Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPFix v2018.6.28.143 by Nicolas Coolman (2018/06/28)
~ Run by carolive (Administrator) (04/07/2018 15:55:01)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\carolive\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 17134)
---\\ SCRIPT DE L'UTILISATEUR. (124)
Script ZHPFix
O4 - HKCU\..\Run: [HP Photosmart 6510 series (NET)] . (. - .) -- 1.
O4 - HKUS\S-1-5-21-1353393694-1970182662-4138011308-1000\..\Run: [HP Photosmart 6510 series (NET)] . (. - .) -- 1.
G2 - GCE: Preference [carolive][User Data\Default] [fgkeilefmpmbamgcejhjpiecahcbipip] Booking.com for Chrome
G2 - GCE: Preference [carolive][User Data\Default] [pepoggcjhfobfcdfmpfokfighfjnfhjk] Open FromDocToPDF New Tab
SS - Demand [16/10/2013] [ 235216] McAfee Security Scan Component Host Service for Sony (McComponentHostServiceSony) . (.McAfee, Inc..) - C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe =>.McAfee, Inc.®
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:QuickTime Task
HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
HKU\S-1-5-18\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
HKCU\Software\WEBAPP
HKCU\Software\TeleCharger_v2
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion
HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
HKLM\SOFTWARE\Lavasoft\Web Companion
HKLM\SOFTWARE\WOW6432Node\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\McAfee.com =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\McAfeeInstaller =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\mcafeeupdater =>.McAfee Inc.
HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
HKLM\System\CurrentControlSet\Services\EventLog\Reason\ReasonByteFence
HKLM\SOFTWARE\AssistPoint
HKLM\SOFTWARE\Conduit
HKLM\SOFTWARE\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\McAfee.com =>.McAfee Inc.
HKLM\SOFTWARE\McAfeeInstaller =>.McAfee Inc.
HKLM\SOFTWARE\mcafeeupdater =>.McAfee Inc.
HKLM\SOFTWARE\SlimWare Utilities Inc
HKLM\SOFTWARE\WOW6432Node\AssistPoint
HKLM\SOFTWARE\WOW6432Node\Conduit
HKLM\SOFTWARE\WOW6432Node\SlimWare Utilities Inc
HKCU\SOFTWARE\FWT_DLM
HKCU\SOFTWARE\MCAFEE =>.McAfee Inc.
HKU\S-1-5-21-1353393694-1970182662-4138011308-1000\SOFTWARE\MCAFEE =>.McAfee Inc.
HKCU\SOFTWARE\rttasks
HKCU\SOFTWARE\WeatherAlerts
HKCU\SOFTWARE\AppDataLow\Software\a2zLyrics-16
HKU\S-1-5-21-1353393694-1970182662-4138011308-1000\SOFTWARE\rttasks
HKU\S-1-5-21-1353393694-1970182662-4138011308-1000\SOFTWARE\WeatherAlerts
O108 - CMH1: VersionsPageShellExt [64Bits] - {9E42900A-85F9-4E67-9778-575FBBA0A81C} . (.Orphan.)
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH1: WondershareVideoConverterFileOpreation [64Bits] - {FEB746CA-95C2-485F-B386-C30D4E56D22E} . (.Orphan.)
O108 - CMH5: Gadgets [64Bits] - {6B9228DA-9C15-419e-856C-19E768A13BDC} . (.Orphan.)
O108 - CMH6: VersionsPageShellExt [64Bits] - {9E42900A-85F9-4E67-9778-575FBBA0A81C} . (.Orphan.)
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH7: VirtualCloneDrive [64Bits] - [CC]{B7056B8E-4F99-44f8-8CBD-282390FE5428} . (.Orphan.)
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Safari\Safari.ex http://www.mystartsearch.com/ (.not file.)
O53 - SMSR:HKLM\...\startupreg\BCSSync [Key] [64Bits] . (...) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite [Key] [64Bits] . (...) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\HP Photosmart 6510 series (NET) [Key] [64Bits] . (...) -- 1. (.not file.)
O53 - SMSR:HKLM\...\startupreg\Lync [Key] [64Bits] . (...) -- C:\Program Files\Microsoft Office\Office15\lync.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\OfficeSyncProcess [Key] [64Bits] . (...) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (.not file.)
O53 - SMSR:HKLM\...\startupreg\PWRISOVM.EXE [Key] [64Bits] . (...) -- C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (.not file.)
O53 - SMSR:HKLM\...\startupreg\Skype [Key] [64Bits] . (...) -- C:\Program Files (x86)\Skype\Phone\Skype.exe (.not file.)
