Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPFix v2019.5.2.57 by Nicolas Coolman (2019/05/02)
~ Run by Odile (Administrator) (20/05/2019 23:55:00)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\Odile\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 17763)
---\\ SCRIPT DE L'UTILISATEUR. (101)
Script ZHPFix
EmptyCLSID
Emptytemp
EmptyFlash
UnMaskSoftware: O42 - Logiciel: Google Update Helper - (.Google LLC.) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google LLC (Hidden)
O4 - HKUS\S-1-5-19\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000
O4 - HKUS\S-1-5-20\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000
O2 - BHO: (no name) [64Bits] - {34EDF7FD-FD9B-420F-A701-CC2C081FB26C} (.Orphan.)
O43 - CFD: 06/04/2019 - [] D -- C:\Users\Odile\AppData\Local\Solvusoft_Corporation
O108 - CMH1: GDContextMenu [64Bits] - [CC]{BB02B294-8425-42E5-983F-41A1FA970CD6} . (.Orphan.)
O108 - CMH1: Glary Utilities [64Bits] - [CC]{B3C418F8-922B-4faf-915E-59BC14448CF7} . (.Orphan.)
O108 - CMH1: McCtxMenuFrmWrk [64Bits] - [CC]{CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} . (.Orphan.)
O108 - CMH1: PDFArchitect7_ManagerExt [64Bits] - [CC]{21989F59-B260-4302-90C3-E51740E03639} . (.Orphan.)
O108 - CMH2: McCtxMenuFrmWrk [64Bits] - {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} . (.Orphan.)
O108 - CMH4: GDContextMenu [64Bits] - [CC]{BB02B294-8425-42E5-983F-41A1FA970CD6} . (.Orphan.)
O108 - CMH4: RecuvaShellExt [64Bits] - [CC]{435E5DF5-2510-463C-B223-BDA47006D002} . (.Orphan.)
O108 - CMH6: Glary Utilities [64Bits] - [CC]{B3C418F8-922B-4faf-915E-59BC14448CF7} . (.Orphan.)
O108 - CMH6: McCtxMenuFrmWrk [64Bits] - [CC]{CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} . (.Orphan.)
O108 - CMH6: RecuvaShellExt [64Bits] - [CC]{435E5DF5-2510-463C-B223-BDA47006D002} . (.Orphan.)
O108 - CMH7: Glary Utilities [64Bits] - [CC]{B3C418F8-922B-4faf-915E-59BC14448CF7} . (.Orphan.)
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34EDF7FD-FD9B-420F-A701-CC2C081FB26C}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{34EDF7FD-FD9B-420F-A701-CC2C081FB26C}
C:\Users\Odile\AppData\Local\Solvusoft_Corporation
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\GDContextMenu
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Glary Utilities
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\McCtxMenuFrmWrk
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PDFArchitect7_ManagerExt
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\McCtxMenuFrmWrk
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\GDContextMenu
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\RecuvaShellExt
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Glary Utilities
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\McCtxMenuFrmWrk
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\RecuvaShellExt
HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\Glary Utilities
C:\Users\Odile\AppData\Local\Google\Chrome\User Data\Default\File System\000
HKLM\SOFTWARE\WOW6432Node\CyberLink
HKCU\SOFTWARE\CyberLink
HKU\.DEFAULT\SOFTWARE\Cyberlink
HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\CyberLink
O43 - CFD: 20/05/2019 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 26/04/2019 - [] D -- C:\Users\Odile\AppData\Roaming\CyberLink
O43 - CFD: 20/05/2019 - [0] D -- C:\Users\Odile\AppData\Local\CyberLink
O43 - CFD: 17/03/2019 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Cyberlink
O90 - PUC: 'F45FAD3B52BD6854E91F692DB41B0488' [HKLM] . (.Windows Movie Maker 2.6.)
