~ ZHPCleaner v2020.1.3.166 by Nicolas Coolman (2020/01/03) ~ Run by isabe (Administrator) (07/01/2020 21:46:24) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Nettoyer ~ Report : C:\Users\isabe\Desktop\ZHPCleaner (R).txt ~ Quarantine : C:\Users\isabe\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ System Restore Point : ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Pro, 64-bit (Build 18362) ---\\ ALTERNATE DATA STREAM (ADS). (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ SERVICE. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ NAVIGATEUR INTERNET. (1) SUPPRIMÉ donnée: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\webcompanion.com\\http [Bad : Sensitive Websites] =>PUP.Optional.LavasoftWebCompanion ---\\ FICHIER HÔTE. (1) ~ Le fichier hôte est légitime. (21) ---\\ TÂCHE PLANIFIÉE. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ EXPLORATEUR ( Dossiers, Fichiers ). (7) DEPLACÉ fichier^: C:\Program Files (x86)\Lavasoft\web companion =>PUP.Optional.LavasoftWebCompanion DEPLACÉ fichier^: C:\ProgramData\Lavasoft\web companion =>PUP.Optional.LavasoftWebCompanion DEPLACÉ dossier: C:\Users\isabe\AppData\Roaming\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion DEPLACÉ dossier^: C:\Program Files (x86)\lavasoft\web companion =>PUP.Optional.LavasoftWebCompanion DEPLACÉ dossier^: C:\ProgramData\lavasoft\web companion =>PUP.Optional.LavasoftWebCompanion DEPLACÉ dossier^: C:\ProgramData\Application Data\lavasoft\web companion =>PUP.Optional.LavasoftWebCompanion DEPLACÉ dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion =>PUP.Optional.LavasoftWebCompanion ---\\ BASE DE REGISTRES ( Clés, Valeurs, Données ). (25) SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\Lavasoft\Web Companion [AdditionalScan 26] =>PUP.Optional.LavasoftWebCompanion SUPPRIMÉ clé**: HKEY_USERS\S-1-5-18\Software\Lavasoft\Web Companion [AdditionalScan 28] =>PUP.Optional.LavasoftWebCompanion SUPPRIMÉ clé*: HKU\S-1-5-21-1250346127-3561979955-400122277-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com [AdditionalScan 50] =>PUP.Optional.LavasoftWebCompanion SUPPRIMÉ clé*: HKCU\Software\Lavasoft\Web Companion [AdditionalScan 80] =>PUP.Optional.LavasoftWebCompanion SUPPRIMÉ clé**: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com [AdditionalScan 262] =>PUP.Optional.LavasoftWebCompanion SUPPRIMÉ clé*: HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion [AdditionalScan 298] =>PUP.Optional.LavasoftWebCompanion SUPPRIMÉ clé**: HKLM\SOFTWARE\Lavasoft\Web Companion [AdditionalScan 414] =>PUP.Optional.LavasoftWebCompanion SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\akamaihd.net [] =>.SUP.AkamaiHD SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\akamaized.net [] =>.SUP.AkamaiHD SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\booking.com [] =>PUP.Optional.Booking SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\embedftv-a.akamaihd.net [] =>.SUP.AkamaiHD SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\myfreegames.net [] =>PUP.Optional.ScriptHost SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\sp.booking.com [] =>PUP.Optional.Booking SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\wix-instantsearchplus-ssl.akamaized.net [] =>.SUP.AkamaiHD SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.myfreegames.net [] =>PUP.Optional.ScriptHost SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\akamaihd.net [] =>.SUP.AkamaiHD SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\akamaized.net [] =>.SUP.AkamaiHD SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\booking.com [] =>PUP.Optional.Booking SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\embedftv-a.akamaihd.net [268] =>.SUP.AkamaiHD SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\myfreegames.net [] =>PUP.Optional.ScriptHost SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\sp.booking.com [192] =>PUP.Optional.Booking SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\wix-instantsearchplus-ssl.akamaized.net [10508] =>.SUP.AkamaiHD SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.myfreegames.net [182] =>PUP.Optional.ScriptHost SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8ddafc30-bfb8-45e7-ad6f-721a28d5926a} [Lavasoft] =>PUP.Optional.LavasoftWebCompanion SUPPRIMÉ valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Web Companion [C:\Program Files (x86)\Lavasoft\Web Companion\Appl] =>PUP.Optional.LavasoftWebCompanion ---\\ RÉCAPITULATIF DES ÉLÉMENTS TROUVÉS SUR VOTRE STATION. (4) https://nicolascoolman.eu/2017/03/12/superfluous-lavasoftwebcompanion/ =>PUP.Optional.LavasoftWebCompanion https://nicolascoolman.eu/2017/12/26/sup-akamaihd/ =>.SUP.AkamaiHD https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Booking https://www.nicolascoolman.com/fr/adware-scripthost/ =>PUP.Optional.ScriptHost ---\\ NETTOYAGE ADDITIONNEL. (14) ~ Suppression des Clés de registre Tracing. (14) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ BILAN DE LA REPARATION ~ Réparation réalisée avec succès. ~ Internet Explorer OK ~ Le système a été redémarré. ---\\ STATISTIQUES ~ Items scannés : 957 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items options : 6/13 ~ Gain de place (Octets) : 0 ~ End of clean in 00h01mn05s ---\\ LISTE DES RAPPORTS (2) ZHPCleaner-[S]-07012020-21_31_11.txt ZHPCleaner-[R]-07012020-21_47_29.txt