Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPFix v2019.2.5.18 by Nicolas Coolman (2019/02/05)
~ Run by Christian (Administrator) (11/02/2019 18:24:49)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\Christian\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 17763)
---\\ SCRIPT DE L'UTILISATEUR. (92)
Script ZHPFix
EmptyCLSID
EmptyFlash
EmptyTemp
EmptyTracing
EmptyPrefetch
EmptyProxy
UnMaskSoftware: O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. (Hidden)
[MD5.DFC77FABC037078A5F7407B50BA298B7] [WIS][2014/09/03 13:11:39] (...) -- C:\WINDOWS\Installer\MSI2A4D.tmp-\Smartbar.Communication.dll
[MD5.F63B8C2EF4F3E781C75EC7578CD75E95] [WIS][2014/09/03 13:11:39] (...) -- C:\WINDOWS\Installer\MSI2A4D.tmp-\Smartbar.Communication.NamedPipe.dll
[MD5.DFC77FABC037078A5F7407B50BA298B7] [WIS][2014/09/03 13:12:01] (...) -- C:\WINDOWS\Installer\MSI7DAC.tmp-\Smartbar.Communication.dll
[MD5.F63B8C2EF4F3E781C75EC7578CD75E95] [WIS][2014/09/03 13:12:01] (...) -- C:\WINDOWS\Installer\MSI7DAC.tmp-\Smartbar.Communication.NamedPipe.dll
[MD5.DFC77FABC037078A5F7407B50BA298B7] [WIS][2014/09/03 13:12:27] (...) -- C:\WINDOWS\Installer\MSIE3BF.tmp-\Smartbar.Communication.dll
[MD5.F63B8C2EF4F3E781C75EC7578CD75E95] [WIS][2014/09/03 13:12:27] (...) -- C:\WINDOWS\Installer\MSIE3BF.tmp-\Smartbar.Communication.NamedPipe.dll
C:\WINDOWS\Installer\MSI2A4D.tmp-\Smartbar.Communication.dll
C:\WINDOWS\Installer\MSI2A4D.tmp-\Smartbar.Communication.NamedPipe.dll
C:\WINDOWS\Installer\MSI7DAC.tmp-\Smartbar.Communication.dll
C:\WINDOWS\Installer\MSI7DAC.tmp-\Smartbar.Communication.NamedPipe.dll
C:\WINDOWS\Installer\MSIE3BF.tmp-\Smartbar.Communication.dll
C:\WINDOWS\Installer\MSIE3BF.tmp-\Smartbar.Communication.NamedPipe.dll
O4 - HKLM\..\Run: [WindowsDefender] . (. - .) -- C:\Program Files\Windows Defender\MSASCuiL.exe (.Not File.)
O4 - HKCU\..\RunOnce: [Delete Cached Update Binary] . (. - .) -- /q /c del /q "C:\Users\Christian\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe (.Not File.)
O4 - HKCU\..\RunOnce: [Delete Cached Standalone Update Binary] . (. - .) -- /q /c del /q "C:\Users\Christian\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe (.Not File.)
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (. - .) -- C:\Program Files\AVAST Software\Avast\AvLaunch.exe (.Not File.)
O4 - HKUS\S-1-5-21-4215277605-4089420941-575653807-1000\..\RunOnce: [Delete Cached Update Binary] . (. - .) -- /q /c del /q "C:\Users\Christian\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe (.Not File.)
O4 - HKUS\S-1-5-21-4215277605-4089420941-575653807-1000\..\RunOnce: [Delete Cached Standalone Update Binary] . (. - .) -- /q /c del /q "C:\Users\Christian\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe (.Not File.)
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:win_en_77
O108 - CMH1: Cover Designer [64Bits] - [CC]{73FCA462-9BD5-4065-A73F-A8E5F6904EF7} . (.Orphan.)
O108 - CMH1: GSplitShell [64Bits] - {B46C1E0F-F61D-4B19-BC55-B68D8BB3CAFE} . (.Orphan.)
O108 - CMH1: UAContextMenu [64Bits] - {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} . (.Orphan.)
O108 - CMH1: WondershareVideoConverterFileOpreation [64Bits] - {FEB746CA-95C2-485F-B386-C30D4E56D22E} . (.Orphan.)
