~ ZHPCleaner v2017.5.14.81 by Nicolas Coolman (2017/05/14)
~ Run by Pierre (Administrator)  (27/05/2017 12:41:45)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Users\Pierre\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Pierre\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit  (Build 15063)


---\\  Service. (1)
ARRETÉ : EasyTuneEngineService  =>Heuristic.Pirrit


---\\  Navigateur internet. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\  Fichier hôte. (1)
~ Le fichier hôte est légitime. (205)


---\\  Tâche planifiée. (1)
SUPPRIMÉ tâche: [GraphicsCardEngine] [C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GraphicsCardEngine.exe]  =>Heuristic.Pirrit


---\\  Explorateur  ( Dossiers, Fichiers ). (82)
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\2A1C.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\3CBA.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\681a6aedb027install.rdf    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\ACLMInstaller.exe.config    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\ACLMInstallLog20170525-162733.txt    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\Americanas.ico    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\BDEB2EB.BAK    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\BigFarm.ico    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\big_bang_empire.ico    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\CasasBahia.ico    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\CF5E.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\csp54D6.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\csp5554.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\csp5611.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\csp619B.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\csp9FCE.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\cspA01D.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\cspA01E.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\cspA02F.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\cspA030.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\cspA05F.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\cspA070.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\cspA081.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\csw9121.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\csw91CE.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\csw91DF.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\cswA0E3.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\cswA3F1.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\cswA431.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\cswD46E.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\cswD569.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\cswD599.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\DeleteOnReboot.bat    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\DisWhql.ini    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\dv2A0C2.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\dv2A8F1.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\dv2B0D2.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\E06.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\FC3.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\fList.xml    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\GBTSpecial.xml    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\HomePage.dat    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\Setup Log 2017-05-26 #001.txt    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\Setup Log 2017-05-26 #002.txt    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\Setup Log 2017-05-26 #003.txt    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\Setup Log 2017-05-26 #004.txt    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\Setup Log 2017-05-26 #005.txt    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\Setup Log 2017-05-27 #001.txt    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\tmp-2jz.xpi    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\tmp-qlg.xpi    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\wctA375.tmp    =>.Superfluous.Temporary.Various
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\_&q9C3D.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\{B4DD5742-5A9B-480C-8AB9-ABF4E76531A4}.png    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\~DFBADA7BE696342B43.TMP    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\~DFC743C220EBAFBE34.TMP    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\~se46DF.tmp [IntertSect Alliance Pty Ltd - wsrnnae Service]  =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\~se5F94.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\~se90A4.tmp [IntertSect Alliance Pty Ltd - terana Service]  =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\Pierre\AppData\Local\Temp\~seD410.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ dossier^: C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService  =>Heuristic.Pirrit
DEPLACÉ dossier: C:\Users\Pierre\AppData\Roaming\WinSAPSvc  =>PUP.Optional.Youndoo
DEPLACÉ dossier: C:\Users\Pierre\AppData\Local\CrashRpt  =>.Superfluous.CrashReports
DEPLACÉ dossier: C:\Users\Pierre\AppData\Local\Temp\EasyTuneEngineService  =>Heuristic.Pirrit
DEPLACÉ dossier: C:\Users\pierr\AppData\Local\Temp\EasyTuneEngineService  =>Heuristic.Pirrit
DEPLACÉ dossier: C:\Documents and Settings\pierr\Local Settings\Application Data\Temp\EasyTuneEngineService  =>Heuristic.Pirrit
DEPLACÉ dossier: C:\ProgramData\BIT  =>.Superfluous.Elex
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI251.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI2F20.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI46F4.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI47FF.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI65AC.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI680F.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI6835.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI68F1.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI695F.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI6A1D.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI6F31.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI9D9B.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSI9E57.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIAB5B.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIAD22.tmp-  =>.Superfluous.Empty
DEPLACÉ dossier: C:\WINDOWS\Installer\MSIF957.tmp-  =>.Superfluous.Empty