HKCU\SOFTWARE\DropboxUpdate
HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\DropboxUpdate
O23 - Service: SAS Core Service (!SASCORE) . (.SUPERAntiSpyware.com - Core Service.) - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
SR - Auto [31/01/2017] [ 173472] SAS Core Service (!SASCORE) . (.SUPERAntiSpyware.com.) - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
SR - System [22/07/2011] [ 14928] SASDIFSV (SASDIFSV) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com.) - C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
SR - System [12/07/2011] [ 12368] SASKUTIL (SASKUTIL) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com.) - C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
O4 - HKCU\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-21-2421727777-1266462351-3257151019-1002\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
[MD5.98E06CAC2C508118450095E581202230] - (.SUPERAntiSpyware.com - Core Service.) -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472] [PID.3828]
[MD5.B73B1FE9A691643BB5DA393E32EC3540] - (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE [9198512] [PID.8440]
O4 - GS\CommonDesktop [Public]: SUPERAntiSpyware Free Edition.lnk . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:SUPERAntiSpyware
[HKEY_USERS\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:SUPERAntiSpyware
O42 - Logiciel: SUPERAntiSpyware - (.SUPERAntiSpyware.com.) [HKLM][64Bits] -- {CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
HKLM\SOFTWARE\SUPERAntiSpyware.com
HKCU\SOFTWARE\SUPERAntiSpyware.com
HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\SUPERAntiSpyware.com
O43 - CFD: 04/05/2019 - [] D -- C:\Program Files\SUPERAntiSpyware
O43 - CFD: 04/04/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
O43 - CFD: 04/04/2019 - [] D -- C:\ProgramData\SUPERAntiSpyware.com
O43 - CFD: 04/04/2019 - [] D -- C:\Users\Odile\AppData\Roaming\SUPERAntiSpyware.com
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:SunJavaUpdateSched
O43 - CFD: 20/05/2019 - [] D -- C:\Program Files (x86)\WildTangent Games
O43 - CFD: 20/05/2019 - [] D -- C:\ProgramData\WildTangent
O43 - CFD: 20/05/2019 - [] D -- C:\Users\Odile\AppData\Roaming\WildTangent
O43 - CFD: 09/03/2019 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\WildTangent
SR - Demand [23/09/2015] [ 80760] McAfee Inc. cfwids (cfwids) . (.McAfee, Inc..) - C:\WINDOWS\System32\drivers\cfwids.sys
SR - Demand [19/05/2015] [ 207208] McAfee Inc. HipShieldK (HipShieldK) . (.McAfee, Inc..) - C:\WINDOWS\System32\drivers\HipShieldK.sys
SR - Demand [23/09/2015] [ 415976] McAfee Inc. mfeaack (mfeaack) . (.McAfee, Inc..) - C:\WINDOWS\System32\drivers\mfeaack.sys
SR - Boot [23/09/2015] [ 82072] McAfee Inc. mfeelamk (mfeelamk) . (.McAfee, Inc..) - C:\WINDOWS\System32\drivers\mfeelamk.sys
SR - Demand [23/09/2015] [ 497888] McAfee Inc. mfefirek (mfefirek) . (.McAfee, Inc..) - C:\WINDOWS\System32\drivers\mfefirek.sys
SR - Demand [06/10/2015] [ 537192] McAfee Inc. mfencbdc (mfencbdc) . (.McAfee, Inc..) - C:\WINDOWS\System32\DRIVERS\mfencbdc.sys
SR - Demand [06/10/2015] [ 109480] McAfee Inc. mfencrk (mfencrk) . (.McAfee, Inc..) - C:\WINDOWS\System32\DRIVERS\mfencrk.sys
SS - Demand [21/09/2015] [ 256840] McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc..) - C:\windows\system32\mfevtps.exe
SR - Boot [23/09/2015] [ 244544] McAfee Inc. mfewfpk (mfewfpk) . (.McAfee, Inc..) - C:\WINDOWS\System32\drivers\mfewfpk.sys
HKLM\SOFTWARE\McAfee
HKLM\SOFTWARE\McAfee.com
HKCU\SOFTWARE\McAfee
HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\McAfee
O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - McAfee Personal Firewall IDS Plugin.) -- C:\WINDOWS\System32\drivers\cfwids.sys [80760]
O58 - SDL:2015/05/19 13:59:02 A . (.McAfee, Inc. - McAfee HIP IPS Driver.) -- C:\WINDOWS\System32\drivers\HipShieldK.sys [207208]
O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - McAfee Arbitrary Access Control Driver.) -- C:\WINDOWS\System32\drivers\mfeaack.sys [415976]
O58 - SDL:2015/10/06 21:32:30 A . (. - McAfee Driver Cleaning Driver.) -- C:\WINDOWS\System32\drivers\mfeclnrk.sys [20480]
O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - McAfee ELAM Driver.) -- C:\WINDOWS\System32\drivers\mfeelamk.sys [82072]
O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - McAfee Core Firewall Engine Driver.) -- C:\WINDOWS\System32\drivers\mfefirek.sys [497888]
O58 - SDL:2015/10/06 21:32:30 A . (.McAfee, Inc. - Event Driver.) -- C:\WINDOWS\System32\drivers\mfencbdc.sys [537192]
O58 - SDL:2015/10/06 21:32:30 A . (.McAfee, Inc. - Detection driver.) -- C:\WINDOWS\System32\drivers\mfencrk.sys [109480]
O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - Anti-Virus Mini-Firewall Driver.) -- C:\WINDOWS\System32\drivers\mfewfpk.sys [244544]
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GUDelayStartup