O108 - CMH5: Gadgets [64Bits] - {6B9228DA-9C15-419e-856C-19E768A13BDC} . (.Orphan.)
O108 - CMH5: UAContextMenu [64Bits] - {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} . (.Orphan.)
O108 - CMH6: UAContextMenu [64Bits] - {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} . (.Orphan.)
[MD5.16C2C7F273F2D33B1689CDCF1962124D] [WIS][2012/05/23 10:15:47] (.Aedge Performance BCN SL - MyPDFConverter.) -- C:\WINDOWS\Installer\121fb58.msi [11183104]
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Cover Designer
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\GSplitShell
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\UAContextMenu
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WondershareVideoConverterFileOpreation
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\UAContextMenu
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\UAContextMenu
C:\WINDOWS\Installer\121fb58.msi
HKLM\SOFTWARE\WOW6432Node\Software
HKCU\SOFTWARE\Software
HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\Software
O53 - SMSR:HKLM\...\startupreg\20150107 [Key] [64Bits] . (...) -- C:\Program Files\AVAST Software\Avast\setup\emupdate\61d0150d-237b-4355-a25e-3800fca47bd4.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Acrobat Assistant 8.0 [Key] [64Bits] . (...) -- C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Adobe Acrobat Synchronizer [Key] [64Bits] . (...) -- C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Adobe Speed Launcher [Key] [64Bits] . (...) -- 1430120664 (.not file.)
O53 - SMSR:HKLM\...\startupreg\AdobeAAMUpdater-1.0 [Key] [64Bits] . (...) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\DelaypluginInstall [Key] [64Bits] . (...) -- C:\ProgramData\Wondershare\Player\DelayPluginI.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\EaseUS EPM tray [Key] [64Bits] . (...) -- C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\EpmNews.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Google Update [Key] [64Bits] . (...) -- C:\Users\Christian\AppData\Local\Google\Update\GoogleUpdate.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\IAStorIcon [Key] [64Bits] . (...) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\KeyboardLeds.exe [Key] [64Bits] . (...) -- C:\Program Files (x86)\Keyboard Leds\KeyboardLeds.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Malwarebytes Anti-Malware [Key] [64Bits] . (...) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Memoire [Key] [64Bits] . (...) -- C:\Program Files (x86)\Mémoire\Memoire.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\MSC [Key] [64Bits] . (...) -- c:\Program Files\Microsoft Security Client\msseces.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\OrangeInside [Key] [64Bits] . (...) -- C:\Users\Christian\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Service Planificateur2 Acronis [Key] [64Bits] . (...) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (.not file.)
O3 - Toolbar: 0x39358347C5D025419FA80819E2EAAC93 - [HKCU]{47833539-D0C5-4125-9FA8-0819E2EAAC93} . (...) -- (.not file.)
SR - Demand [15/10/2013] [ 44640] avast! SecureLine TAP Adapter v3 (aswTap) . (.The OpenVPN Project.) - C:\WINDOWS\System32\drivers\aswTap.sys
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (. - .) -- C:\Program Files\AVAST Software\Avast\AvLaunch.exe (.Not File.)
HKLM\SOFTWARE\AVAST Software
HKLM\SOFTWARE\WOW6432Node\AVAST Software
HKCU\SOFTWARE\AVAST Software
HKCU\SOFTWARE\AvastAdSDK
HKCU\SOFTWARE\Browser Cleanup
HKU\.DEFAULT\SOFTWARE\Avast Software
HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\AVAST Software
HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\AvastAdSDK
HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\Browser Cleanup
O43 - CFD: 10/02/2019 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 13/04/2017 - [] D -- C:\Program Files (x86)\Common Files\AV
O53 - SMSR:HKLM\...\startupreg\20150107 [Key] [64Bits] . (...) -- C:\Program Files\AVAST Software\Avast\setup\emupdate\61d0150d-237b-4355-a25e-3800fca47bd4.exe (.not file.)