---\\  Base de Registres ( Clés, Valeurs, Données ). (28)
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\EasyTuneEngineService [C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\OcButtonService [C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: HKLM\SOFTWARE\Wow6432Node\Firefox []  =>Adware.GhokswaBrowser
SUPPRIMÉ clé: HKLM\SOFTWARE\Firefox []  =>Adware.GhokswaBrowser
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\BIT []  =>.Superfluous.Elex
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\WinSAPSvc []  =>PUP.Optional.Youndoo
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\InterSect Alliance []  =>.Superfluous.InterSect
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\018DB0496FC46614CBED2103F75B7262 [C:\?Program Files (x86)\GIGABYTE\EasyTuneEngineService\acpimof_ocpanel.dll (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\026A2426B53FDFC4599B58F49DE82D74 [C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\Languages\SPA\ (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\040381EE9264F8945BD73E983C928059 [C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\Languages\VIE\ (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0DA9CE1E8343FF54A861511CAB59FE3D [C:\?Program Files (x86)\GIGABYTE\EasyTuneEngineService\cctWin.exe (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E779259750044C565F4587810BED609 [C:\?Program Files (x86)\GIGABYTE\EasyTuneEngineService\ICCProxy.exe (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1AFB09D4D260CBE40927B761FAD7F590 [C:\?Program Files (x86)\GIGABYTE\EasyTuneEngineService\Gigabyte.ComputerSystemHardware.dll (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1D955E654775BC541907F78DD8CCBCC1 [C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\IccService11\ (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E170AB4F1E37DF4286ED5EBC296C494 [C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\Languages\KOR\ (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29DA1DB1F0599C74C9D3DB350EBACE11 [C:\?Program Files (x86)\GIGABYTE\EasyTuneEngineService\KillGraphicEngine.exe (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2AE2A28A3E915D64EBB460CB07A0F0F4 [C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\Languages\IND\ (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BE88CBA5B05095458148AD86DE6556A [C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DD706E15A87DBF4BAB7440F8F450607 [C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\Languages\ENG\ (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2FFC39CF0B45A1B409FA86F62DEE50A6 [C:\?Program Files (x86)\GIGABYTE\EasyTuneEngineService\Gigabyte.GraphicsCard.Common.dll (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\304FEEB91CD7D064795B38CF8B4667C7 [C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\Languages\FRA\ (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\36AD3DEB36FD2994BA0296C56CCF0760 [C:\?Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38A80B6A9E042164A9E79D7E4D072123 [C:\?Program Files (x86)\GIGABYTE\EasyTuneEngineService\Gigabyte.EasyTune.dll (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\41CF50DB84D9425419E4D12E5BCDE5E6 [C:\?Program Files (x86)\GIGABYTE\EasyTuneEngineService\Gigabyte.GraphicsCard.Remoting.dll (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\42DC1F6889DD52B4192FF3145D432DEE [C:\?Program Files (x86)\GIGABYTE\EasyTuneEngineService\Gigabyte.dll (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4BA7CDF7E7BB513489528D4C3BE95A3D [C:\?Program Files (x86)\GIGABYTE\EasyTuneEngineService\Gigabyte.EasyTune.Remoting.dll (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CA4C5ECCA4AB774F919442CB6DE9E63 [C:\?Program Files (x86)\GIGABYTE\EasyTuneEngineService\Gigabyte.NativeFunctions.dll (Not File)]  =>Heuristic.Pirrit
SUPPRIMÉ clé*: HKCU\SOFTWARE\5286868F54696D063F59296A27BE70AA []  =>Hijacker.Browser


---\\  Récapitulatif des éléments trouvés sur votre station. (10)
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>Heuristic.Pirrit
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.Temporary.Empty
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.Temporary.Various
https://nicolascoolman.eu/2017/03/11/superfluous-youndoo/  =>PUP.Optional.Youndoo
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.CrashReports
https://nicolascoolman.eu/2017/03/28/superfluous-elex/  =>.Superfluous.Elex
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.Empty
https://nicolascoolman.eu/2017/02/19/adware-ghokswabrowser/  =>Adware.GhokswaBrowser
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.InterSect
https://nicolascoolman.eu/2017/02/02/hijacker-browser-2/  =>Hijacker.Browser


---\\  Nettoyage Additionnel. (24)
~ Suppression des Clés de registre Tracing. (24)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent  (Opera Software)
~ Le système a été redémarré.


---\\ Statistiques
~ Items scannés : 1338
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 113


~ End of clean in 00h00mn44s
~====================
ZHPCleaner-[R]-25052017-16_50_54.txt
ZHPCleaner-[R]-27052017-12_42_29.txt
ZHPCleaner-[R]-28012017-19_41_11.txt
ZHPCleaner-[S]-25052017-16_50_00.txt
ZHPCleaner-[S]-27052017-12_41_17.txt
ZHPCleaner-[S]-28012017-19_12_30.txt
ZHPCleaner-[S]-28012017-19_39_53.txt