Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPCleaner v2017.1.7.4 by Nicolas Coolman (2017/01/07)
~ Run by RAMSKINDT (Administrator) (07/01/2017 20:45:00)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Documents and Settings\RAMSKINDT\Bureau\ZHPCleaner.txt
~ Quarantine : C:\Documents and Settings\RAMSKINDT\Application Data\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
Windows XP, 32-bit Service Pack 3 (Build 2600)
---\\ Service. (0)
~ Aucun élément malicieux ou superflu trouvé.
---\\ Navigateur internet. (102)
SUPPRIMÉ: [5imvjbow.default] - user_pref("DataMngr.Updater.Enabled", "true"); =>PUP.Optional.Datamngr
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.admin", false); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.aflt", "babsst"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.autoRvrt", "false"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.bbDpng", "20"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.cntry", "FR"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.dfltLng", "en"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.excTlbr", false); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.ffxUnstlRst", true); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.hdrMd5", "5B1E8BE48D7CEC66E204BC0544A486BF"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.id", "941e49310000000000000016e355a63b"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.instlDay", "15817"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.instlRef", "sst"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.lastVrsnTs", "1.8.16.1617:38:07"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.newTab", false); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.prdct", "delta"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.prtnrId", "delta"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.rvrt", "false"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.sg", "azb"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.smplGrp", "none"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.tlbrId", "base"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.tlbrSrchUrl", ""); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.vrsn", "1.8.16.16"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.vrsnTs", "1.8.16.1617:38:07"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.vrsni", "1.8.16.16"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.actvtyRptTime", "1363441638147"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.admin", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.aflt", "orgnl"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.afterInstallRpt", "sent"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.cntry", "FR"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.dfltLng", "EN"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.dfltSrch", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.dfltsrch", "false"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.did", "10665"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.envrmnt", "production"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.excTlbr", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.hdrMd5", "EB663AE0F0C6196C94A58594BCAFBB98"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.hmpg", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.hrdid", "941e49310000000000000016e355a63b"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.id", "941e49310000000000000016e355a63b"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.installerproductid", "26"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.instlDay", "15682"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.instlRef", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.isDcmntCmplt", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.isdcmntcmplt", "false"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.keywordurl", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1421:20:40"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.mntrvrsn", "1.2.0"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.newTab", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.newtab", "false"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.newtaburl", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.noFFXTlbr", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.ppd", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.prdct", "incredibar"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.productid", "26"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.prtnrId", "Incredibar"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.sg", "none"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.smplGrp", "none"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.srch", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.srchprvdr", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.tlbrId", "base"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.tlbrSrchUrl", "http://mystart.Incredibar.com/?a=6R8NE7hfJH&loc=IB_T[...] =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.upn2", "6R8NE7hfJH"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.upn2n", "92825537754833781"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.vrsn", "1.5.11.14"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.vrsnTs", "1.5.11.1421:20:40"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.vrsni", "1.5.11.14"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.aflt", "orgnl"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.dfltLng", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.did", "10665"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.excTlbr", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.id", "941e49310000000000000016e355a63b"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.installerproductid", "26"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.instlDay", "15682"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.instlRef", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.ms_url_id", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.newTab", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.ppd", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.prdct", "incredibar"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.productid", "26"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.prtnrId", "Incredibar"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.smplGrp", "none"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.tlbrId", "base"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.tlbrSrchUrl", "http://mystart.Incredibar.com/?a=6R8NE7hfJH&loc=IB[...] =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.upn2", "6R8NE7hfJH"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.upn2n", "92825537754833781"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.vrsn", "1.5.11.14"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1421:20:40"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.vrsni", "1.5.11.14"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.affiliate_id", "1401"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.firstrun", "false"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.log_send_info", "false"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.no_trace", "false"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.server_current_mapping_version", "0.21145"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.trace_log", "1366645042620 - onFlagInfoReceived - No user current mappin[...] =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.unique_id", "3BBAD608F35BF1B057559BA1DF5196C2"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.user_current_mapping_version", "0"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.version", "1.26"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_product_name", "IB Updater"); =>PUP.Optional.InstallBrain
REMPLACÉ Google Chrome Preferences: "http://resources.incredibar-search.com/" =>PUP.Optional.IncrediBar
REMPLACÉ Google Chrome Preferences: "http://www.incredibar-search.com/" =>PUP.Optional.IncrediBar
---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (20)
---\\ Tâche planifiée. (0)
~ Aucun élément malicieux ou superflu trouvé.
