Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPFix v2020.1.19.173 by Nicolas Coolman (2020/01/19)
~ Run by Daniel (Administrator) (29/01/2020 19:40:36)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\Daniel\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 18362)
---\\ SCRIPT DE L'UTILISATEUR. (82)
Start::
CreateRestorePoint
EmptyCLSID
EmptyFlash
EmptyTracing
EmptyPrefetch
EmptyProxy
TestSigningFix
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ALZip =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{4EB37360-49E8-11D3-95B5-004033382980} =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{4EB37360-49E8-11D3-95B5-004033382980} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\IObit Malware Fighter =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ALZip =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\IObit Malware Fighter =>.SUP.Orphan
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ALZip =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\ALZip =>.SUP.Orphan
HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\ALZip =>.SUP.Orphan
[HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastBrowserAutoLaunch_6C11B48B80641F442B678DFCEAB6480A =>PUP.Optional.MyBrowser
[HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GoogleChromeAutoLaunch_F99F5537A004AD18EB189A07977D6977 =>PUP.Optional.MyBrowser
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastBrowserAutoLaunch_6C11B48B80641F442B678DFCEAB6480A =>PUP.Optional.MyBrowser
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GoogleChromeAutoLaunch_F99F5537A004AD18EB189A07977D6977 =>PUP.Optional.MyBrowser
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:qBittorrent
[HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:qBittorrent
SR - Auto [13/02/2018] [ 178840] avgntflt (avgntflt) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avgntflt.sys =>.Avira Operations GmbH & Co. KG®
SR - System [13/02/2018] [ 169864] avipbb (avipbb) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avipbb.sys =>.Avira Operations GmbH & Co. KG®
SR - System [13/02/2018] [ 44488] avkmgr (avkmgr) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avkmgr.sys =>.Avira Operations GmbH & Co. KG®
SR - Demand [24/10/2018] [ 45056] Phantom TAP-Windows Adapter V9 (phantomtap) . (.The OpenVPN Project.) - C:\WINDOWS\System32\drivers\phantomtap.sys =>.Avira Operations GmbH & Co. KG®
SR - Demand [10/02/2017] [ 35784] TAP-Windows Adapter V9 (tap0901) . (.The OpenVPN Project.) - C:\WINDOWS\System32\drivers\tap0901.sys =>.Avira Operations GmbH & Co. KG®
G2 - GCE: Preference [Daniel][User Data\Default\Extensions] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Operations GmbH & Co. KG =>.Avira Software
G2 - GCE: Preference [Daniel][User Data\Default\Extensions] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Browser Safety =>.Avira Software
P2 - EXT: (.Avira - Avira Browser Safety.) -- C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\e1YVy467.default\extensions\abs@avira.com =>.Avira
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.avira.net/ =>.Avira Software
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.avira.net/ =>.Avira Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Avira SystrayStartTrigger =>.Avira Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:avgnt =>.Avira Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Avira System Speedup User Starter =>.Avira Software
C:\Users\Daniel\AppData\Local\AviraSpeedup =>.Avira Software
O58 - SDL:2018/02/13 12:58:16 A . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\WINDOWS\System32\drivers\avgntflt.sys [178840] =>.Avira Operations GmbH & Co. KG®
O58 - SDL:2018/02/13 12:58:16 A . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\WINDOWS\System32\drivers\avipbb.sys [169864] =>.Avira Operations GmbH & Co. KG®
O58 - SDL:2018/02/13 12:58:16 A . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\WINDOWS\System32\drivers\avkmgr.sys [44488] =>.Avira Operations GmbH & Co. KG®
O58 - SDL:2018/10/24 04:55:30 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver (NDIS 6..) -- C:\WINDOWS\System32\drivers\phantomtap.sys [45056] =>.Avira Operations GmbH & Co. KG®
O58 - SDL:2017/02/10 05:36:30 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver (NDIS 6..) -- C:\WINDOWS\System32\drivers\tap0901.sys [35784] =>.Avira Operations GmbH & Co. KG®
[3AEA7D79BC1D84D2E1AB0FFC8BC35658] [10/02/2017] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\drivers\tap0901.sys =>.Avira Operations GmbH & Co. KG