O58 - SDL:2015/04/11 17:13:09 A . (...) -- C:\WINDOWS\System32\drivers\TrueSight.sys [37624] =>.Adlice®
O90 - PUC: "01CFF726A0ECF794ABB202C8CA360801" [HKLM] . (.QuickTime 7.) -- C:\Windows\Installer\{627FFC10-CE0A-497F-BA2B-208CAC638010}\Installer.ico
O90 - PUC: "1213047D2C86CB8478D44008516ED00F" [HKCU] . (.Yahoo Community Smartbar.) -- %APPDATA%\Microsoft\Installer\{D7403121-68C2-48BC-874D-048015E60DF0}\icon.ico
O90 - PUC: "1213047D2C86CB8478D44008516ED00F" [HKU] . (.Yahoo Community Smartbar.) -- %APPDATA%\Microsoft\Installer\{D7403121-68C2-48BC-874D-048015E60DF0}\icon.ico
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fgkeilefmpmbamgcejhjpiecahcbipip
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pepoggcjhfobfcdfmpfokfighfjnfhjk
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA58ED58-01DD-4d91-8333-CF10577473F7}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{627FFC10-CE0A-497F-BA2B-208CAC638010}
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{627FFC10-CE0A-497F-BA2B-208CAC638010}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Picasa Packages
C:\Program Files\Plumbytes Software
C:\Program Files (x86)\QuickTime
C:\Program Files (x86)\RelayEdit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
C:\Users\carolive\AppData\Local\@ByELDI
C:\Users\carolive\AppData\Local\Akamai
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\VersionsPageShellExt
HKLM\Software\Classes\CLSID\{9E42900A-85F9-4E67-9778-575FBBA0A81C}
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WondershareVideoConverterFileOpreation
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\VersionsPageShellExt
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\VirtualCloneDrive
HKLM\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Safari.exe\shell\Open\command
HKCU\Software\Microsoft\Installer\Products\1213047D2C86CB8478D44008516ED00F
HKCU\Software\Microsoft\Installer\Features\1213047D2C86CB8478D44008516ED00F
HKU\S-1-5-21-1353393694-1970182662-4138011308-1000\Software\Microsoft\Installer\Products\1213047D2C86CB8478D44008516ED00F
HKU\S-1-5-21-1353393694-1970182662-4138011308-1000\Software\Microsoft\Installer\Features\1213047D2C86CB8478D44008516ED00F
O43 - CFD: 04/12/2014 - [0] D -- C:\Program Files (x86)\DeltaFix =>.SUP.Empty
O43 - CFD: 18/09/2016 - [0] D -- C:\Program Files (x86)\McAfee =>.McAfee
O43 - CFD: 18/12/2017 - [] D -- C:\ProgramData\McAfee =>.McAfee
O43 - CFD: 14/02/2017 - [] D -- C:\ProgramData\Norton =>.Symantec Corporation
O43 - CFD: 14/02/2017 - [] D -- C:\ProgramData\NortonInstaller =>.Symantec
O43 - CFD: 11/04/2015 - [] D -- C:\ProgramData\RogueKiller =>.Adlice Software
O43 - CFD: 17/09/2016 - [] D -- C:\Program Files (x86)\Common Files\McAfee =>.McAfee
O43 - CFD: 18/02/2015 - [] D -- C:\Users\carolive\AppData\Local\@ByELDI =>HackTool.KMSpico
O43 - CFD: 31/08/2017 - [] D -- C:\Users\carolive\AppData\Local\Akamai =>.SUP.AkamaiHD
O43 - CFD: 18/12/2017 - [] D -- C:\Users\carolive\AppData\Local\McAfee_Inc =>.McAfee Inc.
C:\WINDOWS\Installer\17bf29.msp
C:\WINDOWS\Installer\1c6ff9.msp
C:\WINDOWS\Installer\2c8862.msp
C:\WINDOWS\Installer\30a41a.msp
C:\WINDOWS\Installer\603667.msp
C:\WINDOWS\Installer\65ccf2.msp
C:\WINDOWS\Installer\98306e.msp
C:\WINDOWS\Installer\9cb18.msp
C:\WINDOWS\Installer\ab7f9.msp
C:\WINDOWS\Installer\c85dc.msp
C:\WINDOWS\Installer\f0e40.msp
C:\WINDOWS\Installer\f34e7.msp
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\000
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\001
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\002
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\003
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\004
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\005
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\Plugins
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]:{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
SysRestore
FirewallRaz
EmptyPrefetch
EmptyCLSID
EmptyFlash
Emptytemp
ShortcutFix
---\\ LOGICIEL. (0)
---\\ SERVICE. (0)
---\\ TÂCHE PLANIFIÉE. (0)
---\\ NAVIGATEUR INTERNET. (3)
SUPPRIMÉ Dossier Chrome: C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkeilefmpmbamgcejhjpiecahcbipip
SUPPRIMÉ Dossier Chrome: C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\Extensions\pepoggcjhfobfcdfmpfokfighfjnfhjk
SUPPRIMÉ Clé StartMenuInternet: HKLM64\SOFTWARE\Clients\StartMenuInternet\Safari.exe [Safari.ex http://www.mystartsearch.com/ (.not file.)]