---\\ Explorateur ( Dossiers, Fichiers ). (49)
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Application Data\Mozilla\Firefox\Profiles\5imvjbow.default\searchplugins\babylon.xml =>PUP.Optional.Babylon
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Application Data\Mozilla\Firefox\Profiles\5imvjbow.default\searchplugins\MyStart Search.xml =>PUP.Optional.VMNToolbar
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Application Data\Mozilla\Firefox\Profiles\5imvjbow.default\searchplugins\Search_Results.xml =>PUP.Optional.SearchResults
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage =>Hijacker.Browser
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_niogeckbkdcabhnapjbkeiklablhjoca_0.localstorage-journal =>PUP.Optional.IncrediBar
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_niogeckbkdcabhnapjbkeiklablhjoca_0.localstorage =>PUP.Optional.IncrediBar
DEPLACÉ fichier: C:\WINDOWS\Prefetch\SWEETIM.EXE-114201E6.pf =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\WINDOWS\Prefetch\SWEETPACKSUPDATEMANAGER.EXE-2DA5B22D.pf =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\WINDOWS\Installer\wix{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}.SchedServiceConfig.rmi =>.Superfluous.Empty
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Application Data\Bubble Dock.boostrap.log =>PUP.Optional.BubbleDock
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Application Data\Bubble Dock.installation.log =>PUP.Optional.BubbleDock
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\Install_BubbleDock.exe [Nosibay - Bubble Dock installer] =>.Superfluous.Nosibay
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\Messenger-full-installer.exe [Rentabiliweb - Rencontres Hard installator] =>.Superfluous.Rentabiliweb
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\mgsqlite3.dll [SweetIM Technologies Ltd. - SQLite DLL] =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\Shortcut_BundleSweetIMSetup.exe [SweetIM Technologies Ltd. - SweetIM Installer by SweetPacks] =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\SIMEEIInstaller.exe [SweetIM Technologies Lt - This installer] =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\tbedrs.dll [Conduit Ltd. - Conduit Toolbar] =>.Superfluous.Conduit
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\tbFile.dll [Conduit Ltd. - Conduit Toolbar] =>.Superfluous.Conduit
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\OfferID14\chromeupdaterfull.exe [SweetIM Technologies Ltd. - SweetPacks Updater for Chrome] =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\OfferID11\chromeupdaterfull.exe [SweetIM Technologies Ltd. - SweetPacks Updater for Chrome] =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\9E0C5C92-BAB0-7891-85EA-9032D578F998\Latest\MyBabylonTB.exe [Delta - ] =>.Superfluous.DeltaSearch
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\bProtector Web Data =>PUP.Optional.BProtector
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\bProtectorPreferences =>PUP.Optional.BProtector
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_search.incredibar.com_0.localstorage =>PUP.Optional.IncrediBar
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_search.incredibar.com_0.localstorage-journal =>PUP.Optional.IncrediBar
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\BearShare.ico =>PUP.Optional.BearShare
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\BearShare_setup.exe [Musiclab, LLC - BearShare] =>PUP.Optional.BearShare
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\Bubble Dock.txt =>PUP.Optional.BubbleDock
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\iLivid.ini =>PUP.Optional.Bandoo
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\LBubble Dock.txt =>PUP.Optional.BubbleDock
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\NAG_BearShare.ini =>PUP.Optional.BearShare
