~ ZHPFix v2018.7.30.155 by Nicolas Coolman (2018/07/30) ~ Run by Emma (Administrator) (03/08/2018 21:48:51) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Certificate ZHPFix: Legal ~ State version : Version OK ~ Report : C:\Users\Emma\Desktop\ZHPFix.txt ~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\ ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows VISTA, 32-bit (Build 6000) ---\\ SCRIPT DE L'UTILISATEUR. (41) Script ZHPFix O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) . (...) - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (.not file.) O4 - HKCU\..\Run: [msnmsgr] . (. - .) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.Not File.) =>.SUP.Orphan O4 - HKUS\S-1-5-21-3727175469-3059896091-1339311294-1000\..\Run: [msnmsgr] . (. - .) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.Not File.) =>.SUP.Orphan HKLM\SOFTWARE\ALWIL Software =>.ALWIL Software HKLM\SOFTWARE\Eset =>.ESET HKLM\SOFTWARE\Symantec =>.Symantec HKCU\SOFTWARE\ALWIL Software =>.ALWIL Software HKCU\SOFTWARE\Symantec =>.Symantec HKU\.DEFAULT\SOFTWARE\Symantec =>.Symantec HKU\S-1-5-21-3727175469-3059896091-1339311294-1000\SOFTWARE\ALWIL Software =>.ALWIL Software HKU\S-1-5-21-3727175469-3059896091-1339311294-1000\SOFTWARE\Symantec =>.Symantec O43 - CFD: 28/12/2009 - [] D -- C:\Program Files\Ad-Remover =>.Plus maintenu O43 - CFD: 06/09/2010 - [] D -- C:\Program Files\pdfforge Toolbar =>PUP.Optional.SearchSettings O43 - CFD: 11/11/2009 - [] D -- C:\Program Files\Trend Micro =>.Trend Micro O43 - CFD: 11/11/2009 - [] D -- C:\ProgramData\Kaspersky Lab Setup Files =>.Kaspersky Lab O43 - CFD: 23/04/2014 - [] D -- C:\ProgramData\McAfee =>.McAfee O43 - CFD: 11/11/2009 - [] D -- C:\ProgramData\Symantec =>.Symantec O43 - CFD: 11/11/2009 - [] D -- C:\Program Files\Common Files\Symantec Shared =>.Symantec Corporation O43 - CFD: 02/08/2017 - [] D -- C:\Users\Emma\AppData\Local\Vosteran =>PUP.Optional.Vosteran O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (...) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} [Key] . (...) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Device Detector [Key] . (...) -- DevDetect.exe (.not file.) [MD5.765E81508D7A084A970E249E22D754F3] [WIS][2015/10/13 06:18:03] (.Adobe Systems, Incorporated.) -- C:\Windows\Installer\21e389.msp [20824064] =>.SUP.Obsolete.Adobe [MD5.86B8E5292385B410B40C3F3E446266BA] [WIS][2015/07/09 15:32:05] (.Adobe Systems, Incorporated.) -- C:\Windows\Installer\393fc.msp [20545536] =>.SUP.Obsolete.Adobe [MD5.9DECCE105895BAD3F99CA00FC80FC722] [WIS][2014/05/10 13:48:05] (.Adobe Systems, Incorporated.) -- C:\Windows\Installer\3a6f6.msp [20258816] =>.SUP.Obsolete.Adobe [MD5.43B45F7155AE337577B3E64F00E7FE4D] [WIS][2014/09/15 12:06:35] (.Adobe Systems, Incorporated.) -- C:\Windows\Installer\4310c.msp [20418560] =>.SUP.Obsolete.Adobe [MD5.D0ACD07EFABF2625C12E462AC4F1F1FD] [WIS][2014/12/08 15:22:40] (.Adobe Systems, Incorporated.) -- C:\Windows\Installer\48305.msp [20455424] =>.SUP.Obsolete.Adobe [MD5.2F5EE6E6CC407042FD7DE44658E53F97] [WIS][2015/05/08 15:18:02] (.Adobe Systems, Incorporated.) -- C:\Windows\Installer\772b2.msp [20508672] =>.SUP.Obsolete.Adobe [MD5.DFB6BF9259D80F50F675227C91F31883] [WIS][2014/01/08 14:27:08] (.Adobe Systems, Incorporated.) -- C:\Windows\Installer\7f5d8.msp [20111360] =>.SUP.Obsolete.Adobe SysRestore FirewallRaz EmptyPrefetch EmptyCLSID EmptyFlash Emptytemp ShortcutFix ---\\ LOGICIEL. (0) ---\\ SERVICE. (0) ---\\ TÂCHE PLANIFIÉE. (0) ---\\ NAVIGATEUR INTERNET. (0) ---\\ EXPLORATEUR ( Dossiers, Fichiers ). (19) SUPPRIMÉ Dossier : C:\Program Files\Ad-Remover SUPPRIMÉ Redémarrage Dossier ^: C:\Program Files\pdfforge Toolbar SUPPRIMÉ Dossier : C:\Program Files\Trend Micro SUPPRIMÉ Dossier : C:\ProgramData\Kaspersky Lab Setup Files SUPPRIMÉ Dossier : C:\ProgramData\McAfee SUPPRIMÉ Redémarrage Dossier ^: C:\ProgramData\Symantec SUPPRIMÉ Dossier : C:\Program Files\Common Files\Symantec Shared SUPPRIMÉ Dossier : C:\Users\Emma\AppData\Local\Vosteran DEPLACÉ Fichier Windows Installer: C:\Windows\Installer\21e389.msp DEPLACÉ Fichier Windows Installer: C:\Windows\Installer\393fc.msp DEPLACÉ Fichier Windows Installer: C:\Windows\Installer\3a6f6.msp DEPLACÉ Fichier Windows Installer: C:\Windows\Installer\4310c.msp DEPLACÉ Fichier Windows Installer: C:\Windows\Installer\48305.msp DEPLACÉ Fichier Windows Installer: C:\Windows\Installer\772b2.msp DEPLACÉ Fichier Windows Installer: C:\Windows\Installer\7f5d8.msp DEPLACÉ Fichier Temp: C:\Users\Emma\AppData\Local\Temp\2F96.tmp DEPLACÉ Fichier Temp: C:\Users\Emma\AppData\Local\Temp\3042.tmp SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\Emma\AppData\Local\Temp\~DF8A37.tmp DEPLACÉ Fichier Temp: C:\Users\Emma\AppData\Local\Temp\2F96.tmp.zip ---\\ REGISTRE ( Clés, Valeurs, Données ). (11) SUPPRIMÉ Valeur Run: msnmsgr [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] ABSENT Valeur Run: HKU\S-1-5-21-3727175469-3059896091-1339311294-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ [C:\Program Files\Windows Live\Messenger\msnmsgr.exe (.Not File.) ] SUPPRIMÉ Clé*: HKLM\SOFTWARE\ALWIL Software [ALWIL Software ] SUPPRIMÉ Clé*: HKLM\SOFTWARE\Eset [Eset ] SUPPRIMÉ Clé*: HKLM\SOFTWARE\Symantec [Symantec ] SUPPRIMÉ Clé*: HKCU\SOFTWARE\ALWIL Software [ALWIL Software ] SUPPRIMÉ Clé*: HKCU\SOFTWARE\Symantec [Symantec ] SUPPRIMÉ Clé*: HKU\.DEFAULT\SOFTWARE\Symantec [Symantec ] SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe Reader Speed Launcher [No File found] SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} [No File found] SUPPRIMÉ Clé ShareTools: HKLM64\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Device Detector [No File found] ---\\ COMMANDE. (4) ~ EmptyPrefetch: Fichiers Prefetcher supprimés (59) ~ EmptyCSID: Dossiers CLSID vides supprimés (0) ~ EmptyFlash: Fichiers Temporaires supprimés. (2) ~ EmptyTemp: Dossier Local temp partiellement vidé (4) ---\\ NON TRAITÉ. (3) SysRestore FirewallRaz ShortcutFix ~ Le système a été redémarré. ***** ~ Fin de rapport terminé en 00h00mn48s