[HKEY_USERS\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GUDelayStartup
HKCU\SOFTWARE\Glarysoft
HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Glarysoft
O43 - CFD: 20/05/2019 - [] D -- C:\Users\Odile\AppData\Roaming\GlarySoft
cmd: ipconfig /flushdns
cmd: netsh winsock reset
cmd: netsh advfirewall reset
cmd: Netsh advfirewall set allprofiles state on
---\\ LOGICIEL. (1)
DESINSTALLER : {CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
---\\ SERVICE. (2)
ARRETÉ : HKLM\SYSTEM\CurrentControlSet\Services\!SASCORE [SASCORE64.EXE]
ABSENT Service: !SASCORE [SASCORE64.EXE]
---\\ TÂCHE PLANIFIÉE. (0)
---\\ NAVIGATEUR INTERNET. (0)
---\\ EXPLORATEUR ( Dossiers, Fichiers ). (34)
SUPPRIMÉ Dossier EmptyCLSID: C:\ProgramData\{E27A904B-47C0-0369-6DD8-A01C598D577D}
DEPLACÉ Fichier Temp: C:\Users\Odile\AppData\Local\Temp\AdobeARM.log
DEPLACÉ Fichier Temp: C:\Users\Odile\AppData\Local\Temp\aria-debug-11840.log
DEPLACÉ Fichier Temp: C:\Users\Odile\AppData\Local\Temp\JavaDeployReg.log
DEPLACÉ Fichier Temp: C:\Users\Odile\AppData\Local\Temp\jusched.log
DEPLACÉ Fichier Temp: C:\Users\Odile\AppData\Local\Temp\StructuredQuery.log
DEPLACÉ Fichier Temp: C:\Users\Odile\AppData\Local\Temp\7bc25771-b474-4777-a719-d15ffd696979.tmp
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Local\Solvusoft_Corporation
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Local\Google\Chrome\User Data\Default\File System\000
SUPPRIMÉ Dossier : C:\ProgramData\CyberLink
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Roaming\CyberLink
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Local\CyberLink
DEPLACÉ Fichier Service: C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
DEPLACÉ Fichier Service: C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
DEPLACÉ Fichier Service: C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
DEPLACÉ Fichier Run: C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
DEPLACÉ Fichier Shortcut: C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
SUPPRIMÉ Dossier : C:\Program Files\SUPERAntiSpyware
SUPPRIMÉ Dossier : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
SUPPRIMÉ Redémarrage Dossier ^: C:\ProgramData\SUPERAntiSpyware.com
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Roaming\SUPERAntiSpyware.com
SUPPRIMÉ Dossier : C:\Program Files (x86)\WildTangent Games
SUPPRIMÉ Dossier : C:\ProgramData\WildTangent
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Roaming\WildTangent
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\cfwids.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\HipShieldK.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\mfeaack.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\mfeelamk.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\mfefirek.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\mfencbdc.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\mfencrk.sys
DEPLACÉ Fichier Service: C:\windows\system32\mfevtps.exe
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\mfewfpk.sys
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Roaming\GlarySoft
---\\ REGISTRE ( Clés, Valeurs, Données ). (70)
REMPLACÉ Donnée Software: 1 [HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}\\SystemComponent]
SUPPRIMÉ Valeur Run: OneDriveSetup [HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\]
SUPPRIMÉ Valeur Run: OneDriveSetup [HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\]
SUPPRIMÉ Clé BHO: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34EDF7FD-FD9B-420F-A701-CC2C081FB26C} [{34EDF7FD-FD9B-420F-A701-CC2C081FB26C}]
ABSENT Clé BHO: HKLM64\SOFTWARE\Classes\CLSID\{34EDF7FD-FD9B-420F-A701-CC2C081FB26C}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\GDContextMenu [GDContextMenu1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\GDContextMenu [64Bits] - [CC]{BB02B294-8425-42E5-983F-41A1FA970CD6}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\Glary Utilities [Glary Utilities1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\Glary Utilities [64Bits] - [CC]{B3C418F8-922B-4faf-915E-59BC14448CF7}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\McCtxMenuFrmWrk [McCtxMenuFrmWrk1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\McCtxMenuFrmWrk [64Bits] - [CC]{CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\PDFArchitect7_ManagerExt [PDFArchitect7_ManagerExt1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\PDFArchitect7_ManagerExt [64Bits] - [CC]{21989F59-B260-4302-90C3-E51740E03639}