[3AEA7D79BC1D84D2E1AB0FFC8BC35658] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avkmgr.sys =>.Avira Operations GmbH & Co. KG
[76BA9423DDBCE7B145A95F01EE015F17] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avgntflt.sys =>.Avira Operations GmbH & Co. KG
[76BA9423DDBCE7B145A95F01EE015F17] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avipbb.sys =>.Avira Operations GmbH & Co. KG
[76BA9423DDBCE7B145A95F01EE015F17] [24/10/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\drivers\phantomtap.sys =>.Avira Operations GmbH & Co. KG
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:AvgUi =>.AVG Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:AVG_UI
HKLM\SOFTWARE\AVG =>.AVG Software
HKLM\SOFTWARE\WOW6432Node\AVG =>.AVG Software
HKCU\SOFTWARE\Avg =>.AVG Software
HKCU\SOFTWARE\Avg Secure Update =>.AVG Software
HKU\.DEFAULT\SOFTWARE\Avg Secure Update =>.AVG Software
HKU\.DEFAULT\SOFTWARE\AVG Web TuneUp =>.AVG Web TuneUp
HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Avg =>.AVG Software
HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Avg Secure Update =>.AVG Software
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen =>.AVG Software
C:\ProgramData\Avg =>.AVG Software
C:\ProgramData\Avg_Update_0516piz =>.AVG Software
C:\ProgramData\MFAData =>.AVG Software
C:\Users\Daniel\AppData\Roaming\AVG =>.AVG Software
C:\Users\Daniel\AppData\Local\Avg =>.AVG Software
C:\Users\Daniel\AppData\Local\AvgSetupLog =>.AVG Software
C:\Users\Daniel\AppData\Local\MFAData =>.AVG Software
[MD5.59D0F30F102B382B13DD66A97A09E110] [WIS][2016/09/05 20:57:59] (.AVG Technologies - Visual Studio 2012 x64 Redistributables.) -- C:\WINDOWS\Installer\21dae3c.msi [13684736] =>.AVG Technologies
[MD5.D7C8F629A87765492DAA8856DE7A9CCC] [WIS][2016/09/05 20:58:01] (.AVG Technologies CZ, s.r.o. - Visual Studio 2012 x86 Redistributables.) -- C:\WINDOWS\Installer\21dae3f.msi [40960] =>.AVG Technologies CZ, s.r.o.
C:\Program Files (x86)\AVG =>.AVG Software
HKLM\SOFTWARE\WOW6432Node\BraveSoftware =>.Brave Software Inc.
HKCU\SOFTWARE\BraveSoftware =>.Brave Software Inc.
HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\BraveSoftware =>.Brave Software Inc.
C:\Users\Daniel\AppData\Local\BraveSoftware =>.Brave Software Inc.
C:\Program Files (x86)\BraveSoftware =>.Brave Software Inc.
O87 - FAEL: "IIS-WebServerRole-FTP-Passive-In-TCP" [In-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-Out-TCP-989" [Out-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-In-TCP-990" [In-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-Out-TCP-20" [Out-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-In-TCP-21" [In-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
WinsockFix
EmptyRecycle
EmptyTemp
End::
---\\ LOGICIEL. (0)
---\\ SERVICE. (3)
REFUSÉ Service: HKLM\SYSTEM\CurrentControlSet\Services\avgntflt [avgntflt.sys]
REFUSÉ Service: HKLM\SYSTEM\CurrentControlSet\Services\avipbb [avipbb.sys]
REFUSÉ Service: HKLM\SYSTEM\CurrentControlSet\Services\avkmgr [avkmgr.sys]
---\\ TÂCHE PLANIFIÉE. (0)
---\\ NAVIGATEUR INTERNET. (4)
SUPPRIMÉ Dossier Chrome: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk
SUPPRIMÉ Redémarrage Fichier Firefox^: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\e1YVy467.default\extensions\abs@avira.com
REMPLACÉ Donnée Internet Explorer: http://search.avira.net/ [HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL]
REMPLACÉ Donnée Internet Explorer: http://search.avira.net/ [HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Search_URL]
---\\ EXPLORATEUR ( Dossiers, Fichiers ). (48)
SUPPRIMÉ Dossier EmptyCLSID: C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\Daniel\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
REFUSÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\avgntflt.sys
REFUSÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\avipbb.sys
REFUSÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\avkmgr.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\phantomtap.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\tap0901.sys
SUPPRIMÉ Dossier : C:\Users\Daniel\AppData\Local\AviraSpeedup
DEPLACÉ Fichier Drivers: C:\WINDOWS\System32\drivers\avgntflt.sys
DEPLACÉ Fichier Drivers: C:\WINDOWS\System32\drivers\avipbb.sys
DEPLACÉ Fichier Drivers: C:\WINDOWS\System32\drivers\avkmgr.sys
SUPPRIMÉ Dossier : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
SUPPRIMÉ Dossier : C:\ProgramData\Avg
