~ ZHPCleaner v2017.1.24.18 by Nicolas Coolman (2017/01/24)
~ Run by iJack (Administrator) (24/01/2017 19:17:35)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Nettoyer
~ Report : C:\Users\iJack\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\iJack\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Professional, 64-bit Service Pack 1 (Build 7601)


---\\ Service. (1)
ARRETÉ : rtop =>.Superfluous.ByteFence


---\\ Navigateur internet. (1)
SUPPRIMÉ donnée: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigUrl [Bad : http://no-stops.com/wpad.dat?1f8b0553c93afe46ecc6472c7a0b3cea21725849] =>Hijacker.Proxy


---\\ Fichier hôte. (1)
~ Le fichier hôte est légitime. (60)


---\\ Tâche planifiée. (1)
SUPPRIMÉ tâche: [ByteFence] [C:\Program Files\ByteFence\ByteFence.exe (Not File) ] =>.Superfluous.ByteFence


---\\ Explorateur ( Dossiers, Fichiers ). (17)
DEPLACÉ fichier: C:\Users\iJack\AppData\Roaming\Mozilla\Firefox\Profiles\j8ekcczb.default\searchplugins\yahoo! powered.xml =>Adware.YahooPowered
DEPLACÉ fichier: C:\Program Files\ByteFence\ByteFenceService.exe [Byte Technologies LLC - ByteFence Anti-Malware] =>.Superfluous.ByteFence
DEPLACÉ fichier: C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe [Copyright Byte Technologies LLC. - ByteFence Real-time Protection] =>.Superfluous.ByteFence
DEPLACÉ fichier: C:\Program Files\ByteFence\ByteFence.exe [Byte Technologies LLC - ByteFence Anti-Malware] =>.Superfluous.ByteFence
DEPLACÉ fichier: C:\Windows\Prefetch\BYTEFENCE.EXE-FAC31F78.pf =>.Superfluous.ByteFence
DEPLACÉ fichier: C:\Windows\AutoKMS\AutoKMS.log =>HackTool.AutoKMS
DEPLACÉ dossier^: C:\Program Files\ByteFence =>.Superfluous.ByteFence
DEPLACÉ dossier^: C:\ProgramData\ByteFence =>.Superfluous.ByteFence
DEPLACÉ dossier: C:\ProgramData\c61637f0-1713-0 =>.Superfluous.Polluteware
DEPLACÉ dossier: C:\ProgramData\c61637f0-6127-1 =>.Superfluous.Polluteware
DEPLACÉ dossier: C:\ProgramData\FFinder LTD =>.Superfluous.WebitarProduction
DEPLACÉ dossier: C:\Windows\AutoKMS =>HackTool.AutoKMS
DEPLACÉ dossier: C:\Users\iJack\AppData\Roaming\PRO PC Cleaner =>.Superfluous.DoctorPC
DEPLACÉ dossier: C:\Users\iJack\Documents\PROPCCleaner =>.Superfluous.DoctorPC
DEPLACÉ dossier: C:\Users\iJack\AppData\Local\PRO_PC_Cleaner =>.Superfluous.PCCleaner
DEPLACÉ dossier: C:\Program Files (x86)\FileFinder =>Adware.FileFinder
DEPLACÉ dossier: C:\Users\iJack\AppData\Local\Microsoft Toolkit =>HackTool.AutoKMS


