Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPCleaner v2016.7.30.92 by Nicolas Coolman (2016/07/30)
~ Run by nonox88 (Administrator) (31/07/2016 12:57:38)
~ Site : https://www.nicolascoolman.com
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Users\nonox88\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\nonox88\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 10586)
---\\ Service. (0)
~ Aucun élément malicieux ou superflu trouvé.
---\\ Navigateur internet. (2)
SUPPRIMÉ: [3voffvtc.default] - user_pref("extensions.MiddleRush.cg", "34519d77-2115-4256-b42c-a2cf3bf59128"); =>Adware.BrowseFox
SUPPRIMÉ: [3voffvtc.default] - user_pref("lightweightThemes.usedThemes", "[{\"id\":\"283616\",\"name\":\"Nidalee\",\"headerURL\":\"[...] =>.Superfluous.IronSourceLtd
---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (29)
---\\ Tâche planifiée. (7)
SUPPRIMÉ tâche: [AutoPico Daily Restart] [C:\Program Files\KMSpico\AutoPico.exe (Not File) ] =>HackTool.KMSpico
SUPPRIMÉ tâche: [Dregol tone] [C:\ProgramData\{4A74A2B7-1AF6-7331-AB70-03B37BF2D03D}\1.17.0.1\fiber.js 433a2f50726f6772616d446174612f7b34413734413242372d314146362d373333312d414237302d3033423337424632443033447d2f312e31372e302e312f746f6e652e646c6c 687474703a2f2f73616f2e72657164726 (Not File) ] =>PUP.Optional.Browser
SUPPRIMÉ tâche: [ParetoLogic Registration3] [C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\UUS3.dll RunUns (Not File) ] =>.Superfluous.Paretologic
SUPPRIMÉ tâche: [ParetoLogic Update Version3] [C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe (Not File) ] =>.Superfluous.Paretologic
SUPPRIMÉ tâche: [ParetoLogic Update Version3 Startup Task] [C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe (Not File) ] =>.Superfluous.Paretologic
SUPPRIMÉ tâche: [Run_dregol] [C:\Users\nonox88\AppData\Roaming\RUN_DR~1\UPDATE~1\UPDATE~1.EXE (Not File) ] =>PUP.Optional.RunDregol
SUPPRIMÉ tâche: [Selection Tools Update] [C:\Users\nonox88\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe (Not File) ] =>.Superfluous.Nosibay
---\\ Explorateur ( Dossiers, Fichiers ). (31)
DEPLACÉ fichier: C:\Program Files\KMSpico\AutoPico.exe [ - AutoPico] =>HackTool.KMSpico
DEPLACÉ fichier: C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe [Copyright (C) 2013 - Application de mise à jour] =>.Superfluous.Paretologic
DEPLACÉ fichier: C:\Windows\Tasks\ParetoLogic Registration3.job =>.Superfluous.Paretologic
DEPLACÉ fichier: C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job =>.Superfluous.Paretologic
DEPLACÉ fichier: C:\Windows\Tasks\ParetoLogic Update Version3.job =>.Superfluous.Paretologic
DEPLACÉ fichier: C:\END =>.Superfluous.Conduit
DEPLACÉ fichier: C:\Windows\Prefetch\PARETOLOGIC PC HEALTH ADVISOR-C1DD0BEB.pf =>.Superfluous.Paretologic
DEPLACÉ fichier: C:\Users\nonox88\Downloads\ParetoLogic PC Health Advisor_fr.exe [ParetoLogic Inc. - PC Health Advisor Installer] =>.Superfluous.Paretologic
DEPLACÉ fichier: C:\Windows\SECOH-QAD.exe =>HackTool.KMSpico
DEPLACÉ fichier: C:\Windows\AutoKMS\AutoKMS.exe [CODYQX4 - AutoKMS] =>HackTool.AutoKMS
DEPLACÉ fichier: C:\Windows\AutoKMS\AutoKMS.log =>HackTool.AutoKMS
DEPLACÉ fichier^: C:\Users\nonox88\AppData\Local\app =>PUP.Optional.CrossRider
DEPLACÉ fichier: C:\program files (x86)\common files\Tencent\qqdownload\130\bugreport_xf.exe =>.Superfluous.Tencent
DEPLACÉ fichier: C:\program files (x86)\common files\Tencent\qqdownload\130\tencentdl.exe [Tencent - 腾讯高速下载引擎] =>.Superfluous.Tencent
DEPLACÉ fichier: C:\Program Files\KMSpico\KMSELDI.exe [ - KMS GUI ELDI] =>HackTool.KMSpico
DEPLACÉ dossier: C:\Program Files (x86)\Hostify =>.Superfluous.CSDI
