~ ZHPCleaner v2021.8.14.320 by Nicolas Coolman (2021/08/14) ~ Run by User (Administrator) (14/08/2021 19:53:35) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Nettoyer ~ Report : C:\Users\User\Documents\Cours\Documents\Desktop\ZHPCleaner (R).txt ~ Quarantine : C:\Users\User\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ System Restore Point : OK ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 19043) ---\\ ALTERNATE DATA STREAM (ADS). (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ SERVICE. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ NAVIGATEUR INTERNET. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ FICHIER HÔTE. (1) ~ Le fichier hôte est légitime. (21) ---\\ TÂCHE PLANIFIÉE. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ EXPLORATEUR ( Dossiers, Fichiers ). (46) DEPLACÉ fichier: C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Preferences =>Préférences Chromium DEPLACÉ fichier: C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Preferences =>Préférences Chromium DEPLACÉ fichier: C:\Users\User\AppData\Local\Temp\CUsersUserAppDataLocalProgramsOpera GX77.0.4054.298opera_autoupdate.download.lock =>.SUP.Temporary.Opera DEPLACÉ fichier: C:\Users\User\AppData\Local\Temp\CUsersUserAppDataLocalProgramsOpera GX77.0.4054.298opera_autoupdate.metrics.lock =>.SUP.Temporary.Opera DEPLACÉ fichier: C:\Users\User\AppData\Local\Temp\wct97AE.tmp =>.SUP.Temporary.Office DEPLACÉ fichier: C:\Users\User\AppData\Local\Temp\wct97BF.tmp =>.SUP.Temporary.Office DEPLACÉ dossier: C:\Windows\Installer\MSI1FF.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI2801.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI2815.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI3291.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI339C.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI396.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI4694.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI46E3.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI481D.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI488D.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI493A.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI5501.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI55FC.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI5989.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI639.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI759C.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI762A.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI857E.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI86D7.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI89F6.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI8B30.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI8D53.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI9052.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI92F3.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSI9594.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIA194.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIA270.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIAF8A.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIAFE9.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIB9D0.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIBA0F.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIBA4F.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIBC2B.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIBC6E.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIBD07.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIBD56.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIBD86.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIBE33.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIF9F1.tmp- =>.SUP.Empty DEPLACÉ dossier: C:\Windows\Installer\MSIFA6F.tmp- =>.SUP.Empty ---\\ BASE DE REGISTRES ( Clés, Valeurs, Données ). (40) SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\410fcd79-1be8-5bf1-986e-ea09c55f7edf [] =>Adware.CrossRider SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Google LLC] =>Heuristic.Suspect SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\EPCD\Installs Postes\Help! EuroPacific\TeamViewerQS.exe.FriendlyAppName [TeamViewerQS.exe] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\EPCD\Installs Postes\Help! EuroPacific\TeamViewerQS.exe.ApplicationCompany [TeamViewer] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\User\Downloads\Thunderbird Setup 78.9.0.exe.FriendlyAppName [Thunderbird] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\User\Downloads\Thunderbird Setup 78.9.0.exe.ApplicationCompany [Mozilla] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\User\Downloads\465.89-notebook-win10-64bit-international-dch-whql.exe.FriendlyAppName [NVIDIA Package Launcher] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\User\Downloads\465.89-notebook-win10-64bit-international-dch-whql.exe.ApplicationCompany [NVIDIA Corporation] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\73.0.3856.427\opera.exe.FriendlyAppName [Opera GX Internet