O58 - SDL:2016/02/24 10:22:15 A . (.AVAST Software - avast! Firewall Driver.) -- C:\WINDOWS\System32\drivers\aswNetSec(4672).sys [552880]
O58 - SDL:2016/02/24 10:22:45 A . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswSP(4673).sys [463744]
O58 - SDL:2013/10/15 19:10:27 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\WINDOWS\System32\drivers\aswTap.sys [44640]
O38 - TASK: {B0507F71-5A9F-4C25-8CD2-104276082903} [64Bits][\McAfee Remediation (Prepare)] - (.McAfee, Inc. - McAfee Installer.) -- C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe [37834880]
C:\WINDOWS\System32\Tasks\McAfee Remediation (Prepare) - (.McAfee, Inc..) -- C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe [/prepare]
HKLM\SOFTWARE\McAfee
HKLM\SOFTWARE\McAfee.com
HKLM\SOFTWARE\WOW6432Node\McAfee
O43 - CFD: 05/07/2017 - [] D -- C:\Program Files (x86)\Common Files\McAfee
HKLM\SOFTWARE\WOW6432Node\Symantec
O43 - CFD: 14/02/2016 - [] D -- C:\Program Files\ma-config.com
O43 - CFD: 14/02/2016 - [] D -- C:\ProgramData\ma-config.com
HKCU\SOFTWARE\AppDataLow\Software\Yahoo
O43 - CFD: 20/12/2015 - [0] D -- C:\Users\Christian\AppData\Roaming\Yahoo!
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]:YahooMusicEngine.exe
Fin
---\\ LOGICIEL. (0)
---\\ SERVICE. (0)
---\\ TÂCHE PLANIFIÉE. (2)
SUPPRIMÉ Redémarrage Clé Tasks^: HKLM64\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0507F71-5A9F-4C25-8CD2-104276082903}
SUPPRIMÉ Redémarrage Clé Tasks^: HKLM64\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B0507F71-5A9F-4C25-8CD2-104276082903}
---\\ NAVIGATEUR INTERNET. (1)
SUPPRIMÉ Valeur Toolbar: {47833539-D0C5-4125-9FA8-0819E2EAAC93} [HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser]
---\\ EXPLORATEUR ( Dossiers, Fichiers ). (39)
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\Christian\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\AdobeARM.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\adobegc.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-1092.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-10976.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-11540.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-12560.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-12576.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-13260.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-13308.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-13912.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-15292.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-1968.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-2104.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-280.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-7024.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\MSI68763.LOG
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\MSIe3c88.LOG
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\StructuredQuery.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\wct509F.tmp
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\wct5B30.tmp
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\wct61D8.tmp
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\wctA3B7.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\CHRIST~1\AppData\Local\Temp\FXSAPIDebugLogFile.txt
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\MSI2A4D.tmp-\Smartbar.Communication.dll
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\MSI2A4D.tmp-\Smartbar.Communication.NamedPipe.dll
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\MSI7DAC.tmp-\Smartbar.Communication.dll
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\MSI7DAC.tmp-\Smartbar.Communication.NamedPipe.dll
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\MSIE3BF.tmp-\Smartbar.Communication.dll
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\MSIE3BF.tmp-\Smartbar.Communication.NamedPipe.dll
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\121fb58.msi
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\aswTap.sys
SUPPRIMÉ Dossier : C:\ProgramData\AVAST Software
SUPPRIMÉ Dossier : C:\Program Files (x86)\Common Files\AV
DEPLACÉ Fichier Tasks: C:\WINDOWS\System32\Tasks\McAfee Remediation (Prepare)
SUPPRIMÉ Dossier : C:\Program Files (x86)\Common Files\McAfee
SUPPRIMÉ Dossier : C:\Program Files\ma-config.com
SUPPRIMÉ Dossier : C:\ProgramData\ma-config.com
SUPPRIMÉ Dossier : C:\Users\Christian\AppData\Roaming\Yahoo!
---\\ REGISTRE ( Clés, Valeurs, Données ). (65)
REMPLACÉ Donnée Software: 1 [HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}\\SystemComponent]
ABSENT Valeur Run: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ [C:\Program Files\Windows Defender\MSASCuiL.exe (.Not File.)]
