MySearchDial.job =>PUP.Optional.MySearch
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\BabMaint.exe =>Adware.GenericTask
TROUVÉ fichier: C:\Windows\Tasks\MySearchDial.job =>Adware.MySearchDial
TROUVÉ fichier: C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe [Tarma Software Research Pty Ltd - Tarma® Installer] =>Adware.Tarma
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\BabMaint.exe =>Adware.SocialSkinz
TROUVÉ fichier: C:\Users\WIYAO\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data =>Adware.BProtector
TROUVÉ fichier: C:\Users\WIYAO\AppData\Local\Google\Chrome\User Data\Default\bProtectorPreferences =>Adware.BProtector
TROUVÉ fichier: C:\Users\WIYAO\AppData\Local\mysearchdial_speedial_v9.0.2.crx =>PUP.Optional.SpeedDial
TROUVÉ fichier: C:\Program Files (x86)\Ask.com\config.xml =>Toolbar.Ask
TROUVÉ fichier: C:\Program Files (x86)\Ask.com\mupcfg.xml =>Toolbar.Ask
TROUVÉ dossier: C:\Program Files (x86)\Ask.com\assets =>Toolbar.Ask
TROUVÉ dossier: C:\Program Files (x86)\Ask.com\Updater =>Toolbar.Ask
TROUVÉ dossier: C:\Program Files (x86)\BabylonToolbar\BabylonToolbar =>Adware.Babylon
TROUVÉ dossier: C:\Program Files (x86)\Ask.com =>Toolbar.Ask
TROUVÉ dossier: C:\Program Files (x86)\BabylonToolbar =>Adware.Babylon
TROUVÉ dossier: C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504} =>Adware.Tarma
TROUVÉ dossier: C:\ProgramData\Babylon =>Adware.Babylon
TROUVÉ dossier: C:\ProgramData\Tarma Installer =>Adware.Tarma
TROUVÉ dossier: C:\WINDOWS\System32\SearchProtect\Logs =>PUP.Optional.SearchProtect
TROUVÉ dossier: C:\WINDOWS\System32\SearchProtect =>PUP.Optional.SearchProtect
TROUVÉ dossier: C:\WINDOWS\SysWOW64\SearchProtect\Logs =>PUP.Optional.SearchProtect
TROUVÉ dossier: C:\WINDOWS\SysWOW64\SearchProtect =>PUP.Optional.SearchProtect
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\Babylon\log_file.txt =>Adware.Babylon
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\LowRateVoip\History_olivier121985.dat =>PUP.Optional.LowRate
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\LowRateVoip\VoiceEngine.xml =>PUP.Optional.LowRate
TROUVÉ fichier: C:\Users\WIYAO\AppData\Roaming\OfferBox\config.xml =>PUP.Optional.OfferBox
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabSolution\Shared =>PUP.Optional.BabSolution
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabylonToolbar\CR =>Adware.Babylon
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabylonToolbar\FF =>Adware.Babylon
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabylonToolbar\IE =>Adware.Babylon
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabylonToolbar\Shared =>Adware.Babylon
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\LowRateVoip\Display Pictures =>PUP.Optional.LowRate
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\LowRateVoip\olivier121985 =>PUP.Optional.LowRate
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\mysearchdial\icons_2.2.3.689 =>Adware.MySearchDial
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\mysearchdial\UpdateProc =>Adware.MySearchDial
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\OfferBox\http_app.offerbox.com =>PUP.Optional.OfferBox
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\OpenCandy\3371006657E044ED9217153AC69E0FA2 =>Adware.OpenCandy
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\OpenCandy\AB2710E2649A4CD295DA1D059488C15C =>Adware.OpenCandy
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabSolution =>PUP.Optional.BabSolution
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\Babylon =>Adware.Babylon
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\BabylonToolbar =>Adware.Babylon
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\LowRateVoip =>PUP.Optional.LowRate
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\mysearchdial =>Adware.MySearchDial
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\OfferBox =>PUP.Optional.OfferBox
