~ ZHPCleaner v2017.7.17.123 by Nicolas Coolman (2017/07/17) ~ Run by Rachel (Administrator) (03/08/2017 16:39:22) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Illegal ~ Type : Nettoyer ~ Report : C:\Users\Rachel\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Rachel\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows VISTA, 32-bit Service Pack 2 (Build 6002) ---\\ Service. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Navigateur internet. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (15318) ---\\ Tâche planifiée. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Explorateur ( Dossiers, Fichiers ). (9) DEPLACÉ fichier: C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pilplloabdedfmialnfchjomjmpjcoej_0.localstorage =>.Superfluous.SearchManager DEPLACÉ fichier: C:\Windows\Prefetch\BYTEFENCE.EXE-FAC31F78.pf =>.Superfluous.ByteFence DEPLACÉ fichier: C:\Windows\Prefetch\BYTEFENCESERVICE.EXE-4186E33D.pf =>.Superfluous.ByteFence DEPLACÉ fichier: C:\Windows\System32\sugs1ci.exe [SS - SSCoInstExe] =>.Superfluous.SwiftSearch DEPLACÉ fichier: C:\ProgramData\InstallMate\{0E044837-B1A2-4DB6-AF5D-F980D5E76AC1}\Setup.exe [Tarma Software Research Pty Ltd - InstallMate® Setup] =>.Superfluous.Tarma DEPLACÉ fichier^: C:\ProgramData\InstallMate\{0E044837-B1A2-4DB6-AF5D-F980D5E76AC1}\TsuDll.dll [Tarma Software Research Pty Ltd - InstallMate® Setup Library] =>.Superfluous.Tarma DEPLACÉ dossier*: C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej =>.Superfluous.SearchManager DEPLACÉ dossier*: C:\ProgramData\ByteFence =>.Superfluous.ByteFence DEPLACÉ dossier*: C:\ProgramData\InstallMate =>.Superfluous.Tarma ---\\ Base de Registres ( Clés, Valeurs, Données ). (43) SUPPRIMÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9AD09901-06DD-4DDD-A62D-6D2243B771AB} [https://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_dnldastr_17_02&[...]] [Yahoo! Powered] =>Adware.YahooPowered SUPPRIMÉ clé: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2211d4a5-48d0-47f5-a7cd-81e861470f7f} [https://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_dnldastr_17_02&[...]] [Yahoo! Powered] =>Adware.YahooPowered SUPPRIMÉ clé*: HKCU\SOFTWARE\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej [] =>.Superfluous.SearchManager SUPPRIMÉ clé*: HKLM\SOFTWARE\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej [] =>.Superfluous.SearchManager SUPPRIMÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9AD09901-06DD-4DDD-A62D-6D2243B771AB} [https://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_dnldastr_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtCyCtCyB0EzzyEtD0CyDtBtC0C0DtN0D0Tzu0StCzztAyDtN1L2XzutAtFtByDtFtCtFzzzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StA0FyEtCtC0F0DtDtGyB0FzyzytGzz0CtD0CtGyEtDtByCtGtCtCyE0FyBtDtB0F0DzzzytB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0AzztD0ByCzytBtAtGtBtByEyDtGyEzy0BtDtGzz0AtB0DtGzytAzz0CyCtDzz0EtAyDyC0E2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyEyByE%26cr%3D734464596%26a%3Dwbf_dnldastr_17_02%26os_ver%3D6%26os%3DWindows%2BVista%2B(TM)%2BHome%2BPremium&p={searchTerms}] =>Adware.YahooPowered SUPPRIMÉ clé: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2211d4a5-48d0-47f5-a7cd-81e861470f7f} [https://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_dnldastr_17_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtCyCtCyB0EzzyEtD0CyDtBtC0C0DtN0D0Tzu0StCzztAyDtN1L2XzutAtFtByDtFtCtFzzzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StA0FyEtCtC0F0DtDtGyB0FzyzytGzz0CtD0CtGyEtDtByCtGtCtCyE0FyBtDtB0F0DzzzytB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0AzztD0ByCzytBtAtGtBtByEyDtGyEzy0BtDtGzz0AtB0DtGzytAzz0CyCtDzz0EtAyDyC0E2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtCyEyByE%26cr%3D734464596%26a%3Dwbf_dnldastr_17_02%26os_ver%3D6%26os%3DWindows%2BVista%2B(TM)%2BHome%2BPremium&p={searchTerms}] =>Adware.YahooPowered SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\1916A2AF346D399F50313C393200F14140456616 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\2A83E9020591A55FC6DDAD3FB102794C52B24E70 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\2B84BFBB34EE2EF949FE1CBE30AA026416EB2216 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\305F8BD17AA2CBC483A4C41B19A39A0C75DA39D6 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\367D4B3B4FCBBC0B767B2EC0CDB2A36EAB71A4EB [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\3A850044D8A195CD401A680C012CB0A3B5F8DC08 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\40AA38731BD189F9CDB5B9DC35E2136F38777AF4 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\43D9BCB568E039D073A74A71D8511F7476089CC3 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\471C949A8143DB5AD5CDF1C972864A2504FA23C9 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\51C3247D60F356C7CA3BAF4C3F429DAC93EE7B74 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\5DE83EE82AC5090AEA9D6AC4E7A6E213F946E179 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\61793FCBFA4F9008309BBA5FF12D2CB29CD4151A [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\63FEAE960BAA91E343CE2BD8B71798C76BDB77D0 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\6431723036FD26DEA502792FA595922493030F97 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\80962AE4D6C5B442894E95A13E4A699E07D694CF [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\86E817C81A5CA672FE000F36F878C19518D6F844 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\8E5BD50D6AE686D65252F843A9D4B96D197730AB [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\9845A431D51959CAF225322B4A4FE9F223CE6D15 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\B533345D06F64516403C00DA03187D3BFEF59156 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\B86E791620F759F17B8D25E38CA8BE32E7D5EAC2 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\C060ED44CBD881BD0EF86C0BA287DDCF8167478C [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\CEA586B2CE593EC7D939898337C57814708AB2BE [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\D018B62DC518907247DF50925BB09ACF4A5CB3AD [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\F8A54E03AADC5692B850496A4C4630FFEAA29D83 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\Software\Microsoft\SystemCertificates\Disallowed\Certificates\FA6660A94AB45F6A88C0D7874D89A863D74DEE97 [Avast Software] =>PUM.Misplaced.Certificate SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DelTr1019078 [cmd.exe /c rd /s /q "C:\Users\Martine\AppData\Roaming\mysearchdial" (Not File)] =>PUP.Optional.MySearchDial SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\WebCake Desktop ["C:\Users\Martine\AppData\Roaming\WebCake\WebCakeDesktop.exe" (Not File)] =>PUP.Optional.WebCake SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\ByteFence [] =>.Superfluous.ByteFence SUPPRIMÉ clé*: HKCU\Software\csastats [] =>Adware.InstallCore SUPPRIMÉ clé*: HKCU\Software\ProductSetup [] =>Adware.InstallCore SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\Applications\iLividSetup-r2154-n-bc.exe [] =>Adware.Bandoo SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\Applications\iLividSetup-r484-n-bc (1).exe [] =>Adware.Bandoo SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WebCakeUpdaterService [] =>PUP.Optional.WebCake SUPPRIMÉ clé*: HKLM\SOFTWARE\AppApcVerifier [] =>.Superfluous.EORezo SUPPRIMÉ valeur: HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\\ByteFence.exe [9000] =>.Superfluous.ByteFence ---\\ Récapitulatif des éléments trouvés sur votre station. (11) https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.SearchManager https://nicolascoolman.eu/2017/03/13/superfluous-bytefence/ =>.Superfluous.ByteFence https://www.nicolascoolman.com/fr/ppup-optional-swiftsearch/ =>.Superfluous.SwiftSearch https://www.nicolascoolman.com/fr/pup-tarma/ =>.Superfluous.Tarma https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Adware.YahooPowered https://nicolascoolman.eu/2017/06/26/trojan-certlock/ =>PUM.Misplaced.Certificate https://www.anti-malware.top/2016/04/29/superfluous-montiera/ =>PUP.Optional.MySearchDial https://www.nicolascoolman.com/fr/adware-webcake/ =>PUP.Optional.WebCake https://nicolascoolman.eu/2017/03/12/adware-installcore-2/ =>Adware.InstallCore https://nicolascoolman.eu/2017/02/23/adware-bandoo/ =>Adware.Bandoo https://www.nicolascoolman.com/fr/pup-eorezo/ =>.Superfluous.EORezo ---\\ Nettoyage Additionnel. (10) ~ Suppression des Clés de registre Tracing. (10) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Mozilla Firefox) ~ Ce navigateur est absent (Opera Software) ~ Le système a été redémarré. ---\\ Statistiques ~ Items scannés : 31161 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 52 ~ End of clean in 00h01mn43s ~==================== ZHPCleaner-[R]-03082017-16_41_05.txt ZHPCleaner-[S]-03082017-16_37_50.txt