~ ZHPCleaner v2017.10.10.179 by Nicolas Coolman (2017/10/10) ~ Run by ROBERT (Administrator) (25/10/2017 15:35:35) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Illegal ~ Type : Nettoyer ~ Report : C:\Users\ROBERT\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\ROBERT\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601) ---\\ Service. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Navigateur internet. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (4) ---\\ Tâche planifiée. (2) SUPPRIMÉ tâche: [RegistryBooster] [C:\Program Files (x86)\Uniblue\RegistryBooster\rbmonitor.exe (Not File) ] =>.SUP.Uniblue SUPPRIMÉ tâche: [PCDoctorBackgroundMonitorTask] [C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job (Not File) ] =>PUP.Optional.MySearch ---\\ Explorateur ( Dossiers, Fichiers ). (41) DEPLACÉ fichier: C:\Users\ROBERT\Desktop\Free FLV Converter - Copie.lnk [Bad : C:\Program Files (x86)\Free FLV Converter\FreeFLVConverter.exe](.Koyote-Lab Inc.) =>.SUP.GreenTreeApp DEPLACÉ fichier: C:\Users\ROBERT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free FLV Converter.lnk [Bad : C:\Program Files (x86)\Free FLV Converter\FreeFLVConverter.exe](.Koyote-Lab Inc.) =>.SUP.GreenTreeApp DEPLACÉ fichier^: C:\Users\ROBERT\AppData\Roaming\Mozilla\Firefox\Profiles\hrn9pid0.default\Extensions\searchengine@gmail.com\chrome =>PUP.Optional.SearchEngine DEPLACÉ fichier: C:\Users\ROBERT\AppData\Roaming\Mozilla\Firefox\Profiles\hrn9pid0.default\Extensions\searchengine@gmail.com\install.rdf =>PUP.Optional.SearchEngine DEPLACÉ fichier: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job =>PUP.Optional.MySearch DEPLACÉ fichier: C:\Users\ROBERT\Downloads\iLividSetup-r2527-n-bi.exe [Bandoo Media Inc - iLivid Install] =>Adware.Bandoo DEPLACÉ fichier: C:\Users\ROBERT\Downloads\PremierDownloadManager.exe =>.SUP.MindSpark DEPLACÉ fichier: C:\Users\ROBERT\AppData\Roaming\Bubble Dock.boostrap.log =>Adware.BubbleDock DEPLACÉ fichier: C:\Users\ROBERT\AppData\Roaming\Bubble Dock.installation.log =>Adware.BubbleDock DEPLACÉ fichier: C:\Users\ROBERT\AppData\Roaming\WindApp.boostrap.log =>.SUP.Nosibay DEPLACÉ dossier*: C:\Users\ROBERT\AppData\Roaming\Mozilla\Firefox\Profiles\hrn9pid0.default\Extensions\searchengine@gmail.com =>PUP.Optional.SearchEngine DEPLACÉ dossier*: C:\Program Files (x86)\Boxore =>PUP.Optional.Boxore DEPLACÉ dossier*: C:\Program Files (x86)\BrowseMark =>PUP.Optional.BrowseMark DEPLACÉ dossier*: C:\Program Files (x86)\Free FLV Converter =>.SUP.GreenTreeApp DEPLACÉ dossier*: C:\Program Files (x86)\globalUpdate =>Adware.GlobalUpdate DEPLACÉ dossier*: C:\Program Files (x86)\MyPC Backup =>PUP.Optional.MyPCBackup DEPLACÉ dossier*: C:\Program Files (x86)\Red Sky =>PUP.Optional.DownTango DEPLACÉ dossier*: C:\Program Files (x86)\WebAdSystem =>PUP.Optional.WebAdSystem DEPLACÉ dossier*: C:\Program Files\WajaWebEnhancer =>PUP.Optional.WaEnhance DEPLACÉ dossier*: C:\Program Files\WebAdSystem =>PUP.Optional.WebAdSystem DEPLACÉ dossier*: C:\ProgramData\APN =>Toolbar.Ask DEPLACÉ dossier*: C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR DEPLACÉ dossier*: C:\ProgramData\InternetUpdater =>PUP.Optional.InternetUpdater DEPLACÉ dossier*: C:\ProgramData\ZombieInvasion =>PUP.Optional.ZombieInvasion DEPLACÉ dossier*: C:\ProgramData\BoxUpdChk =>PUP.Optional.Boxore DEPLACÉ dossier*: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free FLV Converter =>.SUP.GreenTreeApp DEPLACÉ dossier*: C:\Windows\System32\config\systemprofile\AppData\LocalLow\Application Updater =>PUP.Optional.Dealio DEPLACÉ dossier*: C:\Users\ROBERT\AppData\Roaming\IminentToolbar =>PUP.Optional.IMBooster DEPLACÉ dossier*: C:\Users\ROBERT\AppData\Roaming\Nosibay =>PUP.Optional.SPointer DEPLACÉ dossier*: C:\Users\ROBERT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam Web Enhancer =>PUP.Optional.Wajam DEPLACÉ dossier*: C:\Users\ROBERT\AppData\LocalLow\DataMngr =>PUP.Optional.Datamngr DEPLACÉ dossier*: C:\Users\ROBERT\AppData\LocalLow\IminentToolbar =>PUP.Optional.IMBooster DEPLACÉ dossier*: C:\Users\ROBERT\Music\iMesh =>.SUP.iMesh DEPLACÉ dossier*: C:\Users\ROBERT\AppData\Local\Boxore =>PUP.Optional.Boxore DEPLACÉ dossier*: C:\Users\ROBERT\AppData\Local\globalUpdate =>Adware.GlobalUpdate DEPLACÉ dossier*: C:\Users\ROBERT\AppData\Local\KalityWeb =>PUP.Optional.WebAdSystem DEPLACÉ dossier*: C:\Users\ROBERT\AppData\Local\PackageAware =>.SUP.BearShare DEPLACÉ dossier*: C:\Users\ROBERT\AppData\Local\ZombieInvasion =>PUP.Optional.ZombieInvasion DEPLACÉ dossier: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Application Updater =>PUP.Optional.Dealio DEPLACÉ dossier*: C:\Program