SUPPRIMÉ Valeur Run: Delete Cached Update Binary [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\]
SUPPRIMÉ Valeur Run: Delete Cached Standalone Update Binary [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\]
SUPPRIMÉ Valeur Run: AvastUI.exe [HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\]
ABSENT Valeur Run: HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ [/q /c del /q "C:\Users\Christian\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe (.Not File.)]
ABSENT Valeur Run: HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ [/q /c del /q "C:\Users\Christian\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe (.Not File.)]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\Cover Designer [Cover Designer1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\Cover Designer [64Bits] - [CC]{73FCA462-9BD5-4065-A73F-A8E5F6904EF7}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\GSplitShell [GSplitShell1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\B46C1E0F-F61D-4B19-BC55-B68D8BB3CAFE}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\UAContextMenu [UAContextMenu1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\WondershareVideoConverterFileOpreation [WondershareVideoConverterFileOpreation1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\FEB746CA-95C2-485F-B386-C30D4E56D22E}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets [Gadgets5]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\6B9228DA-9C15-419e-856C-19E768A13BDC}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\UAContextMenu [UAContextMenu5]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\UAContextMenu [UAContextMenu6]
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Cover Designer
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\GSplitShell
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\UAContextMenu
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WondershareVideoConverterFileOpreation
ABSENT Clé: HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets
ABSENT Clé: HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\UAContextMenu
ABSENT Clé: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\UAContextMenu
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\Software [Software]
SUPPRIMÉ Clé: HKCU\SOFTWARE\Software [Software]
ABSENT Clé: HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\Software
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\20150107 [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Acrobat Assistant 8.0 [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe Acrobat Synchronizer [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe Speed Launcher [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeAAMUpdater-1.0 [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DelaypluginInstall [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\EaseUS EPM tray [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Google Update [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IAStorIcon [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KeyboardLeds.exe [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Malwarebytes Anti-Malware [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Memoire [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MSC [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\OrangeInside [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Service Planificateur2 Acronis [No File found]
ABSENT Clé Toolbar: HKLM64\SOFTWARE\Classes\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93}
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\aswTap [aswTap.sys]
ABSENT Valeur Run: HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\ [C:\Program Files\AVAST Software\Avast\AvLaunch.exe (.Not File.)]
SUPPRIMÉ Clé: HKLM\SOFTWARE\AVAST Software [AVAST Software]
ABSENT Clé: HKLM\SOFTWARE\WOW6432Node\AVAST Software
SUPPRIMÉ Clé: HKCU\SOFTWARE\AVAST Software [AVAST Software]
SUPPRIMÉ Clé: HKCU\SOFTWARE\AvastAdSDK [AvastAdSDK]
SUPPRIMÉ Clé: HKCU\SOFTWARE\Browser Cleanup [Browser Cleanup]
SUPPRIMÉ Clé: HKU\.DEFAULT\SOFTWARE\Avast Software [Avast Software]
ABSENT Clé: HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\AVAST Software
ABSENT Clé: HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\AvastAdSDK
ABSENT Clé: HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\Browser Cleanup
ABSENT Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\20150107
SUPPRIMÉ Clé: HKLM\SOFTWARE\McAfee [McAfee]
SUPPRIMÉ Clé: HKLM\SOFTWARE\McAfee.com [McAfee.com]
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\McAfee [McAfee]
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\Symantec [Symantec]
SUPPRIMÉ Clé: HKCU\SOFTWARE\AppDataLow\Software\Yahoo [Yahoo]
~ EmptyProxy: Aucune modification.
SUPPRIMÉ Valeur: win_en_77 [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: YahooMusicEngine.exe [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]
---\\ COMMANDE. (5)
~ EmptyCSID: Dossiers CLSID vides supprimés (1)
~ EmptyFlash: Fichiers Temporaires supprimés. (2)
~ EmptyTemp: Dossier Local temp partiellement vidé (23)
~ EmptyTracing: Clés tracing supprimées (3)
~ EmptyPrefetch: Fichiers Prefetcher supprimés (201)
---\\ NON TRAITÉ. (0)
~ Le système a été redémarré.
