~ ZHPCleaner v2017.6.26.105 by Nicolas Coolman (2017/06/26)
~ Run by Flavio (Administrator)  (15/07/2017 19:25:48)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Illegal
~ Type : Nettoyer
~ Report : C:\Users\Flavio\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Flavio\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows VISTA, 32-bit Service Pack 1 (Build 6001)


---\\  Service. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\  Navigateur internet. (2)
SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings [Bad : Port=50347 <-Loopback>]  =>Hijacker.Proxy
SUPPRIMÉ donnée: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings [Bad : Port=50347 <-Loopback>]  =>Hijacker.Proxy


---\\  Fichier hôte. (1)
~ Le fichier hôte est légitime. (22)


---\\  Tâche planifiée. (2)
SUPPRIMÉ tâche: [globalUpdateUpdateTaskMachineCore] [C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job (Not File) ]  =>PUP.Optional.GlobalUpdate
SUPPRIMÉ tâche: [globalUpdateUpdateTaskMachineUA] [C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job (Not File) ]  =>PUP.Optional.GlobalUpdate


---\\  Explorateur  ( Dossiers, Fichiers ). (35)
DEPLACÉ fichier: C:\Users\Flavio\AppData\Local\amqck_nav.dat    =>Heuristic.MagicControl
DEPLACÉ fichier: C:\Users\Flavio\AppData\Local\amqck.dat    =>Heuristic.MagicControl
DEPLACÉ fichier: C:\Users\Flavio\AppData\Local\amqck_navps.dat    =>Heuristic.MagicControl
DEPLACÉ fichier: C:\Users\Flavio\AppData\Local\aqkyimm_nav.dat    =>Heuristic.MagicControl
DEPLACÉ fichier: C:\Users\Flavio\AppData\Local\aqkyimm.dat    =>Heuristic.MagicControl
DEPLACÉ fichier: C:\Users\Flavio\AppData\Local\aqkyimm_navps.dat    =>Heuristic.MagicControl
DEPLACÉ fichier: C:\Users\Flavio\AppData\Local\gmqqyqw_nav.dat    =>Heuristic.MagicControl
DEPLACÉ fichier: C:\Users\Flavio\AppData\Local\gmqqyqw.dat    =>Heuristic.MagicControl
DEPLACÉ fichier: C:\Users\Flavio\AppData\Local\gmqqyqw_navps.dat    =>Heuristic.MagicControl
DEPLACÉ fichier: C:\Users\Flavio\AppData\Local\thlxd_nav.dat    =>Heuristic.MagicControl
DEPLACÉ fichier: C:\Users\Flavio\AppData\Local\thlxd.dat    =>Heuristic.MagicControl
DEPLACÉ fichier: C:\Users\Flavio\AppData\Local\thlxd_navps.dat    =>Heuristic.MagicControl
DEPLACÉ fichier: C:\Program Files\Common Files\FDEUnInstaller.exe [ - FDEUninstaller]  =>Adware.Suspect
DEPLACÉ fichier: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job    =>PUP.Optional.GlobalUpdate
DEPLACÉ fichier: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job    =>PUP.Optional.GlobalUpdate
DEPLACÉ fichier: C:\Windows\Prefetch\WINDAPP UPDATE.EXE-567E8924.pf    =>.Superfluous.Nosibay
DEPLACÉ fichier: C:\Users\Flavio\AppData\Roaming\Bubble Dock.boostrap.log    =>PUP.Optional.BubbleDock
DEPLACÉ fichier: C:\Users\Flavio\AppData\Roaming\Bubble Dock.installation.log    =>PUP.Optional.BubbleDock
DEPLACÉ fichier: C:\Users\Flavio\AppData\Roaming\WindApp.boostrap.log    =>.Superfluous.Nosibay
DEPLACÉ fichier: C:\Users\Flavio\AppData\Roaming\WindApp.installation.log    =>.Superfluous.Nosibay
DEPLACÉ dossier*: C:\Program Files\BitComet  =>.Superfluous.Empty
DEPLACÉ dossier*: C:\Program Files\globalUpdate  =>PUP.Optional.GlobalUpdate
DEPLACÉ dossier*: C:\Program Files\Inventel  =>.Superfluous.Empty
DEPLACÉ dossier*: C:\Program Files\SmartSaver+ 15  =>Adware.CrossRider
DEPLACÉ dossier*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlvPlayer  =>PUP.Optional.FLVPlayer
DEPLACÉ dossier*: C:\Windows\System32\config\systemprofile\AppData\Local\supt4pc_fr_51  =>PUP.Optional.Softomate
DEPLACÉ dossier*: C:\Users\Flavio\AppData\Roaming\Nosibay  =>PUP.Optional.SPointer
DEPLACÉ dossier*: C:\Users\Flavio\AppData\Roaming\Store  =>.Superfluous.Nosibay
DEPLACÉ dossier*: C:\Users\Flavio\AppData\Local\globalUpdate  =>PUP.Optional.GlobalUpdate
DEPLACÉ dossier*: C:\Users\Default\AppData\Local\Duuqu  =>PUP.Optional.Duuqu
DEPLACÉ dossier: C:\Users\Default User\AppData\Local\Duuqu  =>PUP.Optional.Duuqu
DEPLACÉ dossier*: C:\Program Files\QuickTime  =>Riskware.QuickTime
DEPLACÉ dossier*: C:\ProgramData\Software  =>PUP.Optional.Boxore
DEPLACÉ dossier*: C:\Users\Flavio\AppData\Local\Software  =>PUP.Optional.Boxore
DEPLACÉ dossier*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime  =>Riskware.QuickTime