DEPLACÉ dossier: C:\Program Files\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier: C:\Program Files (x86)\Common Files\ParetoLogic =>.Superfluous.Paretologic
DEPLACÉ dossier: C:\Program Files (x86)\Common Files\Tencent =>.Superfluous.Tencent
DEPLACÉ dossier: C:\ProgramData\ParetoLogic =>.Superfluous.Paretologic
DEPLACÉ dossier: C:\ProgramData\Tencent =>.Superfluous.Tencent
DEPLACÉ dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier: C:\WINDOWS\AutoKMS =>HackTool.AutoKMS
DEPLACÉ dossier: C:\Users\nonox88\AppData\Roaming\DriverCure =>.Superfluous.Paretologic
DEPLACÉ dossier: C:\Users\nonox88\AppData\Roaming\ParetoLogic =>.Superfluous.Paretologic
DEPLACÉ dossier: C:\Users\nonox88\AppData\Roaming\Store =>.Superfluous.Nosibay
DEPLACÉ dossier: C:\Users\nonox88\AppData\Roaming\Tencent =>.Superfluous.Tencent
DEPLACÉ dossier: C:\Users\nonox88\AppData\Local\CrashRpt =>.Superfluous.CrashReports
DEPLACÉ dossier: C:\Program Files (x86)\QuickSearch =>PUP.Optional.FastSearch
DEPLACÉ dossier: C:\ProgramData\TXQMPC =>.Superfluous.TXQMPC
DEPLACÉ dossier: C:\Users\nonox88\AppData\Local\Microsoft Toolkit =>HackTool.AutoKMS
---\\ Base de Registres ( Clés, Valeurs, Données ). (46)
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://www.dregol.com/results.php?f=4&q={searchTerms}&a=drg_ir_15_20&cd=2XzuyEtN2Y1L1Qzu0F0C0A0AtCyE[...]] [Dregol] =>PUP.Optional.Browser
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@qq.com/npAndroidAssistant [Tencent, Inc.] =>.Superfluous.Tencent
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://www.dregol.com/results.php?f=4&q={searchTerms}&a=drg_ir_15_20&cd=2XzuyEtN2Y1L1Qzu0F0C0A0AtCyEtB0ByBtDyDtD0A0FtByCtN0D0Tzu0StCtBtAtBtN1L2XzutAtFtCtDtFtBtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyC0AyEyE0AtCtA0FtGtDzytDtDtGyE0C0BzztGyEyCzz0FtGyBzz0CtD0CtB0CyDtCyE0C0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtC0CyDzyyEzytCtGyByD0E0CtGyE0Fzy0DtG0AyB0FzztGzytDtD0C0B0FtD0Dzz0DyD0A2QtN0A0LzuyE&cr=1489563797&ir=] =>PUP.Optional.Browser
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PCSpeedUp [C:\Program Files (x86)\Accelerer PC\PCSUNotifier.exe (Not File)] =>.Superfluous.PCSpeedUp
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Prt [C:\Users\nonox88\AppData\Local\TECHP-Browser\prtsvc.exe startup=1 (Not File)] =>PUP.Optional.BrowserAir
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3479429645-407056864-3191445915-1000\SOFTWARE\ImInstaller [] =>Toolbar.IncrediMail
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3479429645-407056864-3191445915-1000\SOFTWARE\ParetoLogic [] =>.Superfluous.Paretologic
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3479429645-407056864-3191445915-1000\SOFTWARE\Tencent [] =>.Superfluous.Tencent
SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\Tencent [] =>.Superfluous.Tencent
SUPPRIMÉ clé: HKCU\Software\ImInstaller [] =>Toolbar.IncrediMail
SUPPRIMÉ clé: HKCU\Software\ParetoLogic [] =>.Superfluous.Paretologic
SUPPRIMÉ clé: HKCU\Software\Tencent [] =>.Superfluous.Tencent
SUPPRIMÉ clé*: HKCU\Software\AppDataLow\Software\adawarebp [] =>PUP.Optional.ToolbarCleaner
SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\buy.paretologic.com [] =>.Superfluous.Paretologic
SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\paretologic.com [] =>.Superfluous.Paretologic
SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\buy.paretologic.com [] =>.Superfluous.Paretologic
SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\paretologic.com [] =>.Superfluous.Paretologic
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1B5D5DBD-C857-4377-A755-06E50B4AC2B0} [C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3192 (Not File)] =>.Superfluous.Tencent