SUPPRIMÉ Clé CMH: HKLM64\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\McCtxMenuFrmWrk [McCtxMenuFrmWrk2]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\GDContextMenu [GDContextMenu4]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\RecuvaShellExt [RecuvaShellExt4]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\RecuvaShellExt [64Bits] - [CC]{435E5DF5-2510-463C-B223-BDA47006D002}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Glary Utilities [Glary Utilities6]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\McCtxMenuFrmWrk [McCtxMenuFrmWrk6]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\RecuvaShellExt [RecuvaShellExt6]
SUPPRIMÉ Clé CMH: HKLM64\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Glary Utilities [Glary Utilities7]
ABSENT Clé: HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34EDF7FD-FD9B-420F-A701-CC2C081FB26C}
SUPPRIMÉ Clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{34EDF7FD-FD9B-420F-A701-CC2C081FB26C} [{34EDF7FD-FD9B-420F-A701-CC2C081FB26C}]
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\GDContextMenu
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Glary Utilities
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\McCtxMenuFrmWrk
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PDFArchitect7_ManagerExt
ABSENT Clé: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\McCtxMenuFrmWrk
ABSENT Clé: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\GDContextMenu
ABSENT Clé: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\RecuvaShellExt
ABSENT Clé: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Glary Utilities
ABSENT Clé: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\McCtxMenuFrmWrk
ABSENT Clé: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\RecuvaShellExt
ABSENT Clé: HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\Glary Utilities
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\CyberLink [CyberLink]
SUPPRIMÉ Clé: HKCU\SOFTWARE\CyberLink [CyberLink]
SUPPRIMÉ Clé: HKU\.DEFAULT\SOFTWARE\Cyberlink [Cyberlink]
ABSENT Clé: HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\CyberLink
SUPPRIMÉ Clé Product: HKLM64\Software\Classes\Installer\Products\F45FAD3B52BD6854E91F692DB41B0488 []
SUPPRIMÉ Clé: HKCU\SOFTWARE\DropboxUpdate [DropboxUpdate]
ABSENT Clé: HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\DropboxUpdate
ABSENT Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\!SASCORE
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\SASDIFSV [SASDIFSV64.SYS]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\SASKUTIL [SASKUTIL64.SYS]
SUPPRIMÉ Valeur Run: SUPERAntiSpyware [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\]
ABSENT Valeur Run: HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ [C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe]
SUPPRIMÉ Clé: HKLM\SOFTWARE\SUPERAntiSpyware.com [SUPERAntiSpyware.com]
SUPPRIMÉ Clé: HKCU\SOFTWARE\SUPERAntiSpyware.com [SUPERAntiSpyware.com]
ABSENT Clé: HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\SUPERAntiSpyware.com
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\cfwids [cfwids.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\HipShieldK [HipShieldK.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfeaack [mfeaack.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfeelamk [mfeelamk.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfefirek [mfefirek.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfencbdc [mfencbdc.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfencrk [mfencrk.sys]
ABSENT Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfevtp
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfewfpk [mfewfpk.sys]
SUPPRIMÉ Clé: HKLM\SOFTWARE\McAfee [McAfee]
SUPPRIMÉ Clé: HKLM\SOFTWARE\McAfee.com [McAfee.com]
SUPPRIMÉ Clé: HKCU\SOFTWARE\McAfee [McAfee]
ABSENT Clé: HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\McAfee
SUPPRIMÉ Clé: HKCU\SOFTWARE\Glarysoft [Glarysoft]
ABSENT Clé: HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Glarysoft
SUPPRIMÉ Valeur: SUPERAntiSpyware [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: SUPERAntiSpyware [HKEY_USERS\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: SunJavaUpdateSched [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: GUDelayStartup [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: GUDelayStartup [HKEY_USERS\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
---\\ COMMANDE. (7)
~ EmptyCSID: Dossiers CLSID vides supprimés (1)
~ EmptyTemp: Dossier Local temp partiellement vidé (6)
~ EmptyFlash: Dossier FlashPlayer vide.
~ Command spéciale exécutée avec succès: ipconfig /flushdns
~ Command spéciale exécutée avec succès: netsh winsock reset
~ Command spéciale exécutée avec succès: netsh advfirewall reset
~ Command spéciale exécutée avec succès: Netsh advfirewall set allprofiles state on
---\\ NON TRAITÉ. (2)
[MD5.98E06CAC2C508118450095E581202230] - (.SUPERAntiSpyware.com - Core Service.) -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
[MD5.B73B1FE9A691643BB5DA393E32EC3540] - (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
~ Le système a été redémarré.