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\OpenCandy =>Adware.OpenCandy
TROUVÉ dossier: C:\Users\WIYAO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender =>PUP.Optional.BrowserDefender
TROUVÉ fichier: C:\Users\WIYAO\AppData\LocalLow\AskToolbar\cache.dat =>Toolbar.Ask
TROUVÉ fichier: C:\Users\WIYAO\AppData\LocalLow\AskToolbar\config.xml =>Toolbar.Ask
TROUVÉ fichier: C:\Users\WIYAO\AppData\LocalLow\AskToolbar\osearch.xml =>Toolbar.Ask
TROUVÉ dossier: C:\Users\WIYAO\AppData\LocalLow\AskToolbar\APNU =>Toolbar.Ask
TROUVÉ dossier: C:\Users\WIYAO\AppData\LocalLow\AskToolbar =>Toolbar.Ask
TROUVÉ fichier: C:\Users\WIYAO\AppData\Local\messengerdusexe\.config =>.SUP.Rentabiliweb
TROUVÉ dossier: C:\Users\WIYAO\AppData\Local\messengerdusexe =>.SUP.Rentabiliweb
TROUVÉ dossier: C:\ProgramData\Ask =>Toolbar.Ask
TROUVÉ dossier: C:\Users\WIYAO\AppData\Local\Google\Update =>Heuristic.Suspect
---\\ BASE DE REGISTRES ( Clés, Valeurs, Données ). (83)
TROUVÉ valeur: [X64] HKLM\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\\fmconverter@gmail.com [C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\] =>.SUP.Spigot
TROUVÉ clé: HKCU\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff [] =>Hijacker.Browser
TROUVÉ clé: [X64] HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff [] =>Hijacker.Browser
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb [] =>Hijacker.Browser
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff [] =>Hijacker.Browser
TROUVÉ clé: HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff [C:\Users\WIYAO\AppData\Local\mysearchdial_speedial_v9.0.2.crx] =>PUP.Optional.MyWebSearch
TROUVÉ clé: [X64] HKLM\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff [C:\Users\WIYAO\AppData\Local\mysearchdial_speedial_v9.0.2.crx] =>PUP.Optional.MyWebSearch
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B} [Babylon toolbar helper] =>Adware.Babylon
TROUVÉ clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B} [] =>Adware.Babylon
TROUVÉ clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B} [] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B} [Babylon toolbar helper] =>Adware.Babylon
TROUVÉ valeur: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} [Babylon Toolbar] =>Adware.Babylon
TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} [http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=0ADC1078D2DF3A4C&affID=119357&tsp=[...]] [Delta Search] =>.SUP.DeltaSearch
TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd54&cd=2XzuyEtN2Y1L1QzutCtDyBzz0[...]] [Mysearchdial] =>Adware.MySearchDial
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd54&cd=2XzuyEtN2Y1L1QzutCtDyBzz0[...]] [Mysearchdial] =>Adware.MySearchDial
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550255185502} [ICrossriderBHO] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660266186602} [ISandBox] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440244184402} [] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{55555555-5555-5555-5555-550255185502} [ICrossriderBHO] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66666666-6666-6666-6666-660266186602} [ISandBox] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{44444444-4444-4444-4444-440244184402} [] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211181102} [] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110211181102} [] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211181102} [] =>Adware.CrossRider
TROUVÉ clé: HKCU\Software\InstallCore\1I1T1Q1S [] =>Heuristic.InstallCore
TROUVÉ clé: HKCU\Software\InstallCore\Custom [] =>Heuristic.InstallCore
TROUVÉ clé: HKCU\Software\InstallCore\mysearchdial [] =>Heuristic.InstallCore
TROUVÉ clé: HKCU\Software\InstallCore\Uninstall [] =>Heuristic.InstallCore
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\InstallCore\mysearchdial [] =>Heuristic.InstallCore
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\BabSolution [] =>PUP.Optional.BabSolution