***** ~ Fin de rapport terminé en 00h01mn20s
~ Run by Christian (Administrator) (11/02/2019 18:24:49)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\Christian\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 17763)
---\\ SCRIPT DE L'UTILISATEUR. (92)
Script ZHPFix
EmptyCLSID
EmptyFlash
EmptyTemp
EmptyTracing
EmptyPrefetch
EmptyProxy
UnMaskSoftware: O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. (Hidden)
[MD5.DFC77FABC037078A5F7407B50BA298B7] [WIS][2014/09/03 13:11:39] (...) -- C:\WINDOWS\Installer\MSI2A4D.tmp-\Smartbar.Communication.dll
[MD5.F63B8C2EF4F3E781C75EC7578CD75E95] [WIS][2014/09/03 13:11:39] (...) -- C:\WINDOWS\Installer\MSI2A4D.tmp-\Smartbar.Communication.NamedPipe.dll
[MD5.DFC77FABC037078A5F7407B50BA298B7] [WIS][2014/09/03 13:12:01] (...) -- C:\WINDOWS\Installer\MSI7DAC.tmp-\Smartbar.Communication.dll
[MD5.F63B8C2EF4F3E781C75EC7578CD75E95] [WIS][2014/09/03 13:12:01] (...) -- C:\WINDOWS\Installer\MSI7DAC.tmp-\Smartbar.Communication.NamedPipe.dll
[MD5.DFC77FABC037078A5F7407B50BA298B7] [WIS][2014/09/03 13:12:27] (...) -- C:\WINDOWS\Installer\MSIE3BF.tmp-\Smartbar.Communication.dll
[MD5.F63B8C2EF4F3E781C75EC7578CD75E95] [WIS][2014/09/03 13:12:27] (...) -- C:\WINDOWS\Installer\MSIE3BF.tmp-\Smartbar.Communication.NamedPipe.dll
C:\WINDOWS\Installer\MSI2A4D.tmp-\Smartbar.Communication.dll
C:\WINDOWS\Installer\MSI2A4D.tmp-\Smartbar.Communication.NamedPipe.dll
C:\WINDOWS\Installer\MSI7DAC.tmp-\Smartbar.Communication.dll
C:\WINDOWS\Installer\MSI7DAC.tmp-\Smartbar.Communication.NamedPipe.dll
C:\WINDOWS\Installer\MSIE3BF.tmp-\Smartbar.Communication.dll
C:\WINDOWS\Installer\MSIE3BF.tmp-\Smartbar.Communication.NamedPipe.dll
O4 - HKLM\..\Run: [WindowsDefender] . (. - .) -- C:\Program Files\Windows Defender\MSASCuiL.exe (.Not File.)
O4 - HKCU\..\RunOnce: [Delete Cached Update Binary] . (. - .) -- /q /c del /q "C:\Users\Christian\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe (.Not File.)
O4 - HKCU\..\RunOnce: [Delete Cached Standalone Update Binary] . (. - .) -- /q /c del /q "C:\Users\Christian\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe (.Not File.)
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (. - .) -- C:\Program Files\AVAST Software\Avast\AvLaunch.exe (.Not File.)
O4 - HKUS\S-1-5-21-4215277605-4089420941-575653807-1000\..\RunOnce: [Delete Cached Update Binary] . (. - .) -- /q /c del /q "C:\Users\Christian\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe (.Not File.)
O4 - HKUS\S-1-5-21-4215277605-4089420941-575653807-1000\..\RunOnce: [Delete Cached Standalone Update Binary] . (. - .) -- /q /c del /q "C:\Users\Christian\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe (.Not File.)
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:win_en_77
O108 - CMH1: Cover Designer [64Bits] - [CC]{73FCA462-9BD5-4065-A73F-A8E5F6904EF7} . (.Orphan.)
O108 - CMH1: GSplitShell [64Bits] - {B46C1E0F-F61D-4B19-BC55-B68D8BB3CAFE} . (.Orphan.)
O108 - CMH1: UAContextMenu [64Bits] - {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} . (.Orphan.)
O108 - CMH1: WondershareVideoConverterFileOpreation [64Bits] - {FEB746CA-95C2-485F-B386-C30D4E56D22E} . (.Orphan.)