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{639B74F1-0594-432C-97C8-68C8C17A1E1D} [C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\Plugins\QQPCB1AndroidJmp (Not File)] =>.Superfluous.Tencent
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Tinstalls [] =>PUP.Optional.DesktopPlay
SUPPRIMÉ clé*: HKCU\Software\TeleCharger [] =>.Superfluous.Downloader
SUPPRIMÉ clé*: HKCU\Software\undefined [] =>.Superfluous.Downloader
SUPPRIMÉ clé*: HKCU\Software\ProductSetup [] =>Adware.InstallCore
SUPPRIMÉ clé*: HKLM\SOFTWARE\Wow6432Node\QuickSearch [] =>PUP.Optional.FastSearch
SUPPRIMÉ clé: HKLM\SOFTWARE\QuickSearch [] =>PUP.Optional.FastSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\f [f] =>PUP.Optional.Funmoods
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Selection Tools ["C:\Users\nonox88\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe" /winstartup (Not File)] =>.Superfluous.Nosibay
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\TheBrowser [] =>PUP.Optional.TheBrowser
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 [KMSpico v9.2.3] =>HackTool.KMSpico
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\ImInstaller [] =>Toolbar.IncrediMail
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\ParetoLogic [] =>.Superfluous.Paretologic
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Tencent [] =>.Superfluous.Tencent
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Tutorials [] =>PUP.Optional.AgenceExclusive
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\zdengine [] =>PUP.Optional.FastSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Google Inc.] =>Heuristic.Suspect
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\5da059a482fd494db3f252126fbc3d5b [] =>Hijacker.Browser
SUPPRIMÉ valeur: HKLM64\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\\{9746ad1f-7f2a-4bc8-a61c-2f73d969472d} [C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\{9746ad1f-7f2a-4bc8-a61c-2f73d969472d}] =>Hijacker.Browser
SUPPRIMÉ valeur: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\mbot_fr_014010259 [] =>PUP.Optional.CrossRider
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{8244FC8D-5217-4DC1-8732-F83FDD726DC2} [C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe] =>.Superfluous.Tencent
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{B226CE7F-D0FF-4555-90AA-3B9DFBF3B6CE} [C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe] =>.Superfluous.Tencent
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{DF4F600C-8231-4AC8-BFB7-C633B45A1CDA} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{7AEF6092-A842-4FA5-B05C-7CC364229138} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{ECD15934-E67B-4EA0-AF67-19E6038B3E99} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{ED947B52-81DD-40BC-85FA-885C9B71D4A3} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{6F0CE4B4-E5A1-4B06-B781-B627B5C93A3F} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{6BE4073E-EF2A-48ED-A4AB-3802BACAF062} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico
---\\ Récapitulatif des éléments trouvés sur votre station. (27)
https://www.nicolascoolman.fr/?p=347 =>Adware.BrowseFox
https://www.anti-malware.top/2016/05/02/superfluous-ironsourceltd/ =>.Superfluous.IronSourceLtd
https://www.nicolascoolman.fr/?p=989 =>HackTool.KMSpico
https://www.nicolascoolman.fr/?p=546 =>PUP.Optional.Browser
https://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Paretologic
https://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.RunDregol
https://www.anti-malware.top/2016/05/03/superfluous-nosibay/ =>.Superfluous.Nosibay
https://www.nicolascoolman.fr/?p=210 =>.Superfluous.Conduit
