~ ZHPCleaner v2014.12.14.259 by Nicolas Coolman (14/12/2014)
~ Run by Olivier Racouchot (Administrator) (15/12/2014 09:21:37)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version KO
~ Type : R�parer
~ Report : C:\Users\Olivier Racouchot\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Olivier Racouchot\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Windows 7, 64-bit Service Pack 1 (Build 7601)


---\\ Service. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ Navigateur internet. (16)
REMPLAC� Proxy: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyHttp1.1 ( 1 )
REMPLAC� IE Params: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page ( hxxps://fr.yahoo.com?fr=hp-avast&type=avastbcl )
REMPLAC� IE Params: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page ( hxxp://fr.yhs4.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} )
REMPLAC� IE Params: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar ( hxxps://fr.yahoo.com?fr=hp-avast&type=avastbcl )
REMPLAC� IE Params: HKLM64\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\Tabs ( res://ieframe.dll/tabswelcome.htm )
REMPLAC� IE Params: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\\Start Page ( hxxps://fr.yahoo.com?fr=hp-avast&type=avastbcl )
REMPLAC� IE Params: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs\\Tabs ( about:newtab )
REMPLAC� Firefox: [5os6bhyq.default-1379105337410] URL HomePage : hxxps://fr.yahoo.com?fr=hp-avast&type=avastbcl
REMPLAC�: [0tba778t.default] - user_pref("browser.search.order.1", "Yahoo! (Avast)"); (PUP.Babylon)
REMPLAC�: [5os6bhyq.default-1379105337410] - user_pref("browser.search.order.1", "Yahoo! (Avast)"); (PUP.Babylon)
DEPLAC� fichier: C:\Users\Olivier Racouchot\AppData\Roaming\Mozilla\Firefox\Profiles\0tba778t.default\Extensions\cacaoweb@cacaoweb.org\chrome.manifest (PUP.Cacaoweb)
DEPLAC� fichier: C:\Users\Olivier Racouchot\AppData\Roaming\Mozilla\Firefox\Profiles\0tba778t.default\Extensions\cacaoweb@cacaoweb.org\install.rdf (PUP.Cacaoweb)
DEPLAC� fichier: C:\Users\Olivier Racouchot\AppData\Roaming\Mozilla\Firefox\Profiles\5os6bhyq.default-1379105337410\Extensions\cacaoweb@cacaoweb.org\chrome.manifest (PUP.Cacaoweb)
DEPLAC� fichier: C:\Users\Olivier Racouchot\AppData\Roaming\Mozilla\Firefox\Profiles\5os6bhyq.default-1379105337410\Extensions\cacaoweb@cacaoweb.org\install.rdf (PUP.Cacaoweb)
DEPLAC� dossier: C:\Users\Olivier Racouchot\AppData\Roaming\Mozilla\Firefox\Profiles\0tba778t.default\Extensions\cacaoweb@cacaoweb.org (PUP.Cacaoweb)
DEPLAC� dossier: C:\Users\Olivier Racouchot\AppData\Roaming\Mozilla\Firefox\Profiles\5os6bhyq.default-1379105337410\Extensions\cacaoweb@cacaoweb.org (PUP.Cacaoweb)


---\\ Fichier h�te. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ T�che planifi�e. (0)
~ Aucun �l�ment malicieux trouv�.


---\\ Explorateur ( Dossiers, Fichiers ). (14)
DEPLAC�: C:\Windows\Installer\{70D6C4BA-DCBE-41C9-BDFA-DA9819E3501C}\ARPPRODUCTICON.exe [IObit Apps Toolbar v9.3] (PUP.Dealio)
DEPLAC�: C:\Program Files (x86)\Application Updater (PUP.Dealio)
DEPLAC�: C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [ - ] (PUP.Dealio)
DEPLAC�: C:\Program Files (x86)\Application Updater\config.ini [ - ] (PUP.Dealio)
DEPLAC�: C:\Program Files (x86)\IObit Apps Toolbar (PUP.Dealio)
DEPLAC�: C:\Program Files (x86)\IObit Apps Toolbar\IE [ - ] (PUP.Dealio)
DEPLAC�: C:\Program Files (x86)\IObit Apps Toolbar\Res [ - ] (PUP.Dealio)
DEPLAC�: C:\Program Files (x86)\IObit Apps Toolbar\WidgiHelper.exe [ - ] (PUP.Dealio)
DEPLAC�: C:\Program Files (x86)\Common Files\Spigot (PUP.Dealio)
DEPLAC�: C:\Program Files (x86)\Common Files\Spigot\SlickSavings [ - ] (PUP.Dealio)
DEPLAC�: C:\Users\Olivier Racouchot\AppData\Local\Slick Savings (PUP.Dealio)
DEPLAC�: C:\Users\Olivier Racouchot\AppData\Local\Slick Savings\coupons.crx [ - ] (PUP.Dealio)
DEPLAC�: C:\Windows\Prefetch\CACAOWEB.EXE-4EF65389.pf[] (PUP.CacaoWeb)
DEPLAC�: C:\Windows\Installer\1044ea.msi [ - ] (PUP.Dealio)


---\\ Base de Registres ( Cl�s, Valeurs, Donn�es ). (13)
SUPPRIM�: HKCR\Installer\Products\AB4C6D07EBCD9C14DBAFAD89913E05C1 [IObit Apps Toolbar v9.3] (PUP.Dealio)
SUPPRIM�: HKCR\Installer\Features\AB4C6D07EBCD9C14DBAFAD89913E05C1 [IObit Apps Toolbar v9.3] (PUP.Dealio)
SUPPRIM� RUN: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\cacaoweb ["C:\Users\Olivier Racouchot\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer] (PUP.cacaoweb)
SUPPRIM�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465} [ShopperReports.dll] (Adware.ShopperReports)
SUPPRIM�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754} [ShoppingReport.dll] (Adware.ShoppingReport)
SUPPRIM�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} [BabylonToolbar.dll] (PUP.Babylon)
SUPPRIM�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} [BabylonToolbar.dll] (PUP.Babylon)
SUPPRIM�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} [BabylonToolbarTlbr.dll] (PUP.Babylon)
SUPPRIM�: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} [ShoppingReport.dll] (Adware.ShoppingReport)
SUPPRIM�: HKCU\Software\cacaoweb [] (PUP.CacaoWeb)
SUPPRIM�: HKCU\Software\Search Settings [] (Adware.SearchSettings)
SUPPRIM�: HKLM\SOFTWARE\Wow6432Node\Application Updater [] (PUP.Dealio)
SUPPRIM�: HKLM\SOFTWARE\Wow6432Node\Search Settings [] (Adware.SearchSettings)



---\\ Bilan de la r�paration
~ R�paration r�alis�e avec succ�s.
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scann�s : 59234
~ Items trouv�s : 1
~ Items r�par�s : 41


End of clean at 09:31:33