~ ZHPFix v2020.5.22.199 by Nicolas Coolman (2020/05/22)
~ Run by Muriel (Administrator)  (03/06/2020 00:40:53)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Report : C:\Users\Muriel\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 8.1, 64-bit  (Build 9600)



---\\  SCRIPT DE L'UTILISATEUR.  (145)
Script ZHPFix

EmptyCLSID

EmptyFlash

Emptytemp

HKLM\SYSTEM\CurrentControlSet\Services\WCAssistantService

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:Web Companion

C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe

C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe

M0 - MFSP: prefs.js [Muriel - n900rrqj.default-1487627897734-1548839344270] http://defaultsearch.co/homepage?

HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01bc138a-85c3-47a6-88af-7956511248eb}

HKCU\Software\Lavasoft\Web Companion

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion

HKLM\SOFTWARE\Lavasoft\Web Companion

C:\Users\Muriel\AppData\Roaming\Mozilla\FireFox\Profiles\n900rrqj.default-1487627897734-1548839344270\Pref.js

C:\Users\Muriel\AppData\Roaming\Mozilla\FireFox\Profiles\t8gqz5ow.default-1487627897734-1500732197959-1500732503515\Pref.js

C:\Users\Muriel\AppData\Roaming\Mozilla\FireFox\Profiles\4zaqny0h.default-1487627897734-1498146508251\Pref.js

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01bc138a-85c3-47a6-88af-7956511248eb}

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{01bc138a-85c3-47a6-88af-7956511248eb}

C:\Program Files (x86)\lavasoft\web companion

C:\ProgramData\lavasoft\web companion

C:\Users\Muriel\Documents\Updater

C:\Users\Muriel\AppData\Roaming\Lavasoft\Web Companion

C:\ProgramData\Application Data\lavasoft\web companion

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanionScript ZHPFix

EmptyCLSID

EmptyFlash

Emptytemp

HKLM\SYSTEM\CurrentControlSet\Services\WCAssistantService

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:Web Companion

C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe

C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe

M0 - MFSP: prefs.js [Muriel - n900rrqj.default-1487627897734-1548839344270] http://defaultsearch.co/homepage?

HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01bc138a-85c3-47a6-88af-7956511248eb}

HKCU\Software\Lavasoft\Web Companion

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion

HKLM\SOFTWARE\Lavasoft\Web Companion

C:\Users\Muriel\AppData\Roaming\Mozilla\FireFox\Profiles\n900rrqj.default-1487627897734-1548839344270\Pref.js

C:\Users\Muriel\AppData\Roaming\Mozilla\FireFox\Profiles\t8gqz5ow.default-1487627897734-1500732197959-1500732503515\Pref.js

C:\Users\Muriel\AppData\Roaming\Mozilla\FireFox\Profiles\4zaqny0h.default-1487627897734-1498146508251\Pref.js

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01bc138a-85c3-47a6-88af-7956511248eb}

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{01bc138a-85c3-47a6-88af-7956511248eb}

C:\Program Files (x86)\lavasoft\web companion

C:\ProgramData\lavasoft\web companion

C:\Users\Muriel\Documents\Updater

C:\Users\Muriel\AppData\Roaming\Lavasoft\Web Companion

C:\ProgramData\Application Data\lavasoft\web companion

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanionScript ZHPFix

EmptyCLSID

EmptyFlash

Emptytemp

HKLM\SYSTEM\CurrentControlSet\Services\WCAssistantService

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:Web Companion

C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe

C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe

M0 - MFSP: prefs.js [Muriel - n900rrqj.default-1487627897734-1548839344270] http://defaultsearch.co/homepage?

HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01bc138a-85c3-47a6-88af-7956511248eb}

HKCU\Software\Lavasoft\Web Companion

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion

HKLM\SOFTWARE\Lavasoft\Web Companion

C:\Users\Muriel\AppData\Roaming\Mozilla\FireFox\Profiles\n900rrqj.default-1487627897734-1548839344270\Pref.js

C:\Users\Muriel\AppData\Roaming\Mozilla\FireFox\Profiles\t8gqz5ow.default-1487627897734-1500732197959-1500732503515\Pref.js

C:\Users\Muriel\AppData\Roaming\Mozilla\FireFox\Profiles\4zaqny0h.default-1487627897734-1498146508251\Pref.js

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01bc138a-85c3-47a6-88af-7956511248eb}

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{01bc138a-85c3-47a6-88af-7956511248eb}