---\\ EXPLORATEUR ( Dossiers, Fichiers ). (85)
DEPLACÉ Fichier Service: C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe
DEPLACÉ Fichier Drivers: C:\WINDOWS\System32\drivers\TrueSight.sys
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pepoggcjhfobfcdfmpfokfighfjnfhjk
SUPPRIMÉ Dossier : C:\Program Files\Plumbytes Software
SUPPRIMÉ Dossier : C:\Program Files (x86)\QuickTime
SUPPRIMÉ Dossier : C:\Program Files (x86)\RelayEdit
SUPPRIMÉ Dossier : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\@ByELDI
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Akamai
SUPPRIMÉ Dossier : C:\Program Files (x86)\DeltaFix
SUPPRIMÉ Dossier : C:\Program Files (x86)\McAfee
SUPPRIMÉ Dossier : C:\ProgramData\McAfee
SUPPRIMÉ Dossier : C:\ProgramData\Norton
SUPPRIMÉ Dossier : C:\ProgramData\NortonInstaller
SUPPRIMÉ Dossier : C:\ProgramData\RogueKiller
SUPPRIMÉ Dossier : C:\Program Files (x86)\Common Files\McAfee
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\McAfee_Inc
DEPLACÉ Fichier : C:\WINDOWS\Installer\17bf29.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\1c6ff9.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\2c8862.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\30a41a.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\603667.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\65ccf2.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\98306e.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\9cb18.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\ab7f9.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\c85dc.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\f0e40.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\f34e7.msp
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\000
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\001
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\002
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\003
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\004
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\005
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\Plugins
SUPPRIMÉ Dossier EmptyCLSID: C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
SUPPRIMÉ Dossier EmptyCLSID: C:\ProgramData\{e2928ddf-8e8f-73eb-e292-28ddf8e8377e}
SUPPRIMÉ Dossier EmptyCLSID: C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\carolive\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\carolive\AppData\Local\{01018010-5A2E-47CC-B542-AC65C4822194}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\carolive\AppData\Local\{19BB03C3-30B4-4C72-ACAD-CBFF50BF8BA4}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\carolive\AppData\Local\{21B259AE-3658-4027-9DA9-E9495A4458B0}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\carolive\AppData\Local\{9687228A-9BA6-4C55-81EA-E2EBE74BE258}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\carolive\AppData\Local\{F20EAFB3-9E7F-46C9-AA09-C3F2ABAED287}
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\AdobeARM.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-11124.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-14228.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-15096.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-15616.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-16364.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-16712.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-17672.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-2736.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-3112.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-3672.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-3820.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-9604.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180626-1849.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180626-1902.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180626-1930.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180626-2000.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180629-1342.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180701-1603.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180701-1818.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180703-1443.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180704-1530.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\jusched.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\StructuredQuery.log
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB50A.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB50B.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB51C.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB51D.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB51E.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB53F.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB55F.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB570.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB571.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB591.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB592.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB5E1.tmp