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\qtsingleapp-iLivid-42b6-0-lockfile =>PUP.Optional.Bandoo
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\uninst1.exe [Babylon Ltd. - Uninstaller Application] =>.Superfluous.DeltaSearch
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\wajam_install.exe [Wajam – Great minds search alike. - ] =>PUP.Optional.Wajam
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\9E0C5C92-BAB0-7891-85EA-9032D578F998\Babylon.dat =>PUP.Optional.Babylon
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde =>Hijacker.Browser [http://img.delta-search.com/ext/chrome/update/upda]
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn =>PUP.Optional.SweetIM
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg =>PUP.Optional.SweetIM
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp =>Hijacker.Browser [http://www.wajam.com/update/Chrome/chrome_addon_up]
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca =>PUP.Optional.IncrediBar
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj =>Hijacker.Browser [http://www.sweetim.com/simgcbar/GCToolbarUpdate.xm]
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Application Data\Babylon =>PUP.Optional.Babylon
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Application Data\Nosibay =>PUP.Optional.SPointer
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Application Data\PriceGong =>PUP.Optional.PriceGong
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\PackageAware =>PUP.Optional.BearShare
DEPLACÉ dossier: C:\DOCUME~1\RAMSKI~1\LOCALS~1\Temp\scoped_dir_1876_10056 =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\DOCUME~1\RAMSKI~1\LOCALS~1\Temp\scoped_dir_1876_23727 =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\DOCUME~1\RAMSKI~1\LOCALS~1\Temp\scoped_dir_232_10718 =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Conduit =>.Superfluous.Conduit
---\\ Base de Registres ( Clés, Valeurs, Données ). (20)
SUPPRIMÉ clé*: HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn [] =>PUP.Optional.SweetIM
SUPPRIMÉ clé*: HKLM\SOFTWARE\Google\Chrome\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg [] =>PUP.Optional.SweetIM
SUPPRIMÉ clé*: HKLM\SOFTWARE\Google\Chrome\Extensions\niogeckbkdcabhnapjbkeiklablhjoca [] =>PUP.Optional.IncrediBar
SUPPRIMÉ clé*: HKLM\Software\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd [C:\Program Files\IB Updater\source.crx (Not File)] =>PUP.Optional.IncrediBar
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1223148504-3943569200-2253303663-1006\SOFTWARE\BearShare [] =>PUP.Optional.BearShare
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1223148504-3943569200-2253303663-1006\SOFTWARE\Smartbar [] =>PUP.Optional.QuickShare
SUPPRIMÉ clé: HKCU\Software\BearShare [] =>PUP.Optional.BearShare
SUPPRIMÉ clé: HKCU\Software\Smartbar [] =>PUP.Optional.QuickShare
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\akamaihd.net [735] =>.Superfluous.AkamaiHD
SUPPRIMÉ clé*: HKLM\SOFTWARE\Secure [] =>.Superfluous.SecurePCCleaner
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\adbanner.adbanner [adbanner Class] =>Adware.adBanner
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\adbanner.adbanner.1 [adbanner Class] =>Adware.adBanner
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{89643D21-7B2A-11d1-8271-00A0C91F9CA0} [adbanner Class] =>Adware.adBanner
SUPPRIMÉ clé*: HKLM\SOFTWARE\BearShareSRTB [] =>PUP.Optional.BearShare
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Google Inc.] =>Heuristic.Suspect
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15a0413e-9f45-4d45-9a75-2c20b15b5b51} [C:\PROGRA~1\BEARSH~1\Mediabar\Datamngr\SRTOOL~1 (Not File)] =>PUP.Optional.Datamngr
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f34c9277-6577-4dff-b2d7-7d58092f272f} [C:\PROGRA~1\SEARCH~1\Datamngr\SRTOOL~1 (Not File)] =>PUP.Optional.Datamngr