***** ~ Fin de rapport terminé en 00h01mn35s
~ Run by Odile (Administrator) (20/05/2019 23:55:00)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\Odile\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 17763)
---\\ SCRIPT DE L'UTILISATEUR. (101)
Script ZHPFix
EmptyCLSID
Emptytemp
EmptyFlash
UnMaskSoftware: O42 - Logiciel: Google Update Helper - (.Google LLC.) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google LLC (Hidden)
O4 - HKUS\S-1-5-19\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000
O4 - HKUS\S-1-5-20\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000
O2 - BHO: (no name) [64Bits] - {34EDF7FD-FD9B-420F-A701-CC2C081FB26C} (.Orphan.)
O43 - CFD: 06/04/2019 - [] D -- C:\Users\Odile\AppData\Local\Solvusoft_Corporation
O108 - CMH1: GDContextMenu [64Bits] - [CC]{BB02B294-8425-42E5-983F-41A1FA970CD6} . (.Orphan.)
O108 - CMH1: Glary Utilities [64Bits] - [CC]{B3C418F8-922B-4faf-915E-59BC14448CF7} . (.Orphan.)
O108 - CMH1: McCtxMenuFrmWrk [64Bits] - [CC]{CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} . (.Orphan.)
O108 - CMH1: PDFArchitect7_ManagerExt [64Bits] - [CC]{21989F59-B260-4302-90C3-E51740E03639} . (.Orphan.)
O108 - CMH2: McCtxMenuFrmWrk [64Bits] - {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} . (.Orphan.)
O108 - CMH4: GDContextMenu [64Bits] - [CC]{BB02B294-8425-42E5-983F-41A1FA970CD6} . (.Orphan.)
O108 - CMH4: RecuvaShellExt [64Bits] - [CC]{435E5DF5-2510-463C-B223-BDA47006D002} . (.Orphan.)
O108 - CMH6: Glary Utilities [64Bits] - [CC]{B3C418F8-922B-4faf-915E-59BC14448CF7} . (.Orphan.)
O108 - CMH6: McCtxMenuFrmWrk [64Bits] - [CC]{CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} . (.Orphan.)
O108 - CMH6: RecuvaShellExt [64Bits] - [CC]{435E5DF5-2510-463C-B223-BDA47006D002} . (.Orphan.)
O108 - CMH7: Glary Utilities [64Bits] - [CC]{B3C418F8-922B-4faf-915E-59BC14448CF7} . (.Orphan.)
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34EDF7FD-FD9B-420F-A701-CC2C081FB26C}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{34EDF7FD-FD9B-420F-A701-CC2C081FB26C}
C:\Users\Odile\AppData\Local\Solvusoft_Corporation
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\GDContextMenu
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Glary Utilities
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\McCtxMenuFrmWrk
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PDFArchitect7_ManagerExt
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\McCtxMenuFrmWrk
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\GDContextMenu
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\RecuvaShellExt
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Glary Utilities
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\McCtxMenuFrmWrk
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\RecuvaShellExt
HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\Glary Utilities
C:\Users\Odile\AppData\Local\Google\Chrome\User Data\Default\File System\000
HKLM\SOFTWARE\WOW6432Node\CyberLink
HKCU\SOFTWARE\CyberLink
HKU\.DEFAULT\SOFTWARE\Cyberlink
HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\CyberLink
O43 - CFD: 20/05/2019 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 26/04/2019 - [] D -- C:\Users\Odile\AppData\Roaming\CyberLink
O43 - CFD: 20/05/2019 - [0] D -- C:\Users\Odile\AppData\Local\CyberLink
O43 - CFD: 17/03/2019 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Cyberlink
O90 - PUC: 'F45FAD3B52BD6854E91F692DB41B0488' [HKLM] . (.Windows Movie Maker 2.6.)