---\\  Base de Registres ( Clés, Valeurs, Données ). (68)
SUPPRIMÉ clé*: HKLM\Software\Google\Chrome\Extensions\enmejlcdlcdnbkhaadpkgmkepllhkgjm [C:\Program Files\MediaWatchV1\MediaWatchV1home805\ch\MediaWatchV1home805.crx (Not File)]  =>PUP.Optional.MediaWatch
SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6 [Avast Software]  =>Trojan.CertLock
SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931 [Avast Software]  =>Trojan.CertLock
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3630543836-1406161070-2605694944-1000\SOFTWARE\fcn []  =>Adware.Navipromo
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3630543836-1406161070-2605694944-1000\SOFTWARE\globalUpdate []  =>PUP.Optional.GlobalUpdate
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3630543836-1406161070-2605694944-1000\SOFTWARE\Nosibay []  =>PUP.Optional.SPointer
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3630543836-1406161070-2605694944-1000\SOFTWARE\WebMediaPlayer [C:\Program Files\WebMediaPlayer (Not File)]  =>PUP.Optional.EGDAccess
SUPPRIMÉ clé: HKCU\Software\fcn []  =>Adware.Navipromo
SUPPRIMÉ clé: HKCU\Software\globalUpdate []  =>PUP.Optional.GlobalUpdate
SUPPRIMÉ clé: HKCU\Software\Nosibay []  =>PUP.Optional.SPointer
SUPPRIMÉ clé: HKCU\Software\WebMediaPlayer [C:\Program Files\WebMediaPlayer (Not File)]  =>PUP.Optional.EGDAccess
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WindApp [Store]  =>.Superfluous.Nosibay
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SmartSaver+ 15 []  =>Adware.CrossRider
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wajam []  =>PUP.Optional.Wajam
SUPPRIMÉ clé*: HKCU\Software\TeleCharger []  =>.Superfluous.Downloader
SUPPRIMÉ clé*: HKCU\Software\Store []  =>PUP.Optional.Generic
SUPPRIMÉ clé*: HKCU\Software\Mozilla\Extends []  =>PUP.Optional.FastStart
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\Interface\{237FDFDB-3722-470E-8BA8-90196DABE967} [ISetup]  =>PUP.Optional.GetNow
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass [Google Update Core Class]  =>PUP.Optional.GlobalUpdate
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1 [Google Update Core Class]  =>PUP.Optional.GlobalUpdate
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc [Google Update Legacy On Demand]  =>PUP.Optional.GlobalUpdate
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0 [Google Update Legacy On Demand]  =>PUP.Optional.GlobalUpdate
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc [GoogleUpdate Update3Web]  =>PUP.Optional.GlobalUpdate
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0 [GoogleUpdate Update3Web]  =>PUP.Optional.GlobalUpdate
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.001 [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.7z [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.arj [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.bz2 [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.bzip2 [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.cab [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.cpio [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.deb [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.dmg [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.fat [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.gz [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.gzip [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.hfs [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.iso [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.lha [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.lzh [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.lzma [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.ntfs [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.rar [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.rpm [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.squashfs [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.swm [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.tar [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.taz [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.tbz [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.tbz2 [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.tgz [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.tpz [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.txz [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.vhd [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.wim [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.xar [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.xz [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.z [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\WinZipper.zip [WinZipper]  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\winzipersvc []  =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: HKLM\SOFTWARE\awesomehpSoftware []  =>PUP.Optional.AwesomeHP
SUPPRIMÉ clé*: HKLM\SOFTWARE\FlvPlayer []  =>PUP.Optional.FLVPlayer
SUPPRIMÉ clé*: HKLM\SOFTWARE\GlobalUpdate []  =>PUP.Optional.GlobalUpdate
SUPPRIMÉ clé*: HKLM\SOFTWARE\SmartSaver+ 15 []  =>Adware.CrossRider
SUPPRIMÉ clé*: HKLM\SOFTWARE\WebMediaPlayer [C:\Program Files\WebMediaPlayer (Not File)]  =>PUP.Optional.EGDAccess
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SmartSaver+ 15 [smart-saverplus]  =>Adware.CrossRider
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DuuquUpdate.exe []  =>PUP.Optional.FrameFox
SUPPRIMÉ valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\WindApp ["C:\Users\Flavio\AppData\Roaming\Store\WindApp\WindApp Update.exe" /winstartup]  =>.Superfluous.Nosibay