O108 - CMH5: Gadgets [64Bits] - {6B9228DA-9C15-419e-856C-19E768A13BDC} . (.Orphan.)
O108 - CMH5: UAContextMenu [64Bits] - {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} . (.Orphan.)
O108 - CMH6: UAContextMenu [64Bits] - {A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} . (.Orphan.)
[MD5.16C2C7F273F2D33B1689CDCF1962124D] [WIS][2012/05/23 10:15:47] (.Aedge Performance BCN SL - MyPDFConverter.) -- C:\WINDOWS\Installer\121fb58.msi [11183104]
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Cover Designer
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\GSplitShell
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\UAContextMenu
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WondershareVideoConverterFileOpreation
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\UAContextMenu
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\UAContextMenu
C:\WINDOWS\Installer\121fb58.msi
HKLM\SOFTWARE\WOW6432Node\Software
HKCU\SOFTWARE\Software
HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\Software
O53 - SMSR:HKLM\...\startupreg\20150107 [Key] [64Bits] . (...) -- C:\Program Files\AVAST Software\Avast\setup\emupdate\61d0150d-237b-4355-a25e-3800fca47bd4.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Acrobat Assistant 8.0 [Key] [64Bits] . (...) -- C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Adobe Acrobat Synchronizer [Key] [64Bits] . (...) -- C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Adobe Speed Launcher [Key] [64Bits] . (...) -- 1430120664 (.not file.)
O53 - SMSR:HKLM\...\startupreg\AdobeAAMUpdater-1.0 [Key] [64Bits] . (...) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\DelaypluginInstall [Key] [64Bits] . (...) -- C:\ProgramData\Wondershare\Player\DelayPluginI.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\EaseUS EPM tray [Key] [64Bits] . (...) -- C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\EpmNews.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Google Update [Key] [64Bits] . (...) -- C:\Users\Christian\AppData\Local\Google\Update\GoogleUpdate.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\IAStorIcon [Key] [64Bits] . (...) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\KeyboardLeds.exe [Key] [64Bits] . (...) -- C:\Program Files (x86)\Keyboard Leds\KeyboardLeds.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Malwarebytes Anti-Malware [Key] [64Bits] . (...) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Memoire [Key] [64Bits] . (...) -- C:\Program Files (x86)\Mémoire\Memoire.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\MSC [Key] [64Bits] . (...) -- c:\Program Files\Microsoft Security Client\msseces.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\OrangeInside [Key] [64Bits] . (...) -- C:\Users\Christian\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Service Planificateur2 Acronis [Key] [64Bits] . (...) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (.not file.)
O3 - Toolbar: 0x39358347C5D025419FA80819E2EAAC93 - [HKCU]{47833539-D0C5-4125-9FA8-0819E2EAAC93} . (...) -- (.not file.)
SR - Demand [15/10/2013] [ 44640] avast! SecureLine TAP Adapter v3 (aswTap) . (.The OpenVPN Project.) - C:\WINDOWS\System32\drivers\aswTap.sys
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (. - .) -- C:\Program Files\AVAST Software\Avast\AvLaunch.exe (.Not File.)
HKLM\SOFTWARE\AVAST Software
HKLM\SOFTWARE\WOW6432Node\AVAST Software
HKCU\SOFTWARE\AVAST Software
HKCU\SOFTWARE\AvastAdSDK
HKCU\SOFTWARE\Browser Cleanup
HKU\.DEFAULT\SOFTWARE\Avast Software
HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\AVAST Software
HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\AvastAdSDK
HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\Browser Cleanup
O43 - CFD: 10/02/2019 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 13/04/2017 - [] D -- C:\Program Files (x86)\Common Files\AV
O53 - SMSR:HKLM\...\startupreg\20150107 [Key] [64Bits] . (...) -- C:\Program Files\AVAST Software\Avast\setup\emupdate\61d0150d-237b-4355-a25e-3800fca47bd4.exe (.not file.)