SUPPRIMÉ Dossier : C:\ProgramData\Avg_Update_0516piz
SUPPRIMÉ Dossier : C:\ProgramData\MFAData
SUPPRIMÉ Dossier : C:\Users\Daniel\AppData\Roaming\AVG
SUPPRIMÉ Dossier : C:\Users\Daniel\AppData\Local\Avg
SUPPRIMÉ Dossier : C:\Users\Daniel\AppData\Local\AvgSetupLog
SUPPRIMÉ Dossier : C:\Users\Daniel\AppData\Local\MFAData
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\21dae3c.msi
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\21dae3f.msi
SUPPRIMÉ Dossier : C:\Program Files (x86)\AVG
SUPPRIMÉ Dossier : C:\Users\Daniel\AppData\Local\BraveSoftware
SUPPRIMÉ Dossier : C:\Program Files (x86)\BraveSoftware
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\AdobeARM.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-1312.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-1320.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-1368.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-1864.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-2008.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-4616.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-4968.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-5324.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-6212.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-6820.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-6824.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-700.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-712.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-7192.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-7240.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-8160.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-8300.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-8512.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-8888.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-9008.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\00879f64-dd84-4027-b868-01901f05b9e5.tmp
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\5b3cf33e-9145-42e4-b42d-c1c9917a80df.tmp
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\~3240600255.tmp
---\\ REGISTRE ( Clés, Valeurs, Données ). (39)
SUPPRIMÉ Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ALZip [ALZip ]
SUPPRIMÉ Clé: HKLM\Software\Classes\CLSID\{4EB37360-49E8-11D3-95B5-004033382980} [{4EB37360-49E8-11D3-95B5-004033382980} ]
SUPPRIMÉ Clé: HKLM\Software\Wow6432Node\Classes\CLSID\{4EB37360-49E8-11D3-95B5-004033382980} [{4EB37360-49E8-11D3-95B5-004033382980} ]
SUPPRIMÉ Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\IObit Malware Fighter [IObit Malware Fighter ]
SUPPRIMÉ Clé: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ALZip [ALZip ]
SUPPRIMÉ Clé: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\IObit Malware Fighter [IObit Malware Fighter ]
SUPPRIMÉ Clé: HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ALZip [ALZip ]
SUPPRIMÉ Clé: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\ALZip [ALZip ]
SUPPRIMÉ Clé: HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\ALZip [ALZip ]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\phantomtap [phantomtap.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\tap0901 [tap0901.sys]
SUPPRIMÉ Clé: HKLM\SOFTWARE\AVG [AVG ]
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\AVG [AVG ]
SUPPRIMÉ Clé: HKCU\SOFTWARE\Avg [Avg ]
SUPPRIMÉ Clé: HKCU\SOFTWARE\Avg Secure Update [Avg Secure Update ]
SUPPRIMÉ Clé: HKU\.DEFAULT\SOFTWARE\Avg Secure Update [Avg Secure Update ]
SUPPRIMÉ Clé: HKU\.DEFAULT\SOFTWARE\AVG Web TuneUp [AVG Web TuneUp ]
ABSENT Clé: HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Avg
ABSENT Clé: HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Avg Secure Update
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\BraveSoftware [BraveSoftware ]
SUPPRIMÉ Clé: HKCU\SOFTWARE\BraveSoftware [BraveSoftware ]
ABSENT Clé: HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\BraveSoftware
SUPPRIMÉ Valeur FirewallRules: IIS-WebServerRole-FTP-Passive-In-TCP [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: IIS-WebServerRole-FTP-Out-TCP-989 [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: IIS-WebServerRole-FTP-In-TCP-990 [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: IIS-WebServerRole-FTP-Out-TCP-20 [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: IIS-WebServerRole-FTP-In-TCP-21 [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
~ EmptyProxy: Aucune modification.
