~ ZHPCleaner v2017.7.15.122 by Nicolas Coolman (2017/07/15) ~ Run by philippe (Administrator) (16/07/2017 12:03:22) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Legal ~ Type : Nettoyer ~ Report : C:\Users\philippe\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\philippe\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows VISTA, 32-bit Service Pack 2 (Build 6002) ---\\ Service. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Navigateur internet. (4) SUPPRIMÉ: [shoaw3nk.default-1380644493348] - user_pref("extensions.a42d00f3feb72404f9e0c21ed14df6ff16df45bc790d24f6cb3bae611598f814acom52924.5292[...] =>Adware.CrossRider SUPPRIMÉ: [shoaw3nk.default-1380644493348] - user_pref("extensions.a42d00f3feb72404f9e0c21ed14df6ff16df45bc790d24f6cb3bae611598f814acom52924.5292[...] =>PUP.Optional.Monetization SUPPRIMÉ: [shoaw3nk.default-1380644493348] - user_pref("extensions.trusted-ads.CIAA", "{\"u\":{\"v\":\"6.70\",\"d\":\"113015\",\"p\":\"86400\"},\[...] =>.Superfluous.AdTrustMedia SUPPRIMÉ: [shoaw3nk.default-1380644493348] - user_pref("extensions.trusted-ads.serpInject", "{\"u\":{\"v\":\"2.78\",\"d\":\"061714\"},\"l\":\"htt[...] =>PUP.Optional.MyWebSearch ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (17) ---\\ Tâche planifiée. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Explorateur ( Dossiers, Fichiers ). (8) DEPLACÉ fichier: C:\Users\philippe\AppData\Roaming\Mozilla\Firefox\Profiles\shoaw3nk.default-1380644493348\searchplugins\Messenger Plus Smartbar Search.xml =>PUP.Optional.SmartBar DEPLACÉ fichier: C:\Users\philippe\AppData\Roaming\Mozilla\Firefox\Profiles\shoaw3nk.default-1380644493348\extensions\PrivDog@AdTrustMedia.com.xpi =>.Superfluous.AdTrustMedia DEPLACÉ fichier: C:\Users\philippe\Downloads\Kodak_EasyShare_M550_Mise_à_jour_Pilote_10-2014.exe [Solvusoft Corporation - DriverDoc] =>.Superfluous.WinThruster DEPLACÉ dossier*: C:\Users\philippe\AppData\Local\Magentic =>Toolbar.Magentic DEPLACÉ dossier*: C:\Program Files\QuickTime =>Riskware.QuickTime DEPLACÉ dossier*: C:\Program Files\Software =>PUP.Optional.Boxore DEPLACÉ dossier*: C:\Users\philippe\AppData\Local\Software =>PUP.Optional.Boxore DEPLACÉ dossier*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime =>Riskware.QuickTime ---\\ Base de Registres ( Clés, Valeurs, Données ). (67) SUPPRIMÉ clé*: HKLM\Software\Google\Chrome\Extensions\cmaiofennmphjldldcpphcechfnnohja [C:\Program Files\AdTrustMedia\PrivDog\PrivDog_chrome.crx (Not File)] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\1916A2AF346D399F50313C393200F14140456616 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\2A83E9020591A55FC6DDAD3FB102794C52B24E70 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\2B84BFBB34EE2EF949FE1CBE30AA026416EB2216 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\305F8BD17AA2CBC483A4C41B19A39A0C75DA39D6 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\367D4B3B4FCBBC0B767B2EC0CDB2A36EAB71A4EB [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3A850044D8A195CD401A680C012CB0A3B5F8DC08 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\40AA38731BD189F9CDB5B9DC35E2136F38777AF4 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\43D9BCB568E039D073A74A71D8511F7476089CC3 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\471C949A8143DB5AD5CDF1C972864A2504FA23C9 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\51C3247D60F356C7CA3BAF4C3F429DAC93EE7B74 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\5DE83EE82AC5090AEA9D6AC4E7A6E213F946E179 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\61793FCBFA4F9008309BBA5FF12D2CB29CD4151A [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\63FEAE960BAA91E343CE2BD8B71798C76BDB77D0 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\6431723036FD26DEA502792FA595922493030F97 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\80962AE4D6C5B442894E95A13E4A699E07D694CF [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\86E817C81A5CA672FE000F36F878C19518D6F844 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\8E5BD50D6AE686D65252F843A9D4B96D197730AB [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9845A431D51959CAF225322B4A4FE9F223CE6D15 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\B533345D06F64516403C00DA03187D3BFEF59156 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\B86E791620F759F17B8D25E38CA8BE32E7D5EAC2 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\C060ED44CBD881BD0EF86C0BA287DDCF8167478C [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\CEA586B2CE593EC7D939898337C57814708AB2BE [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\D018B62DC518907247DF50925BB09ACF4A5CB3AD [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\F8A54E03AADC5692B850496A4C4630FFEAA29D83 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\FA6660A94AB45F6A88C0D7874D89A863D74DEE97 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-798373581-1568656723-3462503387-1000\SOFTWARE\AdTrustMedia [] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé: HKCU\Software\AdTrustMedia [] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\HQ-Video-Pro-1.6 [] =>Adware.CrossRider SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Plus-HD-1.5 [] =>Adware.CrossRider SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.CoCreateAsync [CoCreateAsync] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass [Google Update Core Class] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass.1 [Google Update Core Class] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreMachineClass [Google Update Core