~ ZHPCleaner v2016.11.28.206 by Nicolas Coolman (2016/11/26) ~ Run by Martine (Administrator) (29/11/2016 17:56:25) ~ Web: https://www.nicolascoolman.com ~ Blog: https://www.anti-malware.top ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Scanner ~ Report : C:\Users\Martine\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Martine\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Deactivate ~ Boot Mode : Normal (Normal boot) Windows 7 Professional, 32-bit Service Pack 1 (Build 7601) ---\\ Service. (1) [R] TROUVÉ : iSafeService =>.Superfluous.Elex ---\\ Navigateur internet. (6) TROUVÉ: [twzvgypb.default] - user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart TROUVÉ: [twzvgypb.default] - user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart TROUVÉ IE Params: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL [http://www.istartsurf.com/?type=hppp&ts=1434454543&from=xtab&uid=AC0B1EBF4833475[...]] =>PUP.Optional.IsStart TROUVÉ IE Params: HKEY_USERS\S-1-5-21-2787963296-4269164344-169216427-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL [http://www.istartsurf.com/?type=hppp&ts=1434454543&from=xtab&uid=AC0B1EBF4833475[...]] =>PUP.Optional.IsStart TROUVÉ IE Params: HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Default_Page_URL [http://www.istartsurf.com/?type=hppp&ts=1434454543&from=xtab&uid=AC0B1EBF4833475[...]] =>PUP.Optional.IsStart TROUVÉ IE Params: HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\\Start Page [http://www.istartsurf.com/?type=hppp&ts=1434454543&from=xtab&uid=AC0B1EBF4833475[...]] =>PUP.Optional.IsStart ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (24) ---\\ Tâche planifiée. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Explorateur ( Dossiers, Fichiers ). (16) TROUVÉ fichier: C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys [Elex do Brasil Participações Ltda - iSafe Kernel Driver] =>.Superfluous.Elex TROUVÉ fichier: C:\Program Files\Elex-tech\YAC\iSafeKrnlKit.sys [Elex do Brasil Participações Ltda - iSafe Kernel Kit Driver] =>.Superfluous.Elex TROUVÉ fichier: C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys [Elex do Brasil Participações Ltda - YAC Monitor Driver] =>.Superfluous.Elex TROUVÉ fichier: C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys [Elex do Brasil Participações Ltda - iSafe Kernel Ring3 Driver] =>.Superfluous.Elex TROUVÉ fichier: C:\Program Files\Elex-tech\YAC\iSafeSvc.exe [Elex do Brasil Participações Ltda - iSafeSvc] =>.Superfluous.Elex TROUVÉ fichier: C:\Windows\System32\drivers\iSafeNetFilter.sys [Elex do Brasil Participações Ltda - iSafeNetFilter SDK WFP Driver (WPP)] =>.Superfluous.Elex TROUVÉ fichier: C:\Windows\System32\drivers\iSafeNetFilter.sys [Elex do Brasil Participações Ltda - iSafeNetFilter SDK WFP Driver (WPP)] =>.Superfluous.YetAnotherCleaner TROUVÉ dossier: C:\Program Files\Elex-tech\YAC =>.Superfluous.Elex TROUVÉ dossier: C:\Program Files\Elex-tech =>.Superfluous.Elex TROUVÉ dossier: C:\Users\Martine\AppData\Roaming\Elex-tech\YAC =>.Superfluous.Elex TROUVÉ dossier: C:\Users\Martine\AppData\Roaming\Elex-tech =>.Superfluous.Elex TROUVÉ dossier: C:\Users\Invité\AppData\Roaming\Elex-tech\YAC =>.Superfluous.Elex TROUVÉ dossier: C:\Users\Invité\AppData\Roaming\Elex-tech =>.Superfluous.Elex TROUVÉ dossier: C:\Users\Invité\AppData\Local\Temp\scoped_dir_3724_22217 =>.Superfluous.Temporary.Steam TROUVÉ dossier: C:\Users\Invité\AppData\Local\Temp\scoped_dir_5480_299 =>.Superfluous.Temporary.Steam TROUVÉ dossier: C:\Program Files\Elex-tech\YAC =>.Superfluous.YetAnotherCleaner ---\\ Base de Registres ( Clés, Valeurs, Données ). (41) TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=[...]] [Bing] =>PUP.Optional.DoSearches TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0b4d26f6-61a8-4463-99dd-5f2fe0400fa6} [http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=[...]] [Google] =>PUP.Optional.DoSearches TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} [http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=[...]] [Search the web (Babylon)] =>PUP.Optional.IMBooster TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} [http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=[...]] [e] =>PUP.Optional.DoSearches TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{27E7D4BC-EF71-41F6-AB63-CBB2C61A25C7} [http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=[...]] [] =>PUP.Optional.DoSearches TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} [http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=[...]] [istartsurf] =>PUP.Optional.IsStart TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} [http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=[...]] [Binkiland] =>PUP.Optional.Binkiland TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A3863030-69AA-434A-A550-734E64CDC0D2} [http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=[...]] [Ask Search] =>PUP.Optional.DoSearches TROUVÉ clé: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} [http://binkiland.com/results.php?f=4&q={searchTerms}&a=bnk_ir_15_08&cd=2XzuyEtN2Y1L1Qzu0Bzz0A0CyC0F0[...]] [Binkiland] =>PUP.Optional.Binkiland TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnl [C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys](..) =>.Superfluous.Elex TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlKit [C:\Program Files\Elex-tech\YAC\iSafeKrnlKit.sys](..) =>.Superfluous.Elex TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlMon [C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys](..) =>.Superfluous.Elex TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlR3 [C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys](..) =>.Superfluous.Elex TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeService [C:\Program Files\Elex-tech\YAC\iSafeSvc.exe](..) =>.Superfluous.Elex TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnl [C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys] =>.Superfluous.Elex TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlKit [C:\Program Files\Elex-tech\YAC\iSafeKrnlKit.sys] =>.Superfluous.Elex TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlMon [C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys] =>.Superfluous.Elex TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlR3 [C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys] =>.Superfluous.Elex TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeNetFilter [C:\Windows\System32\drivers\iSafeNetFilter.sys] =>.Superfluous.Elex TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeService [C:\Program Files\Elex-tech\YAC\iSafeSvc.exe] =>.Superfluous.Elex TROUVÉ clé: HKEY_USERS\S-1-5-21-2787963296-4269164344-169216427-1000\SOFTWARE\Classes\.jpg [PicexaViewer.jpg] =>PUP.Optional.Picexa TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\atwola.com [] =>.Superfluous.Atwola TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d16fk4ms6rqz1v.cloudfront.net [18] =>.Superfluous.CloudfrontNet TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d22j4fzzszoii2.cloudfront.net [1670] =>.Superfluous.CloudfrontNet TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ol.uk.at.atwola.com [341] =>.Superfluous.Atwola TROUVÉ clé: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\static.audienceinsights.net [43] =>.Superfluous.AudienceInsights TROUVÉ clé: HKLM\Software\Classes\Installer\Products\D2A425F405350054677A7A857BC05100 [Search App by Ask] =>PUP.Optional.BrowserTabSearch TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\CscService [] =>.Superfluous.PCSpeedUp TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnl [] =>.Superfluous.YetAnotherCleaner TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlBoot [] =>.Superfluous.YetAnotherCleaner TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlKit [] =>.Superfluous.YetAnotherCleaner TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlMon [] =>.Superfluous.YetAnotherCleaner TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlR3 [] =>.Superfluous.YetAnotherCleaner TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeNetFilter [] =>.Superfluous.YetAnotherCleaner TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\iSafeService [] =>.Superfluous.YetAnotherCleaner TROUVÉ clé: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Driver Detective [] =>PUP.Optional.DriverDetective TROUVÉ clé: HKLM\SOFTWARE\Elex-tech [] =>.Superfluous.Elex TROUVÉ clé: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe [ELEX DO BRASIL PARTICIPAÇÕES LTDA] =>.Superfluous.Elex TROUVÉ clé: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Google Inc.] =>Heuristic.Suspect TROUVÉ clé: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\189F6D048E923EA48B11D15B30CDAC81 [C:\Program Files\AskPartnerNetwork\Toolbar\ServiceLocator.exe (Not File)] =>PUP.Optional.APNToolBar TROUVÉ clé: HKLM\Software\Classes\Installer\Features\D2A425F405350054677A7A857BC05100 [Search App by Ask] =>PUP.Optional.BrowserTabSearch ---\\ Récapitulatif des éléments trouvés sur votre station. (17) https://www.anti-malware.top/2016/05/18/superfluous-elex/ =>.Superfluous.Elex https://www.nicolascoolman.com/fr/pup-quickstart/ =>PUP.Optional.QuickStart https://www.nicolascoolman.com/fr/pup-isstart/ =>PUP.Optional.IsStart https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.YetAnotherCleaner https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Temporary.Steam https://www.nicolascoolman.com/fr/pup-dosearches/ =>PUP.Optional.DoSearches https://www.nicolascoolman.com/fr/adware-imbooster/ =>PUP.Optional.IMBooster https://www.nicolascoolman.com/fr/pup-optional-binkiland/ =>PUP.Optional.Binkiland https://www.anti-malware.top/2016/05/25/superfluous-picexa/ =>PUP.Optional.Picexa https://www.anti-malware.top/2016/07/21/superfluous-atwola/ =>.Superfluous.Atwola https://www.anti-malware.top/2016/08/31/cloudfront-net/ =>.Superfluous.CloudfrontNet https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.AudienceInsights https://www.nicolascoolman.com/fr/pup-browsertabsearch/ =>PUP.Optional.BrowserTabSearch https://www.nicolascoolman.com/fr/superfluous-pcspeeduppro/ =>.Superfluous.PCSpeedUp https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.DriverDetective https://www.anti-malware.top/2016/04/22/heuristic-suspect/ =>Heuristic.Suspect https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.APNToolBar ---\\ Bilan de la réparation ~ Aucune réparation effectuée. ~ Ce navigateur est absent (Opera Software) ---\\ Statistiques ~ Items scannés : 57530 ~ Items trouvés : 75 ~ Items annulés : 0 ~ Items réparés : 0 ~ End of search in 00h15mn21s ~==================== ZHPCleaner-[S]-29112016-18_11_46.txt