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\wct3CB7.tmp
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\wct6864.tmp
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\wctA7EA.tmp
DEPLACÉ Fichier Temp*: C:\Users\carolive\AppData\Local\Temp\scoped_dir8792_32134
---\\ REGISTRE ( Clés, Valeurs, Données ). (49)
SUPPRIMÉ Valeur Run: HP Photosmart 6510 series (NET) [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\]
ABSENT Valeur Run: HKU\S-1-5-21-1353393694-1970182662-4138011308-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ [1.]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\McComponentHostServiceSony [McCHSvc.exe]
SUPPRIMÉ Clé: HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} [{12DA0E6F-5543-440C-BAA2-28BF01070AFA}]
SUPPRIMÉ Clé: HKCU\Software\WEBAPP [WEBAPP]
SUPPRIMÉ Clé: HKCU\Software\TeleCharger_v2 [TeleCharger_v2]
SUPPRIMÉ Clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com [webcompanion.com]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion [Web Companion]
SUPPRIMÉ Clé: HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} [{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}]
SUPPRIMÉ Clé: HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81} [{12A61307-94CD-4F8E-94BC-918E511FAA81}]
SUPPRIMÉ Clé*: HKLM\SOFTWARE\WOW6432Node\McAfee [McAfee ]
SUPPRIMÉ Clé*: HKLM\SOFTWARE\WOW6432Node\McAfee.com [McAfee.com ]
SUPPRIMÉ Clé*: HKLM\SOFTWARE\WOW6432Node\McAfeeInstaller [McAfeeInstaller ]
SUPPRIMÉ Clé*: HKLM\SOFTWARE\WOW6432Node\mcafeeupdater [mcafeeupdater ]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36} [{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}]
SUPPRIMÉ Clé: HKLM\System\CurrentControlSet\Services\EventLog\Reason\ReasonByteFence [ReasonByteFence]
SUPPRIMÉ Clé: HKLM\SOFTWARE\AssistPoint [AssistPoint]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Conduit [Conduit]
SUPPRIMÉ Clé: HKLM\SOFTWARE\SlimWare Utilities Inc [SlimWare Utilities Inc]
SUPPRIMÉ Clé: HKCU\SOFTWARE\FWT_DLM [FWT_DLM]
SUPPRIMÉ Clé*: HKCU\SOFTWARE\MCAFEE [MCAFEE ]
SUPPRIMÉ Clé: HKCU\SOFTWARE\rttasks [rttasks]
SUPPRIMÉ Clé: HKCU\SOFTWARE\WeatherAlerts [WeatherAlerts]
SUPPRIMÉ Clé: HKCU\SOFTWARE\AppDataLow\Software\a2zLyrics-16 [a2zLyrics-16]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\VersionsPageShellExt [VersionsPageShellExt1]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR321]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\WondershareVideoConverterFileOpreation [WondershareVideoConverterFileOpreation1]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets [Gadgets5]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\VersionsPageShellExt [VersionsPageShellExt6]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR326]
SUPPRIMÉ Clé CMH: HKLM64\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\VirtualCloneDrive [VirtualCloneDrive7]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BCSSync [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DAEMON Tools Lite [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HP Photosmart 6510 series (NET) [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Lync [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\OfficeSyncProcess [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PWRISOVM.EXE [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Skype [No File found]
SUPPRIMÉ Clé Product: HKLM64\Software\Classes\Installer\Products\01CFF726A0ECF794ABB202C8CA360801 [QuickTime 7]
SUPPRIMÉ Clé Product: HKCU\Software\Microsoft\Installer\Products\1213047D2C86CB8478D44008516ED00F [Yahoo Community Smartbar]
SUPPRIMÉ Clé: HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7} [{AA58ED58-01DD-4d91-8333-CF10577473F7}]
SUPPRIMÉ Clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA58ED58-01DD-4d91-8333-CF10577473F7} [{AA58ED58-01DD-4d91-8333-CF10577473F7}]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{627FFC10-CE0A-497F-BA2B-208CAC638010} [{627FFC10-CE0A-497F-BA2B-208CAC638010}]
SUPPRIMÉ Clé: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Picasa Packages [Picasa Packages]
SUPPRIMÉ Clé: HKLM\Software\Classes\CLSID\{9E42900A-85F9-4E67-9778-575FBBA0A81C} [{9E42900A-85F9-4E67-9778-575FBBA0A81C}]
SUPPRIMÉ Clé: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} [{B41DB860-8EE4-11D2-9906-E49FADC173CA}]
SUPPRIMÉ Clé: HKCU\Software\Microsoft\Installer\Features\1213047D2C86CB8478D44008516ED00F [1213047D2C86CB8478D44008516ED00F]
SUPPRIMÉ Valeur: QuickTime Task [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
---\\ COMMANDE. (4)
~ EmptyPrefetch: Fichiers Prefetcher supprimés (169)
~ EmptyCSID: Dossiers CLSID vides supprimés (9)
~ EmptyFlash: Fichiers Temporaires supprimés. (2)
~ EmptyTemp: Dossier Local temp partiellement vidé (40)
---\\ NON TRAITÉ. (3)
SysRestore
FirewallRaz
ShortcutFix
~ Le système a été redémarré.
***** ~ Fin de rapport terminé en 00h02mn51s
~ Run by carolive (Administrator) (04/07/2018 15:55:01)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\carolive\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 17134)
---\\ SCRIPT DE L'UTILISATEUR. (124)
Script ZHPFix
O4 - HKCU\..\Run: [HP Photosmart 6510 series (NET)] . (. - .) -- 1.
