~ ZHPCleaner v2016.9.21.138 by Nicolas Coolman (2016/09/21)
~ Run by reda2014 (Administrator) (22/09/2016 15:24:24)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version :
~ Type : Nettoyer
~ Report : C:\Documents and Settings\reda2014\Bureau\ZHPCleaner.txt
~ Quarantine : C:\Documents and Settings\reda2014\Application Data\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
Windows XP, 32-bit Service Pack 3 (Build 2600)


---\\ Service. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Navigateur internet. (3)
TROUVÉ PARAMS: ProxyServer [http=;ftp=;https=;] (User.Validation)
SUPPRIMÉ donnée: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings [Bad : Port=A0B25] =>Hijacker.Proxy
SUPPRIMÉ donnée: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings [Bad : Port=A0B25] =>Hijacker.Proxy


---\\ Fichier hôte. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Tâche planifiée. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\ Explorateur ( Dossiers, Fichiers ). (10)
DEPLACÉ fichier: C:\Documents and Settings\reda2014\Application Data\Microsoft\Internet Explorer\Quick Launch\Mobogenie3.lnk [Bad : C:\Program Files\Mobogenie3\Mobogenie.exe] =>PUP.Optional.Mobogenie
DEPLACÉ fichier: C:\Documents and Settings\reda2014\Application Data\~svnbmca.exe =>PUP.Optional.Pirrit
DEPLACÉ fichier: C:\WINDOWS.1\Installer\{4646332D-5350-006A-76A7-A758B70C1D00}\ToolbarIcon.exe =>PUP.Optional.BrowserTabSearch
DEPLACÉ fichier*: C:\WINDOWS.1\Installer\{434C4D2D-5350-006A-76A7-A758B70C1D00}\ToolbarIcon.exe =>PUP.Optional.BrowserTabSearch
DEPLACÉ dossier: C:\Program Files\ec4fc045-6740-45b8-a602-75d41adc5272 =>PUP.Optional.CrossRider
DEPLACÉ dossier: C:\Program Files\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier: C:\Documents and Settings\All Users.WINDOWS.1\Menu Démarrer\Programmes\KMSpico =>HackTool.KMSpico
DEPLACÉ dossier: C:\Documents and Settings\reda2014\Application Data\Mobogenie =>PUP.Optional.Mobogenie
DEPLACÉ dossier: C:\Documents and Settings\reda2014\Mes documents\Mobogenie =>PUP.Optional.Mobogenie
DEPLACÉ dossier: C:\Documents and Settings\reda2014\Local Settings\Application Data\CrashRpt =>.Superfluous.CrashReports


