~ ZHPCleaner v2017.6.23.102 by Nicolas Coolman (2017/06/23) ~ Run by Jerome Wiss (Administrator) (24/06/2017 09:45:04) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Legal ~ Type : Nettoyer ~ Report : C:\Users\Jerome Wiss\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Jerome Wiss\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Pro, 64-bit (Build 14393) ---\\ Service. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Navigateur internet. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Fichier hôte. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Tâche planifiée. (1) SUPPRIMÉ tâche: [SoftUpgrade] [C:\Program Files (x86)\SoftUpgrade\softup.exe (Not File) ] =>.Superfluous.Elex ---\\ Explorateur ( Dossiers, Fichiers ). (73) DEPLACÉ fichier: C:\Windows\Temp\g4CCB.tmp.exe =>Heuristic.Suspect DEPLACÉ fichier^: C:\Windows\Temp\gE3AC.tmp.exe =>Heuristic.Suspect DEPLACÉ fichier**: C:\Windows\Prefetch\ADBLOCKER.TMP-D2ED071E.pf =>PUP.Optional.Adblocker DEPLACÉ fichier**: C:\Windows\Prefetch\YEADESKTOP.EXE-25E7B42F.pf =>PUP.Optional.Zusy DEPLACÉ fichier**: C:\Windows\Prefetch\YEADESKTOP.TMP-C44B0B94.pf =>PUP.Optional.Zusy DEPLACÉ fichier**: C:\Windows\Prefetch\YEADESKTOP3.TMP-23CDF1FB.pf =>PUP.Optional.Zusy DEPLACÉ fichier**: C:\Windows\Installer\wix{7D84E343-A23D-451C-B123-0195B2D903A6}.SchedServiceConfig.rmi =>.Superfluous.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\bitrock_installer_2656.log =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CFG63.tmp =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVR28AF.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVR2A41.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVR2E0E.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVR33D7.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVR4E57.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVR4E88.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVR56.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVR77DA.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVR8790.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVR9736.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVRACEC.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVRB55F.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVRBD05.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVRC4E0.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVRE471.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVRE62A.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Temp\CVREB48.tmp.cvr =>.Superfluous.Temporary.Empty DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage =>.Superfluous.CloudfrontNet DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage-journal =>.Superfluous.CloudfrontNet DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_embedftv-a.akamaihd.net_0.localstorage =>.Superfluous.AkamaiHD DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_embedftv-a.akamaihd.net_0.localstorage-journal =>.Superfluous.AkamaiHD DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage =>.Superfluous.MindSpark DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage-journal =>.Superfluous.MindSpark DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_gamingwonderland.dl.tb.ask.com_0.localstorage =>.Superfluous.MindSpark DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_gamingwonderland.dl.tb.ask.com_0.localstorage-journal =>.Superfluous.MindSpark DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_st.chatango.com_0.localstorage =>PUP.Optional.Chatango DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_st.chatango.com_0.localstorage-journal =>PUP.Optional.Chatango DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage =>.Superfluous.AudienceInsights DEPLACÉ fichier**: C:\Users\Jerome Wiss\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage-journal =>.Superfluous.AudienceInsights DEPLACÉ dossier*: C:\Program Files (x86)\Autodesk =>.Superfluous.Empty DEPLACÉ dossier*: C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS DEPLACÉ dossier*: C:\Users\Jerome Wiss\AppData\Local\AppTrailers =>Adware.AppTrailers DEPLACÉ dossier*: C:\Users\Jerome Wiss\AppData\Local\CrashRpt =>.Superfluous.CrashReports DEPLACÉ dossier*: C:\Users\Jerome Wiss\AppData\Local\Google\Chrome\User Data\Default\File System\008 =>PUP.Optional.DomaIQ DEPLACÉ dossier*: C:\Users\Jerome Wiss\AppData\Roaming\UCChannel =>.Superfluous.UCBrowser DEPLACÉ dossier*: C:\Users\Jerome Wiss\AppData\Roaming\SPI =>PUP.Optional.Shopperz DEPLACÉ dossier*: C:\Users\Jerome Wiss\AppData\Roaming\Browsers =>PUP.Optional.Shopperz DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI1299.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI153B.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI15E3.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI1BDF.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI1EE4.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI2A5.