Browser] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\73.0.3856.427\opera.exe.ApplicationCompany [Opera Software] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\73.0.3856.431\opera.exe.FriendlyAppName [Opera GX Internet Browser] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\73.0.3856.431\opera.exe.ApplicationCompany [Opera Software] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\73.0.3856.434\opera.exe.FriendlyAppName [Opera GX Internet Browser] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\73.0.3856.434\opera.exe.ApplicationCompany [Opera Software] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\73.0.3856.438\opera.exe.FriendlyAppName [Opera GX Internet Browser] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\73.0.3856.438\opera.exe.ApplicationCompany [Opera Software] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\75.0.3969.255\opera.exe.FriendlyAppName [Opera GX Internet Browser] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\75.0.3969.255\opera.exe.ApplicationCompany [Opera Software] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\75.0.3969.259\opera.exe.FriendlyAppName [Opera GX Internet Browser] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\75.0.3969.259\opera.exe.ApplicationCompany [Opera Software] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe.FriendlyAppName [Epic Online Services User Helper] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe.ApplicationCompany [Epic Games, Inc.] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\75.0.3969.267\opera.exe.FriendlyAppName [Opera GX Internet Browser] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\75.0.3969.267\opera.exe.ApplicationCompany [Opera Software] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\75.0.3969.279\opera.exe.FriendlyAppName [Opera GX Internet Browser] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\75.0.3969.279\opera.exe.ApplicationCompany [Opera Software] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\User\Documents\Cours\OfficeSetup.exe.FriendlyAppName [Microsoft Office] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\User\Documents\Cours\OfficeSetup.exe.ApplicationCompany [Microsoft Corporation] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\75.0.3969.282\opera.exe.FriendlyAppName [Opera GX Internet Browser] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\75.0.3969.282\opera.exe.ApplicationCompany [Opera Software] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\75.0.3969.285\opera.exe.FriendlyAppName [Opera GX Internet Browser] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\75.0.3969.285\opera.exe.ApplicationCompany [Opera Software] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\76.0.4017.208\opera.exe.FriendlyAppName [Opera GX Internet Browser] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\76.0.4017.208\opera.exe.ApplicationCompany [Opera Software] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\76.0.4017.227\opera.exe.FriendlyAppName [Opera GX Internet Browser] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\users\user\appdata\local\programs\opera gx\76.0.4017.227\opera.exe.ApplicationCompany [Opera Software] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\User\Documents\Cours\Documents\Mimilus\A moi !\Evening Starter v1.02\Game.exe.FriendlyAppName [RGSS3 Player] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\User\Documents\Cours\Documents\Mimilus\A moi !\MaxITBCity-1.0-all\lib\windows-i686\Max in the big city.exe.FriendlyAppName [Max in the big city] =>.SUP.Orphan.MUICache SUPPRIMÉ valeur: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Epic Games\Epic Online Services\ [No Folder] =>.SUP.Obsolete.NoFolder SUPPRIMÉ valeur: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Epic Games\Epic Online Services\service\ [No Folder] =>.SUP.Obsolete.NoFolder ---\\ RÉCAPITULATIF DES ÉLÉMENTS TROUVÉS SUR VOTRE STATION. (8) https://nicolascoolman.eu/forum/Topic/repaquetage-et-infection/ =>Préférences Chromium https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Temporary.Opera https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Temporary.Office https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Empty https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect https://nicolascoolman.eu/forum/Topic/orphan-muicache-logiciel-potentiellement-superflu-lps/ =>.SUP.Orphan.MUICache https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Obsolete.NoFolder ---\\ NETTOYAGE ADDITIONNEL. (47) ~ Suppression des Clés de registre Tracing. (47) ~ Suppression des anciens rapports ZHPCleaner. (0) ---\\ BILAN DE LA REPARATION ~ Réparation réalisée avec succès. ~ Mozilla Firefox OK ~ Internet Explorer OK ~ Opera Stable OK ---\\ STATISTIQUES ~ Items scannés : 1599 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Gain de place (Octets) : 41246 ~ Items options : 14/17 ---\\ OPTIONS DESACTIVÉES ~ Afficher le bilan ~ Afficher le rapport ~ Initialiser les navigateurs avec suppression des extensions ~ End of clean in 00h00mn42s ---\\ LISTE DES RAPPORTS (2) ZHPCleaner-[S]-14082021-19_50_01.txt ZHPCleaner-[R]-14082021-19_54_17.txt