O4 - HKUS\S-1-5-21-1353393694-1970182662-4138011308-1000\..\Run: [HP Photosmart 6510 series (NET)] . (. - .) -- 1.
G2 - GCE: Preference [carolive][User Data\Default] [fgkeilefmpmbamgcejhjpiecahcbipip] Booking.com for Chrome
G2 - GCE: Preference [carolive][User Data\Default] [pepoggcjhfobfcdfmpfokfighfjnfhjk] Open FromDocToPDF New Tab
SS - Demand [16/10/2013] [ 235216] McAfee Security Scan Component Host Service for Sony (McComponentHostServiceSony) . (.McAfee, Inc..) - C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe =>.McAfee, Inc.®
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:QuickTime Task
HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
HKU\S-1-5-18\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
HKCU\Software\WEBAPP
HKCU\Software\TeleCharger_v2
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion
HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
HKLM\SOFTWARE\Lavasoft\Web Companion
HKLM\SOFTWARE\WOW6432Node\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\McAfee.com =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\McAfeeInstaller =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\mcafeeupdater =>.McAfee Inc.
HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
HKLM\System\CurrentControlSet\Services\EventLog\Reason\ReasonByteFence
HKLM\SOFTWARE\AssistPoint
HKLM\SOFTWARE\Conduit
HKLM\SOFTWARE\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\McAfee.com =>.McAfee Inc.
HKLM\SOFTWARE\McAfeeInstaller =>.McAfee Inc.
HKLM\SOFTWARE\mcafeeupdater =>.McAfee Inc.
HKLM\SOFTWARE\SlimWare Utilities Inc
HKLM\SOFTWARE\WOW6432Node\AssistPoint
HKLM\SOFTWARE\WOW6432Node\Conduit
HKLM\SOFTWARE\WOW6432Node\SlimWare Utilities Inc
HKCU\SOFTWARE\FWT_DLM
HKCU\SOFTWARE\MCAFEE =>.McAfee Inc.
HKU\S-1-5-21-1353393694-1970182662-4138011308-1000\SOFTWARE\MCAFEE =>.McAfee Inc.
HKCU\SOFTWARE\rttasks
HKCU\SOFTWARE\WeatherAlerts
HKCU\SOFTWARE\AppDataLow\Software\a2zLyrics-16
HKU\S-1-5-21-1353393694-1970182662-4138011308-1000\SOFTWARE\rttasks
HKU\S-1-5-21-1353393694-1970182662-4138011308-1000\SOFTWARE\WeatherAlerts
O108 - CMH1: VersionsPageShellExt [64Bits] - {9E42900A-85F9-4E67-9778-575FBBA0A81C} . (.Orphan.)
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH1: WondershareVideoConverterFileOpreation [64Bits] - {FEB746CA-95C2-485F-B386-C30D4E56D22E} . (.Orphan.)
O108 - CMH5: Gadgets [64Bits] - {6B9228DA-9C15-419e-856C-19E768A13BDC} . (.Orphan.)
O108 - CMH6: VersionsPageShellExt [64Bits] - {9E42900A-85F9-4E67-9778-575FBBA0A81C} . (.Orphan.)
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH7: VirtualCloneDrive [64Bits] - [CC]{B7056B8E-4F99-44f8-8CBD-282390FE5428} . (.Orphan.)
O68 - StartMenuInternet:
O53 - SMSR:HKLM\...\startupreg\BCSSync [Key] [64Bits] . (...) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite [Key] [64Bits] . (...) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\HP Photosmart 6510 series (NET) [Key] [64Bits] . (...) -- 1. (.not file.)
O53 - SMSR:HKLM\...\startupreg\Lync [Key] [64Bits] . (...) -- C:\Program Files\Microsoft Office\Office15\lync.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\OfficeSyncProcess [Key] [64Bits] . (...) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (.not file.)
O53 - SMSR:HKLM\...\startupreg\PWRISOVM.EXE [Key] [64Bits] . (...) -- C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (.not file.)
O53 - SMSR:HKLM\...\startupreg\Skype [Key] [64Bits] . (...) -- C:\Program Files (x86)\Skype\Phone\Skype.exe (.not file.)