Files (x86)\Software =>PUP.Optional.Boxore DEPLACÉ dossier*: C:\Users\ROBERT\AppData\Local\Software =>PUP.Optional.Boxore ---\\ Base de Registres ( Clés, Valeurs, Données ). (55) SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Clients\StartMenuInternet\Torch [] =>.SUP.Torch SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-4185841010-46410120-3319234042-1000\SOFTWARE\Adorika [] =>PUP.Optional.Adorika SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-4185841010-46410120-3319234042-1000\SOFTWARE\APN PIP [] =>.SUP.Conduit SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-4185841010-46410120-3319234042-1000\SOFTWARE\FileScout [] =>PUP.Optional.FileScout SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-4185841010-46410120-3319234042-1000\SOFTWARE\Classes\.torrent [Torch.torrent] =>.SUP.Torch SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-4185841010-46410120-3319234042-1000\SOFTWARE\Classes\Magnet [Torch.torrent] =>.SUP.Torch SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\AskPartnerNetwork [] =>PUP.Optional.APNToolBar SUPPRIMÉ clé: HKCU\Software\Adorika [] =>PUP.Optional.Adorika SUPPRIMÉ clé: HKCU\Software\APN PIP [] =>.SUP.Conduit SUPPRIMÉ clé: HKCU\Software\FileScout [] =>PUP.Optional.FileScout SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AppID\iMesh.exe [] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll [] =>Adware.Bandoo SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll [] =>Adware.Bandoo SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\iMesh.AudioCD [] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\iMesh.Device [] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\protector_dll.Protector [Protector Class] =>Adware.BProtector SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\protector_dll.Protector.1 [Protector Class] =>Adware.BProtector SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib [ProtectorLib Class] =>Adware.BProtector SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1 [ProtectorLib Class] =>Adware.BProtector SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Torch.torrent [] =>.SUP.Torch SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\TUBEDOWNLOADER.TubeDownloaderCtrl.1 [TubeDownloader Control] =>Adware.SoftwareEngine SUPPRIMÉ clé*: [X64] HKLM\Software\Classes\Installer\Products\1A594BF8F3A4D1C4DB72F3A32B6E7636 [iMesh] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Applications\iMeshV11[1].exe [] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Applications\iMesh_V11_en_Setup.exe [] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\06D3E6E5EA841FF4590ABA0A9FDF75B6 [C:\Program Files (x86)\iMesh Applications\iMesh\GIFAnimator.dll (Not File)] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Uniblue [] =>.SUP.Uniblue SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} [ITool] =>Toolbar.Ask SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\iMesh.exe [] =>.SUP.iMesh SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\BrowserConnection.dll [] =>Adware.Bandoo SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\DNSBHO.dll [] =>Adware.Bandoo SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BrowseMark_RASAPI32 [] =>PUP.Optional.BrowseMark SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BrowseMark_RASMANCS [] =>PUP.Optional.BrowseMark SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\DealioToolbar-stub-1_RASAPI32 [] =>PUP.Optional.Dealio SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\DealioToolbar-stub-1_RASMANCS [] =>PUP.Optional.Dealio SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iMeshMediaBar_RASAPI32 [] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iMeshMediaBar_RASMANCS [] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iMesh_RASAPI32 [] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iMesh_RASMANCS [] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iMesh_V11_en_Setup_RASAPI32 [] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iMesh_V11_en_Setup_RASMANCS [] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchSettings_RASAPI32 [] =>PUP.Optional.SearchSettings SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchSettings_RASMANCS [] =>PUP.Optional.SearchSettings SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SecureDownloadManager_RASAPI32 [] =>PUP.Optional.SearchAssist SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SecureDownloadManager_RASMANCS [] =>PUP.Optional.SearchAssist SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateBrowseMark_RASAPI32 [] =>PUP.Optional.BrowseMark SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateBrowseMark_RASMANCS [] =>PUP.Optional.BrowseMark SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WeatherBugAlert_RASAPI32 [] =>PUP.Optional.WeatherBug SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WeatherBugAlert_RASMANCS [] =>PUP.Optional.WeatherBug SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\cad26d5d-2613-474b-b389-3735e9aa4ceb [C:\Program Files (x86)\myBabylon_English (Not File)] =>Adware.Babylon SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DE2A1E70-940D-470E-964D-6454036C7612} [C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\ToolBar (Not File)] =>.SUP.iMesh SUPPRIMÉ clé*: HKCU\SOFTWARE\cee1133a35fc06e0 [] =>Hijacker.Browser SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{8EE49117-038C-4c4d-B05D-894B8C71D52E} [BHO Class] =>.SUP.iMesh SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Classes\CLSID\{8EE49117-038C-4c4d-B05D-894B8C71D52E}\InprocServer32 [C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\x64\DnsBHO.dll (Not File)] =>.SUP.iMesh SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{950F80EF-32C2-47dd-9C35-9576E21EE66E} [ErrorFilter Class] =>.SUP.iMesh SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Classes\CLSID\{950F80EF-32C2-47dd-9C35-9576E21EE66E}\InprocServer32 [C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\x64\IEBHO.dll (Not File)] =>.SUP.iMesh ---\\ Récapitulatif des éléments trouvés sur votre station. (38) https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Uniblue https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.MySearch https://www.anti-malware.top/2016/09/10/superfluous-greentreeapp/ =>.SUP.GreenTreeApp https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.SearchEngine https://nicolascoolman.eu/2017/02/23/adware-bandoo/ =>Adware.Bandoo https://nicolascoolman.eu/2017/01/15/superfluous-mindspark/ =>.SUP.MindSpark https://nicolascoolman.eu/2017/09/08/adware-bubbledock/ =>Adware.BubbleDock https://www.anti-malware.top/2016/05/03/superfluous-nosibay/ =>.SUP.Nosibay https://nicolascoolman.eu/2017/03/14/pup-optional-boxore/ =>PUP.Optional.Boxore https://www.nicolascoolman.com/fr/pup-browsemark/ =>PUP.Optional.BrowseMark https://nicolascoolman.eu/2017/09/20/adware-globalupdate/ =>Adware.GlobalUpdate https://nicolascoolman.eu/2017/09/23/adware-mypcbackup/ =>PUP.Optional.MyPCBackup https://www.nicolascoolman.com/fr/pup-downtango/ =>PUP.Optional.DownTango https://www.nicolascoolman.com/fr/adware-webadsystem/ =>PUP.Optional.WebAdSystem https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.WaEnhance https://nicolascoolman.eu/2017/02/28/toolbar-ask/ =>Toolbar.Ask https://www.nicolascoolman.com/fr/pup-agentodr/ =>PUP.Optional.AgentODR https://www.nicolascoolman.com/fr/pup-internetupdater/ =>PUP.Optional.InternetUpdater https://www.nicolascoolman.com/fr/pup-optional-zombieinvasion/ =>PUP.Optional.ZombieInvasion https://www.nicolascoolman.com/fr/pup-dealio/ =>PUP.Optional.Dealio https://nicolascoolman.eu/2017/09/08/adware-imbooster/ =>PUP.Optional.IMBooster https://nicolascoolman.eu/2017/10/02/adware-spointer/ =>PUP.Optional.SPointer https://nicolascoolman.eu/2017/02/24/pup-optional-wajam/ =>PUP.Optional.Wajam https://www.nicolascoolman.com/fr/pup-datamngr/ =>PUP.Optional.Datamngr https://www.nicolascoolman.com/fr/pup-imesh/ =>.SUP.iMesh https://nicolascoolman.eu/2017/09/15/sup-bearshare/ =>.SUP.BearShare https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Torch https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Adorika https://nicolascoolman.eu/2017/02/06/superfluous-conduit/ =>.SUP.Conduit https://www.nicolascoolman.com/fr/pup-filescout/ =>PUP.Optional.FileScout https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.APNToolBar https://nicolascoolman.eu/2017/04/12/adware-bprotector/ =>Adware.BProtector https://nicolascoolman.eu/2017/10/07/adware-softwareengine/ =>Adware.SoftwareEngine https://www.nicolascoolman.com/fr/adware-searchsettings/ =>PUP.Optional.SearchSettings https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.SearchAssist https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.WeatherBug https://nicolascoolman.eu/2017/03/03/adware-babylon/ =>Adware.Babylon https://nicolascoolman.eu/2017/02/02/hijacker-browser-2/ =>Hijacker.Browser ---\\ Nettoyage Additionnel. (170) ~ Suppression des Clés de registre Tracing. (170) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Le système a été redémarré. ---\\ Statistiques ~ Items scannés : 3722 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 98 ~ End of clean in 00h01mn35s ~==================== ZHPCleaner-[R]-25102017-15_37_10.txt ZHPCleaner-[S]-25102017-15_32_03.txt