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\BabylonToolbar [] =>Adware.Babylon
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\DataMngr [] =>Adware.Searchqu
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\InstallCore [] =>Adware.InstallCore
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\InstalledBrowserExtensions [] =>PUP.Optional.VidSaver
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\mysearchdial [] =>PUP.Optional.Hotbar
TROUVÉ clé: HKEY_USERS\S-1-5-21-1585671971-3633617115-168381053-1000\SOFTWARE\OfferBox [] =>PUP.Optional.OfferBox
TROUVÉ clé: HKCU\Software\BabSolution [] =>PUP.Optional.BabSolution
TROUVÉ clé: HKCU\Software\BabylonToolbar [] =>Adware.Babylon
TROUVÉ clé: HKCU\Software\DataMngr [] =>Adware.Searchqu
TROUVÉ clé: HKCU\Software\InstallCore [] =>Adware.InstallCore
TROUVÉ clé: HKCU\Software\InstalledBrowserExtensions [] =>PUP.Optional.VidSaver
TROUVÉ clé: HKCU\Software\mysearchdial [] =>PUP.Optional.Hotbar
TROUVÉ clé: HKCU\Software\OfferBox [] =>PUP.Optional.OfferBox
TROUVÉ clé: HKCU\Software\TeleCharger_v2 [] =>.SUP.Downloader
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\Prod.cap [] =>PUP.Optional.ClaroSearch
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\Babylon.dskBnd [CDskBnd Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\Babylon.dskBnd.1 [CDskBnd Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\bbylnApp.appCore [appCore Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\bbylnApp.appCore.1 [appCore Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\escort.escrtBtn.1 [escrtBtn Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE [] =>PUP.Optional.VShareRedir
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} [] =>PUP.Optional.Wajam
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8} [] =>Adware.MySearchDial
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0} [esrv] =>Adware.MySearchDial
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} [] =>.SUP.DeltaSearch
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr [CescrtHlpr Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1 [CescrtHlpr Object] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\Software\Classes\Installer\Products\3192AA38321C641458DBDAF83979D193 [BabylonObjectInstaller] =>Adware.Babylon
TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WebCakeUpdaterService [] =>PUP.Optional.WebCake
TROUVÉ clé: [X64] HKLM\SOFTWARE\Tarma Installer [] =>Adware.Tarma
TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DropboxUpdateTaskUserS-1-5-21-1585671971-3633617115-168381053-1000Core [] =>PUP.Optional.UpdateTask
TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DropboxUpdateTaskUserS-1-5-21-1585671971-3633617115-168381053-1000UA [] =>PUP.Optional.UpdateTask
TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MySearchDial [] =>PUP.Optional.Hotbar
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Babylon [] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\BabylonToolbar [] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\DataMngr [] =>Adware.Searchqu
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\InstallCore [] =>Adware.InstallCore
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\OfferBox [] =>PUP.Optional.OfferBox
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\ScriptHelper.EXE [] =>PUP.Optional.VShareRedir
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} [] =>PUP.Optional.Wajam
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8} [] =>Adware.MySearchDial
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0} [esrv] =>Adware.MySearchDial
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} [] =>.SUP.DeltaSearch
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar [Babylon toolbar on IE] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Shopping Sidekick Plugin [215 Apps] =>PUP.Optional.VidSaver
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} [Bit89 Inc] =>PUP.Optional.BrowserDefender