---\\ Base de Registres ( Clés, Valeurs, Données ). (25)
SUPPRIMÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2211d4a5-48d0-47f5-a7cd-81e861470f7f} [https://ca.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_17_03_ss[...]] [Yahoo! Powered] =>Adware.YahooPowered
SUPPRIMÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2211d4a5-48d0-47f5-a7cd-81e861470f7f} [https://ca.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_popjar_17_03_ssg02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dca%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0Ezz0D0EtByByBtC0AtB0E0ByDyBzztDtN0D0Tzu0StCzzyEzztN1L2XzutAtFtByDtFtCtFtCtDzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyDyD0ByB0FtDyBtCtGyCtAtAtBtGtAyE0A0EtGtDzztC0BtGtB0F0BtCtA0A0A0F0ByCyB0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtD0FtD0EtCtA0BtG0F0CyDtCtGyE0B0C0FtGzytDtAtDtG0FzyyEtD0DzzyEyEyEyCyCtC2QtN0A0LzutD%26cr%3D2056881379%26a%3Dwbf_popjar_17_03_ssg02%26os_ver%3D6.1%26os%3DWindows%2B7%2BProfessional&p={searchTerms}] =>Adware.YahooPowered
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\ByteFenceService [C:\Program Files\ByteFence\ByteFenceService.exe (Not File)] =>.Superfluous.ByteFence
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\rtop [C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe (Not File)] =>.Superfluous.ByteFence
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-2294443000-3717229763-623066986-1000\SOFTWARE\ByteFence [] =>.Superfluous.ByteFence
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-2294443000-3717229763-623066986-1000\SOFTWARE\PROPCCleanerLanguage [] =>.Superfluous.DoctorPC
SUPPRIMÉ clé: HKCU\Software\ByteFence [] =>.Superfluous.ByteFence
SUPPRIMÉ clé: HKCU\Software\PROPCCleanerLanguage [] =>.Superfluous.DoctorPC
SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Bubble Suite [Nosibay] =>.Superfluous.Nosibay
SUPPRIMÉ clé*: HKCU\Software\csastats [] =>Adware.InstallCore
SUPPRIMÉ clé*: HKCU\Software\undefined [] =>.Superfluous.Downloader
SUPPRIMÉ clé*: HKCU\Software\ProductSetup [] =>Adware.InstallCore
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552} [OCComSDK 1.0 Type Library] =>PUP.Optional.OpenCandy
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ByteFenceService [] =>.Superfluous.ByteFence
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\ByteFence [] =>.Superfluous.ByteFence
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 [] =>.Superfluous.ByteFence
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS [] =>.Superfluous.ByteFence
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\PROPCCleaner_RASAPI32 [] =>.Superfluous.DoctorPC
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\PROPCCleaner_RASMANCS [] =>.Superfluous.DoctorPC
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\ByteFence [] =>.Superfluous.ByteFence
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\PRO PC Cleaner [] =>.Superfluous.DoctorPC
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552} [OCComSDK 1.0 Type Library] =>PUP.Optional.OpenCandy
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ByteFence [Byte Technologies LLC] =>.Superfluous.ByteFence
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FileFinder [Webitar Production Inc.] =>.Superfluous.WebitarProduction
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Google Inc.] =>Heuristic.Suspect


---\\ Récapitulatif des éléments trouvés sur votre station. (14)
https://www.anti-malware.top/2016/04/29/superfluous-bytefence/ =>.Superfluous.ByteFence
https://www.anti-malware.top/2016/06/09/pirate-de-serveur-proxy-hijacker-proxy/ =>Hijacker.Proxy
https://www.nicolascoolman.com/fr/repaquetage-et_infections/ =>Adware.YahooPowered
https://www.anti-malware.top/2016/05/04/hacktool-autokms/ =>HackTool.AutoKMS
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>.Superfluous.Polluteware
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>.Superfluous.WebitarProduction
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>.Superfluous.DoctorPC
https://www.nicolascoolman.com/fr/usp-pccleaner/ =>.Superfluous.PCCleaner
https://nicolascoolman.eu/2017/01/19/adware-filefinder/ =>Adware.FileFinder
https://www.anti-malware.top/2016/05/03/superfluous-nosibay/ =>.Superfluous.Nosibay
https://www.anti-malware.top/2016/04/22/adware-installcore/ =>Adware.InstallCore
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>.Superfluous.Downloader
https://www.nicolascoolman.com/fr/adware-opencandy/ =>PUP.Optional.OpenCandy
https://www.anti-malware.top/2016/04/22/heuristic-suspect/ =>Heuristic.Suspect


---\\ Nettoyage Additionnel. (10)
~ Suppression des Clés de registre Tracing. (10)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent (Google Chrome)
~ Ce navigateur est absent (Opera Software)
~ Le système a été redémarré.


---\\ Statistiques
~ Items scannés : 881
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 46


~ End of clean in 00h00mn58s
~====================
ZHPCleaner-[R]-24012017-19_18_33.txt
ZHPCleaner-[S]-24012017-19_16_35.txt