~ ZHPFix v2021.4.11.290 by Nicolas Coolman (2021/04/11)
~ Run by Francis (Administrator)  (16/04/2021 13:36:29)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Report : C:\Users\franc\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit  (Build 19042)



---\\  SCRIPT DE L'UTILISATEUR.  (22)
Script Zhpfix
IE Restricted Site Good: webcompanion.com
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Web Companion
[HKEY_USERS\S-1-5-21-3761231841-1287366151-2745276614-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Web Companion
HKU\S-1-5-21-3761231841-1287366151-2745276614-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
HKLM\SYSTEM\CurrentControlSet\Services\WCAssistantService
C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ACE
HKLM\Software\Wow6432Node\Classes\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
HKU\S-1-5-21-3761231841-1287366151-2745276614-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
C:\Program Files (x86)\lavasoft\web companion
C:\ProgramData\lavasoft\web companion
C:\ProgramData\Application Data\lavasoft\web companion
[332CAF63F76463D734C823DC3B93DC4C] [08/04/2021] (.LAVASOFT SOFTWARE CANADA INC.) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
EmptyPrefetch
EmptyClsid


---\\  LOGICIEL.  (0)


---\\  SERVICE.  (0)


---\\  TÂCHE PLANIFIÉE.  (0)


---\\  NAVIGATEUR INTERNET.  (0)


---\\  EXPLORATEUR ( Dossiers, Fichiers ).  (4)
DEPLACÉ Fichier : C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
SUPPRIMÉ Redémarrage  Dossier ^: C:\Program Files (x86)\lavasoft\web companion
SUPPRIMÉ Redémarrage  Dossier ^: C:\ProgramData\lavasoft\web companion
SUPPRIMÉ Redémarrage  Dossier ^: C:\ProgramData\Application Data\lavasoft\web companion


---\\  REGISTRE ( Clés, Valeurs, Données ).  (14)
SUPPRIMÉ Valeur : Web Companion [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
ABSENT Valeur: HKEY_USERS\S-1-5-21-3761231841-1287366151-2745276614-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run []
SUPPRIMÉ Clé: HKU\S-1-5-21-3761231841-1287366151-2745276614-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com [webcompanion.com]
ABSENT Clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
SUPPRIMÉ Clé: HKLM\SYSTEM\CurrentControlSet\Services\WCAssistantService [WCAssistantService]
SUPPRIMÉ Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32]
SUPPRIMÉ Redémarrage  Clé ^: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
SUPPRIMÉ Clé: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 [WinRAR32]
SUPPRIMÉ Clé: HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ACE [ACE]
ABSENT Clé: HKLM\Software\Wow6432Node\Classes\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
SUPPRIMÉ Clé: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32]
ABSENT Clé: HKU\S-1-5-21-3761231841-1287366151-2745276614-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
SUPPRIMÉ Valeur: Web Companion [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: Web Companion [HKEY_USERS\S-1-5-21-3761231841-1287366151-2745276614-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]


---\\  COMMANDE.  (2)
~ EmptyPrefetch: Fichiers Prefetcher supprimés (254)
~ EmptyCSID: Dossiers CLSID vides supprimés  (0)


---\\  NON TRAITÉ.  (1)
[332CAF63F76463D734C823DC3B93DC4C] [08/04/2021] (.LAVASOFT SOFTWARE CANADA INC.) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe

~ Le système a été redémarré.

***** ~ Fin de rapport terminé en 26mn46s