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\40DAEEDBE41565249BFF494D3A907441 [C:\DOCUME~1\RAMSKI~1\LOCALS~1\Temp\SetupDataMngr_BearShare.exe (Not File)] =>PUP.Optional.BearShare
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B5F4C7292C4A5341B36EF39F19AF2EB [C:\Program Files\Adobe\Acrobat 7.0\Reader\WebSearch\] =>PUP.Optional.SimpleSearches
SUPPRIMÉ valeur: HKLM\SOFTWARE\Mozilla\Firefox\Extensions\\{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052} [C:\Program Files\IB Updater\Firefox] =>PUP.Optional.InstallBrain
---\\ Récapitulatif des éléments trouvés sur votre station. (30)
https://www.nicolascoolman.com/fr/pup-datamngr/ =>PUP.Optional.Datamngr
https://www.nicolascoolman.com/fr/toolbar-deltasearch/ =>.Superfluous.DeltaSearch
https://www.nicolascoolman.com/fr/adware-incredibar/ =>PUP.Optional.IncrediBar
https://www.anti-malware.top/2016/05/07/pup-optional-wajam/ =>PUP.Optional.Wajam
https://www.nicolascoolman.com/fr/adware-installbrain/ =>PUP.Optional.InstallBrain
https://www.nicolascoolman.com/fr/pup-babylon/ =>PUP.Optional.Babylon
https://www.nicolascoolman.com/fr/spyware-vmntoolbar/ =>PUP.Optional.VMNToolbar
https://www.nicolascoolman.com/fr/pup-searchresults/ =>PUP.Optional.SearchResults
https://www.nicolascoolman.com/fr/hijacker-browser/ =>Hijacker.Browser
https://www.nicolascoolman.com/fr/pup-sweetim/ =>PUP.Optional.SweetIM
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Empty
https://www.nicolascoolman.com/fr/pup-bubbledock/ =>PUP.Optional.BubbleDock
https://www.anti-malware.top/2016/05/03/superfluous-nosibay/ =>.Superfluous.Nosibay
https://www.anti-malware.top/2016/05/02/superfluous-rentabiliweb/ =>.Superfluous.Rentabiliweb
https://www.nicolascoolman.com/fr/toolbar-conduit/ =>.Superfluous.Conduit
https://www.anti-malware.top/2016/04/30/pup-optional-bprotector/ =>PUP.Optional.BProtector
https://www.nicolascoolman.com/fr/pup-bearshare/ =>PUP.Optional.BearShare
https://www.nicolascoolman.com/fr/adware-bandoo/ =>PUP.Optional.Bandoo
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>Hijacker.Browser [http://img.delta-search.com/ext/chrome/update/upda]
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>Hijacker.Browser [http://www.wajam.com/update/Chrome/chrome_addon_up]
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>Hijacker.Browser [http://www.sweetim.com/simgcbar/GCToolbarUpdate.xm]
https://www.nicolascoolman.com/fr/adware-spointer/ =>PUP.Optional.SPointer
https://www.nicolascoolman.com/fr/adware-pricegong/ =>PUP.Optional.PriceGong
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Temporary.Steam
https://www.nicolascoolman.com/fr/pup-quickshare/ =>PUP.Optional.QuickShare
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.AkamaiHD
https://www.anti-malware.top/2016/06/08/superfluous-securepccleaner/ =>.Superfluous.SecurePCCleaner
https://nicolascoolman.eu/2016/12/31/adware-adbanner/ =>Adware.adBanner
https://www.anti-malware.top/2016/04/22/heuristic-suspect/ =>Heuristic.Suspect
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.SimpleSearches
---\\ Nettoyage Additionnel. (17)
~ Suppression des Clés de registre Tracing. (17)
~ Suppression des anciens rapports ZHPCleaner. (0)
---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Opera Software)
---\\ Statistiques
~ Items scannés : 1102
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 179
~ End of clean in 00h02mn17s
~====================
ZHPCleaner-[R]-07012017-20_47_17.txt
ZHPCleaner-[S]-07012017-20_43_17.txt
~ Run by RAMSKINDT (Administrator) (07/01/2017 20:45:00)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Documents and Settings\RAMSKINDT\Bureau\ZHPCleaner.txt
~ Quarantine : C:\Documents and Settings\RAMSKINDT\Application Data\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
Windows XP, 32-bit Service Pack 3 (Build 2600)
---\\ Service. (0)
~ Aucun élément malicieux ou superflu trouvé.
