~ ZHPCleaner v2017.8.1.132 by Nicolas Coolman (2017/08/01) ~ Run by Bureau (Administrator) (02/08/2017 21:46:10) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Legal ~ Type : Nettoyer ~ Report : C:\Users\Bureau\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Bureau\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 15063) ---\\ Service. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Navigateur internet. (42) SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.BUTTON_STRUCTURE", "[{\"b\":232130312,\"c\":\"mi[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.browser.startup.homepage.prev", "https://fr.sear[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.browser.startup.homepage.savedPrev", "true"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.browser.startup.homepage.tb", "http://hp.myway.c[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.browser.startup.page.savedPrev", 1); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.browser.startup.page.tb", 1); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.browser.version.last", "53.0"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.coId", "1c6c5d1dd68b41a68af0bd3e904d95dc"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.firefoxSearchExtensionEnabled", "true"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.firstKnownVersion", "7.800.11.26973"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.homepage", "http://hp.myway.com/fromdoctopdf/LMF[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.hp.enabled", false); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.hp.guardType", "HPR"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.initialized", true); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.installType", "XPI"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.installation.dlpCountryCode", "FR"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.installation.installDate", "2017050110"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.installation.partnerId", "^Y6^xdm197^LMFRFR^fr")[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.installation.partnerSubId", "CIzAvZagztMCFcm6Gwo[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.installation.pixelUrl", "http://download.fromdoc[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.installation.success", true); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.installation.toolbarDataSource", "[\"COOKIE\",\"[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.installation.toolbarId", "7AFF7637-74F7-4E61-9CC[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.lastActivePing", "1493920574634"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.lastKnownVersion", "7.800.11.26973"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.lssState", "{\"previousLocales\":[\"fr\",\"fr-FR[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.options.defaultSearch", false); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.options.homePageEnabled", true); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.options.keywordEnabled", false); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.options.tabEnabled", true); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.partnerPixelFired", true); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.productDeliveryOption.language", "fr"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.productDeliveryOption.newTabURL", "http://hp.myw[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.productDeliveryOption.type", "ToolTab"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.successUrl", "http://fromdoctopdf.dl.tb.ask.com/[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.toolbarCollapsed", false); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.uninstallSurveyUrl", "http://www.research.net/r/[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark._65Members_.uninstallTasks", "{\"prefBranchesToDelete\":[\"e[...] =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark.hp.enabled", true); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "fromdoctopdf@mindspark.com"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.toolbar.mindspark.lastInstalled", "fromdoctopdf@mindspark.com"); =>Adware.Bandoo SUPPRIMÉ: [n30ikmkg.default] - user_pref("extensions.xpiState", "{\"app-profile\":{\"_65Members_@download.fromdoctopdf.com\":{\"d\"[...] =>.Superfluous.MindSpark ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (21) ---\\ Tâche planifiée. (2) SUPPRIMÉ tâche: [Yahoo! Powered forad] [C:\Windows\System32\wscript.exe] =>Adware.YahooPowered SUPPRIMÉ tâche: [Bing Search Engine forad] [C:\WINDOWS\Tasks\Bing Search Engine forad.job (Not File) ] =>Heuristic.Suspect ---\\ Explorateur ( Dossiers, Fichiers ). (26) DEPLACÉ fichier: C:\Users\Bureau\AppData\Roaming\Mozilla\Firefox\Profiles\n30ikmkg.default\Extensions\_65Members_@download.fromdoctopdf.com\bootstrap.js =>.Superfluous.MindSpark DEPLACÉ fichier^: C:\Users\Bureau\AppData\Roaming\Mozilla\Firefox\Profiles\n30ikmkg.default\Extensions\_65Members_@download.fromdoctopdf.com\chrome =>.Superfluous.MindSpark DEPLACÉ fichier: C:\Users\Bureau\AppData\Roaming\Mozilla\Firefox\Profiles\n30ikmkg.default\Extensions\_65Members_@download.fromdoctopdf.com\chrome.manifest =>.Superfluous.MindSpark DEPLACÉ fichier: C:\Users\Bureau\AppData\Roaming\Mozilla\Firefox\Profiles\n30ikmkg.default\Extensions\_65Members_@download.fromdoctopdf.com\chrome.manifest.restartless =>.Superfluous.MindSpark DEPLACÉ fichier: C:\Users\Bureau\AppData\Roaming\Mozilla\Firefox\Profiles\n30ikmkg.default\Extensions\_65Members_@download.fromdoctopdf.com\install.rdf =>.Superfluous.MindSpark DEPLACÉ fichier^: C:\Users\Bureau\AppData\Roaming\Mozilla\Firefox\Profiles\n30ikmkg.default\Extensions\_65Members_@download.fromdoctopdf.com\META-INF =>.Superfluous.MindSpark DEPLACÉ fichier: C:\Users\Bureau\AppData\Roaming\Mozilla\Firefox\Profiles\n30ikmkg.default\FromDocToPDF_65\7AFF7637-74F7-4E61-9CC9-7D72DDE205A4.sqlite =>.Superfluous.MindSpark DEPLACÉ fichier: C:\Users\Bureau\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nahhmpbckpgdidfnmfkfgiflpjijilce_0.localstorage =>.Superfluous.SearchManager DEPLACÉ fichier: C:\Users\Bureau\AppData\Roaming\Colanid.exe =>Adware.Pirrit DEPLACÉ fichier: C:\Windows\Tasks\Bing Search Engine forad.job =>Heuristic.Suspect DEPLACÉ fichier: C:\Windows\Tasks\Yahoo! Powered forad.job =>Adware.YahooPowered DEPLACÉ fichier: C:\Users\Bureau\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage =>.Superfluous.CloudfrontNet DEPLACÉ fichier: C:\Users\Bureau\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage-journal =>.Superfluous.CloudfrontNet DEPLACÉ fichier: C:\Users\Bureau\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage =>.Superfluous.CloudfrontNet DEPLACÉ fichier: C:\Users\Bureau\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage-journal =>.Superfluous.CloudfrontNet DEPLACÉ fichier: C:\Users\Bureau\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fromdoctopdf.dl.myway.com_0.localstorage =>.Superfluous.MindSpark DEPLACÉ fichier: C:\Users\Bureau\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fromdoctopdf.dl.myway.com_0.localstorage-journal =>.Superfluous.MindSpark DEPLACÉ fichier: C:\Users\Bureau\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fromdoctopdf.dl.tb.ask.com_0.localstorage =>.Superfluous.MindSpark DEPLACÉ fichier: C:\Users\Bureau\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fromdoctopdf.dl.tb.ask.com_0.localstorage-journal =>.Superfluous.MindSpark DEPLACÉ fichier: C:\Users\Bureau\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage =>.Superfluous.AudienceInsights DEPLACÉ fichier: C:\Users\Bureau\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage-journal =>.Superfluous.AudienceInsights DEPLACÉ dossier*: C:\Users\Bureau\AppData\Roaming\Mozilla\Firefox\Profiles\n30ikmkg.default\Extensions\_65Members_@download.fromdoctopdf.com =>.Superfluous.MindSpark DEPLACÉ dossier*: C:\Users\Bureau\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce =>.Superfluous.SearchManager DEPLACÉ dossier*: C:\Users\Bureau\AppData\Local\EasyDocMergeTooltab =>PUP.Optional.MyWebSearch DEPLACÉ dossier*: C:\Users\Bureau\AppData\Local\FromDocToPDFTooltab =>.Superfluous.MindSpark DEPLACÉ dossier*: C:\Users\Bureau\AppData\Local\SlimWare Utilities Inc =>.Superfluous.SlimWareUtilities ---\\ Base de Registres ( Clés, Valeurs, Données ). (26) SUPPRIMÉ clé*: HKCU\SOFTWARE\Google\Chrome\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce [] =>.Superfluous.SearchManager SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1205918481-316555937-3933596391-1001\SOFTWARE\EasyDocMerge [] =>PUP.Optional.MyWebSearch SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1205918481-316555937-3933596391-1001\SOFTWARE\FromDocToPDF [] =>.Superfluous.MindSpark SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1205918481-316555937-3933596391-1001\SOFTWARE\nuevos-programas.com [] =>PUP.Optional.Generic SUPPRIMÉ clé: HKCU\Software\EasyDocMerge [] =>PUP.Optional.MyWebSearch SUPPRIMÉ clé: HKCU\Software\FromDocToPDF [] =>.Superfluous.MindSpark SUPPRIMÉ clé: HKCU\Software\nuevos-programas.com [] =>PUP.Optional.Generic SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\EasyDocMergeTooltab Uninstall Internet Explorer [Mindspark Interactive Network, Inc.] =>.Superfluous.MindSpark SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\FromDocToPDFTooltab Uninstall Internet Explorer [Mindspark Interactive Network, Inc.] =>.Superfluous.MindSpark SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\atwola.com [] =>.Superfluous.Atwola SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\ol.uk.at.atwola.com [] =>.Superfluous.Atwola SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\atwola.com [] =>.Superfluous.Atwola SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\ol.uk.at.atwola.com [123] =>.Superfluous.Atwola SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\atwola.com [] =>.Superfluous.Atwola SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d16fk4ms6rqz1v.cloudfront.net [1208] =>.Superfluous.CloudfrontNet SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\downspeedtest.dl.myway.com [12] =>.Superfluous.MindSpark SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\easydocmerge.dl.myway.com [1983] =>PUP.Optional.MyWebSearch SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\fromdoctopdf.dl.myway.com [1472] =>.Superfluous.MindSpark SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ol.uk.at.atwola.com [794] =>.Superfluous.Atwola SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\productivityboss.dl.myway.com [12] =>.Superfluous.MindSpark SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\softonic.com [] =>.Superfluous.Softonic SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\static.audienceinsights.net [43] =>.Superfluous.AudienceInsights SUPPRIMÉ clé*: HKCU\Software\csastats [] =>Adware.InstallCore SUPPRIMÉ clé*: HKCU\Software\ProductSetup [] =>Adware.InstallCore SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\SlimWare Utilities Inc [] =>.Superfluous.SlimWareUtilities SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\SlimWare Utilities, Inc. [] =>.Superfluous.SlimWareUtilities ---\\ Récapitulatif des éléments trouvés sur votre station. (14) https://nicolascoolman.eu/2017/02/23/adware-bandoo/ =>Adware.Bandoo https://nicolascoolman.eu/2017/01/15/superfluous-mindspark/ =>.Superfluous.MindSpark https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Adware.YahooPowered https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.SearchManager https://nicolascoolman.eu/2017/02/25/adware-pirrit/ =>Adware.Pirrit https://nicolascoolman.eu/2017/02/02/superfluous-cloudfrontnet/ =>.Superfluous.CloudfrontNet https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.AudienceInsights https://www.nicolascoolman.com/fr/adware-mywebsearch/ =>PUP.Optional.MyWebSearch https://nicolascoolman.eu/2017/03/03/superfluous-slimwareutilities/ =>.Superfluous.SlimWareUtilities https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Generic https://nicolascoolman.eu/2017/02/04/superfluous-atwola/ =>.Superfluous.Atwola https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Softonic https://nicolascoolman.eu/2017/03/12/adware-installcore-2/ =>Adware.InstallCore ---\\ Nettoyage Additionnel. (6) ~ Suppression des Clés de registre Tracing. (6) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Opera Software) ~ Le système a été redémarré. ---\\ Statistiques ~ Items scannés : 789 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 96 ~ End of clean in 00h00mn51s ~==================== ZHPCleaner-[R]-02082017-21_47_01.txt ZHPCleaner-[S]-02082017-20_47_16.txt ZHPCleaner-[S]-02082017-21_41_12.txt