~ ZHPCleaner v2017.5.14.81 by Nicolas Coolman (2017/05/14)
~ Run by joseph (Administrator)  (18/05/2017 16:49:23)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Users\joseph\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\joseph\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit  (Build 14393)


---\\  Service. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\  Navigateur internet. (36)
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.DigiHelp.asul", "1418114972913");  =>PUP.Optional.DigiHelp
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.DigiHelp.aul", "1418026900392");  =>PUP.Optional.DigiHelp
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.DigiHelp.irl", true);  =>PUP.Optional.DigiHelp
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.DigiHelp.is", "isgiwhFR");  =>PUP.Optional.DigiHelp
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.DigiHelp.ug", "0EA9166E-5868-4C9E-A29F-F84291B4A569");  =>PUP.Optional.DigiHelp
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.moneti[...]  =>PUP.Optional.Monetization
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.name", "CinemaPlu[...]  =>Adware.CrossRider
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.publisher", "Cine[...]  =>Adware.CrossRider
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.AL", 2);  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.aflt", "vst_ir_14_51_other");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.appId", "{4CB3598A-82E8-4D1F-983F-061238AE696E}");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.cd", "2XzuyEtN2Y1L1Qzu0Bzz0E0EyCyD0CtCyC0F0AyEyDtBtAzytN0D0Tzu0StCtD[...]  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.cr", "348316094");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.data.1475e97c0146bfb1c490339546d9e72ee", "1");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.data._dy", "20141118");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.data.a._dy", "20141118");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.data.a.aliveDate", "20141118");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.data.a.instlDate", "20141118");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.data.cc", "fr");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.data.ccfc1eb13092ea34473c169417eefd00", "1");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.dfltLng", "");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.dfltSrch", true);  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.dnsErr", true);  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.excTlbr", false);  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.general.guid", "d65851e2-8cf3-41c4-a00a-033964a5bb60");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.hmpg", true);  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.id", "B8EE65C16FA45239");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.instlDay", "16422");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.instlRef", "142905_s");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.prdct", "srchvstrn");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.tlbrId", "");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.vrsn", "");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn.vrsni", "");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn_i.newTab", true);  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn_i.smplGrp", "none");  =>PUP.Optional.Vosteran
SUPPRIMÉ: [9qx4uz5s.default] - user_pref("extensions.srchvstrn_i.vrsnTs", "19:37:59");  =>PUP.Optional.Vosteran


---\\  Fichier hôte. (1)
~ Le fichier hôte est légitime. (21)


---\\  Tâche planifiée. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\  Explorateur  ( Dossiers, Fichiers ). (39)
DEPLACÉ fichier: C:\Windows\Installer\wix{B5E06417-A4AC-4225-B36E-7E34C91616E7}.SchedServiceConfig.rmi    =>.Superfluous.Empty
DEPLACÉ fichier: C:\Windows\Installer\wix{C4123106-B685-48E6-B9BD-E4F911841EB4}.SchedServiceConfig.rmi    =>.Superfluous.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\6280.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\6484.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\6522.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\7AA0.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\7BCA.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\7C38.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVR102C.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVR18A5.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVR18A6.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVR1CFA.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVR5A04.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVR5D5E.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVR70.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVR7B67.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVR85B7.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVRA893.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVRB998.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVRBA34.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVRDDFA.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVRE5AD.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVREB68.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\CVRF434.tmp.cvr    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\DeleteOnReboot.bat    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\JavaDeployReg.log    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\NitroOutlookAddin.ini    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\sa.B7334264-6338-BD94-1884-4D4217C09133_5__.Public.AppUpdate.dat    =>.Superfluous.Temporary
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\Setup Log 2017-05-17 #001.txt    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\URL6D2A.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\URL7187.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\URLB739.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\URLBA4F.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\URLCD7E.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\URLE7AD.tmp    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier^: C:\Users\joseph\AppData\Local\Temp\{5D6C0964-79E6-49C1-804E-ABE9EF71346B}-DropboxClient_26.4.24.exe    =>.Superfluous.Temporary.Empty
DEPLACÉ fichier: C:\Users\joseph\AppData\Local\Temp\~DF247BC44D6DE1D4CD.TMP    =>.Superfluous.Temporary.Empty
DEPLACÉ dossier: C:\ProgramData\7c0535b143fc4671b6ebd202fbffe066  =>Adware.CrossRider
DEPLACÉ dossier: C:\Users\joseph\AppData\Roaming\HMYGSetting  =>Adware.Suspect


---\\  Base de Registres ( Clés, Valeurs, Données ). (8)
SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\chatango.com []  =>PUP.Optional.Chatango
SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\soundcloud.com []  =>PUP.Optional.SoundCloud
SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\chatango.com []  =>PUP.Optional.Chatango
SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\soundcloud.com []  =>PUP.Optional.SoundCloud
SUPPRIMÉ clé*: HKCU\Software\WEBAPP []  =>.Superfluous.Downloader
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\f [f]  =>PUP.Optional.Funmoods
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} [secman]  =>PUP.Optional.Camec
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} [secman]  =>PUP.Optional.Camec


---\\  Récapitulatif des éléments trouvés sur votre station. (13)
https://www.anti-malware.top/2016/05/01/pup-optional-digihelp/  =>PUP.Optional.DigiHelp
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>PUP.Optional.Monetization
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/  =>Adware.CrossRider
https://nicolascoolman.eu/2017/03/01/pup-optional-vosteran/  =>PUP.Optional.Vosteran
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.Empty
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.Temporary.Empty
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.Temporary
https://nicolascoolman.eu/2017/03/02/adware-suspect/  =>Adware.Suspect
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>PUP.Optional.Chatango
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>PUP.Optional.SoundCloud
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.Downloader
https://www.nicolascoolman.com/fr/pup-funmoods/  =>PUP.Optional.Funmoods
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>PUP.Optional.Camec


---\\  Nettoyage Additionnel. (25)
~ Suppression des Clés de registre Tracing. (25)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent  (Google Chrome)
~ Ce navigateur est absent  (Opera Software)
~ Le système a été redémarré.


---\\ Statistiques
~ Items scannés : 1147
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 89


~ End of clean in 00h00mn29s
~====================
ZHPCleaner-[R]-18052017-16_49_52.txt
ZHPCleaner-[S]-17052017-22_05_11.txt
ZHPCleaner-[S]-18052017-16_49_08.txt