---\\ Navigateur internet. (102)
SUPPRIMÉ: [5imvjbow.default] - user_pref("DataMngr.Updater.Enabled", "true"); =>PUP.Optional.Datamngr
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.admin", false); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.aflt", "babsst"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.autoRvrt", "false"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.bbDpng", "20"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.cntry", "FR"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.dfltLng", "en"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.excTlbr", false); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.ffxUnstlRst", true); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.hdrMd5", "5B1E8BE48D7CEC66E204BC0544A486BF"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.id", "941e49310000000000000016e355a63b"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.instlDay", "15817"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.instlRef", "sst"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.lastVrsnTs", "1.8.16.1617:38:07"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.newTab", false); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.prdct", "delta"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.prtnrId", "delta"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.rvrt", "false"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.sg", "azb"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.smplGrp", "none"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.tlbrId", "base"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.tlbrSrchUrl", ""); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.vrsn", "1.8.16.16"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.vrsnTs", "1.8.16.1617:38:07"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.delta.vrsni", "1.8.16.16"); =>.Superfluous.DeltaSearch
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.actvtyRptTime", "1363441638147"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.admin", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.aflt", "orgnl"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.afterInstallRpt", "sent"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.cntry", "FR"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.dfltLng", "EN"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.dfltSrch", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.dfltsrch", "false"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.did", "10665"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.envrmnt", "production"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.excTlbr", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.hdrMd5", "EB663AE0F0C6196C94A58594BCAFBB98"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.hmpg", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.hrdid", "941e49310000000000000016e355a63b"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.id", "941e49310000000000000016e355a63b"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.installerproductid", "26"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.instlDay", "15682"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.instlRef", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.isDcmntCmplt", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.isdcmntcmplt", "false"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.keywordurl", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1421:20:40"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.mntrvrsn", "1.2.0"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.newTab", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.newtab", "false"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.newtaburl", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.noFFXTlbr", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.ppd", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.prdct", "incredibar"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.productid", "26"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.prtnrId", "Incredibar"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.sg", "none"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.smplGrp", "none"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.srch", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.srchprvdr", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.tlbrId", "base"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.tlbrSrchUrl", "http://mystart.Incredibar.com/?a=6R8NE7hfJH&loc=IB_T[...] =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.upn2", "6R8NE7hfJH"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.upn2n", "92825537754833781"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.vrsn", "1.5.11.14"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.vrsnTs", "1.5.11.1421:20:40"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar.vrsni", "1.5.11.14"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.aflt", "orgnl"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.dfltLng", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.did", "10665"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.excTlbr", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.id", "941e49310000000000000016e355a63b"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.installerproductid", "26"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.instlDay", "15682"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.instlRef", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.ms_url_id", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.newTab", false); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.ppd", ""); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.prdct", "incredibar"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.productid", "26"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.prtnrId", "Incredibar"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.smplGrp", "none"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.tlbrId", "base"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.tlbrSrchUrl", "http://mystart.Incredibar.com/?a=6R8NE7hfJH&loc=IB[...] =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.upn2", "6R8NE7hfJH"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.upn2n", "92825537754833781"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.vrsn", "1.5.11.14"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1421:20:40"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.incredibar_i.vrsni", "1.5.11.14"); =>PUP.Optional.IncrediBar
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.affiliate_id", "1401"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.firstrun", "false"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.log_send_info", "false"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.no_trace", "false"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.server_current_mapping_version", "0.21145"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.trace_log", "1366645042620 - onFlagInfoReceived - No user current mappin[...] =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.unique_id", "3BBAD608F35BF1B057559BA1DF5196C2"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.user_current_mapping_version", "0"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("extensions.wajam.version", "1.26"); =>PUP.Optional.Wajam
SUPPRIMÉ: [5imvjbow.default] - user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_product_name", "IB Updater"); =>PUP.Optional.InstallBrain
REMPLACÉ Google Chrome Preferences: "http://resources.incredibar-search.com/" =>PUP.Optional.IncrediBar
REMPLACÉ Google Chrome Preferences: "http://www.incredibar-search.com/" =>PUP.Optional.IncrediBar
---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (20)
---\\ Tâche planifiée. (0)
~ Aucun élément malicieux ou superflu trouvé.