O58 - SDL:2016/02/24 10:22:15 A . (.AVAST Software - avast! Firewall Driver.) -- C:\WINDOWS\System32\drivers\aswNetSec(4672).sys [552880]
O58 - SDL:2016/02/24 10:22:45 A . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswSP(4673).sys [463744]
O58 - SDL:2013/10/15 19:10:27 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\WINDOWS\System32\drivers\aswTap.sys [44640]
O38 - TASK: {B0507F71-5A9F-4C25-8CD2-104276082903} [64Bits][\McAfee Remediation (Prepare)] - (.McAfee, Inc. - McAfee Installer.) -- C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe [37834880]
C:\WINDOWS\System32\Tasks\McAfee Remediation (Prepare) - (.McAfee, Inc..) -- C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe [/prepare]
HKLM\SOFTWARE\McAfee
HKLM\SOFTWARE\McAfee.com
HKLM\SOFTWARE\WOW6432Node\McAfee
O43 - CFD: 05/07/2017 - [] D -- C:\Program Files (x86)\Common Files\McAfee
HKLM\SOFTWARE\WOW6432Node\Symantec
O43 - CFD: 14/02/2016 - [] D -- C:\Program Files\ma-config.com
O43 - CFD: 14/02/2016 - [] D -- C:\ProgramData\ma-config.com
HKCU\SOFTWARE\AppDataLow\Software\Yahoo
O43 - CFD: 20/12/2015 - [0] D -- C:\Users\Christian\AppData\Roaming\Yahoo!
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]:YahooMusicEngine.exe
Fin
---\\ LOGICIEL. (0)
---\\ SERVICE. (0)
---\\ TÂCHE PLANIFIÉE. (2)
SUPPRIMÉ Redémarrage Clé Tasks^: HKLM64\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0507F71-5A9F-4C25-8CD2-104276082903}
SUPPRIMÉ Redémarrage Clé Tasks^: HKLM64\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B0507F71-5A9F-4C25-8CD2-104276082903}
---\\ NAVIGATEUR INTERNET. (1)
SUPPRIMÉ Valeur Toolbar: {47833539-D0C5-4125-9FA8-0819E2EAAC93} [HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser]
---\\ EXPLORATEUR ( Dossiers, Fichiers ). (39)
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\Christian\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\AdobeARM.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\adobegc.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-1092.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-10976.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-11540.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-12560.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-12576.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-13260.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-13308.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-13912.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-15292.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-1968.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-2104.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-280.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\aria-debug-7024.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\MSI68763.LOG
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\MSIe3c88.LOG
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\StructuredQuery.log
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\wct509F.tmp
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\wct5B30.tmp
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\wct61D8.tmp
DEPLACÉ Fichier Temp: C:\Users\CHRIST~1\AppData\Local\Temp\wctA3B7.tmp
SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\CHRIST~1\AppData\Local\Temp\FXSAPIDebugLogFile.txt
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\MSI2A4D.tmp-\Smartbar.Communication.dll
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\MSI2A4D.tmp-\Smartbar.Communication.NamedPipe.dll
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\MSI7DAC.tmp-\Smartbar.Communication.dll
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\MSI7DAC.tmp-\Smartbar.Communication.NamedPipe.dll
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\MSIE3BF.tmp-\Smartbar.Communication.dll
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\MSIE3BF.tmp-\Smartbar.Communication.NamedPipe.dll
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\121fb58.msi
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\aswTap.sys
SUPPRIMÉ Dossier : C:\ProgramData\AVAST Software
SUPPRIMÉ Dossier : C:\Program Files (x86)\Common Files\AV
DEPLACÉ Fichier Tasks: C:\WINDOWS\System32\Tasks\McAfee Remediation (Prepare)
SUPPRIMÉ Dossier : C:\Program Files (x86)\Common Files\McAfee
SUPPRIMÉ Dossier : C:\Program Files\ma-config.com
SUPPRIMÉ Dossier : C:\ProgramData\ma-config.com
SUPPRIMÉ Dossier : C:\Users\Christian\AppData\Roaming\Yahoo!
---\\ REGISTRE ( Clés, Valeurs, Données ). (65)
REMPLACÉ Donnée Software: 1 [HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}\\SystemComponent]
ABSENT Valeur Run: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ [C:\Program Files\Windows Defender\MSASCuiL.exe (.Not File.)]
