~ ZHPCleaner v2016.7.24.88 by Nicolas Coolman (2016/07/24) ~ Run by clafo (Administrator) (27/07/2016 22:35:06) ~ Site : http://www.nicolascoolman.com ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Nettoyer ~ Report : C:\Users\clafo\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\clafo\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 10586) ---\\ Service. (1) ARRETÉ : iSafeService =>.Superfluous.Elex ---\\ Navigateur internet. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Fichier hôte. (15) REMPLACÉ: 107.178.255.88 www.google-analytics.com TROUVÉ: 107.178.255.88 www.statcounter.com TROUVÉ: 107.178.255.88 statcounter.com TROUVÉ: 107.178.255.88 ssl.google-analytics.com TROUVÉ: 107.178.255.88 partner.googleadservices.com TROUVÉ: 107.178.255.88 google-analytics.com TROUVÉ: 107.178.248.130 static.doubleclick.net REMPLACÉ: 107.178.247.130 connect.facebook.net REMPLACÉ: 107.178.255.88 www.statcounter.com REMPLACÉ: 107.178.255.88 statcounter.com REMPLACÉ: 107.178.255.88 ssl.google-analytics.com REMPLACÉ: 107.178.255.88 partner.googleadservices.com REMPLACÉ: 107.178.255.88 google-analytics.com REMPLACÉ: 107.178.248.130 static.doubleclick.net ~ Nombre de redirections trouvées 16/48 ---\\ Tâche planifiée. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Explorateur ( Dossiers, Fichiers ). (27) DEPLACÉ fichier: C:\Users\clafo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk [Bad : C:\Program Files (x86)\Birdsarah\Application\chrome.exe] =>Adware.Mutabaha DEPLACÉ fichier: C:\Users\Public\Desktop\Google Chrome.lnk [Bad : C:\Program Files (x86)\Birdsarah\Application\chrome.exe] =>Adware.Mutabaha DEPLACÉ fichier^: C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [Elex do Brasil Participações Ltda - iSafe Kernel Driver] =>.Superfluous.Elex DEPLACÉ fichier^: C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [Elex do Brasil Participações Ltda - iSafe Kernel Kit Driver] =>.Superfluous.Elex DEPLACÉ fichier^: C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [Elex do Brasil Participações Ltda - YAC Monitor Driver] =>.Superfluous.Elex DEPLACÉ fichier^: C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [Elex do Brasil Participações Ltda - iSafe Kernel Ring3 Driver] =>.Superfluous.Elex DEPLACÉ fichier^: C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [Elex do Brasil Participações Ltda - iSafeSvc] =>.Superfluous.Elex DEPLACÉ fichier: C:\Windows\System32\drivers\iSafeNetFilter.sys [Elex do Brasil Participações Ltda - iSafeNetFilter SDK WFP Driver (WPP)] =>.Superfluous.Elex DEPLACÉ fichier: C:\Users\clafo\AppData\Roaming\ApplicationHosting.dat =>PUP.Optional.ApplicationHosting DEPLACÉ dossier: C:\Program Files (x86)\Birdsarah =>Adware.Mutabaha DEPLACÉ dossier^: C:\Program Files (x86)\Elex-tech =>.Superfluous.Elex DEPLACÉ dossier: C:\windows\AutoKMS =>HackTool.AutoKMS DEPLACÉ dossier^: C:\Users\clafo\AppData\Roaming\Elex-tech =>.Superfluous.Elex DEPLACÉ dossier^: C:\Program Files (x86)\Elex-tech\YAC =>.Superfluous.YetAnotherCleaner DEPLACÉ dossier: C:\windows\Installer\MSI16D2.tmp- =>Empty DEPLACÉ dossier: C:\windows\Installer\MSI221.tmp- =>Empty DEPLACÉ dossier: C:\windows\Installer\MSI2430.tmp- =>Empty DEPLACÉ dossier: C:\windows\Installer\MSI28B6.tmp- =>Empty DEPLACÉ dossier: C:\windows\Installer\MSI387A.tmp- =>Empty DEPLACÉ dossier: C:\windows\Installer\MSI5413.tmp- =>Empty DEPLACÉ dossier: C:\windows\Installer\MSI634.tmp- =>Empty DEPLACÉ dossier: C:\windows\Installer\MSI72F.tmp- =>Empty DEPLACÉ dossier: C:\windows\Installer\MSI88F1.tmp- =>Empty DEPLACÉ dossier: C:\windows\Installer\MSIC540.tmp- =>Empty DEPLACÉ dossier: C:\windows\Installer\MSIC5DD.tmp- =>Empty DEPLACÉ dossier: C:\windows\Installer\MSIC64B.tmp- =>Empty DEPLACÉ dossier: C:\windows\Installer\MSIC766.tmp- =>Empty ---\\ Base de Registres ( Clés, Valeurs, Données ). (18) SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnl [C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys] =>.Superfluous.Elex SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlKit [C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys] =>.Superfluous.Elex SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlMon [C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys] =>.Superfluous.Elex SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlR3 [C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys] =>.Superfluous.Elex SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\iSafeService [C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe] =>.Superfluous.Elex SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\iSafeNetFilter [C:\Windows\System32\drivers\iSafeNetFilter.sys (Not File)] =>.Superfluous.Elex SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-954712899-2948078468-259400359-1001\SOFTWARE\Classes\ChromiumHTM.4CYGAOJXPS5DNEZSFCIVB37YVE [BrowserAir HTML Document] =>PUP.Optional.BrowserAir SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\easyhotspot-installer_RASAPI32 [] =>.Superfluous.CSDI SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\easyhotspot-installer_RASMANCS [] =>.Superfluous.CSDI SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Wow6432Node\Elex-tech [] =>.Superfluous.Elex SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\WinZiper [] =>.Superfluous.WinZipper SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iSafe [ELEX DO BRASIL PARTICIPAÇÕES LTDA] =>.Superfluous.Elex SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WinZip [Winzipper Pvt Ltd.] =>.Superfluous.TaiwanShuiMu SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5B0B258A-F076-45D9-8AAD-99B33C353C88} [hohosearch - Uninstall] =>.Superfluous.HohoSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{938B550D-6834-4518-8F09-189D3DD6E07E} [hohosearch - Uninstall] =>.Superfluous.HohoSearch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{DC638EEA-2BA2-4459-9C46-85A2F0BE6040} [wzShellContextMenu Class] =>.Superfluous.WinZipper SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Classes\CLSID\{DC638EEA-2BA2-4459-9C46-85A2F0BE6040}\InprocServer32 [C:\Program Files (x86)\WinZipper\wzShellctx64.dll (Not File)] =>.Superfluous.WinZipper SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{E182AC83-0EFC-4CD6-9CEC-12D42C0FA019} [C:\Program Files (x86)\Birdsarah\Update\BirdsarahUpdate.exe] =>Adware.Mutabaha ---\\ Récapitulatif des éléments trouvés sur votre station. (10) https://www.anti-malware.top/2016/05/18/superfluous-elex/ =>.Superfluous.Elex https://www.anti-malware.top/2016/06/24/conseils-logiciel-publicitaire-mutabaha/ =>Adware.Mutabaha http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.ApplicationHosting https://www.anti-malware.top/2016/05/04/hacktool-autokms/ =>HackTool.AutoKMS http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.YetAnotherCleaner http://www.nicolascoolman.fr/pup-optional-browserair/ =>PUP.Optional.BrowserAir https://www.anti-malware.top/2016/05/03/superfluous-csdi/ =>.Superfluous.CSDI http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.WinZipper https://www.anti-malware.top/2016/05/05/superfluous-taiwanshuimu/ =>.Superfluous.TaiwanShuiMu http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.HohoSearch ---\\ Nettoyage Additionnel. (36) ~ Suppression des Clés de registre Tracing. (36) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Google Chrome) ~ Ce navigateur est absent (Opera Software) ~ Le système a été redémarré. ---\\ Statistiques ~ Items scannés : 613 ~ Items trouvés : 16 ~ Items annulés : 0 ~ Items réparés : 46 ~ End of clean in 00h02mn20s ~==================== ZHPCleaner-[R]-27072016-22_37_26.txt ZHPCleaner-[S]-27072016-22_34_34.txt