---\\ Explorateur ( Dossiers, Fichiers ). (49)
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Application Data\Mozilla\Firefox\Profiles\5imvjbow.default\searchplugins\babylon.xml =>PUP.Optional.Babylon
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Application Data\Mozilla\Firefox\Profiles\5imvjbow.default\searchplugins\MyStart Search.xml =>PUP.Optional.VMNToolbar
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Application Data\Mozilla\Firefox\Profiles\5imvjbow.default\searchplugins\Search_Results.xml =>PUP.Optional.SearchResults
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage =>Hijacker.Browser
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_niogeckbkdcabhnapjbkeiklablhjoca_0.localstorage-journal =>PUP.Optional.IncrediBar
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_niogeckbkdcabhnapjbkeiklablhjoca_0.localstorage =>PUP.Optional.IncrediBar
DEPLACÉ fichier: C:\WINDOWS\Prefetch\SWEETIM.EXE-114201E6.pf =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\WINDOWS\Prefetch\SWEETPACKSUPDATEMANAGER.EXE-2DA5B22D.pf =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\WINDOWS\Installer\wix{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}.SchedServiceConfig.rmi =>.Superfluous.Empty
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Application Data\Bubble Dock.boostrap.log =>PUP.Optional.BubbleDock
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Application Data\Bubble Dock.installation.log =>PUP.Optional.BubbleDock
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\Install_BubbleDock.exe [Nosibay - Bubble Dock installer] =>.Superfluous.Nosibay
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\Messenger-full-installer.exe [Rentabiliweb - Rencontres Hard installator] =>.Superfluous.Rentabiliweb
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\mgsqlite3.dll [SweetIM Technologies Ltd. - SQLite DLL] =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\Shortcut_BundleSweetIMSetup.exe [SweetIM Technologies Ltd. - SweetIM Installer by SweetPacks] =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\SIMEEIInstaller.exe [SweetIM Technologies Lt - This installer] =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\tbedrs.dll [Conduit Ltd. - Conduit Toolbar] =>.Superfluous.Conduit
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\tbFile.dll [Conduit Ltd. - Conduit Toolbar] =>.Superfluous.Conduit
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\OfferID14\chromeupdaterfull.exe [SweetIM Technologies Ltd. - SweetPacks Updater for Chrome] =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\OfferID11\chromeupdaterfull.exe [SweetIM Technologies Ltd. - SweetPacks Updater for Chrome] =>PUP.Optional.SweetIM
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\9E0C5C92-BAB0-7891-85EA-9032D578F998\Latest\MyBabylonTB.exe [Delta - ] =>.Superfluous.DeltaSearch
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\bProtector Web Data =>PUP.Optional.BProtector
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\bProtectorPreferences =>PUP.Optional.BProtector
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_search.incredibar.com_0.localstorage =>PUP.Optional.IncrediBar
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_search.incredibar.com_0.localstorage-journal =>PUP.Optional.IncrediBar
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\BearShare.ico =>PUP.Optional.BearShare
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\BearShare_setup.exe [Musiclab, LLC - BearShare] =>PUP.Optional.BearShare
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\Bubble Dock.txt =>PUP.Optional.BubbleDock
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\iLivid.ini =>PUP.Optional.Bandoo
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\LBubble Dock.txt =>PUP.Optional.BubbleDock