Class] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.CredentialDialogMachine [SoftwareUpdate CredentialDialog] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine [Google Update Broker Class Factory] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachineFallback [Google Update Legacy On Demand] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassSvc [Google Update Legacy On Demand] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassSvc.1.0 [Google Update Legacy On Demand] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.ProcessLauncher [Google Update Process Launcher Class] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebMachine [Google Update Broker Class Factory] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebMachineFallback [SoftwareUpdate Update3Web] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebSvc [SoftwareUpdate Update3Web] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebSvc.1.0 [SoftwareUpdate Update3Web] =>PUP.Optional.Boxore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\Record\{181480C8-90AC-3430-B39A-CD121E034A1A} [IESmartBar.MSG] =>PUP.Optional.SmartBar SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\Record\{8F54FA54-1DF8-3B20-890C-CDD95364BC95} [IESmartBar.DBIM] =>PUP.Optional.SmartBar SUPPRIMÉ clé*: HKLM\SOFTWARE\AdTrustMedia [] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0665A56D-BC49-4075-A2B6-D5909E98B821} [C:\Program Files\AdTrustMedia\PrivDog\2.2.0.14 (Not File)] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4D190C2B-7187-4937-8F95-C76526721CDD} [C:\Program Files\AdTrustMedia\PrivDog\1.8.0.15 (Not File)] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{56541F61-6236-47EB-921D-4488C8A0D77E} [C:\Program Files\AdTrustMedia\PrivDog\2.2.0.14 (Not File)] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-798373581-1568656723-3462503387-1000\Products\EC16EB077A939A040997982C443A3A6E [Messenger Plus! Community Smartbar] =>PUP.Optional.QuickShare SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094 [C:\Program Files\SweetIM\Messenger\msvcr71.dll (Not File)] =>PUP.Optional.SweetIM SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{14D83712-085D-4FA3-9F6B-B51E96BB88C3} [PrivDog Attendance Reporter] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé: HKLM\SOFTWARE\Classes\CLSID\{14D83712-085D-4FA3-9F6B-B51E96BB88C3}\InprocServer32 ["C:\Program Files\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe" (Not File)] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{42F2CA19-AAA6-4CC1-99DA-AC4E0D89F508} [MagpieApplication Class] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé: HKLM\SOFTWARE\Classes\CLSID\{42F2CA19-AAA6-4CC1-99DA-AC4E0D89F508}\InprocServer32 [C:\Program Files\AdTrustMedia\PrivDog\2.2.0.14\magpie.dll (Not File)] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{5B06364D-FF00-4BD5-9D01-4379952513F2} [PrivDogToolbarButton Class] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé: HKLM\SOFTWARE\Classes\CLSID\{5B06364D-FF00-4BD5-9D01-4379952513F2}\InprocServer32 [C:\Program Files\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll (Not File)] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{8E0DF3C3-BA52-47F7-B601-307E5CB207EF} [ScriptServiceInstance] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé: HKLM\SOFTWARE\Classes\CLSID\{8E0DF3C3-BA52-47F7-B601-307E5CB207EF}\InprocServer32 [C:\Program Files\AdTrustMedia\PrivDog\2.2.0.14\scriptservice.dll (Not File)] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{8E6186C3-3FDE-4416-86FF-53844EDEFEC8} [PrivDog Config Reader] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé: HKLM\SOFTWARE\Classes\CLSID\{8E6186C3-3FDE-4416-86FF-53844EDEFEC8}\InprocServer32 ["C:\Program Files\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe" (Not File)] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{D6FE8115-1CBA-40D7-B763-FF0DA33CEB6A} [PrivDog Config Reader] =>.Superfluous.AdTrustMedia SUPPRIMÉ clé: HKLM\SOFTWARE\Classes\CLSID\{D6FE8115-1CBA-40D7-B763-FF0DA33CEB6A}\InprocServer32 [C:\Program Files\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll (Not File)] =>.Superfluous.AdTrustMedia SUPPRIMÉ valeur: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\PrivDogService ["C:\Program Files\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe"] =>.Superfluous.AdTrustMedia ---\\ Récapitulatif des éléments trouvés sur votre station. (12) https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Monetization https://www.anti-malware.top/2016/04/28/superfluous-adtrustmedia/ =>.Superfluous.AdTrustMedia https://www.nicolascoolman.com/fr/adware-mywebsearch/ =>PUP.Optional.MyWebSearch https://www.nicolascoolman.com/fr/hijacker-smartbar/ =>PUP.Optional.SmartBar https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.WinThruster https://www.nicolascoolman.com/fr/toolbar-magentic/ =>Toolbar.Magentic https://nicolascoolman.eu/2017/01/15/riskware-quicktime/ =>Riskware.QuickTime https://nicolascoolman.eu/2017/03/14/pup-optional-boxore/ =>PUP.Optional.Boxore https://nicolascoolman.eu/2017/06/26/trojan-certlock/ =>PUM.Misplaced.Certificate https://www.nicolascoolman.com/fr/pup-quickshare/ =>PUP.Optional.QuickShare https://www.nicolascoolman.com/fr/pup-sweetim/ =>PUP.Optional.SweetIM ---\\ Nettoyage Additionnel. (10) ~ Suppression des Clés de registre Tracing. (10) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Opera Software) ---\\ Statistiques ~ Items scannés : 1569 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 87 ~ End of clean in 00h06mn04s ~==================== ZHPCleaner-[R]-16072017-12_09_26.txt ZHPCleaner-[S]-16072017-11_59_25.txt