SUPPRIMÉ Valeur: AvastBrowserAutoLaunch_6C11B48B80641F442B678DFCEAB6480A [HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: GoogleChromeAutoLaunch_F99F5537A004AD18EB189A07977D6977 [HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: AvastBrowserAutoLaunch_6C11B48B80641F442B678DFCEAB6480A [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: GoogleChromeAutoLaunch_F99F5537A004AD18EB189A07977D6977 [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: qBittorrent [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: qBittorrent [HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: Avira SystrayStartTrigger [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: avgnt [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: Avira System Speedup User Starter [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: AvgUi [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: AVG_UI [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
---\\ COMMANDE. (9)
CreateRestorePoint: OK
~ EmptyCSID: Dossiers CLSID vides supprimés (2)
~ EmptyFlash: Dossier FlashPlayer vide.
~ EmptyTracing: Clés tracing supprimées (4)
~ EmptyPrefetch: Fichiers Prefetcher supprimés (181)
~ Command spéciale exécutée avec succès: TestSigningFix
~ Command spéciale exécutée avec succès: Winsock
~ EmptyRecycle: Corbeille vidée avec succès.
~ EmptyTemp: Dossier Local temp partiellement vidé (24)
---\\ NON TRAITÉ. (5)
[3AEA7D79BC1D84D2E1AB0FFC8BC35658] [10/02/2017] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\drivers\tap0901.sys
[3AEA7D79BC1D84D2E1AB0FFC8BC35658] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avkmgr.sys
[76BA9423DDBCE7B145A95F01EE015F17] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avgntflt.sys
[76BA9423DDBCE7B145A95F01EE015F17] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avipbb.sys
[76BA9423DDBCE7B145A95F01EE015F17] [24/10/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\drivers\phantomtap.sys
~ Le système a été redémarré.
***** ~ Fin de rapport terminé en 00h03mn34s
~ Run by Daniel (Administrator) (29/01/2020 19:40:36)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\Daniel\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit (Build 18362)
---\\ SCRIPT DE L'UTILISATEUR. (82)
Start::
CreateRestorePoint
EmptyCLSID
EmptyFlash
EmptyTracing
EmptyPrefetch
EmptyProxy
TestSigningFix
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ALZip =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{4EB37360-49E8-11D3-95B5-004033382980} =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{4EB37360-49E8-11D3-95B5-004033382980} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\IObit Malware Fighter =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ALZip =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\IObit Malware Fighter =>.SUP.Orphan
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ALZip =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\ALZip =>.SUP.Orphan
HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\ALZip =>.SUP.Orphan
[HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastBrowserAutoLaunch_6C11B48B80641F442B678DFCEAB6480A =>PUP.Optional.MyBrowser
[HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GoogleChromeAutoLaunch_F99F5537A004AD18EB189A07977D6977 =>PUP.Optional.MyBrowser
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastBrowserAutoLaunch_6C11B48B80641F442B678DFCEAB6480A =>PUP.Optional.MyBrowser
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GoogleChromeAutoLaunch_F99F5537A004AD18EB189A07977D6977 =>PUP.Optional.MyBrowser
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:qBittorrent
[HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:qBittorrent
SR - Auto [13/02/2018] [ 178840] avgntflt (avgntflt) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avgntflt.sys =>.Avira Operations GmbH & Co. KG®
SR - System [13/02/2018] [ 169864] avipbb (avipbb) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avipbb.sys =>.Avira Operations GmbH & Co. KG®
SR - System [13/02/2018] [ 44488] avkmgr (avkmgr) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avkmgr.sys =>.Avira Operations GmbH & Co. KG®
SR - Demand [24/10/2018] [ 45056] Phantom TAP-Windows Adapter V9 (phantomtap) . (.The OpenVPN Project.) - C:\WINDOWS\System32\drivers\phantomtap.sys =>.Avira Operations GmbH & Co. KG®