---\\  Récapitulatif des éléments trouvés sur votre station. (26)
https://nicolascoolman.eu/2017/04/03/hijacker-proxy/  =>Hijacker.Proxy
https://www.nicolascoolman.com/fr/pup-globalupdate/  =>PUP.Optional.GlobalUpdate
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>Heuristic.MagicControl
https://nicolascoolman.eu/2017/03/02/adware-suspect/  =>Adware.Suspect
https://www.anti-malware.top/2016/05/03/superfluous-nosibay/  =>.Superfluous.Nosibay
https://www.nicolascoolman.com/fr/pup-bubbledock/  =>PUP.Optional.BubbleDock
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.Empty
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/  =>Adware.CrossRider
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>PUP.Optional.FLVPlayer
https://www.nicolascoolman.com/fr/pup-softomate/  =>PUP.Optional.Softomate
https://www.nicolascoolman.com/fr/adware-spointer/  =>PUP.Optional.SPointer
https://www.nicolascoolman.com/fr/pup-duuqu/  =>PUP.Optional.Duuqu
https://nicolascoolman.eu/2017/01/15/riskware-quicktime/  =>Riskware.QuickTime
https://nicolascoolman.eu/2017/03/14/pup-optional-boxore/  =>PUP.Optional.Boxore
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>PUP.Optional.MediaWatch
https://nicolascoolman.eu/2017/06/26/trojan-certlock/  =>Trojan.CertLock
https://www.nicolascoolman.com/fr/adware-navipromo/  =>Adware.Navipromo
https://www.nicolascoolman.com/fr/adware-egdaccess/  =>PUP.Optional.EGDAccess
https://nicolascoolman.eu/2017/02/24/pup-optional-wajam/  =>PUP.Optional.Wajam
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.Superfluous.Downloader
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>PUP.Optional.Generic
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>PUP.Optional.FastStart
https://www.nicolascoolman.com/fr/pup-getnow/  =>PUP.Optional.GetNow
https://www.anti-malware.top/2016/05/05/superfluous-taiwanshuimu/  =>.Superfluous.TaiwanShuiMu
https://www.nicolascoolman.com/fr/pup-awesomehp/  =>PUP.Optional.AwesomeHP
https://www.nicolascoolman.com/fr/pup-framefox/  =>PUP.Optional.FrameFox


---\\  Nettoyage Additionnel. (13)
~ Suppression des Clés de registre Tracing. (13)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent  (Google Chrome)
~ Ce navigateur est absent  (Opera Software)


---\\ Statistiques
~ Items scannés : 826
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 107


~ End of clean in 00h06mn48s
~====================
ZHPCleaner-[R]-15072017-19_32_36.txt
ZHPCleaner-[S]-15072017-19_23_00.txt