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI342.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI35A4.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI42F8.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI768D.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI77D3.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI791C.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI79C9.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI7AE3.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI9142.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI938D.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI9459.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSI95B2.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSIAA4.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSIB70.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSIC411.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSIC4CD.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSIE2D1.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSIEE77.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSIEFB3.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSIF960.tmp- =>.Superfluous.Empty DEPLACÉ dossier*: C:\WINDOWS\Installer\MSIFB64.tmp- =>.Superfluous.Empty ---\\ Base de Registres ( Clés, Valeurs, Données ). (15) SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\JszipProtect [C:\Program Files (x86)\Maoha\JiSuZip\JsZipProtect64.sys (Not File)] =>.Superfluous.Elex SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1399252219-50659496-2868142954-1001\SOFTWARE\JiSuZip [] =>.Superfluous.Elex SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1399252219-50659496-2868142954-1001\SOFTWARE\YeaDesktop [] =>PUP.Optional.Zusy SUPPRIMÉ clé: HKCU\Software\JiSuZip [] =>.Superfluous.Elex SUPPRIMÉ clé: HKCU\Software\YeaDesktop [] =>PUP.Optional.Zusy SUPPRIMÉ clé*: HKCU\Software\AppDataLow\Software\AppTrailers [] =>Adware.AppTrailers SUPPRIMÉ clé*: HKCU\Software\VideoBox [] =>Adware.Amonetize SUPPRIMÉ clé*: HKCU\Software\Interstat [] =>.Superfluous.WeatherChannel SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552} [OCComSDK 1.0 Type Library] =>Adware.OpenCandy SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\JiSuZip [] =>.Superfluous.Elex SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552} [OCComSDK 1.0 Type Library] =>Adware.OpenCandy SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Yeadesktop_RASAPI32 [] =>PUP.Optional.Zusy SUPPRIMÉ valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\YeaDesktop [0x030000004D882A2263E0D201] =>PUP.Optional.Zusy SUPPRIMÉ valeur: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\WINDOWS\system32\RsFx\ [Folder Not Found] =>.Superfluous.Orphan SUPPRIMÉ valeur: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\WINDOWS\system32\UNP\ [Folder Not Found] =>.Superfluous.Orphan ---\\ Récapitulatif des éléments trouvés sur votre station. (21) https://nicolascoolman.eu/2017/03/28/superfluous-elex/ =>.Superfluous.Elex https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect https://nicolascoolman.eu/2017/01/28/adware-adblocker/ =>PUP.Optional.Adblocker https://www.anti-malware.top/2016/05/17/adware-zusy/ =>PUP.Optional.Zusy https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Empty https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Temporary.Empty https://nicolascoolman.eu/2017/02/02/superfluous-cloudfrontnet/ =>.Superfluous.CloudfrontNet https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.AkamaiHD https://nicolascoolman.eu/2017/01/15/superfluous-mindspark/ =>.Superfluous.MindSpark https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Chatango https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.AudienceInsights https://nicolascoolman.eu/2017/02/02/hacktool-autokms/ =>HackTool.AutoKMS https://nicolascoolman.eu/2017/01/18/adware-apptrailers/ =>Adware.AppTrailers https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.CrashReports https://www.nicolascoolman.com/fr/adware-domaiq/ =>PUP.Optional.DomaIQ https://nicolascoolman.eu/2017/03/04/superfluous-ucbrowser/ =>.Superfluous.UCBrowser https://www.anti-malware.top/2016/04/21/pup-optional-shopperz/ =>PUP.Optional.Shopperz https://www.anti-malware.top/2016/05/24/adware-amonetize/ =>Adware.Amonetize https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.WeatherChannel https://nicolascoolman.eu/2017/02/24/adware-opencandy/ =>Adware.OpenCandy https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Orphan ---\\ Nettoyage Additionnel. (46) ~ Suppression des Clés de registre Tracing. (46) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Opera Software) ~ Le système a été redémarré. ---\\ Statistiques ~ Items scannés : 781 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 89 ~ End of clean in 00h00mn34s ~==================== ZHPCleaner-[R]-24062017-09_45_38.txt ZHPCleaner-[S]-24062017-09_44_13.txt