HKCU\SOFTWARE\DropboxUpdate
HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\DropboxUpdate
O23 - Service: SAS Core Service (!SASCORE) . (.SUPERAntiSpyware.com - Core Service.) - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
SR - Auto [31/01/2017] [ 173472] SAS Core Service (!SASCORE) . (.SUPERAntiSpyware.com.) - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
SR - System [22/07/2011] [ 14928] SASDIFSV (SASDIFSV) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com.) - C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
SR - System [12/07/2011] [ 12368] SASKUTIL (SASKUTIL) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com.) - C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
O4 - HKCU\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-21-2421727777-1266462351-3257151019-1002\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
[MD5.98E06CAC2C508118450095E581202230] - (.SUPERAntiSpyware.com - Core Service.) -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472] [PID.3828]
[MD5.B73B1FE9A691643BB5DA393E32EC3540] - (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE [9198512] [PID.8440]
O4 - GS\CommonDesktop [Public]: SUPERAntiSpyware Free Edition.lnk . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:SUPERAntiSpyware
[HKEY_USERS\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:SUPERAntiSpyware
O42 - Logiciel: SUPERAntiSpyware - (.SUPERAntiSpyware.com.) [HKLM][64Bits] -- {CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
HKLM\SOFTWARE\SUPERAntiSpyware.com
HKCU\SOFTWARE\SUPERAntiSpyware.com
HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\SUPERAntiSpyware.com
O43 - CFD: 04/05/2019 - [] D -- C:\Program Files\SUPERAntiSpyware
O43 - CFD: 04/04/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
O43 - CFD: 04/04/2019 - [] D -- C:\ProgramData\SUPERAntiSpyware.com
O43 - CFD: 04/04/2019 - [] D -- C:\Users\Odile\AppData\Roaming\SUPERAntiSpyware.com
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:SunJavaUpdateSched
O43 - CFD: 20/05/2019 - [] D -- C:\Program Files (x86)\WildTangent Games
O43 - CFD: 20/05/2019 - [] D -- C:\ProgramData\WildTangent
O43 - CFD: 20/05/2019 - [] D -- C:\Users\Odile\AppData\Roaming\WildTangent
O43 - CFD: 09/03/2019 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\WildTangent
SR - Demand [23/09/2015] [ 80760] McAfee Inc. cfwids (cfwids) . (.McAfee, Inc..) - C:\WINDOWS\System32\drivers\cfwids.sys
SR - Demand [19/05/2015] [ 207208] McAfee Inc. HipShieldK (HipShieldK) . (.McAfee, Inc..) - C:\WINDOWS\System32\drivers\HipShieldK.sys
SR - Demand [23/09/2015] [ 415976] McAfee Inc. mfeaack (mfeaack) . (.McAfee, Inc..) - C:\WINDOWS\System32\drivers\mfeaack.sys
SR - Boot [23/09/2015] [ 82072] McAfee Inc. mfeelamk (mfeelamk) . (.McAfee, Inc..) - C:\WINDOWS\System32\drivers\mfeelamk.sys
SR - Demand [23/09/2015] [ 497888] McAfee Inc. mfefirek (mfefirek) . (.McAfee, Inc..) - C:\WINDOWS\System32\drivers\mfefirek.sys
SR - Demand [06/10/2015] [ 537192] McAfee Inc. mfencbdc (mfencbdc) . (.McAfee, Inc..) - C:\WINDOWS\System32\DRIVERS\mfencbdc.sys
SR - Demand [06/10/2015] [ 109480] McAfee Inc. mfencrk (mfencrk) . (.McAfee, Inc..) - C:\WINDOWS\System32\DRIVERS\mfencrk.sys
SS - Demand [21/09/2015] [ 256840] McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc..) - C:\windows\system32\mfevtps.exe
SR - Boot [23/09/2015] [ 244544] McAfee Inc. mfewfpk (mfewfpk) . (.McAfee, Inc..) - C:\WINDOWS\System32\drivers\mfewfpk.sys
HKLM\SOFTWARE\McAfee
HKLM\SOFTWARE\McAfee.com
HKCU\SOFTWARE\McAfee
HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\McAfee
O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - McAfee Personal Firewall IDS Plugin.) -- C:\WINDOWS\System32\drivers\cfwids.sys [80760]
O58 - SDL:2015/05/19 13:59:02 A . (.McAfee, Inc. - McAfee HIP IPS Driver.) -- C:\WINDOWS\System32\drivers\HipShieldK.sys [207208]
O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - McAfee Arbitrary Access Control Driver.) -- C:\WINDOWS\System32\drivers\mfeaack.sys [415976]
O58 - SDL:2015/10/06 21:32:30 A . (. - McAfee Driver Cleaning Driver.) -- C:\WINDOWS\System32\drivers\mfeclnrk.sys [20480]
O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - McAfee ELAM Driver.) -- C:\WINDOWS\System32\drivers\mfeelamk.sys [82072]
O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - McAfee Core Firewall Engine Driver.) -- C:\WINDOWS\System32\drivers\mfefirek.sys [497888]
O58 - SDL:2015/10/06 21:32:30 A . (.McAfee, Inc. - Event Driver.) -- C:\WINDOWS\System32\drivers\mfencbdc.sys [537192]
O58 - SDL:2015/10/06 21:32:30 A . (.McAfee, Inc. - Detection driver.) -- C:\WINDOWS\System32\drivers\mfencrk.sys [109480]
O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - Anti-Virus Mini-Firewall Driver.) -- C:\WINDOWS\System32\drivers\mfewfpk.sys [244544]
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GUDelayStartup