https://www.anti-malware.top/2016/05/04/hacktool-autokms/ =>HackTool.AutoKMS
https://www.anti-malware.top/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider
https://www.nicolascoolman.fr/?p=368 =>.Superfluous.Tencent
https://www.anti-malware.top/2016/05/03/superfluous-csdi/ =>.Superfluous.CSDI
https://www.nicolascoolman.fr/?p=5145 =>.Superfluous.CrashReports
https://www.anti-malware.top/2016/07/05/pup-optional-fastsearch/ =>PUP.Optional.FastSearch
https://www.nicolascoolman.fr/?p=5145 =>.Superfluous.TXQMPC
https://www.nicolascoolman.fr/?p=1255 =>.Superfluous.PCSpeedUp
https://www.nicolascoolman.fr/pup-optional-browserair/ =>PUP.Optional.BrowserAir
https://www.nicolascoolman.fr/?p=5143 =>Toolbar.IncrediMail
https://www.nicolascoolman.fr/?p=712 =>PUP.Optional.ToolbarCleaner
https://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DesktopPlay
https://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Downloader
https://www.anti-malware.top/2016/04/22/adware-installcore/ =>Adware.InstallCore
https://www.nicolascoolman.fr/?p=362 =>PUP.Optional.Funmoods
https://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.TheBrowser
https://www.nicolascoolman.fr/?p=122 =>PUP.Optional.AgenceExclusive
https://www.anti-malware.top/2016/04/22/heuristic-suspect/ =>Heuristic.Suspect
https://www.nicolascoolman.fr/hijacker-browser/ =>Hijacker.Browser
---\\ Nettoyage Additionnel. (16)
~ Suppression des Clés de registre Tracing. (16)
~ Suppression des anciens rapports ZHPCleaner. (0)
---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Opera Software)
~ Le système a été redémarré.
---\\ Statistiques
~ Items scannés : 1327
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 86
~ End of clean in 00h01mn28s
~====================
ZHPCleaner-[R]-31072016-12_59_06.txt
ZHPCleaner-[S]-31072016-12_51_18.txt
~ Run by nonox88 (Administrator) (31/07/2016 12:57:38)
~ Site : https://www.nicolascoolman.com
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Users\nonox88\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\nonox88\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 10586)
---\\ Service. (0)
~ Aucun élément malicieux ou superflu trouvé.
---\\ Navigateur internet. (2)
SUPPRIMÉ: [3voffvtc.default] - user_pref("extensions.MiddleRush.cg", "34519d77-2115-4256-b42c-a2cf3bf59128"); =>Adware.BrowseFox
SUPPRIMÉ: [3voffvtc.default] - user_pref("lightweightThemes.usedThemes", "[{\"id\":\"283616\",\"name\":\"Nidalee\",\"headerURL\":\"[...] =>.Superfluous.IronSourceLtd
---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (29)
---\\ Tâche planifiée. (7)
SUPPRIMÉ tâche: [AutoPico Daily Restart] [C:\Program Files\KMSpico\AutoPico.exe (Not File) ] =>HackTool.KMSpico
SUPPRIMÉ tâche: [Dregol tone] [C:\ProgramData\{4A74A2B7-1AF6-7331-AB70-03B37BF2D03D}\1.17.0.1\fiber.js 433a2f50726f6772616d446174612f7b34413734413242372d314146362d373333312d414237302d3033423337424632443033447d2f312e31372e302e312f746f6e652e646c6c 687474703a2f2f73616f2e72657164726 (Not File) ] =>PUP.Optional.Browser
SUPPRIMÉ tâche: [ParetoLogic Registration3] [C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\UUS3.dll RunUns (Not File) ] =>.Superfluous.Paretologic
SUPPRIMÉ tâche: [ParetoLogic Update Version3] [C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe (Not File) ] =>.Superfluous.Paretologic
SUPPRIMÉ tâche: [ParetoLogic Update Version3 Startup Task] [C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe (Not File) ] =>.Superfluous.Paretologic
SUPPRIMÉ tâche: [Run_dregol] [C:\Users\nonox88\AppData\Roaming\RUN_DR~1\UPDATE~1\UPDATE~1.EXE (Not File) ] =>PUP.Optional.RunDregol