O58 - SDL:2015/04/11 17:13:09 A . (...) -- C:\WINDOWS\System32\drivers\TrueSight.sys [37624] =>.Adlice®
O90 - PUC: "01CFF726A0ECF794ABB202C8CA360801" [HKLM] . (.QuickTime 7.) -- C:\Windows\Installer\{627FFC10-CE0A-497F-BA2B-208CAC638010}\Installer.ico
O90 - PUC: "1213047D2C86CB8478D44008516ED00F" [HKCU] . (.Yahoo Community Smartbar.) -- %APPDATA%\Microsoft\Installer\{D7403121-68C2-48BC-874D-048015E60DF0}\icon.ico
O90 - PUC: "1213047D2C86CB8478D44008516ED00F" [HKU] . (.Yahoo Community Smartbar.) -- %APPDATA%\Microsoft\Installer\{D7403121-68C2-48BC-874D-048015E60DF0}\icon.ico
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fgkeilefmpmbamgcejhjpiecahcbipip
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pepoggcjhfobfcdfmpfokfighfjnfhjk
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA58ED58-01DD-4d91-8333-CF10577473F7}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{627FFC10-CE0A-497F-BA2B-208CAC638010}
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{627FFC10-CE0A-497F-BA2B-208CAC638010}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Picasa Packages
C:\Program Files\Plumbytes Software
C:\Program Files (x86)\QuickTime
C:\Program Files (x86)\RelayEdit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
C:\Users\carolive\AppData\Local\@ByELDI
C:\Users\carolive\AppData\Local\Akamai
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\VersionsPageShellExt
HKLM\Software\Classes\CLSID\{9E42900A-85F9-4E67-9778-575FBBA0A81C}
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WondershareVideoConverterFileOpreation
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\VersionsPageShellExt
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\VirtualCloneDrive
HKLM\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Safari.exe\shell\Open\command
HKCU\Software\Microsoft\Installer\Products\1213047D2C86CB8478D44008516ED00F
HKCU\Software\Microsoft\Installer\Features\1213047D2C86CB8478D44008516ED00F
HKU\S-1-5-21-1353393694-1970182662-4138011308-1000\Software\Microsoft\Installer\Products\1213047D2C86CB8478D44008516ED00F
HKU\S-1-5-21-1353393694-1970182662-4138011308-1000\Software\Microsoft\Installer\Features\1213047D2C86CB8478D44008516ED00F
O43 - CFD: 04/12/2014 - [0] D -- C:\Program Files (x86)\DeltaFix =>.SUP.Empty
O43 - CFD: 18/09/2016 - [0] D -- C:\Program Files (x86)\McAfee =>.McAfee
O43 - CFD: 18/12/2017 - [] D -- C:\ProgramData\McAfee =>.McAfee
O43 - CFD: 14/02/2017 - [] D -- C:\ProgramData\Norton =>.Symantec Corporation
O43 - CFD: 14/02/2017 - [] D -- C:\ProgramData\NortonInstaller =>.Symantec
O43 - CFD: 11/04/2015 - [] D -- C:\ProgramData\RogueKiller =>.Adlice Software
O43 - CFD: 17/09/2016 - [] D -- C:\Program Files (x86)\Common Files\McAfee =>.McAfee
O43 - CFD: 18/02/2015 - [] D -- C:\Users\carolive\AppData\Local\@ByELDI =>HackTool.KMSpico
O43 - CFD: 31/08/2017 - [] D -- C:\Users\carolive\AppData\Local\Akamai =>.SUP.AkamaiHD
O43 - CFD: 18/12/2017 - [] D -- C:\Users\carolive\AppData\Local\McAfee_Inc =>.McAfee Inc.
C:\WINDOWS\Installer\17bf29.msp
C:\WINDOWS\Installer\1c6ff9.msp
C:\WINDOWS\Installer\2c8862.msp
C:\WINDOWS\Installer\30a41a.msp
C:\WINDOWS\Installer\603667.msp
C:\WINDOWS\Installer\65ccf2.msp
C:\WINDOWS\Installer\98306e.msp
C:\WINDOWS\Installer\9cb18.msp
C:\WINDOWS\Installer\ab7f9.msp
C:\WINDOWS\Installer\c85dc.msp
C:\WINDOWS\Installer\f0e40.msp
C:\WINDOWS\Installer\f34e7.msp
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\000
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\001
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\002
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\003
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\004
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\005
C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\Plugins
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]:{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
SysRestore
FirewallRaz
EmptyPrefetch
EmptyCLSID
EmptyFlash
Emptytemp
ShortcutFix
---\\ LOGICIEL. (0)
---\\ SERVICE. (0)
---\\ TÂCHE PLANIFIÉE. (0)
---\\ NAVIGATEUR INTERNET. (3)
SUPPRIMÉ Dossier Chrome: C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkeilefmpmbamgcejhjpiecahcbipip
SUPPRIMÉ Dossier Chrome: C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\Extensions\pepoggcjhfobfcdfmpfokfighfjnfhjk
SUPPRIMÉ Clé StartMenuInternet: HKLM64\SOFTWARE\Clients\StartMenuInternet\Safari.exe [Safari.ex http://www.mystartsearch.com/ (.not file.)]