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\NAG_BearShare.ini =>PUP.Optional.BearShare
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\qtsingleapp-iLivid-42b6-0-lockfile =>PUP.Optional.Bandoo
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\uninst1.exe [Babylon Ltd. - Uninstaller Application] =>.Superfluous.DeltaSearch
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\wajam_install.exe [Wajam – Great minds search alike. - ] =>PUP.Optional.Wajam
DEPLACÉ fichier: C:\Documents and Settings\RAMSKINDT\Local Settings\Temp\9E0C5C92-BAB0-7891-85EA-9032D578F998\Babylon.dat =>PUP.Optional.Babylon
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde =>Hijacker.Browser [http://img.delta-search.com/ext/chrome/update/upda]
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn =>PUP.Optional.SweetIM
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg =>PUP.Optional.SweetIM
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp =>Hijacker.Browser [http://www.wajam.com/update/Chrome/chrome_addon_up]
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca =>PUP.Optional.IncrediBar
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj =>Hijacker.Browser [http://www.sweetim.com/simgcbar/GCToolbarUpdate.xm]
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Application Data\Babylon =>PUP.Optional.Babylon
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Application Data\Nosibay =>PUP.Optional.SPointer
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Application Data\PriceGong =>PUP.Optional.PriceGong
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\PackageAware =>PUP.Optional.BearShare
DEPLACÉ dossier: C:\DOCUME~1\RAMSKI~1\LOCALS~1\Temp\scoped_dir_1876_10056 =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\DOCUME~1\RAMSKI~1\LOCALS~1\Temp\scoped_dir_1876_23727 =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\DOCUME~1\RAMSKI~1\LOCALS~1\Temp\scoped_dir_232_10718 =>.Superfluous.Temporary.Steam
DEPLACÉ dossier: C:\Documents and Settings\RAMSKINDT\Local Settings\Application Data\Conduit =>.Superfluous.Conduit
---\\ Base de Registres ( Clés, Valeurs, Données ). (20)
SUPPRIMÉ clé*: HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn [] =>PUP.Optional.SweetIM
SUPPRIMÉ clé*: HKLM\SOFTWARE\Google\Chrome\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg [] =>PUP.Optional.SweetIM
SUPPRIMÉ clé*: HKLM\SOFTWARE\Google\Chrome\Extensions\niogeckbkdcabhnapjbkeiklablhjoca [] =>PUP.Optional.IncrediBar
SUPPRIMÉ clé*: HKLM\Software\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd [C:\Program Files\IB Updater\source.crx (Not File)] =>PUP.Optional.IncrediBar
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1223148504-3943569200-2253303663-1006\SOFTWARE\BearShare [] =>PUP.Optional.BearShare
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-1223148504-3943569200-2253303663-1006\SOFTWARE\Smartbar [] =>PUP.Optional.QuickShare
SUPPRIMÉ clé: HKCU\Software\BearShare [] =>PUP.Optional.BearShare
SUPPRIMÉ clé: HKCU\Software\Smartbar [] =>PUP.Optional.QuickShare
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\akamaihd.net [735] =>.Superfluous.AkamaiHD
SUPPRIMÉ clé*: HKLM\SOFTWARE\Secure [] =>.Superfluous.SecurePCCleaner
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\adbanner.adbanner [adbanner Class] =>Adware.adBanner
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\adbanner.adbanner.1 [adbanner Class] =>Adware.adBanner
SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{89643D21-7B2A-11d1-8271-00A0C91F9CA0} [adbanner Class] =>Adware.adBanner
SUPPRIMÉ clé*: HKLM\SOFTWARE\BearShareSRTB [] =>PUP.Optional.BearShare
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Google Inc.] =>Heuristic.Suspect
