~ ZHPFix v2018.7.30.155 by Nicolas Coolman (2018/07/30) ~ Run by Administrateur (Administrator) (11/08/2018 12:29:01) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Certificate ZHPFix: Legal ~ State version : ~ Report : C:\Documents and Settings\Administrateur\Bureau\ZHPFix.txt ~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\ ~ UAC : Deactivate ~ Boot Mode : Normal (Normal boot) Windows XP, 32-bit Service Pack 3 (Build 2600) ---\\ SCRIPT DE L'UTILISATEUR. (91) Script ZHPFix HKLM\Software\Classes\Director y\ShellEx\ContextMenuHandlers\ Sharing =>.SUP.Orphan HKLM\Software\Classes\CLSID\{f 81e9010-6ea4-11ce-a7ff-00aa003 ca9f6} =>.SUP.Orphan HKLM\Software\Wow6432Node\Clas ses\CLSID\{f81e9010-6ea4-11ce- a7ff-00aa003ca9f6} =>.SUP.Orphan HKLM\Software\Classes\Drive\sh ellex\ContextMenuHandlers\Shar ing =>.SUP.Orphan O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dl l [78336] =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsC ommand] (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe =>.AVAST Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallC ommand] (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe =>.AVAST Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsC ommand] (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe =>.AVAST Software O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe =>.AVAST Software s.r.o.® O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe =>.AVAST Software s.r.o.® O43 - CFD: 24/07/2017 - [] D -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\ESET =>.ESET O43 - CFD: 27/07/2017 - [] D -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy =>.SaferNetworking O43 - CFD: 27/07/2017 - [] D -- C:\Program Files\Spybot - Search & Destroy 2 =>.SaferNetworking HKU\S-1-5-21-606747145-1078145 449-682003330-500\SOFTWARE\Saf er Networking Limited =>.Safer Networking Limited HKU\S-1-5-21-606747145-1078145 449-682003330-500\SOFTWARE\ESE T =>.ESET HKU\S-1-5-21-606747145-1078145 449-682003330-500\SOFTWARE\Chr omium =>.Chromium HKU\.DEFAULT\SOFTWARE\Safer Networking Limited =>.Safer Networking Limited HKCU\SOFTWARE\Safer Networking Limited =>.Safer Networking Limited HKCU\SOFTWARE\ESET =>.ESET HKCU\SOFTWARE\Chromium =>.Chromium HKLM\SOFTWARE\Safer Networking Limited =>.Safer Networking Limited HKLM\SOFTWARE\Eset =>.ESET O42 - Logiciel: Avast Secure Browser - (.AVAST Software.) [HKLM] -- Avast Secure Browser =>.AVAST Software s.r.o.® O4 - GS\CommonDesktop [Public]: Avast Secure Browser.lnk . (.AVAST Software - Avast Secure Browser.) C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe --check-run=src=desktop =>.AVAST Software s.r.o.® O4 - GS\Quicklaunch [SUPPORT_388945a0]: Avast Secure Browser.lnk . (.AVAST Software - Avast Secure Browser.) C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe --check-run=src=quicklaunch =>.AVAST Software s.r.o.® O4 - GS\Quicklaunch [HelpAssistant]: Avast Secure Browser.lnk . (.AVAST Software - Avast Secure Browser.) C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe --check-run=src=quicklaunch =>.AVAST Software s.r.o.® O4 - GS\Quicklaunch [Administrateur]: Avast Secure Browser.lnk . (.AVAST Software - Avast Secure Browser.) C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe --check-run=src=quicklaunch =>.AVAST Software s.r.o.® [MD5.8C75808D127AF7D7ACAFFAB427 00C11A] - (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe [1027624] [PID.2064] =>.AVAST Software s.r.o.® [MD5.8C75808D127AF7D7ACAFFAB427 00C11A] - (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe [1027624] [PID.1412] =>.AVAST Software s.r.o.® [MD5.8C75808D127AF7D7ACAFFAB427 00C11A] - (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe [1027624] [PID.3900] =>.AVAST Software s.r.o.® [MD5.8C75808D127AF7D7ACAFFAB427 00C11A] - (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe [1027624] [PID.3160] =>.AVAST Software s.r.o.® [MD5.8C75808D127AF7D7ACAFFAB427 00C11A] - (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe [1027624] [PID.3508] =>.AVAST Software s.r.o.® O4 - HKUS\S-1-5-21-606747145-107814 5449-682003330-500\..\Run: [AvastBrowserAutoLaunch_E8F7722 CA6D175A3AD5E57004AA9D7C1] . (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe =>.AVAST Software s.r.o.® O4 - HKUS\S-1-5-21-606747145-107814 5449-682003330-500\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKCU\..\Run: [AvastBrowserAutoLaunch_E8F7722 CA6D175A3AD5E57004AA9D7C1] . (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe =>.AVAST Software s.r.o.® O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation SysRestore FirewallRaz EmptyPrefetch EmptyCLSID EmptyFlash Emptytemp ShortcutFix ---\\ LOGICIEL. (1) DESINSTALLER : Avast Secure Browser ---\\ SERVICE. (0) ---\\ TÂCHE PLANIFIÉE. (0) ---\\ NAVIGATEUR INTERNET. (0) ---\\ EXPLORATEUR ( Dossiers, Fichiers ). (1) DEPLACÉ Fichier Run: C:\WINDOWS\system32\ctfmon.exe ---\\ REGISTRE ( Clés, Valeurs, Données ). (7) ABSENT Valeur Run: [O4 - HKUS\S-1-5-21-606747145-107814] ABSENT Valeur Run: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ [O4 - HKCU\..\Run: [AvastBrowserAutoLaunch_E8F7722] ABSENT Valeur Run: HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ [C:\WINDOWS\system32\ctfmon.exe] ABSENT Valeur Run: HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ [C:\WINDOWS\system32\ctfmon.exe] SUPPRIMÉ Valeur Run: CTFMON.EXE [HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] SUPPRIMÉ Valeur Run: CTFMON.EXE [HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] SUPPRIMÉ Valeur Run: CTFMON.EXE [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] ---\\ COMMANDE. (0) ---\\ NON TRAITÉ. (34) Script ZHPFix y\ShellEx\ContextMenuHandlers\ Sharing 81e9010-6ea4-11ce-a7ff-00aa003 ca9f6} ses\CLSID\{f81e9010-6ea4-11ce- a7ff-00aa003ca9f6} ellex\ContextMenuHandlers\Shar ing O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dl l [78336] ommand] (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe 449-682003330-500\SOFTWARE\Saf er Networking Limited 449-682003330-500\SOFTWARE\ESE T 449-682003330-500\SOFTWARE\Chr omium vastBrowser.exe --check-run=src=desktop vastBrowser.exe --check-run=src=quicklaunch [MD5.8C75808D127AF7D7ACAFFAB427 00C11A] - (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A vastBrowser.exe [1027624] [PID.2064] vastBrowser.exe [1027624] [PID.1412] vastBrowser.exe [1027624] [PID.3900] vastBrowser.exe [1027624] [PID.3160] vastBrowser.exe [1027624] [PID.3508] 5449-682003330-500\..\Run: [AvastBrowserAutoLaunch_E8F7722 CA6D175A3AD5E57004AA9D7C1] . (.AVAST Software - Avast Secure Browser.) -- C:\Program Files\AVAST Software\Browser\Application\A 5449-682003330-500\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe SysRestore FirewallRaz ShortcutFix ***** ~ Fin de rapport terminé en 00h00mn06s