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39} [Babylon Ltd] =>Adware.Babylon
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211181102} [C:\Program Files (x86)\Shopping Sidekick Plugin] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110211181102} [C:\Program Files (x86)\Shopping Sidekick Plugin] =>Adware.CrossRider
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8} [C:\Program Files (x86)\Mysearchdial\\ (Not File)] =>PUP.Optional.Hotbar
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542} [C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17 (Not File)] =>Adware.Babylon
TROUVÉ clé: HKCU\SOFTWARE\5b578a8ab73eee10 [] =>Hijacker.Browser
TROUVÉ valeur: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\\bProtectorDefaultScope [{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}] =>Adware.BProtector
---\\ RÉCAPITULATIF DES ÉLÉMENTS TROUVÉS SUR VOTRE STATION. (36)
https://nicolascoolman.eu/2017/03/03/adware-babylon/ =>Adware.Babylon
https://nicolascoolman.eu/2017/12/23/adware-mysearchdial/ =>Adware.MySearchDial
https://nicolascoolman.eu/2017/09/08/adware-imbooster/ =>PUP.Optional.IMBooster
https://nicolascoolman.eu/2017/02/07/pup-optional-searchprotect/ =>PUP.Optional.SearchProtect
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.MySearch
https://www.anti-malware.top/2016/05/08/superfluous-spigot/ =>.SUP.Spigot
https://nicolascoolman.eu/2017/11/10/hijacker-browser-3/ =>Hijacker.Browser
https://nicolascoolman.eu/2017/02/25/adware-pirrit/ =>Adware.Pirrit
https://nicolascoolman.eu/2017/09/19/adware-installcore-3/ =>Heuristic.InstallCore
https://nicolascoolman.eu/2017/03/02/adware-suspect/ =>Adware.Suspect
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Adware.GenericTask
https://nicolascoolman.eu/2017/09/09/adware-tarma/ =>Adware.Tarma
https://nicolascoolman.eu/2017/09/27/adware-socialskinz/ =>Adware.SocialSkinz
https://nicolascoolman.eu/2017/04/12/adware-bprotector/ =>Adware.BProtector
https://www.anti-malware.top/2016/06/01/pup-optional-speeddial/ =>PUP.Optional.SpeedDial
https://nicolascoolman.eu/2017/02/28/toolbar-ask/ =>Toolbar.Ask
https://www.nicolascoolman.com/fr/pup-optional-lowrate/ =>PUP.Optional.LowRate
https://nicolascoolman.eu/2017/10/15/adware-offerbox/ =>PUP.Optional.OfferBox
https://www.nicolascoolman.com/fr/hijacker-babsolution/ =>PUP.Optional.BabSolution
https://nicolascoolman.eu/2017/02/24/adware-opencandy/ =>Adware.OpenCandy
https://nicolascoolman.eu/2017/09/27/pup-optional-browserdefender/ =>PUP.Optional.BrowserDefender
https://www.anti-malware.top/2016/05/02/superfluous-rentabiliweb/ =>.SUP.Rentabiliweb
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect
https://nicolascoolman.eu/2017/12/17/adware-mywebsearch/ =>PUP.Optional.MyWebSearch
https://nicolascoolman.eu/2017/09/29/sup-deltasearch/ =>.SUP.DeltaSearch
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider
https://nicolascoolman.eu/2017/10/15/adware-searchqu/ =>Adware.Searchqu
https://nicolascoolman.eu/2017/09/19/adware-installcore-3/ =>Adware.InstallCore
https://nicolascoolman.eu/2017/10/23/adware-vidsaver/ =>PUP.Optional.VidSaver
https://www.nicolascoolman.com/fr/adware-hotbar/ =>PUP.Optional.Hotbar
https://nicolascoolman.eu/2017/12/22/sup-downloader/ =>.SUP.Downloader
https://www.nicolascoolman.com/fr/pup-clarosearch/ =>PUP.Optional.ClaroSearch
https://www.nicolascoolman.com/fr/pup-vshareredir/ =>PUP.Optional.VShareRedir
https://nicolascoolman.eu/2017/02/24/pup-optional-wajam/ =>PUP.Optional.Wajam
https://www.nicolascoolman.com/fr/adware-webcake/ =>PUP.Optional.WebCake
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.UpdateTask
---\\ BILAN DE LA REPARATION
~ Aucune réparation effectuée.
~ Ce navigateur est absent (Opera Software)
---\\ STATISTIQUES
~ Items scannés : 112431
~ Items trouvés : 170
~ Items annulés : 0
~ Items options : 0/7
~ Gain de place (Octets) : 0
~ End of search in 00h06mn46s
ZHPCleaner-[S]-04052018-12_00_24.txt