~ ZHPFix v2019.9.23.141 by Nicolas Coolman (2019/09/23) ~ Run by alain (Administrator) (25/09/2019 10:57:12) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Certificate ZHPFix: Legal ~ State version : Version OK ~ Report : C:\Users\alain\Desktop\ZHPFix.txt ~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\ ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 17134) ---\\ SCRIPT DE L'UTILISATEUR. (38) Script Zhpfix SR - Boot [06/10/2017] [ 60920] avdevprot (avdevprot) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avdevprot.sys =>.Avira Operations GmbH & Co. KG® SR - Auto [06/10/2017] [ 176224] avgntflt (avgntflt) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avgntflt.sys =>.Avira Operations GmbH & Co. KG® SR - System [06/10/2017] [ 167464] avipbb (avipbb) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avipbb.sys =>.Avira Operations GmbH & Co. KG® SR - System [06/10/2017] [ 44488] avkmgr (avkmgr) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avkmgr.sys =>.Avira Operations GmbH & Co. KG® SR - Auto [06/10/2017] [ 88488] avnetflt (avnetflt) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avnetflt.sys =>.Avira Operations GmbH & Co. KG® SR - Boot [06/10/2017] [ 38048] avusbflt (avusbflt) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\Drivers\avusbflt.sys =>.Avira Operations GmbH & Co. KG® O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] . (. - .) -- C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (.Not File.) HKCU\Software\Melasys LLC HKCU\Software\ELLS LLC HKU\.DEFAULT\SOFTWARE\AVG Web TuneUp =>.AVG Web TuneUp HKU\.DEFAULT\SOFTWARE\Avira =>.Avira [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:mcpltui_exe =>.McAfee Inc. [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Avira SystrayStartTrigger =>.Avira Software [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:avgnt =>.Avira Software HKLM\SOFTWARE\WOW6432Node\TweakBit HKLM\SOFTWARE\AVG =>.AVG Software HKLM\SOFTWARE\McAfee.com =>.McAfee Inc. HKLM\SOFTWARE\WOW6432Node\Avira =>.Avira HKLM\SOFTWARE\WOW6432Node\X-AVCSD =>.Avira Software HKU\S-1-5-21-4048815811-3365332052-2349944975-1001\SOFTWARE\ELLS LLC HKU\S-1-5-21-4048815811-3365332052-2349944975-1001\SOFTWARE\Melasys LLC O58 - SDL:2017/10/06 14:15:18 A . (.Avira Operations GmbH & Co. KG - Avira USB Feature Driver.) -- C:\WINDOWS\System32\drivers\avdevprot.sys [60920] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2017/10/06 14:15:17 A . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\WINDOWS\System32\drivers\avgntflt.sys [176224] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2017/10/06 14:15:17 A . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\WINDOWS\System32\drivers\avipbb.sys [167464] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2017/10/06 14:15:17 A . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\WINDOWS\System32\drivers\avkmgr.sys [44488] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2017/10/06 14:15:17 A . