~ ZHPCleaner v2016.3.17.42 by Nicolas Coolman (2016/03/17) ~ Run by USER-HP (Administrator) (19/03/2016 19:42:32) ~ Site : http://www.nicolascoolman.com ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Nettoyer ~ Report : C:\Users\USER-HP\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\USER-HP\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 8.1, 64-bit (Build 9600) ---\\ Service. (1) ARRETÉ : PrivoxyService =>PUP.Optional.Privoxy ---\\ Navigateur internet. (7) REMPLACÉ Chrome Preferences: "https://lolstatic-a.akamaihd.net/" =>PUP.Optional.Browser REMPLACÉ Opera URL: [ "http://www.mystartsearch.com/?type=hp&ts=1426689533&from=wpc&uid=ST1000LM024XHN-M101MBB_S2[...] =>PUP.Optional.StartSearch REMPLACÉ IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Default_Page_URL [http://www.mystartsearch.com/?type=hp&ts=1426689533&from=wpc&uid=ST1000LM024XHN-[...]] =>PUP.Optional.StartSearch REMPLACÉ IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Default_Search_URL [http://www.mystartsearch.com/web/?type=ds&ts=1426689533&from=wpc&uid=ST1000LM024[...]] =>PUP.Optional.StartSearch REMPLACÉ IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Search Page [http://www.mystartsearch.com/web/?type=ds&ts=1426689533&from=wpc&uid=ST1000LM024[...]] =>PUP.Optional.StartSearch SUPPRIMÉ donnée: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer [Bad : 127.0.0.1:8118] =>Hijacker.Proxy SUPPRIMÉ donnée: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable [Bad : 1] =>Hijacker.Proxy ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (21) ---\\ Tâche planifiée. (1) SUPPRIMÉ tâche: [Megasoft Security Uninstaller] [C:\Program Files (x86)\Megasoft Security\jptask.exe (Not File) ] =>.Superfluous.WestCHSoft ---\\ Explorateur ( Dossiers, Fichiers ). (30) DEPLACÉ fichier: C:\Users\USER-HP\AppData\Roaming\7465.tmp.exe =>PUP.Optional.Pirrit DEPLACÉ fichier: C:\Program Files (x86)\Megasoft Security\privoxy.exe [The Privoxy team - www.privoxy.org - Privoxy] =>PUP.Optional.Privoxy DEPLACÉ fichier: C:\Program Files (x86)\Megasoft Security\jptask.exe [West CH Soft - West CH Soft] =>.Superfluous.WestCHSoft DEPLACÉ fichier: C:\Windows\Prefetch\CHATANGO.EXE-3A49AFDD.pf =>PUP.Optional.Chatango DEPLACÉ fichier: C:\Users\USER-HP\Downloads\ChatangoInstaller.exe =>PUP.Optional.Chatango DEPLACÉ fichier: C:\Users\USER-HP\AppData\Roaming\appdataFr3.bin =>PUP.Optional.Generic DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Temp\66BB.tmp.exe [SecureSoft - SecureSoftWeb] =>PUP.Optional.SecureSoft DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Temp\hp_238583.exe [SecureSoft - SecureSoftWeb] =>PUP.Optional.SecureSoft DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Temp\hp_u_823824.exe [SecureSoft - SecureSoftWeb] =>PUP.Optional.SecureSoft DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_cdncache-a.akamaihd.net_0.localstorage =>PUP.Optional.AkamaiHD DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_cdncache-a.akamaihd.net_0.localstorage-journal =>PUP.Optional.AkamaiHD DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage =>PUP.Optional.BestPriceNinja DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.bestpriceninja.com_0.localstorage-journal =>PUP.Optional.BestPriceNinja DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cdncache-a.akamaihd.net_0.localstorage =>PUP.Optional.AkamaiHD DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cdncache-a.akamaihd.net_0.localstorage-journal =>PUP.Optional.AkamaiHD DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_lp.ilividnewtab.com_0.localstorage =>PUP.Optional.Bandoo DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_lp.ilividnewtab.com_0.localstorage-journal =>PUP.Optional.Bandoo DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.bestpriceninja.com_0.localstorage =>PUP.Optional.BestPriceNinja DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.bestpriceninja.com_0.localstorage-journal =>PUP.Optional.BestPriceNinja DEPLACÉ fichier: C:\Users\USER-HP\AppData\Local\Temp\FixDotNet_HKCR_Installer.regdump =>PUP.Optional.CrossRider