~ ZHPCleaner v2016.11.16.195 by Nicolas Coolman (2016/11/16)
~ Run by frada (Administrator)  (17/11/2016 13:10:51)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Users\frada\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\frada\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows VISTA, 32-bit Service Pack 2 (Build 6002)


---\\  Service. (1)
ARRETÉ : Update InfoTrigger  =>PUP.Optional.InfoTrigger


---\\  Navigateur internet. (3)
SUPPRIMÉ donnée: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride [Bad : <-loopback>]  =>Hijacker.Proxy
SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings [Bad : Port=60052 <-Loopback>]  =>Hijacker.Proxy
SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings [Bad : Port=60052 <-Loopback>]  =>Hijacker.Proxy


---\\  Fichier hôte. (1)
~ Le fichier hôte est légitime. (20)


---\\  Tâche planifiée. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\  Explorateur  ( Dossiers, Fichiers ). (28)
DEPLACÉ fichier: C:\Users\frada\AppData\Roaming\Mozilla\Firefox\Profiles\8kmxbkgd.default-1440755380764\storage\default\https+++ol.uk.at.atwola.com\.metadata    =>.Superfluous.Atwola
DEPLACÉ fichier: C:\Users\frada\AppData\Roaming\Mozilla\Firefox\Profiles\8kmxbkgd.default-1440755380764\storage\default\https+++ol.uk.at.atwola.com\.metadata-v2    =>.Superfluous.Atwola
DEPLACÉ fichier: C:\Users\frada\AppData\Roaming\Mozilla\Firefox\Profiles\8kmxbkgd.default-1440755380764\storage\default\https+++ol.uk.at.atwola.com\idb\12183338011.sqlite    =>.Superfluous.Atwola
DEPLACÉ fichier: C:\Program Files\InfoTrigger\updateInfoTrigger2.exe    =>PUP.Optional.InfoTrigger
DEPLACÉ fichier: C:\WINDOWS\System32\drivers\SPPD.sys    =>.Superfluous.ClientConnect
DEPLACÉ fichier: C:\WINDOWS\Installer\wix{3C3901C5-3455-3E0A-A214-0B093A5070A6}.SchedServiceConfig.rmi    =>.Superfluous.Empty
DEPLACÉ fichier: C:\WINDOWS\Installer\wix{4903D172-DCCB-392F-93A3-34CA9D47FE3D}.SchedServiceConfig.rmi    =>.Superfluous.Empty
DEPLACÉ fichier: C:\WINDOWS\System32\abengineOff.ini    =>PUP.Optional.Abengine
DEPLACÉ fichier*: C:\Users\frada\AppData\Local\Installer    =>PUP.Optional.InstallPedia
DEPLACÉ dossier: C:\Program Files\Flwsrf  =>PUP.Optional.Abengine
DEPLACÉ dossier: C:\Program Files\InfoTrigger  =>PUP.Optional.InfoTrigger
DEPLACÉ dossier: C:\Program Files\PC Speed Maximizer  =>.Superfluous.PCSpeedMaximizer
DEPLACÉ dossier: C:\ProgramData\Trymedia  =>PUP.Optional.Trymedia
DEPLACÉ dossier: C:\Users\frada\AppData\Roaming\Microsoft\Windows\Start Menu\ByteFence  =>.Superfluous.ByteFence
DEPLACÉ dossier: C:\Users\frada\AppData\Local\CrashRpt  =>.Superfluous.CrashReports
DEPLACÉ dossier: C:\Users\frada\AppData\Local\Gameo  =>.Superfluous.IronSourceLtd
DEPLACÉ dossier: C:\Users\frada\AppData\Local\Temp\scoped_dir1192_28566  =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\Users\frada\AppData\Local\Temp\scoped_dir2108_28358  =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\Users\frada\AppData\Local\Temp\scoped_dir2200_28292  =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\Users\frada\AppData\Local\Temp\scoped_dir2244_28312  =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\Users\frada\AppData\Local\Temp\scoped_dir2376_28511  =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\Users\frada\AppData\Local\Temp\scoped_dir2600_13016  =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\Users\frada\AppData\Local\Temp\scoped_dir3532_12905  =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\Users\frada\AppData\Local\Temp\scoped_dir3780_28247  =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\Users\frada\AppData\Local\Temp\scoped_dir3876_28439  =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\Users\frada\AppData\Local\Temp\scoped_dir4016_28469  =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\Program Files\Software  =>PUP.Optional.Boxore
DEPLACÉ dossier: C:\Users\frada\AppData\Local\Software  =>PUP.Optional.Boxore