[HKEY_USERS\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GUDelayStartup
HKCU\SOFTWARE\Glarysoft
HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Glarysoft
O43 - CFD: 20/05/2019 - [] D -- C:\Users\Odile\AppData\Roaming\GlarySoft
cmd: ipconfig /flushdns
cmd: netsh winsock reset
cmd: netsh advfirewall reset
cmd: Netsh advfirewall set allprofiles state on
---\\ LOGICIEL. (1)
DESINSTALLER : {CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
---\\ SERVICE. (2)
ARRETÉ : HKLM\SYSTEM\CurrentControlSet\Services\!SASCORE [SASCORE64.EXE]
ABSENT Service: !SASCORE [SASCORE64.EXE]
---\\ TÂCHE PLANIFIÉE. (0)
---\\ NAVIGATEUR INTERNET. (0)
---\\ EXPLORATEUR ( Dossiers, Fichiers ). (34)
SUPPRIMÉ Dossier EmptyCLSID: C:\ProgramData\{E27A904B-47C0-0369-6DD8-A01C598D577D}
DEPLACÉ Fichier Temp: C:\Users\Odile\AppData\Local\Temp\AdobeARM.log
DEPLACÉ Fichier Temp: C:\Users\Odile\AppData\Local\Temp\aria-debug-11840.log
DEPLACÉ Fichier Temp: C:\Users\Odile\AppData\Local\Temp\JavaDeployReg.log
DEPLACÉ Fichier Temp: C:\Users\Odile\AppData\Local\Temp\jusched.log
DEPLACÉ Fichier Temp: C:\Users\Odile\AppData\Local\Temp\StructuredQuery.log
DEPLACÉ Fichier Temp: C:\Users\Odile\AppData\Local\Temp\7bc25771-b474-4777-a719-d15ffd696979.tmp
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Local\Solvusoft_Corporation
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Local\Google\Chrome\User Data\Default\File System\000
SUPPRIMÉ Dossier : C:\ProgramData\CyberLink
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Roaming\CyberLink
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Local\CyberLink
DEPLACÉ Fichier Service: C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
DEPLACÉ Fichier Service: C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
DEPLACÉ Fichier Service: C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
DEPLACÉ Fichier Run: C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
DEPLACÉ Fichier Shortcut: C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
SUPPRIMÉ Dossier : C:\Program Files\SUPERAntiSpyware
SUPPRIMÉ Dossier : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
SUPPRIMÉ Redémarrage Dossier ^: C:\ProgramData\SUPERAntiSpyware.com
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Roaming\SUPERAntiSpyware.com
SUPPRIMÉ Dossier : C:\Program Files (x86)\WildTangent Games
SUPPRIMÉ Dossier : C:\ProgramData\WildTangent
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Roaming\WildTangent
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\cfwids.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\HipShieldK.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\mfeaack.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\mfeelamk.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\mfefirek.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\mfencbdc.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\mfencrk.sys
DEPLACÉ Fichier Service: C:\windows\system32\mfevtps.exe
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\mfewfpk.sys
SUPPRIMÉ Dossier : C:\Users\Odile\AppData\Roaming\GlarySoft
---\\ REGISTRE ( Clés, Valeurs, Données ). (70)
REMPLACÉ Donnée Software: 1 [HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}\\SystemComponent]
SUPPRIMÉ Valeur Run: OneDriveSetup [HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\]
SUPPRIMÉ Valeur Run: OneDriveSetup [HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\]
SUPPRIMÉ Clé BHO: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34EDF7FD-FD9B-420F-A701-CC2C081FB26C} [{34EDF7FD-FD9B-420F-A701-CC2C081FB26C}]
ABSENT Clé BHO: HKLM64\SOFTWARE\Classes\CLSID\{34EDF7FD-FD9B-420F-A701-CC2C081FB26C}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\GDContextMenu [GDContextMenu1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\GDContextMenu [64Bits] - [CC]{BB02B294-8425-42E5-983F-41A1FA970CD6}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\Glary Utilities [Glary Utilities1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\Glary Utilities [64Bits] - [CC]{B3C418F8-922B-4faf-915E-59BC14448CF7}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\McCtxMenuFrmWrk [McCtxMenuFrmWrk1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\McCtxMenuFrmWrk [64Bits] - [CC]{CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\PDFArchitect7_ManagerExt [PDFArchitect7_ManagerExt1]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\PDFArchitect7_ManagerExt [64Bits] - [CC]{21989F59-B260-4302-90C3-E51740E03639}
SUPPRIMÉ Clé CMH: HKLM64\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\McCtxMenuFrmWrk [McCtxMenuFrmWrk2]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\GDContextMenu [GDContextMenu4]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\RecuvaShellExt [RecuvaShellExt4]
ABSENT Clé CMH: HKLM64\SOFTWARE\Classes\CLSID\RecuvaShellExt [64Bits] - [CC]{435E5DF5-2510-463C-B223-BDA47006D002}