SR - Demand [10/02/2017] [ 35784] TAP-Windows Adapter V9 (tap0901) . (.The OpenVPN Project.) - C:\WINDOWS\System32\drivers\tap0901.sys =>.Avira Operations GmbH & Co. KG®
G2 - GCE: Preference [Daniel][User Data\Default\Extensions] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Operations GmbH & Co. KG =>.Avira Software
G2 - GCE: Preference [Daniel][User Data\Default\Extensions] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Browser Safety =>.Avira Software
P2 - EXT: (.Avira - Avira Browser Safety.) -- C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\e1YVy467.default\extensions\abs@avira.com =>.Avira
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.avira.net/ =>.Avira Software
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.avira.net/ =>.Avira Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Avira SystrayStartTrigger =>.Avira Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:avgnt =>.Avira Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Avira System Speedup User Starter =>.Avira Software
C:\Users\Daniel\AppData\Local\AviraSpeedup =>.Avira Software
O58 - SDL:2018/02/13 12:58:16 A . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\WINDOWS\System32\drivers\avgntflt.sys [178840] =>.Avira Operations GmbH & Co. KG®
O58 - SDL:2018/02/13 12:58:16 A . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\WINDOWS\System32\drivers\avipbb.sys [169864] =>.Avira Operations GmbH & Co. KG®
O58 - SDL:2018/02/13 12:58:16 A . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\WINDOWS\System32\drivers\avkmgr.sys [44488] =>.Avira Operations GmbH & Co. KG®
O58 - SDL:2018/10/24 04:55:30 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver (NDIS 6..) -- C:\WINDOWS\System32\drivers\phantomtap.sys [45056] =>.Avira Operations GmbH & Co. KG®
O58 - SDL:2017/02/10 05:36:30 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver (NDIS 6..) -- C:\WINDOWS\System32\drivers\tap0901.sys [35784] =>.Avira Operations GmbH & Co. KG®
[3AEA7D79BC1D84D2E1AB0FFC8BC35658] [10/02/2017] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\drivers\tap0901.sys =>.Avira Operations GmbH & Co. KG
[3AEA7D79BC1D84D2E1AB0FFC8BC35658] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avkmgr.sys =>.Avira Operations GmbH & Co. KG
[76BA9423DDBCE7B145A95F01EE015F17] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avgntflt.sys =>.Avira Operations GmbH & Co. KG
[76BA9423DDBCE7B145A95F01EE015F17] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avipbb.sys =>.Avira Operations GmbH & Co. KG
[76BA9423DDBCE7B145A95F01EE015F17] [24/10/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\drivers\phantomtap.sys =>.Avira Operations GmbH & Co. KG
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:AvgUi =>.AVG Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:AVG_UI
HKLM\SOFTWARE\AVG =>.AVG Software
HKLM\SOFTWARE\WOW6432Node\AVG =>.AVG Software
HKCU\SOFTWARE\Avg =>.AVG Software
HKCU\SOFTWARE\Avg Secure Update =>.AVG Software
HKU\.DEFAULT\SOFTWARE\Avg Secure Update =>.AVG Software
HKU\.DEFAULT\SOFTWARE\AVG Web TuneUp =>.AVG Web TuneUp
HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Avg =>.AVG Software
HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Avg Secure Update =>.AVG Software
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen =>.AVG Software
C:\ProgramData\Avg =>.AVG Software
C:\ProgramData\Avg_Update_0516piz =>.AVG Software
C:\ProgramData\MFAData =>.AVG Software
C:\Users\Daniel\AppData\Roaming\AVG =>.AVG Software
C:\Users\Daniel\AppData\Local\Avg =>.AVG Software
C:\Users\Daniel\AppData\Local\AvgSetupLog =>.AVG Software
C:\Users\Daniel\AppData\Local\MFAData =>.AVG Software
[MD5.59D0F30F102B382B13DD66A97A09E110] [WIS][2016/09/05 20:57:59] (.AVG Technologies - Visual Studio 2012 x64 Redistributables.) -- C:\WINDOWS\Installer\21dae3c.msi [13684736] =>.AVG Technologies
[MD5.D7C8F629A87765492DAA8856DE7A9CCC] [WIS][2016/09/05 20:58:01] (.AVG Technologies CZ, s.r.o. - Visual Studio 2012 x86 Redistributables.) -- C:\WINDOWS\Installer\21dae3f.msi [40960] =>.AVG Technologies CZ, s.r.o.
C:\Program Files (x86)\AVG =>.AVG Software
HKLM\SOFTWARE\WOW6432Node\BraveSoftware =>.Brave Software Inc.
HKCU\SOFTWARE\BraveSoftware =>.Brave Software Inc.
HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\BraveSoftware =>.Brave Software Inc.
C:\Users\Daniel\AppData\Local\BraveSoftware =>.Brave Software Inc.