---\\  Base de Registres ( Clés, Valeurs, Données ). (7)
SUPPRIMÉ clé*: HKCU\Software\InstallCore\1I1T1Q1S []  =>Heuristic.InstallCore
SUPPRIMÉ clé*: HKCU\Software\InstallCore\Uninstall []  =>Heuristic.InstallCore
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\SPDRIVER_1.37.0.1420 [C:\Program Files\ShopperPro\JSDriver\1.37.0.1420\jsdrv.sys (Not File)]  =>PUP.Optional.ShopperPro
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Update InfoTrigger [C:\Program Files\InfoTrigger\updateInfoTrigger2.exe]  =>PUP.Optional.InfoTrigger
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Util Hold Page [C:\Program Files\Hold Page\bin\utilHoldPage.exe (Not File)]  =>PUP.Optional.HoldPage
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SPDriver [C:\Program Files\ShopperPro\JSDriver\1.37.0.1420\jsdrv.exe (Not File)]  =>PUP.Optional.ShopperPro
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Super Optimizer [C:\Program Files\Super Optimizer\SupOptLauncher.exe (Not File)]  =>PUP.Optional.SuperOptimizer


---\\  Récapitulatif des éléments trouvés sur votre station. (18)
https://www.nicolascoolman.com/fr/pup-infotrigger/  =>PUP.Optional.InfoTrigger
https://www.anti-malware.top/2016/06/09/pirate-de-serveur-proxy-hijacker-proxy/  =>Hijacker.Proxy
https://www.anti-malware.top/2016/07/21/superfluous-atwola/  =>.Superfluous.Atwola
https://www.anti-malware.top/2016/06/15/superfluous-clientconnect/  =>.Superfluous.ClientConnect
https://www.nicolascoolman.com/fr/logiciels-superflus  =>.Superfluous.Empty
https://www.nicolascoolman.com/fr/repaquetage-et_infections/  =>PUP.Optional.Abengine
https://www.nicolascoolman.com/fr/adware-installpedia/  =>PUP.Optional.InstallPedia
https://www.nicolascoolman.com/fr/rogue-pcspeedmaximizer/  =>.Superfluous.PCSpeedMaximizer
https://www.nicolascoolman.com/fr/adware-trymedia/  =>PUP.Optional.Trymedia
https://www.anti-malware.top/2016/04/29/superfluous-bytefence/  =>.Superfluous.ByteFence
https://www.nicolascoolman.com/fr/logiciels-superflus  =>.Superfluous.CrashReports
https://www.anti-malware.top/2016/05/02/superfluous-ironsourceltd/  =>.Superfluous.IronSourceLtd
https://www.nicolascoolman.com/fr/logiciels-superflus  =>.Superfluous.Temporary.Steam
https://www.anti-malware.top/2016/05/02/pup-optional-boxore/  =>PUP.Optional.Boxore
https://www.nicolascoolman.com/fr/repaquetage-et_infections/  =>Heuristic.InstallCore
https://www.nicolascoolman.com/fr/pup-shopperpro/  =>PUP.Optional.ShopperPro
https://www.anti-malware.top/2016/06/02/pup-optional-holdpage/  =>PUP.Optional.HoldPage
https://www.nicolascoolman.com/fr/repaquetage-et_infections/  =>PUP.Optional.SuperOptimizer


---\\  Nettoyage Additionnel. (10)
~ Suppression des Clés de registre Tracing. (10)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent  (Google Chrome)
~ Ce navigateur est absent  (Opera Software)


---\\ Statistiques
~ Items scannés : 969
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 40


~ End of clean in 00h56mn44s
~====================
ZHPCleaner-[R]-17112016-14_07_35.txt
ZHPCleaner-[S]-17112016-13_01_00.txt