C:\Program Files (x86)\lavasoft\web companion

C:\ProgramData\lavasoft\web companion

C:\Users\Muriel\Documents\Updater

C:\Users\Muriel\AppData\Roaming\Lavasoft\Web Companion

C:\ProgramData\Application Data\lavasoft\web companion

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion


---\\  LOGICIEL.  (0)


---\\  SERVICE.  (0)


---\\  TÂCHE PLANIFIÉE.  (0)


---\\  NAVIGATEUR INTERNET.  (1)
DEPLACÉ Fichier  Firefox: C:\Users\Muriel\AppData\Roaming\Mozilla\Firefox\Profiles\n900rrqj.default-1487627897734-1548839344270\prefs.js


---\\  EXPLORATEUR ( Dossiers, Fichiers ).  (18)
SUPPRIMÉ Redémarrage  Fichier Temp^: C:\Users\Muriel\AppData\Local\Temp\AdobeARM.log
DEPLACÉ Fichier Temp: C:\Users\Muriel\AppData\Local\Temp\AdobeARM_NotLocked.log
DEPLACÉ Fichier Temp: C:\Users\Muriel\AppData\Local\Temp\MSIdd765.LOG
DEPLACÉ Fichier Temp: C:\Users\Muriel\AppData\Local\Temp\TWAIN.LOG
SUPPRIMÉ Redémarrage  Fichier Temp^: C:\Users\Muriel\AppData\Local\Temp\lu50921bqfpr.tmp
DEPLACÉ Fichier Temp: C:\Users\Muriel\AppData\Local\Temp\~DF4D7C2C022AF1BF3D.TMP
DEPLACÉ Fichier Temp: C:\Users\Muriel\AppData\Local\Temp\~DFAE9C188AD324AA6C.TMP
DEPLACÉ Fichier Temp: C:\Users\Muriel\AppData\Local\Temp\~DFE3CA4B2A67316918.TMP
DEPLACÉ Fichier : C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
DEPLACÉ Fichier : C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
SUPPRIMÉ Redémarrage  Dossier ^: C:\Program Files (x86)\lavasoft\web companion
SUPPRIMÉ Redémarrage  Dossier ^: C:\ProgramData\lavasoft\web companion
SUPPRIMÉ Dossier : C:\Users\Muriel\Documents\Updater
SUPPRIMÉ Dossier : C:\Users\Muriel\AppData\Roaming\Lavasoft\Web Companion
SUPPRIMÉ Redémarrage  Dossier ^: C:\ProgramData\Application Data\lavasoft\web companion
DEPLACÉ Fichier Temp: C:\Users\Muriel\AppData\Local\Temp\AdobeARM.log
DEPLACÉ Fichier Temp*: C:\Users\Muriel\AppData\Local\Temp\lu50921bqfpr.tmp
SUPPRIMÉ Dossier : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion


---\\  REGISTRE ( Clés, Valeurs, Données ).  (15)
SUPPRIMÉ Clé: HKLM\SYSTEM\CurrentControlSet\Services\WCAssistantService [WCAssistantService]
SUPPRIMÉ Valeur : Web Companion [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
ABSENT Clé: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01bc138a-85c3-47a6-88af-7956511248eb}
SUPPRIMÉ Clé: HKCU\Software\Lavasoft\Web Companion [Web Companion]
SUPPRIMÉ Clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com [webcompanion.com]
SUPPRIMÉ Clé: HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion [Web Companion]
ABSENT Clé: HKLM\SOFTWARE\Lavasoft\Web Companion
ABSENT Clé: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01bc138a-85c3-47a6-88af-7956511248eb}
ABSENT Clé: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{01bc138a-85c3-47a6-88af-7956511248eb}
ABSENT Clé: HKLM\SYSTEM\CurrentControlSet\Services\WCAssistantService
ABSENT Valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run []
ABSENT Clé: HKCU\Software\Lavasoft\Web Companion
ABSENT Clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
ABSENT Clé: HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion
SUPPRIMÉ Valeur: Web Companion [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]


---\\  COMMANDE.  (5)
~ EmptyCSID: Dossiers CLSID vides supprimés  (0)
~ EmptyFlash: Dossier FlashPlayer vide.
~ EmptyTemp: Dossier Local temp partiellement vidé  (8)
~ EmptyTemp: Dossier Local temp partiellement vidé  (2)
~ EmptyTemp: Fichiers Temporaires supprimés.(0)


---\\  NON TRAITÉ.  (0)

~ Le système a été redémarré.

***** ~ Fin de rapport terminé en 00mn00s