~ ZHPFix v2019.12.14.162 by Nicolas Coolman (2019/12/14) ~ Run by YVES (Administrator) (06/01/2020 18:20:54) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Certificate ZHPFix: Legal ~ State version : ~ Report : C:\Users\YVES\Desktop\ZHPFix.txt ~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\ ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 18362) ---\\ SCRIPT DE L'UTILISATEUR. (28) Script ZHPFix CreateRestorePoint EmptyProxy EmptyPrefetch EmptyCLSID EmptyFlash EmptyTemp EmptyTracing R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>;localhost;127.0.0.1 =>Hijacker.Proxy R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 =>.Default.Value R5 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>;localhost;127.0.0.1 =>Hijacker.Proxy R5 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:48080;https=127.0.0.1:48080 =>Hijacker.Proxy R5 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1 R5 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 =>.Default.Value R5 - HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings,ProxySettingsPerUser = 0 =>.SUP.ProxyRestriction R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [1http=127.0.0.1:48080;https=127.0.0.1:48080] R5 - HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>;localhost;127.0.0.1 =>Hijacker.Proxy R5 - HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:48080;https=127.0.0.1:48080 =>Hijacker.Proxy R5 - HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1 R5 - HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 =>.Default.Value R5 - HKLM\SOFTWARE\WOW6432Node\Policies\Microsoft\Windows\CurrentVersion\Internet Settings,ProxySettingsPerUser = 0 =>.SUP.ProxyRestriction [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Rene.E Laboratory\PassNow\RescueCDBurner.exe.FriendlyAppName =>.Unsigned [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Train Simulator\Train Simulator.exe.FriendlyAppName =>.Unsigned [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\CDM-Rail\cdr.exe.FriendlyAppName =>.Unsigned [HKU\S-1-5-21-2908005856-764533934-2009435311-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Rene.E Laboratory\PassNow\RescueCDBurner.exe.FriendlyAppName =>.Unsigned [HKU\S-1-5-21-2908005856-764533934-2009435311-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Train Simulator\Train Simulator.exe.FriendlyAppName =>.Unsigned [HKU\S-1-5-21-2908005856-764533934-2009435311-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\CDM-Rail\cdr.exe.FriendlyAppName =>.Unsigned ---\\ LOGICIEL. (0) ---\\ SERVICE. (0) ---\\ TÂCHE PLANIFIÉE. (0) ---\\ NAVIGATEUR INTERNET. (9) REMPLACÉ Donnée Proxy: 0 [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride] REMPLACÉ Donnée Proxy: 1 [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable] REMPLACÉ Donnée Proxy: 0 [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\MigrateProxy] REMPLACÉ Donnée Proxy: 0 [HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride] REMPLACÉ Donnée Proxy: 0 [HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer] REMPLACÉ Donnée Proxy: 1 [HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable] REMPLACÉ Donnée Proxy: 0 [HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\MigrateProxy] REMPLACÉ Donnée Proxy: 0 [HKLM64\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxySettingsPerUser] ABSENT Donnée ManualProxies: [HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies\\] ---\\ EXPLORATEUR ( Dossiers, Fichiers ). (0) ---\\ REGISTRE ( Clés, Valeurs, Données ). (7) REMPLACÉ Donnée Proxy: [HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\\ProxyOverride] SUPPRIMÉ Valeur: C:\Program Files (x86)\Rene.E Laboratory\PassNow\RescueCDBurner.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] SUPPRIMÉ Valeur: C:\Program Files (x86)\Train Simulator\Train Simulator.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] SUPPRIMÉ Valeur: C:\Program Files (x86)\CDM-Rail\cdr.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] SUPPRIMÉ Valeur: C:\Program Files (x86)\Rene.E Laboratory\PassNow\RescueCDBurner.exe.FriendlyAppName [HKU\S-1-5-21-2908005856-764533934-2009435311-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] SUPPRIMÉ Valeur: C:\Program Files (x86)\Train Simulator\Train Simulator.exe.FriendlyAppName [HKU\S-1-5-21-2908005856-764533934-2009435311-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] SUPPRIMÉ Valeur: C:\Program Files (x86)\CDM-Rail\cdr.exe.FriendlyAppName [HKU\S-1-5-21-2908005856-764533934-2009435311-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] ---\\ COMMANDE. (6) CreateRestorePoint: OK ~ EmptyPrefetch: Fichiers Prefetcher supprimés (16) ~ EmptyCSID: Dossiers CLSID vides supprimés (0) ~ EmptyFlash: Fichiers Temporaires supprimés. (2) ~ EmptyTemp: Fichiers Temporaires supprimés.(0) ~ EmptyTracing: Clés tracing supprimées (1) ---\\ NON TRAITÉ. (0) ***** ~ Fin de rapport terminé en 00h00mn38s