SUPPRIMÉ tâche: [Selection Tools Update] [C:\Users\nonox88\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe (Not File) ] =>.Superfluous.Nosibay
---\\ Explorateur ( Dossiers, Fichiers ). (31)
DEPLACÉ fichier: C:\Program Files\KMSpico\AutoPico.exe [ - AutoPico] =>HackTool.KMSpico
DEPLACÉ fichier: C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe [Copyright (C) 2013 - Application de mise à jour] =>.Superfluous.Paretologic
DEPLACÉ fichier: C:\Windows\Tasks\ParetoLogic Registration3.job =>.Superfluous.Paretologic
DEPLACÉ fichier: C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job =>.Superfluous.Paretologic
DEPLACÉ fichier: C:\Windows\Tasks\ParetoLogic Update Version3.job =>.Superfluous.Paretologic
DEPLACÉ fichier: C:\END =>.Superfluous.Conduit
DEPLACÉ fichier: C:\Windows\Prefetch\PARETOLOGIC PC HEALTH ADVISOR-C1DD0BEB.pf =>.Superfluous.Paretologic
DEPLACÉ fichier: C:\Users\nonox88\Downloads\ParetoLogic PC Health Advisor_fr.exe [ParetoLogic Inc. - PC Health Advisor Installer] =>.Superfluous.Paretologic
DEPLACÉ fichier: C:\Windows\SECOH-QAD.exe =>HackTool.KMSpico
DEPLACÉ fichier: C:\Windows\AutoKMS\AutoKMS.exe [CODYQX4 - AutoKMS] =>HackTool.AutoKMS
DEPLACÉ fichier: C:\Windows\AutoKMS\AutoKMS.log =>HackTool.AutoKMS
DEPLACÉ fichier^: C:\Users\nonox88\AppData\Local\app =>PUP.Optional.CrossRider
DEPLACÉ fichier: C:\program files (x86)\common files\Tencent\qqdownload\130\bugreport_xf.exe =>.Superfluous.Tencent
DEPLACÉ fichier: C:\program files (x86)\common files\Tencent\qqdownload\130\tencentdl.exe [Tencent - 腾讯高速下载引擎] =>.Superfluous.Tencent
DEPLACÉ fichier: C:\Program Files\KMSpico\KMSELDI.exe [ - KMS GUI ELDI] =>HackTool.KMSpico
DEPLACÉ dossier: C:\Program Files (x86)\Hostify =>.Superfluous.CSDI
DEPLACÉ dossier: C:\Program Files\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier: C:\Program Files (x86)\Common Files\ParetoLogic =>.Superfluous.Paretologic
DEPLACÉ dossier: C:\Program Files (x86)\Common Files\Tencent =>.Superfluous.Tencent
DEPLACÉ dossier: C:\ProgramData\ParetoLogic =>.Superfluous.Paretologic
DEPLACÉ dossier: C:\ProgramData\Tencent =>.Superfluous.Tencent
DEPLACÉ dossier: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier: C:\WINDOWS\AutoKMS =>HackTool.AutoKMS
DEPLACÉ dossier: C:\Users\nonox88\AppData\Roaming\DriverCure =>.Superfluous.Paretologic
DEPLACÉ dossier: C:\Users\nonox88\AppData\Roaming\ParetoLogic =>.Superfluous.Paretologic
DEPLACÉ dossier: C:\Users\nonox88\AppData\Roaming\Store =>.Superfluous.Nosibay
DEPLACÉ dossier: C:\Users\nonox88\AppData\Roaming\Tencent =>.Superfluous.Tencent
DEPLACÉ dossier: C:\Users\nonox88\AppData\Local\CrashRpt =>.Superfluous.CrashReports
DEPLACÉ dossier: C:\Program Files (x86)\QuickSearch =>PUP.Optional.FastSearch
DEPLACÉ dossier: C:\ProgramData\TXQMPC =>.Superfluous.TXQMPC
DEPLACÉ dossier: C:\Users\nonox88\AppData\Local\Microsoft Toolkit =>HackTool.AutoKMS
---\\ Base de Registres ( Clés, Valeurs, Données ). (46)
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://www.dregol.com/results.php?f=4&q={searchTerms}&a=drg_ir_15_20&cd=2XzuyEtN2Y1L1Qzu0F0C0A0AtCyE[...]] [Dregol] =>PUP.Optional.Browser
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@qq.com/npAndroidAssistant [Tencent, Inc.] =>.Superfluous.Tencent
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [http://www.dregol.com/results.php?f=4&q={searchTerms}&a=drg_ir_15_20&cd=2XzuyEtN2Y1L1Qzu0F0C0A0AtCyEtB0ByBtDyDtD0A0FtByCtN0D0Tzu0StCtBtAtBtN1L2XzutAtFtCtDtFtBtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyC0AyEyE0AtCtA0FtGtDzytDtDtGyE0C0BzztGyEyCzz0FtGyBzz0CtD0CtB0CyDtCyE0C0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtC0CyDzyyEzytCtGyByD0E0CtGyE0Fzy0DtG0AyB0FzztGzytDtD0C0B0FtD0Dzz0DyD0A2QtN0A0LzuyE&cr=1489563797&ir=] =>PUP.Optional.Browser