C:\Program Files (x86)\BraveSoftware =>.Brave Software Inc.
O87 - FAEL: "IIS-WebServerRole-FTP-Passive-In-TCP" [In-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-Out-TCP-989" [Out-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-In-TCP-990" [In-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-Out-TCP-20" [Out-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-In-TCP-21" [In-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
WinsockFix
EmptyRecycle
EmptyTemp
End::
---\\ LOGICIEL. (0)
---\\ SERVICE. (3)
REFUSÉ Service: HKLM\SYSTEM\CurrentControlSet\Services\avgntflt [avgntflt.sys]
REFUSÉ Service: HKLM\SYSTEM\CurrentControlSet\Services\avipbb [avipbb.sys]
REFUSÉ Service: HKLM\SYSTEM\CurrentControlSet\Services\avkmgr [avkmgr.sys]
---\\ TÂCHE PLANIFIÉE. (0)
---\\ NAVIGATEUR INTERNET. (4)
SUPPRIMÉ Dossier Chrome: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk
SUPPRIMÉ Redémarrage Fichier Firefox^: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\e1YVy467.default\extensions\abs@avira.com
REMPLACÉ Donnée Internet Explorer: http://search.avira.net/ [HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL]
REMPLACÉ Donnée Internet Explorer: http://search.avira.net/ [HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Search_URL]
---\\ EXPLORATEUR ( Dossiers, Fichiers ). (48)
SUPPRIMÉ Dossier EmptyCLSID: C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
SUPPRIMÉ Dossier EmptyCLSID: C:\Users\Daniel\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
REFUSÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\avgntflt.sys
REFUSÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\avipbb.sys
REFUSÉ Fichier Service: C:\WINDOWS\System32\DRIVERS\avkmgr.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\phantomtap.sys
DEPLACÉ Fichier Service: C:\WINDOWS\System32\drivers\tap0901.sys
SUPPRIMÉ Dossier : C:\Users\Daniel\AppData\Local\AviraSpeedup
DEPLACÉ Fichier Drivers: C:\WINDOWS\System32\drivers\avgntflt.sys
DEPLACÉ Fichier Drivers: C:\WINDOWS\System32\drivers\avipbb.sys
DEPLACÉ Fichier Drivers: C:\WINDOWS\System32\drivers\avkmgr.sys
SUPPRIMÉ Dossier : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
SUPPRIMÉ Dossier : C:\ProgramData\Avg
SUPPRIMÉ Dossier : C:\ProgramData\Avg_Update_0516piz
SUPPRIMÉ Dossier : C:\ProgramData\MFAData
SUPPRIMÉ Dossier : C:\Users\Daniel\AppData\Roaming\AVG
SUPPRIMÉ Dossier : C:\Users\Daniel\AppData\Local\Avg
SUPPRIMÉ Dossier : C:\Users\Daniel\AppData\Local\AvgSetupLog
SUPPRIMÉ Dossier : C:\Users\Daniel\AppData\Local\MFAData
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\21dae3c.msi
DEPLACÉ Fichier Windows Installer: C:\WINDOWS\Installer\21dae3f.msi
SUPPRIMÉ Dossier : C:\Program Files (x86)\AVG
SUPPRIMÉ Dossier : C:\Users\Daniel\AppData\Local\BraveSoftware
SUPPRIMÉ Dossier : C:\Program Files (x86)\BraveSoftware
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\AdobeARM.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-1312.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-1320.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-1368.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-1864.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-2008.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-4616.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-4968.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-5324.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-6212.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-6820.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-6824.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-700.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-712.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-7192.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-7240.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-8160.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-8300.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-8512.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-8888.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\mat-debug-9008.log
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\00879f64-dd84-4027-b868-01901f05b9e5.tmp
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\5b3cf33e-9145-42e4-b42d-c1c9917a80df.tmp
DEPLACÉ Fichier Temp: C:\Users\Daniel\AppData\Local\Temp\~3240600255.tmp
---\\ REGISTRE ( Clés, Valeurs, Données ). (39)