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Glary Utilities [Glary Utilities6]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\McCtxMenuFrmWrk [McCtxMenuFrmWrk6]
SUPPRIMÉ Clé CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\RecuvaShellExt [RecuvaShellExt6]
SUPPRIMÉ Clé CMH: HKLM64\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Glary Utilities [Glary Utilities7]
ABSENT Clé: HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34EDF7FD-FD9B-420F-A701-CC2C081FB26C}
SUPPRIMÉ Clé: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{34EDF7FD-FD9B-420F-A701-CC2C081FB26C} [{34EDF7FD-FD9B-420F-A701-CC2C081FB26C}]
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\GDContextMenu
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Glary Utilities
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\McCtxMenuFrmWrk
ABSENT Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PDFArchitect7_ManagerExt
ABSENT Clé: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\McCtxMenuFrmWrk
ABSENT Clé: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\GDContextMenu
ABSENT Clé: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\RecuvaShellExt
ABSENT Clé: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Glary Utilities
ABSENT Clé: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\McCtxMenuFrmWrk
ABSENT Clé: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\RecuvaShellExt
ABSENT Clé: HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\Glary Utilities
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\CyberLink [CyberLink]
SUPPRIMÉ Clé: HKCU\SOFTWARE\CyberLink [CyberLink]
SUPPRIMÉ Clé: HKU\.DEFAULT\SOFTWARE\Cyberlink [Cyberlink]
ABSENT Clé: HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\CyberLink
SUPPRIMÉ Clé Product: HKLM64\Software\Classes\Installer\Products\F45FAD3B52BD6854E91F692DB41B0488 []
SUPPRIMÉ Clé: HKCU\SOFTWARE\DropboxUpdate [DropboxUpdate]
ABSENT Clé: HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\DropboxUpdate
ABSENT Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\!SASCORE
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\SASDIFSV [SASDIFSV64.SYS]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\SASKUTIL [SASKUTIL64.SYS]
SUPPRIMÉ Valeur Run: SUPERAntiSpyware [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\]
ABSENT Valeur Run: HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ [C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe]
SUPPRIMÉ Clé: HKLM\SOFTWARE\SUPERAntiSpyware.com [SUPERAntiSpyware.com]
SUPPRIMÉ Clé: HKCU\SOFTWARE\SUPERAntiSpyware.com [SUPERAntiSpyware.com]
ABSENT Clé: HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\SUPERAntiSpyware.com
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\cfwids [cfwids.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\HipShieldK [HipShieldK.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfeaack [mfeaack.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfeelamk [mfeelamk.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfefirek [mfefirek.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfencbdc [mfencbdc.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfencrk [mfencrk.sys]
ABSENT Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfevtp
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\mfewfpk [mfewfpk.sys]
SUPPRIMÉ Clé: HKLM\SOFTWARE\McAfee [McAfee]
SUPPRIMÉ Clé: HKLM\SOFTWARE\McAfee.com [McAfee.com]
SUPPRIMÉ Clé: HKCU\SOFTWARE\McAfee [McAfee]
ABSENT Clé: HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\McAfee
SUPPRIMÉ Clé: HKCU\SOFTWARE\Glarysoft [Glarysoft]
ABSENT Clé: HKU\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Glarysoft
SUPPRIMÉ Valeur: SUPERAntiSpyware [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: SUPERAntiSpyware [HKEY_USERS\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: SunJavaUpdateSched [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: GUDelayStartup [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: GUDelayStartup [HKEY_USERS\S-1-5-21-2421727777-1266462351-3257151019-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
---\\ COMMANDE. (7)
~ EmptyCSID: Dossiers CLSID vides supprimés (1)
~ EmptyTemp: Dossier Local temp partiellement vidé (6)
~ EmptyFlash: Dossier FlashPlayer vide.
~ Command spéciale exécutée avec succès: ipconfig /flushdns
~ Command spéciale exécutée avec succès: netsh winsock reset
~ Command spéciale exécutée avec succès: netsh advfirewall reset
~ Command spéciale exécutée avec succès: Netsh advfirewall set allprofiles state on
---\\ NON TRAITÉ. (2)
[MD5.98E06CAC2C508118450095E581202230] - (.SUPERAntiSpyware.com - Core Service.) -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
[MD5.B73B1FE9A691643BB5DA393E32EC3540] - (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
~ Le système a été redémarré.
***** ~ Fin de rapport terminé en 00h01mn35s