---\\ Base de Registres ( Clés, Valeurs, Données ). (31)
REMPLACÉ donnée: HKLM\...\FlashPeak SlimBrowser\Shell\open\Command\\C:\Program Files\SlimBrowser\sbframe.exe http://www.istartsurf.com/?type=sc&ts=1433767634&z=33d7240f0fce4e17fc50a8eg0z2cecem6q5mbqcc2c&from=obw&uid=HDS722516VLSA80_VN6DTECDELB2XAELB2XAX =>PUP.Optional.IsStart
REMPLACÉ donnée: HKLM\...\Maxthon.exe\Shell\open\Command\\"C:\Program Files\Maxthon2\Maxthon.exe" http://www.istartsurf.com/?type=sc&ts=1433767634&z=33d7240f0fce4e17fc50a8eg0z2cecem6q5mbqcc2c&from=obw&uid=HDS722516VLSA80_VN6DTECDELB2XAELB2XAX =>PUP.Optional.IsStart
REMPLACÉ donnée: HKLM\...\sbframe.exe\Shell\open\Command\\"C:\Program Files\SlimBrowser\sbframe.exe" http://www.istartsurf.com/?type=sc&ts=1433767634&z=33d7240f0fce4e17fc50a8eg0z2cecem6q5mbqcc2c&from=obw&uid=HDS722516VLSA80_VN6DTECDELB2XAELB2XAX =>PUP.Optional.IsStart
SUPPRIMÉ donnée: HKLM\SOFTWARE\Classes\.html\\Default [Bad : SlimBrowserHtml] =>.Superfluous.SpeedBrowser
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ByteFence ["C:\Program Files\ByteFence\ByteFence.exe" /a (Not File)] =>.Superfluous.ByteFence
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{71BC2742-FD4B-4185-A42F-E47D87FFB159} [C:\Program Files\Plus-HD-9.5 (Not File)] =>PUP.Optional.CrossRider
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CB17F1B8-C319-4F59-91BD-3767EA32CB} [C:\Program Files\Plus-HD-9.5 (Not File)] =>PUP.Optional.CrossRider
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E119AF9C-401F-4D53-94A4-8482591BA2E} [C:\Program Files\Plus-HD-9.5 (Not File)] =>PUP.Optional.CrossRider
SUPPRIMÉ clé*: HKCU\Software\undefined [] =>.Superfluous.Downloader
SUPPRIMÉ clé*: HKLM\SOFTWARE\Secure [] =>.Superfluous.SecurePCCleaner
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} [secman] =>PUP.Optional.Camec
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\AskTBar.SettingsPlugin [Ask Toolbar Settings Plugin] =>Toolbar.AsktBar
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\AskTBar.SettingsPlugin.1 [Ask Toolbar Settings Plugin] =>Toolbar.AsktBar
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\MobogenieMPKFile [] =>PUP.Optional.Mobogenie
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SafePCRepair_89.PseudoTransparentPlugin [Pseudo Transparent Plugin] =>PUP.Optional.SafePCRepair
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SafePCRepair_89.PseudoTransparentPlugin.1 [Pseudo Transparent Plugin] =>PUP.Optional.SafePCRepair
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SafePCRepair_89.Radio [] =>PUP.Optional.SafePCRepair
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SafePCRepair_89.Radio.1 [] =>PUP.Optional.SafePCRepair
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SafePCRepair_89.SettingsPlugin [] =>PUP.Optional.SafePCRepair
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SafePCRepair_89.SettingsPlugin.1 [] =>PUP.Optional.SafePCRepair
SUPPRIMÉ clé*: HKLM\Software\Classes\Installer\Products\D23364640535A600677A7A857BC0D100 [Search App by Ask] =>PUP.Optional.BrowserTabSearch
SUPPRIMÉ clé*: HKLM\Software\Classes\Installer\Products\D2D4C4340535A600677A7A857BC0D100 [Search App by Ask] =>PUP.Optional.BrowserTabSearch
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update trolatunt [] =>PUP.Optional.Trolatunt
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util trolatunt [] =>PUP.Optional.Trolatunt
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1 [KMSpico] =>HackTool.KMSpico
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Google Inc.] =>Heuristic.Suspect
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\My Program_is1 [] =>.Superfluous.MyProgram
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SafePCRepair [] =>PUP.Optional.SafePCRepair
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SafePCRepair_89bar Uninstall Internet Explorer [] =>PUP.Optional.SafePCRepair
SUPPRIMÉ clé*: HKLM\Software\Classes\Installer\Features\D23364640535A600677A7A857BC0D100 [] =>PUP.Optional.BrowserTabSearch
SUPPRIMÉ clé*: HKLM\Software\Classes\Installer\Features\D2D4C4340535A600677A7A857BC0D100 [] =>PUP.Optional.BrowserTabSearch


---\\ Récapitulatif des éléments trouvés sur votre station. (18)
https://www.anti-malware.top/2016/06/09/pirate-de-serveur-proxy-hijacker-proxy/ =>Hijacker.Proxy
https://www.nicolascoolman.com/fr/pup-mobogenie/ =>PUP.Optional.Mobogenie
https://www.nicolascoolman.com/fr/pup-pirritsuggestor/ =>PUP.Optional.Pirrit
https://www.nicolascoolman.com/fr/pup-browsertabsearch/ =>PUP.Optional.BrowserTabSearch
https://www.anti-malware.top/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider
https://www.anti-malware.top/2016/09/08/hacktool-kmspico/ =>HackTool.KMSpico
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.CrashReports
https://www.nicolascoolman.com/fr/pup-isstart/ =>PUP.Optional.IsStart
https://www.anti-malware.top/2016/07/28/superfluousspeedbrowser/ =>.Superfluous.SpeedBrowser
https://www.anti-malware.top/2016/04/29/superfluous-bytefence/ =>.Superfluous.ByteFence
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Downloader
https://www.anti-malware.top/2016/06/08/superfluous-securepccleaner/ =>.Superfluous.SecurePCCleaner
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.Camec
https://www.nicolascoolman.com/fr/?p=5143 =>Toolbar.AsktBar
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.SafePCRepair
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.Trolatunt
https://www.anti-malware.top/2016/04/22/heuristic-suspect/ =>Heuristic.Suspect
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.MyProgram


---\\ Nettoyage Additionnel. (16)
~ Suppression des Clés de registre Tracing. (16)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Opera Software)


---\\ Statistiques
~ Items scannés : 767
~ Items trouvés : 1
~ Items annulés : 0
~ Items réparés : 43


~ End of clean in 00h01mn10s
~====================
ZHPCleaner-[R]-22092016-15_25_34.txt
ZHPCleaner-[S]-22092016-15_21_46.txt