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15a0413e-9f45-4d45-9a75-2c20b15b5b51} [C:\PROGRA~1\BEARSH~1\Mediabar\Datamngr\SRTOOL~1 (Not File)] =>PUP.Optional.Datamngr
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f34c9277-6577-4dff-b2d7-7d58092f272f} [C:\PROGRA~1\SEARCH~1\Datamngr\SRTOOL~1 (Not File)] =>PUP.Optional.Datamngr
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\40DAEEDBE41565249BFF494D3A907441 [C:\DOCUME~1\RAMSKI~1\LOCALS~1\Temp\SetupDataMngr_BearShare.exe (Not File)] =>PUP.Optional.BearShare
SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B5F4C7292C4A5341B36EF39F19AF2EB [C:\Program Files\Adobe\Acrobat 7.0\Reader\WebSearch\] =>PUP.Optional.SimpleSearches
SUPPRIMÉ valeur: HKLM\SOFTWARE\Mozilla\Firefox\Extensions\\{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052} [C:\Program Files\IB Updater\Firefox] =>PUP.Optional.InstallBrain
---\\ Récapitulatif des éléments trouvés sur votre station. (30)
https://www.nicolascoolman.com/fr/pup-datamngr/ =>PUP.Optional.Datamngr
https://www.nicolascoolman.com/fr/toolbar-deltasearch/ =>.Superfluous.DeltaSearch
https://www.nicolascoolman.com/fr/adware-incredibar/ =>PUP.Optional.IncrediBar
https://www.anti-malware.top/2016/05/07/pup-optional-wajam/ =>PUP.Optional.Wajam
https://www.nicolascoolman.com/fr/adware-installbrain/ =>PUP.Optional.InstallBrain
https://www.nicolascoolman.com/fr/pup-babylon/ =>PUP.Optional.Babylon
https://www.nicolascoolman.com/fr/spyware-vmntoolbar/ =>PUP.Optional.VMNToolbar
https://www.nicolascoolman.com/fr/pup-searchresults/ =>PUP.Optional.SearchResults
https://www.nicolascoolman.com/fr/hijacker-browser/ =>Hijacker.Browser
https://www.nicolascoolman.com/fr/pup-sweetim/ =>PUP.Optional.SweetIM
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Empty
https://www.nicolascoolman.com/fr/pup-bubbledock/ =>PUP.Optional.BubbleDock
https://www.anti-malware.top/2016/05/03/superfluous-nosibay/ =>.Superfluous.Nosibay
https://www.anti-malware.top/2016/05/02/superfluous-rentabiliweb/ =>.Superfluous.Rentabiliweb
https://www.nicolascoolman.com/fr/toolbar-conduit/ =>.Superfluous.Conduit
https://www.anti-malware.top/2016/04/30/pup-optional-bprotector/ =>PUP.Optional.BProtector
https://www.nicolascoolman.com/fr/pup-bearshare/ =>PUP.Optional.BearShare
https://www.nicolascoolman.com/fr/adware-bandoo/ =>PUP.Optional.Bandoo
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>Hijacker.Browser [http://img.delta-search.com/ext/chrome/update/upda]
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>Hijacker.Browser [http://www.wajam.com/update/Chrome/chrome_addon_up]
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>Hijacker.Browser [http://www.sweetim.com/simgcbar/GCToolbarUpdate.xm]
https://www.nicolascoolman.com/fr/adware-spointer/ =>PUP.Optional.SPointer
https://www.nicolascoolman.com/fr/adware-pricegong/ =>PUP.Optional.PriceGong
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.Temporary.Steam
https://www.nicolascoolman.com/fr/pup-quickshare/ =>PUP.Optional.QuickShare
https://www.nicolascoolman.com/fr/logiciels-superflus =>.Superfluous.AkamaiHD
https://www.anti-malware.top/2016/06/08/superfluous-securepccleaner/ =>.Superfluous.SecurePCCleaner
https://nicolascoolman.eu/2016/12/31/adware-adbanner/ =>Adware.adBanner
https://www.anti-malware.top/2016/04/22/heuristic-suspect/ =>Heuristic.Suspect
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>PUP.Optional.SimpleSearches
---\\ Nettoyage Additionnel. (17)
~ Suppression des Clés de registre Tracing. (17)
~ Suppression des anciens rapports ZHPCleaner. (0)
---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Opera Software)
---\\ Statistiques
~ Items scannés : 1102
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 179
~ End of clean in 00h02mn17s
~====================
ZHPCleaner-[R]-07012017-20_47_17.txt
ZHPCleaner-[S]-07012017-20_43_17.txt