---\\ EXPLORATEUR ( Dossiers, Fichiers ). (85)
DEPLACÉ Fichier Service: C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe
DEPLACÉ Fichier Drivers: C:\WINDOWS\System32\drivers\TrueSight.sys
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pepoggcjhfobfcdfmpfokfighfjnfhjk
SUPPRIMÉ Dossier : C:\Program Files\Plumbytes Software
SUPPRIMÉ Dossier : C:\Program Files (x86)\QuickTime
SUPPRIMÉ Dossier : C:\Program Files (x86)\RelayEdit
SUPPRIMÉ Dossier : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\@ByELDI
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Akamai
SUPPRIMÉ Dossier : C:\Program Files (x86)\DeltaFix
SUPPRIMÉ Dossier : C:\Program Files (x86)\McAfee
SUPPRIMÉ Dossier : C:\ProgramData\McAfee
SUPPRIMÉ Dossier : C:\ProgramData\Norton
SUPPRIMÉ Dossier : C:\ProgramData\NortonInstaller
SUPPRIMÉ Dossier : C:\ProgramData\RogueKiller
SUPPRIMÉ Dossier : C:\Program Files (x86)\Common Files\McAfee
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\McAfee_Inc
DEPLACÉ Fichier : C:\WINDOWS\Installer\17bf29.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\1c6ff9.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\2c8862.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\30a41a.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\603667.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\65ccf2.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\98306e.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\9cb18.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\ab7f9.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\c85dc.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\f0e40.msp
DEPLACÉ Fichier : C:\WINDOWS\Installer\f34e7.msp
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\000
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\001
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\002
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\003
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\004
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\005
SUPPRIMÉ Dossier : C:\Users\carolive\AppData\Local\Google\Chrome\User Data\Default\File System\Plugins
SUPPRIMÉ Dossier EmptyCLSID: C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
SUPPRIMÉ Dossier EmptyCLSID: C:\ProgramData\{e2928ddf-8e8f-73eb-e292-28ddf8e8377e}
SUPPRIMÉ Dossier EmptyCLSID: C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\carolive\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\carolive\AppData\Local\{01018010-5A2E-47CC-B542-AC65C4822194}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\carolive\AppData\Local\{19BB03C3-30B4-4C72-ACAD-CBFF50BF8BA4}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\carolive\AppData\Local\{21B259AE-3658-4027-9DA9-E9495A4458B0}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\carolive\AppData\Local\{9687228A-9BA6-4C55-81EA-E2EBE74BE258}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\carolive\AppData\Local\{F20EAFB3-9E7F-46C9-AA09-C3F2ABAED287}
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\AdobeARM.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-11124.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-14228.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-15096.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-15616.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-16364.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-16712.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-17672.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-2736.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-3112.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-3672.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-3820.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\aria-debug-9604.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180626-1849.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180626-1902.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180626-1930.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180626-2000.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180629-1342.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180701-1603.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180701-1818.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180703-1443.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\CAROLIVE-VAIO-20180704-1530.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\jusched.log
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\StructuredQuery.log
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB50A.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB50B.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB51C.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB51D.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB51E.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB53F.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB55F.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB570.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB571.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB591.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB592.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\carolive\AppData\Local\Temp\TCDB5E1.tmp