SUPPRIMÉ Valeur Run: Delete Cached Update Binary [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\]
SUPPRIMÉ Valeur Run: Delete Cached Standalone Update Binary [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\]
SUPPRIMÉ Valeur Run: AvastUI.exe [HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\]
ABSENT Valeur Run: HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ [/q /c del /q "C:\Users\Christian\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe (.Not File.)]
ABSENT Valeur Run: HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ [/q /c del /q "C:\Users\Christian\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe (.Not File.)]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\Cover Designer [Cover Designer1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\Cover Designer [64Bits] - [CC]{73FCA462-9BD5-4065-A73F-A8E5F6904EF7}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\GSplitShell [GSplitShell1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\B46C1E0F-F61D-4B19-BC55-B68D8BB3CAFE}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\UAContextMenu [UAContextMenu1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\WondershareVideoConverterFileOpreation [WondershareVideoConverterFileOpreation1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\FEB746CA-95C2-485F-B386-C30D4E56D22E}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets [Gadgets5]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\6B9228DA-9C15-419e-856C-19E768A13BDC}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\UAContextMenu [UAContextMenu5]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\UAContextMenu [UAContextMenu6]
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Cover Designer
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\GSplitShell
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\UAContextMenu
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WondershareVideoConverterFileOpreation
ABSENT Clé: HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets
ABSENT Clé: HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\UAContextMenu
ABSENT Clé: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\UAContextMenu
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\Software [Software]
SUPPRIMÉ Clé: HKCU\SOFTWARE\Software [Software]
ABSENT Clé: HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\Software
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\20150107 [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Acrobat Assistant 8.0 [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe Acrobat Synchronizer [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe Speed Launcher [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeAAMUpdater-1.0 [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DelaypluginInstall [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\EaseUS EPM tray [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Google Update [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IAStorIcon [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KeyboardLeds.exe [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Malwarebytes Anti-Malware [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Memoire [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MSC [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\OrangeInside [No File found]
SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Service Planificateur2 Acronis [No File found]
ABSENT Clé Toolbar: HKLM64\SOFTWARE\Classes\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93}
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\aswTap [aswTap.sys]
ABSENT Valeur Run: HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\ [C:\Program Files\AVAST Software\Avast\AvLaunch.exe (.Not File.)]
SUPPRIMÉ Clé: HKLM\SOFTWARE\AVAST Software [AVAST Software]
ABSENT Clé: HKLM\SOFTWARE\WOW6432Node\AVAST Software
SUPPRIMÉ Clé: HKCU\SOFTWARE\AVAST Software [AVAST Software]
SUPPRIMÉ Clé: HKCU\SOFTWARE\AvastAdSDK [AvastAdSDK]
SUPPRIMÉ Clé: HKCU\SOFTWARE\Browser Cleanup [Browser Cleanup]
SUPPRIMÉ Clé: HKU\.DEFAULT\SOFTWARE\Avast Software [Avast Software]
ABSENT Clé: HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\AVAST Software
ABSENT Clé: HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\AvastAdSDK
ABSENT Clé: HKU\S-1-5-21-4215277605-4089420941-575653807-1000\SOFTWARE\Browser Cleanup
ABSENT Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\20150107
SUPPRIMÉ Clé: HKLM\SOFTWARE\McAfee [McAfee]
SUPPRIMÉ Clé: HKLM\SOFTWARE\McAfee.com [McAfee.com]
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\McAfee [McAfee]
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\Symantec [Symantec]
SUPPRIMÉ Clé: HKCU\SOFTWARE\AppDataLow\Software\Yahoo [Yahoo]
~ EmptyProxy: Aucune modification.
SUPPRIMÉ Valeur: win_en_77 [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: YahooMusicEngine.exe [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]
---\\ COMMANDE. (5)
~ EmptyCSID: Dossiers CLSID vides supprimés (1)
~ EmptyFlash: Fichiers Temporaires supprimés. (2)
~ EmptyTemp: Dossier Local temp partiellement vidé (23)
~ EmptyTracing: Clés tracing supprimées (3)
~ EmptyPrefetch: Fichiers Prefetcher supprimés (201)
---\\ NON TRAITÉ. (0)
~ Le système a été redémarré.
***** ~ Fin de rapport terminé en 00h01mn20s