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PCSpeedUp [C:\Program Files (x86)\Accelerer PC\PCSUNotifier.exe (Not File)] =>.Superfluous.PCSpeedUp
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Prt [C:\Users\nonox88\AppData\Local\TECHP-Browser\prtsvc.exe startup=1 (Not File)] =>PUP.Optional.BrowserAir
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3479429645-407056864-3191445915-1000\SOFTWARE\ImInstaller [] =>Toolbar.IncrediMail
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3479429645-407056864-3191445915-1000\SOFTWARE\ParetoLogic [] =>.Superfluous.Paretologic
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3479429645-407056864-3191445915-1000\SOFTWARE\Tencent [] =>.Superfluous.Tencent
SUPPRIMÉ clé*: HKEY_USERS\.DEFAULT\Software\Tencent [] =>.Superfluous.Tencent
SUPPRIMÉ clé: HKCU\Software\ImInstaller [] =>Toolbar.IncrediMail
SUPPRIMÉ clé: HKCU\Software\ParetoLogic [] =>.Superfluous.Paretologic
SUPPRIMÉ clé: HKCU\Software\Tencent [] =>.Superfluous.Tencent
SUPPRIMÉ clé*: HKCU\Software\AppDataLow\Software\adawarebp [] =>PUP.Optional.ToolbarCleaner
SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\buy.paretologic.com [] =>.Superfluous.Paretologic
SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\paretologic.com [] =>.Superfluous.Paretologic
SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\buy.paretologic.com [] =>.Superfluous.Paretologic
SUPPRIMÉ clé*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\paretologic.com [] =>.Superfluous.Paretologic
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1B5D5DBD-C857-4377-A755-06E50B4AC2B0} [C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3192 (Not File)] =>.Superfluous.Tencent
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{639B74F1-0594-432C-97C8-68C8C17A1E1D} [C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\Plugins\QQPCB1AndroidJmp (Not File)] =>.Superfluous.Tencent
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Tinstalls [] =>PUP.Optional.DesktopPlay
SUPPRIMÉ clé*: HKCU\Software\TeleCharger [] =>.Superfluous.Downloader
SUPPRIMÉ clé*: HKCU\Software\undefined [] =>.Superfluous.Downloader
SUPPRIMÉ clé*: HKCU\Software\ProductSetup [] =>Adware.InstallCore
SUPPRIMÉ clé*: HKLM\SOFTWARE\Wow6432Node\QuickSearch [] =>PUP.Optional.FastSearch
SUPPRIMÉ clé: HKLM\SOFTWARE\QuickSearch [] =>PUP.Optional.FastSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\f [f] =>PUP.Optional.Funmoods
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Selection Tools ["C:\Users\nonox88\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe" /winstartup (Not File)] =>.Superfluous.Nosibay
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\TheBrowser [] =>PUP.Optional.TheBrowser
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 [KMSpico v9.2.3] =>HackTool.KMSpico
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\ImInstaller [] =>Toolbar.IncrediMail
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\ParetoLogic [] =>.Superfluous.Paretologic
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Tencent [] =>.Superfluous.Tencent
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Tutorials [] =>PUP.Optional.AgenceExclusive
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\zdengine [] =>PUP.Optional.FastSearch
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Google Inc.] =>Heuristic.Suspect
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\5da059a482fd494db3f252126fbc3d5b [] =>Hijacker.Browser
SUPPRIMÉ valeur: HKLM64\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\\{9746ad1f-7f2a-4bc8-a61c-2f73d969472d} [C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\{9746ad1f-7f2a-4bc8-a61c-2f73d969472d}] =>Hijacker.Browser
