~ ZHPCleaner v2017.6.17.100 by Nicolas Coolman (2017/06/17) ~ Run by jerem (Administrator) (17/06/2017 13:40:01) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Legal ~ Type : Nettoyer ~ Report : C:\Users\jerem\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\jerem\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 14393) ---\\ Service. (0) ---\\ Navigateur internet. (0) ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (383) ---\\ Tâche planifiée. (1) SUPPRIMÉ tâche: [UCBrowserUpdater] [C:\Program Files (x86)\UCBrowser\Application\update_task.exe (Not File) ] =>PUP.Optional.CertifiedToolbar ---\\ Explorateur ( Dossiers, Fichiers ). (6) DEPLACÉ fichier^: C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys [UC Web Inc. - UCBrowser Security Driver] =>.Superfluous.UCBrowser DEPLACÉ fichier: C:\Windows\Temp\g7C04.tmp.exe =>Heuristic.Suspect DEPLACÉ fichier: C:\Windows\Temp\g7C05.tmp.exe =>Heuristic.Suspect DEPLACÉ fichier: C:\Users\jerem\AppData\Local\Temp\7639D252-39CC-49F9-8686-B1226B0D6991.Diagnose.0.etl =>.Superfluous.Temporary.Empty DEPLACÉ fichier: C:\Users\jerem\AppData\Local\Temp\chrome_installer.log =>.Superfluous.Temporary.Empty DEPLACÉ fichier: C:\Users\jerem\AppData\Local\Temp\wctEA7.tmp =>.Superfluous.Temporary.Various ---\\ Base de Registres ( Clés, Valeurs, Données ). (37) SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\AdBlockerService [C:\Program Files (x86)\AdBlocker\AdBlockerService.exe (Not File)] =>PUP.Optional.Adblocker SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\JszipProtect [C:\Program Files (x86)\Maoha\JiSuZip\JsZipProtect64.sys (Not File)] =>.Superfluous.Elex SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\JszipService [C:\Program Files (x86)\Maoha\JiSuZip\JszipSvc.exe (Not File)] =>.Superfluous.Elex SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\ucdrv [C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys] =>.Superfluous.UCBrowser SUPPRIMÉ clé^: HKEY_USERS\S-1-5-21-4141958358-1162875587-695117042-1001\SOFTWARE\JiSuZip [] =>.Superfluous.Elex SUPPRIMÉ clé^: HKEY_USERS\S-1-5-21-4141958358-1162875587-695117042-1001\SOFTWARE\YeaDesktop [] =>PUP.Optional.Zusy SUPPRIMÉ clé^: HKCU\Software\JiSuZip [] =>.Superfluous.Elex SUPPRIMÉ clé^: HKCU\Software\YeaDesktop [] =>PUP.Optional.Zusy SUPPRIMÉ clé^: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\chatango.com [] =>PUP.Optional.Chatango SUPPRIMÉ clé^: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\kmspico10.com [] =>HackTool.KMSpico SUPPRIMÉ clé^: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\st.chatango.com [] =>PUP.Optional.Chatango SUPPRIMÉ clé^: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.yeadesktop.com [] =>PUP.Optional.Zusy SUPPRIMÉ clé^: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\yeadesktop.com [] =>PUP.Optional.Zusy SUPPRIMÉ clé^: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\chatango.com [] =>PUP.Optional.Chatango SUPPRIMÉ clé^: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\kmspico10.com [39] =>HackTool.KMSpico SUPPRIMÉ clé^: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\st.chatango.com [33] =>PUP.Optional.Chatango SUPPRIMÉ clé^: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.yeadesktop.com [107] =>PUP.Optional.Zusy SUPPRIMÉ clé^: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\yeadesktop.com [] =>PUP.Optional.Zusy SUPPRIMÉ clé^: HKCU\Software\UCBrowserPID [] =>.Superfluous.UCBrowser SUPPRIMÉ clé^: HKLM\SOFTWARE\Wow6432Node\UCBrowserPID [] =>.Superfluous.UCBrowser SUPPRIMÉ clé^: HKLM\SOFTWARE\UCBrowserPID [] =>.Superfluous.UCBrowser SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\Auhardwaregl [] =>.Superfluous.SuspiciousCloud SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\UCBrowserSvc [] =>.Superfluous.UCBrowser SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Wow6432Node\JiSuZip [] =>.Superfluous.Elex SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Yeadesktop_RASAPI32 [] =>PUP.Optional.Zusy SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Yeadesktop_RASMANCS [] =>PUP.Optional.Zusy SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Classes\CLSID\{0EC85481-BDF8-46F0-B3CD-242CEC5AECE9} [PropertyExt Class] =>.Superfluous.Elex SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Classes\CLSID\{0EC85481-BDF8-46F0-B3CD-242CEC5AECE9}\InprocServer32 [C:\Program Files (x86)\Maoha\JiSuZip\JZipExt.dll (Not File)] =>.Superfluous.Elex SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Classes\CLSID\{5C551008-A347-4DB3-AF48-014076FD2B46} [JZContextMenuExt Class] =>.Superfluous.Elex SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Classes\CLSID\{5C551008-A347-4DB3-AF48-014076FD2B46}\InprocServer32 [C:\Program Files (x86)\Maoha\JiSuZip\JZipExt.dll (Not File)] =>.Superfluous.Elex SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Classes\CLSID\{9A0700D2-920A-4E52-8697-9B5230C92612} [JzShlobj Class] =>.Superfluous.Elex SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Classes\CLSID\{9A0700D2-920A-4E52-8697-9B5230C92612}\InprocServer32 [C:\Program Files (x86)\Maoha\JiSuZip\JZipExt.dll (Not File)] =>.Superfluous.Elex SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Classes\CLSID\{B1A5B927-E0F9-47FC-ADD0-F012B8CEECCB} [JZDropHandler Class] =>.Superfluous.Elex SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Classes\CLSID\{B1A5B927-E0F9-47FC-ADD0-F012B8CEECCB}\InprocServer32 [C:\Program Files (x86)\Maoha\JiSuZip\JZipExt.dll (Not File)] =>.Superfluous.Elex SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Classes\CLSID\{C83C8499-99FF-4276-8CFD-6467362F6A1E} [DragDropMenu Class] =>.Superfluous.Elex SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Classes\CLSID\{C83C8499-99FF-4276-8CFD-6467362F6A1E}\InprocServer32 [C:\Program Files (x86)\Maoha\JiSuZip\JZipExt.dll (Not File)] =>.Superfluous.Elex SUPPRIMÉ valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\YeaDesktop [C:\Program Files (x86)\YeaDesktop\YeaDesktop.exe /autostart] =>PUP.Optional.Zusy ---\\ Récapitulatif des éléments trouvés sur votre station. (11) https://www.nicolascoolman.com/fr/pup-certifiedtoolbar/ =>PUP.Optional.CertifiedToolbar https://nicolascoolman.eu/2017/03/04/superfluous-ucbrowser/ =>.Superfluous.UCBrowser https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Temporary.Empty https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Temporary.Various https://nicolascoolman.eu/2017/01/28/adware-adblocker/ =>PUP.Optional.Adblocker https://nicolascoolman.eu/2017/03/28/superfluous-elex/ =>.Superfluous.Elex https://www.anti-malware.top/2016/05/17/adware-zusy/ =>PUP.Optional.Zusy https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Chatango https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.SuspiciousCloud ---\\ Nettoyage Additionnel. (40) ~ Suppression des Clés de registre Tracing. (40) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Mozilla Firefox) ~ Ce navigateur est absent (Opera Software) ---\\ Statistiques ~ Items scannés : 1088 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 46 ~ End of clean in 00h00mn48s ~==================== ZHPCleaner-[R]-16062017-21_27_32.txt ZHPCleaner-[R]-16062017-21_39_08.txt ZHPCleaner-[R]-17062017-13_40_49.txt ZHPCleaner-[S]-16062017-21_24_18.txt ZHPCleaner-[S]-16062017-21_37_45.txt ZHPCleaner-[S]-16062017-22_58_27.txt ZHPCleaner-[S]-17062017-13_39_43.txt