~ ZHPCleaner v2016.7.24.88 by Nicolas Coolman (2016/07/24)
~ Run by clafo (Administrator) (27/07/2016 22:35:06)
~ Site : http://www.nicolascoolman.com
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Users\clafo\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\clafo\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 10586)


---\\ Service. (1)
ARRETÉ : iSafeService =>.Superfluous.Elex


---\\ Navigateur internet. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Fichier hôte. (15)
REMPLACÉ: 107.178.255.88 www.google-analytics.com
TROUVÉ: 107.178.255.88 www.statcounter.com
TROUVÉ: 107.178.255.88 statcounter.com
TROUVÉ: 107.178.255.88 ssl.google-analytics.com
TROUVÉ: 107.178.255.88 partner.googleadservices.com
TROUVÉ: 107.178.255.88 google-analytics.com
TROUVÉ: 107.178.248.130 static.doubleclick.net
REMPLACÉ: 107.178.247.130 connect.facebook.net
REMPLACÉ: 107.178.255.88 www.statcounter.com
REMPLACÉ: 107.178.255.88 statcounter.com
REMPLACÉ: 107.178.255.88 ssl.google-analytics.com
REMPLACÉ: 107.178.255.88 partner.googleadservices.com
REMPLACÉ: 107.178.255.88 google-analytics.com
REMPLACÉ: 107.178.248.130 static.doubleclick.net
~ Nombre de redirections trouvées 16/48


---\\ Tâche planifiée. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Explorateur ( Dossiers, Fichiers ). (27)
DEPLACÉ fichier: C:\Users\clafo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk [Bad : C:\Program Files (x86)\Birdsarah\Application\chrome.exe] =>Adware.Mutabaha
DEPLACÉ fichier: C:\Users\Public\Desktop\Google Chrome.lnk [Bad : C:\Program Files (x86)\Birdsarah\Application\chrome.exe] =>Adware.Mutabaha
DEPLACÉ fichier^: C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [Elex do Brasil Participações Ltda - iSafe Kernel Driver] =>.Superfluous.Elex
DEPLACÉ fichier^: C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [Elex do Brasil Participações Ltda - iSafe Kernel Kit Driver] =>.Superfluous.Elex
DEPLACÉ fichier^: C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [Elex do Brasil Participações Ltda - YAC Monitor Driver] =>.Superfluous.Elex
DEPLACÉ fichier^: C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [Elex do Brasil Participações Ltda - iSafe Kernel Ring3 Driver] =>.Superfluous.Elex
DEPLACÉ fichier^: C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [Elex do Brasil Participações Ltda - iSafeSvc] =>.Superfluous.Elex
DEPLACÉ fichier: C:\Windows\System32\drivers\iSafeNetFilter.sys [Elex do Brasil Participações Ltda - iSafeNetFilter SDK WFP Driver (WPP)] =>.Superfluous.Elex
DEPLACÉ fichier: C:\Users\clafo\AppData\Roaming\ApplicationHosting.dat =>PUP.Optional.ApplicationHosting
DEPLACÉ dossier: C:\Program Files (x86)\Birdsarah =>Adware.Mutabaha
DEPLACÉ dossier^: C:\Program Files (x86)\Elex-tech =>.Superfluous.Elex
DEPLACÉ dossier: C:\windows\AutoKMS =>HackTool.AutoKMS
DEPLACÉ dossier^: C:\Users\clafo\AppData\Roaming\Elex-tech =>.Superfluous.Elex
DEPLACÉ dossier^: C:\Program Files (x86)\Elex-tech\YAC =>.Superfluous.YetAnotherCleaner
DEPLACÉ dossier: C:\windows\Installer\MSI16D2.tmp- =>Empty
DEPLACÉ dossier: C:\windows\Installer\MSI221.tmp- =>Empty
DEPLACÉ dossier: C:\windows\Installer\MSI2430.tmp- =>Empty
DEPLACÉ dossier: C:\windows\Installer\MSI28B6.tmp- =>Empty
DEPLACÉ dossier: C:\windows\Installer\MSI387A.tmp- =>Empty
DEPLACÉ dossier: C:\windows\Installer\MSI5413.tmp- =>Empty
DEPLACÉ dossier: C:\windows\Installer\MSI634.tmp- =>Empty
DEPLACÉ dossier: C:\windows\Installer\MSI72F.tmp- =>Empty
DEPLACÉ dossier: C:\windows\Installer\MSI88F1.tmp- =>Empty
DEPLACÉ dossier: C:\windows\Installer\MSIC540.tmp- =>Empty
DEPLACÉ dossier: C:\windows\Installer\MSIC5DD.tmp- =>Empty
DEPLACÉ dossier: C:\windows\Installer\MSIC64B.tmp- =>Empty
DEPLACÉ dossier: C:\windows\Installer\MSIC766.tmp- =>Empty