SUPPRIMÉ valeur: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\mbot_fr_014010259 [] =>PUP.Optional.CrossRider
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{8244FC8D-5217-4DC1-8732-F83FDD726DC2} [C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe] =>.Superfluous.Tencent
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{B226CE7F-D0FF-4555-90AA-3B9DFBF3B6CE} [C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe] =>.Superfluous.Tencent
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{DF4F600C-8231-4AC8-BFB7-C633B45A1CDA} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{7AEF6092-A842-4FA5-B05C-7CC364229138} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{ECD15934-E67B-4EA0-AF67-19E6038B3E99} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{ED947B52-81DD-40BC-85FA-885C9B71D4A3} [C:\Program Files\KMSpico\AutoPico.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{6F0CE4B4-E5A1-4B06-B781-B627B5C93A3F} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico
SUPPRIMÉ valeur: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{6BE4073E-EF2A-48ED-A4AB-3802BACAF062} [C:\Program Files\KMSpico\KMSELDI.exe] =>HackTool.KMSpico
---\\ Récapitulatif des éléments trouvés sur votre station. (27)
https://www.nicolascoolman.fr/?p=347 =>Adware.BrowseFox
https://www.anti-malware.top/2016/05/02/superfluous-ironsourceltd/ =>.Superfluous.IronSourceLtd
https://www.nicolascoolman.fr/?p=989 =>HackTool.KMSpico
https://www.nicolascoolman.fr/?p=546 =>PUP.Optional.Browser
https://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Paretologic
https://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.RunDregol
https://www.anti-malware.top/2016/05/03/superfluous-nosibay/ =>.Superfluous.Nosibay
https://www.nicolascoolman.fr/?p=210 =>.Superfluous.Conduit
https://www.anti-malware.top/2016/05/04/hacktool-autokms/ =>HackTool.AutoKMS
https://www.anti-malware.top/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider
https://www.nicolascoolman.fr/?p=368 =>.Superfluous.Tencent
https://www.anti-malware.top/2016/05/03/superfluous-csdi/ =>.Superfluous.CSDI
https://www.nicolascoolman.fr/?p=5145 =>.Superfluous.CrashReports
https://www.anti-malware.top/2016/07/05/pup-optional-fastsearch/ =>PUP.Optional.FastSearch
https://www.nicolascoolman.fr/?p=5145 =>.Superfluous.TXQMPC
https://www.nicolascoolman.fr/?p=1255 =>.Superfluous.PCSpeedUp
https://www.nicolascoolman.fr/pup-optional-browserair/ =>PUP.Optional.BrowserAir
https://www.nicolascoolman.fr/?p=5143 =>Toolbar.IncrediMail
https://www.nicolascoolman.fr/?p=712 =>PUP.Optional.ToolbarCleaner
https://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DesktopPlay
https://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Downloader
https://www.anti-malware.top/2016/04/22/adware-installcore/ =>Adware.InstallCore
https://www.nicolascoolman.fr/?p=362 =>PUP.Optional.Funmoods
https://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.TheBrowser
https://www.nicolascoolman.fr/?p=122 =>PUP.Optional.AgenceExclusive
https://www.anti-malware.top/2016/04/22/heuristic-suspect/ =>Heuristic.Suspect
https://www.nicolascoolman.fr/hijacker-browser/ =>Hijacker.Browser
---\\ Nettoyage Additionnel. (16)
~ Suppression des Clés de registre Tracing. (16)
~ Suppression des anciens rapports ZHPCleaner. (0)
---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Opera Software)
~ Le système a été redémarré.
---\\ Statistiques
~ Items scannés : 1327
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 86
~ End of clean in 00h01mn28s
~====================
ZHPCleaner-[R]-31072016-12_59_06.txt
ZHPCleaner-[S]-31072016-12_51_18.txt