~ ZHPCleaner v2016.12.30.225 by Nicolas Coolman (2016/12/30)
~ Run by USER (Administrator)  (30/12/2016 22:23:43)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : 
~ Type : Nettoyer
~ Report : C:\Users\USER\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\USER\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Professional, 64-bit  (Build 7600)


---\\  Service. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\  Navigateur internet. (1)
REMPLACÉ Google Chrome Preferences: "https://fb-s-d-a.akamaihd.net/"  =>.Superfluous.AkamaiHD


---\\  Fichier hôte. (1)
~ Le fichier hôte est légitime. (25)


---\\  Tâche planifiée. (0)
~ Aucun élément malicieux ou superflu trouvé.


---\\  Explorateur  ( Dossiers, Fichiers ). (11)
DEPLACÉ fichier: C:\Users\USER\AppData\Roaming\ApplicationHosting.dat    =>PUP.Optional.ApplicationHosting
DEPLACÉ fichier: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_cdncache-a.akamaihd.net_0.localstorage    =>.Superfluous.AkamaiHD
DEPLACÉ fichier: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_cdncache-a.akamaihd.net_0.localstorage-journal    =>.Superfluous.AkamaiHD
DEPLACÉ fichier: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d10lpsik1i8c69.cloudfront.net_0.localstorage    =>.Superfluous.CloudfrontNet
DEPLACÉ fichier: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d10lpsik1i8c69.cloudfront.net_0.localstorage-journal    =>.Superfluous.CloudfrontNet
DEPLACÉ fichier: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_s0ft4pc.com_0.localstorage    =>.Superfluous.EORezo
DEPLACÉ fichier: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_s0ft4pc.com_0.localstorage-journal    =>.Superfluous.EORezo
DEPLACÉ fichier: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.coupontime00.coupontime.co_0.localstorage    =>PUP.Optional.CouponTime
DEPLACÉ fichier: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.coupontime00.coupontime.co_0.localstorage-journal    =>PUP.Optional.CouponTime
DEPLACÉ fichier^: C:\Users\USER\AppData\Local\app    =>PUP.Optional.CrossRider
DEPLACÉ dossier: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\File System\008  =>PUP.Optional.DomaIQ


---\\  Base de Registres ( Clés, Valeurs, Données ). (21)
SUPPRIMÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch} [http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sN[...]] [Search the web]  =>PUP.Optional.IMBooster
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\ielnksrch [http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sN[...]] [Search the web]  =>PUP.Optional.IMBooster
SUPPRIMÉ donnée: [X64] HKLM\SOFTWARE\Classes\BaiduSparkHTML\Shell\Open\Command\\Default [Bad : [html] "C:\Program Files (x86)\baidu\Baidu Browser\Spark.exe" -- "%1"]  =>Broken.OpenCommand
SUPPRIMÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch} [http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoH2TlPbfGRogFok1dGdSxtSSRDeTxYkRgQEsutSwCJhN_UyMGRQBJC5aolADhufcigHczPOZDjZ9hUMjx9xX9F87pBrcuELYRJFoqMmpNL6aHsULFVAoQpwykajgmblZUFWjbPbFBxgaOImz88Hp7vOVh9CvXyiWRMxe4aA,&q={searchTerms}]  =>PUP.Optional.IMBooster
SUPPRIMÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\ielnksrch [http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoH2TlPbfGRogFok1dGdSxtSSRDeTxYkRgQEsutSwCJhN_UyMGRQBJC5aolADhufcigHczPOZDjZ9hUMjx9xX9F87pBrcuELYRJFoqMmpNL6aHsULFVAoQpwykajgmblZUFWjbPbFBxgaOImz88Hp7vOVh9CvXyiWRMxe4aA,&q={searchTerms}]  =>PUP.Optional.IMBooster
SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-506902913-3260032894-634671402-1000\SOFTWARE\InstallMonster []  =>Adware.InstallMonster
SUPPRIMÉ clé: HKCU\Software\InstallMonster []  =>Adware.InstallMonster
SUPPRIMÉ clé*: HKCU\Software\Mozilla\Extends []  =>PUP.Optional.FastStart
SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WdsManPro []  =>PUP.Optional.WdsManPro
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 []  =>.Superfluous.ByteFence
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS []  =>.Superfluous.ByteFence
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\4723_cor_istartsurf_RASAPI32 []  =>PUP.Optional.IsStart
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\4723_cor_istartsurf_RASMANCS []  =>PUP.Optional.IsStart
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\CloudPrinter_RASAPI32 []  =>.Superfluous.Linkury
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\CloudPrinter_RASMANCS []  =>.Superfluous.Linkury
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\InstallMonster_Download_Manager_RASAPI32 []  =>Adware.InstallMonster
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\InstallMonster_Download_Manager_RASMANCS []  =>Adware.InstallMonster
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WdsManPro_RASAPI32 []  =>PUP.Optional.WdsManPro
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WdsManPro_RASMANCS []  =>PUP.Optional.WdsManPro
SUPPRIMÉ valeur: HKLM64\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\\defsearchp@gmail.com [C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\ngfh75x1.default\extensions\defsearchp@gmail.com]  =>PUP.Optional.PriceFountain
SUPPRIMÉ valeur: HKLM64\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\SMΔRT-Protection [C:\Program Files (x86)\SMADAV\SMΔRTP.exe]  =>Heuristic.Salus