SUPPRIMÉ Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ALZip [ALZip ]
SUPPRIMÉ Clé: HKLM\Software\Classes\CLSID\{4EB37360-49E8-11D3-95B5-004033382980} [{4EB37360-49E8-11D3-95B5-004033382980} ]
SUPPRIMÉ Clé: HKLM\Software\Wow6432Node\Classes\CLSID\{4EB37360-49E8-11D3-95B5-004033382980} [{4EB37360-49E8-11D3-95B5-004033382980} ]
SUPPRIMÉ Clé: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\IObit Malware Fighter [IObit Malware Fighter ]
SUPPRIMÉ Clé: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ALZip [ALZip ]
SUPPRIMÉ Clé: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\IObit Malware Fighter [IObit Malware Fighter ]
SUPPRIMÉ Clé: HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ALZip [ALZip ]
SUPPRIMÉ Clé: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\ALZip [ALZip ]
SUPPRIMÉ Clé: HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\ALZip [ALZip ]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\phantomtap [phantomtap.sys]
SUPPRIMÉ Clé Service: HKLM\SYSTEM\CurrentControlSet\Services\tap0901 [tap0901.sys]
SUPPRIMÉ Clé: HKLM\SOFTWARE\AVG [AVG ]
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\AVG [AVG ]
SUPPRIMÉ Clé: HKCU\SOFTWARE\Avg [Avg ]
SUPPRIMÉ Clé: HKCU\SOFTWARE\Avg Secure Update [Avg Secure Update ]
SUPPRIMÉ Clé: HKU\.DEFAULT\SOFTWARE\Avg Secure Update [Avg Secure Update ]
SUPPRIMÉ Clé: HKU\.DEFAULT\SOFTWARE\AVG Web TuneUp [AVG Web TuneUp ]
ABSENT Clé: HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Avg
ABSENT Clé: HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Avg Secure Update
SUPPRIMÉ Clé: HKLM\SOFTWARE\WOW6432Node\BraveSoftware [BraveSoftware ]
SUPPRIMÉ Clé: HKCU\SOFTWARE\BraveSoftware [BraveSoftware ]
ABSENT Clé: HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\BraveSoftware
SUPPRIMÉ Valeur FirewallRules: IIS-WebServerRole-FTP-Passive-In-TCP [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: IIS-WebServerRole-FTP-Out-TCP-989 [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: IIS-WebServerRole-FTP-In-TCP-990 [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: IIS-WebServerRole-FTP-Out-TCP-20 [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
SUPPRIMÉ Valeur FirewallRules: IIS-WebServerRole-FTP-In-TCP-21 [HKLM\SYSTEM\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]
~ EmptyProxy: Aucune modification.
SUPPRIMÉ Valeur: AvastBrowserAutoLaunch_6C11B48B80641F442B678DFCEAB6480A [HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: GoogleChromeAutoLaunch_F99F5537A004AD18EB189A07977D6977 [HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: AvastBrowserAutoLaunch_6C11B48B80641F442B678DFCEAB6480A [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: GoogleChromeAutoLaunch_F99F5537A004AD18EB189A07977D6977 [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: qBittorrent [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: qBittorrent [HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
SUPPRIMÉ Valeur: Avira SystrayStartTrigger [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: avgnt [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: Avira System Speedup User Starter [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: AvgUi [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
SUPPRIMÉ Valeur: AVG_UI [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]
---\\ COMMANDE. (9)
CreateRestorePoint: OK
~ EmptyCSID: Dossiers CLSID vides supprimés (2)
~ EmptyFlash: Dossier FlashPlayer vide.
~ EmptyTracing: Clés tracing supprimées (4)
~ EmptyPrefetch: Fichiers Prefetcher supprimés (181)
~ Command spéciale exécutée avec succès: TestSigningFix
~ Command spéciale exécutée avec succès: Winsock
~ EmptyRecycle: Corbeille vidée avec succès.
~ EmptyTemp: Dossier Local temp partiellement vidé (24)
---\\ NON TRAITÉ. (5)
[3AEA7D79BC1D84D2E1AB0FFC8BC35658] [10/02/2017] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\drivers\tap0901.sys
[3AEA7D79BC1D84D2E1AB0FFC8BC35658] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avkmgr.sys
[76BA9423DDBCE7B145A95F01EE015F17] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avgntflt.sys
[76BA9423DDBCE7B145A95F01EE015F17] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avipbb.sys
[76BA9423DDBCE7B145A95F01EE015F17] [24/10/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\drivers\phantomtap.sys
~ Le système a été redémarré.
***** ~ Fin de rapport terminé en 00h03mn34s