DEPLACÉ dossier: C:\Program Files (x86)\Chatango =>PUP.Optional.Chatango DEPLACÉ dossier^: C:\Program Files (x86)\Megasoft Security =>.Superfluous.WestCHSoft DEPLACÉ dossier: C:\ProgramData\Browser AdBlocker =>PUP.Optional.SpeedBrowser DEPLACÉ dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chatango =>PUP.Optional.Chatango DEPLACÉ dossier: C:\Users\USER-HP\AppData\Roaming\Goodgame Empire =>.Superfluous.GoodGameEmpire DEPLACÉ dossier: C:\Users\USER-HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chatango =>PUP.Optional.Chatango DEPLACÉ dossier: C:\Users\USER-HP\AppData\Local\Temp\APN =>.Superfluous.Conduit DEPLACÉ dossier: C:\Users\USER-HP\AppData\Local\{2B5DAC7B-CC2F-430E-B1E3-D4539584185F} =>Empty DEPLACÉ dossier: C:\Users\USER-HP\AppData\Local\{33EF5BA2-56B1-4A87-B6CE-F09012546D76} =>Empty DEPLACÉ dossier: C:\Users\USER-HP\AppData\Local\{C35611D1-D0F4-4491-ABC9-81FAA2E3C818} =>Empty ---\\ Base de Registres ( Clés, Valeurs, Données ). (34) SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\PrivoxyService [C:\Program Files (x86)\Megasoft Security\privoxy.exe (Not File)] =>PUP.Optional.Privoxy SUPPRIMÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\PrivoxyService [C:\Program Files (x86)\Megasoft Security\privoxy.exe (Not File)] =>PUP.Optional.Privoxy SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdncache-a.akamaihd.net [379] =>PUP.Optional.Browser SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\goodforsearch.info [] =>PUP.Optional.GoodForSearch SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\websearch.goodforsearch.info [232] =>PUP.Optional.GoodForSearch SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\goodforsearch.info [] =>PUP.Optional.GoodForSearch SUPPRIMÉ clé*: HKLM\SOFTWARE\Wow6432Node\Policies\Google\Update [] =>PUM.Security.Hijack SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552} [OCComSDK 1.0 Type Library] =>PUP.Optional.OpenCandy SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Pb0c86697_c1e5_47c5_9871_25f9a0925252_.Pb0c86697_c1e5_47c5_9871_25f9a0925252_ [youtubeadblocker] =>PUP.Optional.Multiplug SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Pb0c86697_c1e5_47c5_9871_25f9a0925252_.Pb0c86697_c1e5_47c5_9871_25f9a0925252_.9 [youtubeadblocker] =>PUP.Optional.Multiplug SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{210ec01e-4c3d-4357-b5fe-0a30f0f13a98} [ShuOpDROp] =>PUP.Optional.ShopDrop SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{281DF68D-E13F-43BF-9FD7-8BD57BA1E431} [NEwuSaveir] =>PUP.Optional.NewSaver SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{4EB14BCB-38A0-4679-8A84-E2F158CCDADE} [DiiscountExteNsi] =>PUP.Optional.DiscountExtens SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{647CBC0D-3FC5-41FB-8AFB-B41ED2A23465} [GGreatSaive44U] =>PUP.Optional.GreatSave4U SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{6D3C6334-8B88-4147-88BE-0E5A945219B1} [DiggiSSAver] =>PUP.Optional.DiGiSaver SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{8284D169-E03C-4B9F-A250-EF6DACFEE7A9} [DiscountExtensii] =>PUP.Optional.DiscountExtens SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{880f34aa-c315-4dfc-85d9-55a8a6bdefd9} [PProiCeMinnuS] =>PUP.Optional.PriceMinus SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{8d54b599-b699-4283-bfef-20ec153367f5} [Hapappyy2Save] =>PUP.Optional.Happy2Save SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{9F6E0B8C-94D7-4190-9374-8BA32B1815B6} [NewSAVeer] =>PUP.Optional.NewSaver SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{AF71A436-F75C-472E-AA34-9A265B340830} [SSaveLots] =>PUP.Optional.SaveLots SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{b0c86697-c1e5-47c5-9871-25f9a0925252} [youtubeadblocker] =>PUP.Optional.YouTubeAdBlock SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{C943AD56-8927-4726-B2CC-FC284D6A131B} [DDigiSaver] =>PUP.Optional.DiGiSaver SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{cc9d8b76-f42c-4a82-8a97-f12b380c5d23} [BestSaveFuorYOu] =>PUP.Optional.BestSaveForYou SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{d2f15d06-1367-456e-a56a-7ba2723cf5fb} [UnniaDeals i] =>PUP.Optional.UniDeals SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{d681eee4-88a9-4322-a0d6-69c61c8a67a2} [ShoopDrop] =>PUP.Optional.ShopDrop SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{d98c1f29-e6ba-4f2d-8afb-3e90af54fbae} [UniDeals] =>PUP.Optional.UniDeals SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{e803a544-63a5-4c88-a320-ad5b43b7173e} [Fun2Savae] =>PUP.Optional.Fun2Save SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{fadff60c-8b18-49a4-be8d-58556c38b453} [DigiSoaveeRR] =>PUP.Optional.DiGiSaver SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\SecureWeb [] =>PUP.Optional.SecureSoft SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\SecureWebChannel [] =>PUP.Optional.SecureSoft SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552} [OCComSDK 1.0 Type Library] =>PUP.Optional.OpenCandy SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Classes\CLSID\{b0c86697-c1e5-47c5-9871-25f9a0925252}\InprocServer32 [C:\Program Files (x86)\youtubeadblocker\2S9w353kS3WLF4.x64.dll (Not File)] =>PUP.Optional.Multiplug SUPPRIMÉ valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\EpicScale [0x030000006479CF352C8BD001] =>PUP.Optional.EpicScale SUPPRIMÉ valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Chatango [0x020000000000000000000000] =>PUP.Optional.Chatango ---\\ Récapitulatif des éléments trouvés sur votre station. (33) http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Privoxy http://www.nicolascoolman.fr/?p=546 =>PUP.Optional.Browser http://www.nicolascoolman.fr/pup-optional-startsearch/ =>PUP.Optional.StartSearch http://www.nicolascoolman.fr/?p=4664 =>Hijacker.Proxy http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.WestCHSoft http://www.nicolascoolman.fr/?p=914 =>PUP.Optional.Pirrit http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Chatango http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Generic http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SecureSoft http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.AkamaiHD http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.BestPriceNinja http://www.nicolascoolman.fr/?p=237 =>PUP.Optional.Bandoo http://www.nicolascoolman.fr/?p=180 =>PUP.Optional.CrossRider http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SpeedBrowser http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.GoodGameEmpire http://www.nicolascoolman.fr/?p=210 =>.Superfluous.Conduit http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.GoodForSearch http://www.nicolascoolman.fr/?p=4664 =>PUM.Security.Hijack http://www.nicolascoolman.fr/?p=197 =>PUP.Optional.OpenCandy http://www.nicolascoolman.fr/?p=1402 =>PUP.Optional.Multiplug http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.ShopDrop http://www.nicolascoolman.fr/?p=1471 =>PUP.Optional.NewSaver http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DiscountExtens http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.GreatSave4U http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DiGiSaver http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.PriceMinus http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Happy2Save http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SaveLots http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.YouTubeAdBlock http://www.nicolascoolman.fr/?p=1126 =>PUP.Optional.BestSaveForYou http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.UniDeals http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Fun2Save http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.EpicScale ---\\ Nettoyage Additionnel. (39) ~ Suppression des Clés de registre Tracing. (39) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Le système a été redémarré. ---\\ Statistiques ~ Items scannés : 4117 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 73 ~ End of clean in 00h01mn12s =================== ZHPCleaner-[R]-19032016-19_43_44.txt ZHPCleaner-[S]-19032016-19_38_40.txt