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\WINDOWS\System32\drivers\avnetflt.sys [88488] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2017/10/06 14:15:18 A . (.Avira Operations GmbH & Co. KG - Avira USB Filter Driver.) -- C:\WINDOWS\System32\drivers\avusbflt.sys [38048] =>.Avira Operations GmbH & Co. KG® C:\ProgramData\KMSAutoS C:\ProgramData\TweakBit C:\Users\alain\AppData\Local\MSfree Inc C:\Users\alain\AppData\Local\Google\Chrome\User Data\Default\File System\000 HKCU\Software\Melasys LLC HKCU\Software\ELLS LLC [0B8EACF53669F141288E54CB9C06DFF7] [02/05/2018] (.Tweakbit Pty Ltd.) - C:\Program Files (x86)\TweakBit\PCRepairKit\unins000.exe [0B8EACF53669F141288E54CB9C06DFF7] [19/04/2018] (.Tweakbit Pty Ltd.) - C:\Program Files (x86)\TweakBit\PCRepairKit\Downloader.exe EmptyPrefetch EmptyClsid ---\\ LOGICIEL. (0) ---\\ SERVICE. (4) REFUSÉ Service: HKLM\SYSTEM\CurrentControlSet\Services\avgntflt [avgntflt.sys] REFUSÉ Service: HKLM\SYSTEM\CurrentControlSet\Services\avipbb [avipbb.sys] REFUSÉ Service: HKLM\SYSTEM\CurrentControlSet\Services\avkmgr [avkmgr.sys] REFUSÉ Service: HKLM\SYSTEM\CurrentControlSet\Services\avnetflt [avnetflt.sys] ---\\ TÂCHE PLANIFIÉE. (0) ---\\ NAVIGATEUR INTERNET. (0) ---\\ EXPLORATEUR ( Dossiers, Fichiers ). (14) DEPLACÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\avdevprot.sys REFUSÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\avgntflt.sys REFUSÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\avipbb.sys REFUSÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\avkmgr.sys REFUSÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\avnetflt.sys DEPLACÉ Fichier Service: C:\WINDOWS\System32\Drivers\avusbflt.sys DEPLACÉ Fichier Drivers: C:\WINDOWS\System32\drivers\avgntflt.sys DEPLACÉ Fichier Drivers: C:\WINDOWS\System32\drivers\avipbb.sys DEPLACÉ Fichier Drivers: C:\WINDOWS\System32\drivers\avkmgr.sys DEPLACÉ Fichier Drivers: C:\WINDOWS\System32\drivers\avnetflt.sys SUPPRIMÉ Dossier : C:\ProgramData\KMSAutoS SUPPRIMÉ Dossier : C:\ProgramData\TweakBit SUPPRIMÉ Dossier : C:\Users\alain\AppData\Local\MSfree Inc SUPPRIMÉ Dossier : C:\Users\alain\AppData\Local\Google\Chrome\User Data\Default\File System\000 ---\\ REGISTRE ( Clés, Valeurs, Données ). (19) SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\avdevprot [avdevprot.sys] SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\avusbflt [avusbflt.sys] SUPPRIMÉ Valeur Run: Wondershare Helper Compact.exe [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] SUPPRIMÉ Clé: HKCU\Software\Melasys LLC [Melasys LLC] SUPPRIMÉ Clé: HKCU\Software\ELLS LLC [ELLS LLC] SUPPRIMÉ Clé: HKU\.DEFAULT\SOFTWARE\AVG Web TuneUp [AVG Web TuneUp ] SUPPRIMÉ Clé: HKU\.DEFAULT\SOFTWARE\Avira [Avira ] SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\TweakBit [TweakBit] SUPPRIMÉ Clé: HKLM\SOFTWARE\AVG [AVG ] SUPPRIMÉ Clé: HKLM\SOFTWARE\McAfee.com [McAfee.com ] SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\Avira [Avira ] SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\X-AVCSD [X-AVCSD ] ABSENT Clé: HKU\S-1-5-21-4048815811-3365332052-2349944975-1001\SOFTWARE\ELLS LLC ABSENT Clé: HKU\S-1-5-21-4048815811-3365332052-2349944975-1001\SOFTWARE\Melasys LLC ABSENT Clé: HKCU\Software\Melasys LLC ABSENT Clé: HKCU\Software\ELLS LLC SUPPRIMÉ Valeur: mcpltui_exe [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32] SUPPRIMÉ Valeur: Avira SystrayStartTrigger [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32] SUPPRIMÉ Valeur: avgnt [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32] ---\\ COMMANDE. (2) ~ EmptyPrefetch: Fichiers Prefetcher supprimés (173) ~ EmptyCSID: Dossiers CLSID vides supprimés (0) ---\\ NON TRAITÉ. (2) [0B8EACF53669F141288E54CB9C06DFF7] [02/05/2018] (.Tweakbit Pty Ltd.) - C:\Program Files (x86)\TweakBit\PCRepairKit\unins000.exe [0B8EACF53669F141288E54CB9C06DFF7] [19/04/2018] (.Tweakbit Pty Ltd.) - C:\Program Files (x86)\TweakBit\PCRepairKit\Downloader.exe ***** ~ Fin de rapport terminé en 00h00mn26s