---\\  Récapitulatif des éléments trouvés sur votre station. (17)
https://www.nicolascoolman.com/fr/logiciels-superflus  =>.Superfluous.AkamaiHD
https://www.nicolascoolman.com/fr/repaquetage-et_infections/  =>PUP.Optional.ApplicationHosting
https://www.anti-malware.top/2016/08/31/cloudfront-net/  =>.Superfluous.CloudfrontNet
https://www.nicolascoolman.com/fr/pup-eorezo/  =>.Superfluous.EORezo
https://www.nicolascoolman.com/fr/repaquetage-et_infections/  =>PUP.Optional.CouponTime
https://www.anti-malware.top/2016/04/30/pup-optional-crossrider/  =>PUP.Optional.CrossRider
https://www.nicolascoolman.com/fr/adware-domaiq/  =>PUP.Optional.DomaIQ
https://www.nicolascoolman.com/fr/adware-imbooster/  =>PUP.Optional.IMBooster
https://www.nicolascoolman.com/fr/repaquetage-et_infections/  =>Broken.OpenCommand
https://www.nicolascoolman.com/fr/repaquetage-et_infections/  =>Adware.InstallMonster
https://www.nicolascoolman.com/fr/repaquetage-et_infections/  =>PUP.Optional.FastStart
https://www.anti-malware.top/2016/05/20/pup-optional-wdsmanpro/  =>PUP.Optional.WdsManPro
https://www.anti-malware.top/2016/04/29/superfluous-bytefence/  =>.Superfluous.ByteFence
https://www.nicolascoolman.com/fr/pup-isstart/  =>PUP.Optional.IsStart
https://www.anti-malware.top/2016/08/02/superfluous-linkury/  =>.Superfluous.Linkury
https://www.nicolascoolman.com/fr/repaquetage-et_infections/  =>PUP.Optional.PriceFountain
https://www.nicolascoolman.com/fr/repaquetage-et_infections/  =>Heuristic.Salus


---\\  Nettoyage Additionnel. (185)
~ Suppression des Clés de registre Tracing. (185)
~ Suppression des anciens rapports ZHPCleaner. (0)


---\\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Le système a été redémarré.


---\\ Statistiques
~ Items scannés : 3525
~ Items trouvés : 0
~ Items annulés : 0
~ Items réparés : 33


~ End of clean in 00h01mn07s
~====================
ZHPCleaner-[R]-30122016-22_24_50.txt
ZHPCleaner-[S]-30122016-22_23_22.txt