---\\ Base de Registres ( Clés, Valeurs, Données ). (18)
SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnl [C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys] =>.Superfluous.Elex
SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlKit [C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys] =>.Superfluous.Elex
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlMon [C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys] =>.Superfluous.Elex
SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\iSafeKrnlR3 [C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys] =>.Superfluous.Elex
SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\iSafeService [C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe] =>.Superfluous.Elex
SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\iSafeNetFilter [C:\Windows\System32\drivers\iSafeNetFilter.sys (Not File)] =>.Superfluous.Elex
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-954712899-2948078468-259400359-1001\SOFTWARE\Classes\ChromiumHTM.4CYGAOJXPS5DNEZSFCIVB37YVE [BrowserAir HTML Document] =>PUP.Optional.BrowserAir
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\easyhotspot-installer_RASAPI32 [] =>.Superfluous.CSDI
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\easyhotspot-installer_RASMANCS [] =>.Superfluous.CSDI
SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Wow6432Node\Elex-tech [] =>.Superfluous.Elex
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\WinZiper [] =>.Superfluous.WinZipper
SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iSafe [ELEX DO BRASIL PARTICIPAÇÕES LTDA] =>.Superfluous.Elex
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WinZip [Winzipper Pvt Ltd.] =>.Superfluous.TaiwanShuiMu
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5B0B258A-F076-45D9-8AAD-99B33C353C88} [hohosearch - Uninstall] =>.Superfluous.HohoSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{938B550D-6834-4518-8F09-189D3DD6E07E} [hohosearch - Uninstall] =>.Superfluous.HohoSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{DC638EEA-2BA2-4459-9C46-85A2F0BE6040} [wzShellContextMenu Class] =>.Superfluous.WinZipper
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Classes\CLSID\{DC638EEA-2BA2-4459-9C46-85A2F0BE6040}\InprocServer32 [C:\Program Files (x86)\WinZipper\wzShellctx64.dll (Not File)] =>.Superfluous.WinZipper
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{E182AC83-0EFC-4CD6-9CEC-12D42C0FA019} [C:\Program Files (x86)\Birdsarah\Update\BirdsarahUpdate.exe] =>Adware.Mutabaha


---\\ Récapitulatif des éléments trouvés sur votre station. (10)
https://www.anti-malware.top/2016/05/18/superfluous-elex/ =>.Superfluous.Elex
https://www.anti-malware.top/2016/06/24/conseils-logiciel-publicitaire-mutabaha/ =>Adware.Mutabaha
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.ApplicationHosting
https://www.anti-malware.top/2016/05/04/hacktool-autokms/ =>HackTool.AutoKMS
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.YetAnotherCleaner
http://www.nicolascoolman.fr/pup-optional-browserair/ =>PUP.Optional.BrowserAir
https://www.anti-malware.top/2016/05/03/superfluous-csdi/ =>.Superfluous.CSDI
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.WinZipper
https://www.anti-malware.top/2016/05/05/superfluous-taiwanshuimu/ =>.Superfluous.TaiwanShuiMu
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.HohoSearch


---\\ Nettoyage Additionnel. (36)
~ Suppression des Clés de registre Tracing. (36)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Google Chrome)
~ Ce navigateur est absent (Opera Software)
~ Le système a été redémarré.


---\\ Statistiques
~ Items scannés : 613
~ Items trouvés : 16
~ Items annulés : 0
~ Items réparés : 46


~ End of clean in 00h02mn20s
~====================
ZHPCleaner-[R]-27072016-22_37_26.txt
ZHPCleaner-[S]-27072016-22_34_34.txt