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\wct3CB7.tmp
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\wct6864.tmp
DEPLACÉ Fichier Temp: C:\Users\carolive\AppData\Local\Temp\wctA7EA.tmp
DEPLACÉ Fichier Temp*: C:\Users\carolive\AppData\Local\Temp\scoped_dir8792_32134
---\\ REGISTRE ( Clés, Valeurs, Données ). (49)
SUPPRIMÉ Valeur Run: HP Photosmart 6510 series (NET) [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\]
ABSENT Valeur Run: HKU\S-1-5-21-1353393694-1970182662-4138011308-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ [1.]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\McComponentHostServiceSony [McCHSvc.exe]
SUPPRIMÉ Clé: HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} [{12DA0E6F-5543-440C-BAA2-28BF01070AFA}]
SUPPRIMÉ Clé: HKCU\Software\WEBAPP [WEBAPP]
SUPPRIMÉ Clé: HKCU\Software\TeleCharger_v2 [TeleCharger_v2]
SUPPRIMÉ Clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com [webcompanion.com]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion [Web Companion]
SUPPRIMÉ Clé: HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} [{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}]
SUPPRIMÉ Clé: HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81} [{12A61307-94CD-4F8E-94BC-918E511FAA81}]
SUPPRIMÉ Clé*: HKLM\SOFTWARE\WOW6432Node\McAfee [McAfee ]
SUPPRIMÉ Clé*: HKLM\SOFTWARE\WOW6432Node\McAfee.com [McAfee.com ]
SUPPRIMÉ Clé*: HKLM\SOFTWARE\WOW6432Node\McAfeeInstaller [McAfeeInstaller ]
SUPPRIMÉ Clé*: HKLM\SOFTWARE\WOW6432Node\mcafeeupdater [mcafeeupdater ]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36} [{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}]
SUPPRIMÉ Clé: HKLM\System\CurrentControlSet\Services\EventLog\Reason\ReasonByteFence [ReasonByteFence]
SUPPRIMÉ Clé: HKLM\SOFTWARE\AssistPoint [AssistPoint]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Conduit [Conduit]
SUPPRIMÉ Clé: HKLM\SOFTWARE\SlimWare Utilities Inc [SlimWare Utilities Inc]
SUPPRIMÉ Clé: HKCU\SOFTWARE\FWT_DLM [FWT_DLM]
SUPPRIMÉ Clé*: HKCU\SOFTWARE\MCAFEE [MCAFEE ]
SUPPRIMÉ Clé: HKCU\SOFTWARE\rttasks [rttasks]
SUPPRIMÉ Clé: HKCU\SOFTWARE\WeatherAlerts [WeatherAlerts]
SUPPRIMÉ Clé: HKCU\SOFTWARE\AppDataLow\Software\a2zLyrics-16 [a2zLyrics-16]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\VersionsPageShellExt [VersionsPageShellExt1]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR321]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\WondershareVideoConverterFileOpreation [WondershareVideoConverterFileOpreation1]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets [Gadgets5]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\VersionsPageShellExt [VersionsPageShellExt6]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR326]
SUPPRIMÉ Clé CMH: HKLM64\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\VirtualCloneDrive [VirtualCloneDrive7]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BCSSync [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DAEMON Tools Lite [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HP Photosmart 6510 series (NET) [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Lync [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\OfficeSyncProcess [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PWRISOVM.EXE [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Skype [No File found]
SUPPRIMÉ Clé Product: HKLM64\Software\Classes\Installer\Products\01CFF726A0ECF794ABB202C8CA360801 [QuickTime 7]
SUPPRIMÉ Clé Product: HKCU\Software\Microsoft\Installer\Products\1213047D2C86CB8478D44008516ED00F [Yahoo Community Smartbar]
SUPPRIMÉ Clé: HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7} [{AA58ED58-01DD-4d91-8333-CF10577473F7}]
SUPPRIMÉ Clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA58ED58-01DD-4d91-8333-CF10577473F7} [{AA58ED58-01DD-4d91-8333-CF10577473F7}]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{627FFC10-CE0A-497F-BA2B-208CAC638010} [{627FFC10-CE0A-497F-BA2B-208CAC638010}]
SUPPRIMÉ Clé: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Picasa Packages [Picasa Packages]
SUPPRIMÉ Clé: HKLM\Software\Classes\CLSID\{9E42900A-85F9-4E67-9778-575FBBA0A81C} [{9E42900A-85F9-4E67-9778-575FBBA0A81C}]
SUPPRIMÉ Clé: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} [{B41DB860-8EE4-11D2-9906-E49FADC173CA}]
SUPPRIMÉ Clé: HKCU\Software\Microsoft\Installer\Features\1213047D2C86CB8478D44008516ED00F [1213047D2C86CB8478D44008516ED00F]
SUPPRIMÉ Valeur: QuickTime Task [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
---\\ COMMANDE. (4)
~ EmptyPrefetch: Fichiers Prefetcher supprimés (169)
~ EmptyCSID: Dossiers CLSID vides supprimés (9)
~ EmptyFlash: Fichiers Temporaires supprimés. (2)
~ EmptyTemp: Dossier Local temp partiellement vidé (40)
---\\ NON TRAITÉ. (3)
SysRestore
FirewallRaz
ShortcutFix
~ Le système a été redémarré.
***** ~ Fin de rapport terminé en 00h02mn51s