~ ZHPCleaner v2017.9.16.160 by Nicolas Coolman (2017/09/16) ~ Run by kakou (Administrator) (17/09/2017 11:46:29) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Legal ~ Type : Scanner ~ Report : C:\Users\kakou\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\kakou\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 15063) ---\\ Service. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Navigateur internet. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Fichier hôte. (3) TROUVÉ: 5.149.252.98 www.gstatic.com =>Hijacker.Hosts TROUVÉ: 5.149.252.98 www.google-analytics.com =>Hijacker.Hosts ~ Nombre de redirections trouvées 2/27 ---\\ Tâche planifiée. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Explorateur ( Dossiers, Fichiers ). (8) TROUVÉ fichier: C:\Users\kakou\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gdkpgbhhfnpjiembbpifcpfalfnflmop_0.localstorage =>PUP.Optional.SoundCloud TROUVÉ fichier: C:\Users\kakou\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gdkpgbhhfnpjiembbpifcpfalfnflmop_0.localstorage-journal =>PUP.Optional.SoundCloud TROUVÉ dossier: C:\Users\kakou\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdkpgbhhfnpjiembbpifcpfalfnflmop =>PUP.Optional.SoundCloud TROUVÉ fichier: C:\Users\kakou\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_cdncache-a.akamaihd.net_0.localstorage =>.SUP.AkamaiHD TROUVÉ fichier: C:\Users\kakou\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_cdncache-a.akamaihd.net_0.localstorage-journal =>.SUP.AkamaiHD TROUVÉ fichier: C:\Users\kakou\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal =>.SUP.CloudfrontNet TROUVÉ dossier: C:\Program Files (x86)\QuickTime =>Riskware.QuickTime TROUVÉ dossier: C:\Users\kakou\AppData\Local\Google\Chrome\User Data\Default\File System\008 =>PUP.Optional.DomaIQ ---\\ Base de Registres ( Clés, Valeurs, Données ). (14) TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\009C97AC564155047B2CBE3F1B69313F [C:\ProgramData\Ableton\Live 8\Resources\Extensions\WebConnector\third_party\lib\pickle.pyc] =>Adware.Sambreel TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00EFC8A0C7903194FABC590EA610DA19 [C:\ProgramData\Ableton\Live 8\Resources\Extensions\WebConnector\third_party\lib\encodings\cp1251.pyc] =>Adware.Sambreel TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01039ADCA7B7054438828AFA15C151DC [C:\ProgramData\Ableton\Live 8\Resources\Extensions\WebConnector\third_party\lib\encodings\iso8859_9.pyc] =>Adware.Sambreel TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0144983128739AC44A19259D5D4FE4BA [C:\ProgramData\Ableton\Live 8\Resources\Extensions\WebConnector\third_party\lib\opcode.pyc] =>Adware.Sambreel TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\018D2DE6629A3FC43856DA93AD30337C [C:\ProgramData\Ableton\Live 8\Resources\Extensions\WebConnector\third_party\lib\encodings\iso2022_jp_2.pyc] =>Adware.Sambreel TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\019BB0109614AA24FBF9055A53709F2F [C:\ProgramData\Ableton\Live 8\Resources\Extensions\WebConnector\third_party\lib\encodings\iso2022_kr.pyc] =>Adware.Sambreel TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01BA46227BBF76F408C63A747D067D87 [C:\ProgramData\Ableton\Live 8\Resources\Extensions\WebConnector\third_party\lib\distutils\dep_util.pyc] =>Adware.Sambreel TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\027858DE560B48846B191A99FA95EE80 [C:\ProgramData\Ableton\Live 8\Resources\Extensions\WebConnector\third_party\site-packages\nose-1.1.2-py2.5.egg\nose\plugins\collect.pyc] =>Adware.Sambreel TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\03FC2F130EC7C234FB46202FD6DECD4A [C:\ProgramData\Ableton\Live 8\Resources\Extensions\WebConnector\third_party\site-packages\nose-1.1.2-py2.5.egg\nose\twistedtools.pyc] =>Adware.Sambreel TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05CF006F146F96449B78F315D6469761 [C:\ProgramData\Ableton\Live 8\Resources\Extensions\WebConnector\third_party\lib\distutils\archive_util.pyc] =>Adware.Sambreel TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0630D25DD5987F00B6A0CE8FF9637EF9 [02:\Software\Microsoft\IpOverUsbSdk\RPCSurrogate03\LocalAddress (Not File)] =>.SUP.PCSpeedUp TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063229F458D37D64B8891584CBC3FFF1 [C:\ProgramData\Ableton\Live 8\Resources\Extensions\WebConnector\third_party\lib\functools.pyc (Not File)] =>Adware.Sambreel TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0639FB7C3F3892E4E8782AB658AA0CE0 [02:\Software\Microsoft\Windows Kits\Installed Roots\10.0.15063.0\Installed Options\OptionId.UWPManaged (Not File)] =>PUP.Optional.WpManager TROUVÉ clé: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\06C64C0CDFB44B5B799CB2AE94026E00 [02:\Software\Microsoft\IpOverUsbSdk\RPCSurrogate07\DestinationAddress (Not File)] =>.SUP.PCSpeedUp ---\\ Récapitulatif des éléments trouvés sur votre station. (9) https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Hijacker.Hosts https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.SoundCloud https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.AkamaiHD https://nicolascoolman.eu/2017/02/02/superfluous-cloudfrontnet/ =>.SUP.CloudfrontNet https://nicolascoolman.eu/2017/01/15/riskware-quicktime/ =>Riskware.QuickTime https://www.nicolascoolman.com/fr/adware-domaiq/ =>PUP.Optional.DomaIQ https://www.nicolascoolman.com/fr/pup-optional-sambreel/ =>Adware.Sambreel https://nicolascoolman.eu/2017/03/05/superfluous-pcspeeduppro/ =>.SUP.PCSpeedUp https://www.anti-malware.top/2016/06/18/superfluous-wpmanager/ =>PUP.Optional.WpManager ---\\ Bilan de la réparation ~ Aucune réparation effectuée. ~ Ce navigateur est absent (Mozilla Firefox) ~ Ce navigateur est absent (Opera Software) ---\\ Statistiques ~ Items scannés : 92089 ~ Items trouvés : 27 ~ Items annulés : 0 ~ Items réparés : 0 ~ End of search in 00h10mn36s ~==================== ZHPCleaner-[S]-17092017-11_57_05.txt