~ ZHPFix v2019.1.11.7 by Nicolas Coolman (2019/01/11) ~ Run by USER (Administrator) (13/01/2019 23:13:17) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Certificate ZHPFix: Legal ~ State version : Version OK ~ Report : C:\Users\USER\Desktop\ZHPFix.txt ~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\ ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601) ---\\ SCRIPT DE L'UTILISATEUR. (48) Script ZHPFix EmptyCLSID Emptytemp EmptyFlash M1 - SPR:Search Page Redirection - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} M1 - SPR:Search Page Redirection - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} P2 - EXT FILE: (.Avast Software s.r.o - .) -- C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\p3xnvjmw.default-1401613206752-1505290545785-1505294287087\extensions\sp@avast.com.xpi =>.Avast Software s.r.o P2 - EXT FILE: (.Avast Online Security - Avast Browser Security and Web Reputat.) -- C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\p3xnvjmw.default-1401613206752-1505290545785-1505294287087\extensions\wrc@avast.com.xpi =>.Avast Online Security P2 - EXT FILE: (.Avast Software s.r.o - .) -- C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\v6gghdl6.default-1401613206752-1505294336944-1505294443019\extensions\sp@avast.com.xpi =>.Avast Software s.r.o P2 - EXT FILE: (.Avast Online Security - Avast Browser Security and Web Reputat.) -- C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\v6gghdl6.default-1401613206752-1505294336944-1505294443019\extensions\wrc@avast.com.xpi =>.Avast Online Security P2 - EXT FILE: (.Avast Software s.r.o - .) -- C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2wvdzxjf.default-1401613206752-1505294458921-1505296487196\extensions\sp@avast.com.xpi =>.Avast Software s.r.o P2 - EXT FILE: (.Avast Online Security - Avast Browser Security and Web Reputat.) -- C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2wvdzxjf.default-1401613206752-1505294458921-1505296487196\extensions\wrc@avast.com.xpi =>.Avast Online Security P2 - EXT FILE: (.AdBlocker for YouTube™ - Removes all annoying Ads and banners f.) -- C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\4nbygz0o.default-1401613206752-1540504245649\extensions\jid1-q4sG8pYhq8KGHs@jetpack.xpi =>.AdBlocker for YouTube™ P2 - EXT FILE: (.Avast Online Security - Avast Browser Security and Web Reputat.) -- C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\4nbygz0o.default-1401613206752-1540504245649\extensions\wrc@avast.com.xpi =>.Avast Online Security P2 - EXT FILE: (.Microsoft Corporation - np-mswmp.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\np-mswmp.dll =>.Microsoft Corporation® P2 - EXT FILE: (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll =>.Adobe Systems, Incorporated® P2 - EXT FILE: (.Adobe Inc. - Acrobate Reader.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.FRA =>.Adobe Inc. P2 - EXT FILE: (.Apple Inc. - The QuickTime Plugin allows you to view a w.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin6.dll =>.Apple Inc. P2 - EXT FILE: (.Apple Inc. - The QuickTime Plugin allows you to view a w.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin7.dll =>.Apple Inc. P2 - EXT FILE: (.Microsoft Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\WMP Firefox Plugin License.rtf =>.Microsoft Corporation P2 - EXT FILE: (.Microsoft Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\WMP Firefox Plugin RelNotes.txt =>.Microsoft Corporation P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi =>.Mozilla Corporation P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\aushelper@mozilla.org.xpi =>.Mozilla Corporation P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\clicktoplay-rollout@mozilla.org.xpi =>.Mozilla Corporation P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi =>.Mozilla Corporation P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi =>.Mozilla Corporation P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\followonsearch@mozilla.com.xpi =>.Mozilla Corporation P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi =>.Mozilla Corporation P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\onboarding@mozilla.org.xpi =>.Mozilla Corporation P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi =>.Mozilla Corporation P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\shield-recipe-client@mozilla.org.xpi =>.Mozilla Corporation P2 - EXT FILE: (.webcompat.com.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi =>.webcompat.com O4 - GS\Desktop [Administrateur]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\USER\Desktop\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Programs [Administrateur]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\USER\Desktop\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Desktop [ASPNET]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\USER\Desktop\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Programs [ASPNET]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\USER\Desktop\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Desktop [USER]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\USER\Desktop\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Programs [USER]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\USER\Desktop\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Programs [Public]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\USER\Desktop\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O42 - Logiciel: Mozilla Firefox 49.0.1 (x64 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 49.0.1 (x64 fr) =>.Mozilla Corporation® O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM][64Bits] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} =>.Microsoft Corp O43 - CFD: 07/10/2017 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla O43 - CFD: 13/01/2019 - [] D -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla O43 - CFD: 25/10/2018 - [] D -- C:\Users\USER\Desktop\Anciennes données de Firefox O90 - PUC: "6BBFDF96D153C8B4988D68D79C0D2A4A" [HKCU] . (.Windows Media Player Firefox Plugin.) =>.Microsoft Corporation O90 - PUC: "6BBFDF96D153C8B4988D68D79C0D2A4A" [HKU] . (.Windows Media Player Firefox Plugin.) =>.Microsoft Corporation C:\Windows\System32\drivers\04531413.sys C:\Windows\System32\drivers\065F14C4.sys ---\\ LOGICIEL. (2) DESINSTALLER : Mozilla Firefox 49.0.1 (x64 fr) DESINSTALLER : {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} ---\\ SERVICE. (0) ---\\ TÂCHE PLANIFIÉE. (0) ---\\ NAVIGATEUR INTERNET. (28) SUPPRIMÉ Redémarrage Fichier Firefox^: C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} SUPPRIMÉ Redémarrage Fichier Firefox^: C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} DEPLACÉ Fichier Firefox: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\p3xnvjmw.default-1401613206752-1505290545785-1505294287087\extensions\sp@avast.com.xpi DEPLACÉ Fichier Firefox: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\p3xnvjmw.default-1401613206752-1505290545785-1505294287087\extensions\wrc@avast.com.xpi DEPLACÉ Fichier Firefox: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\v6gghdl6.default-1401613206752-1505294336944-1505294443019\extensions\sp@avast.com.xpi DEPLACÉ Fichier Firefox: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\v6gghdl6.default-1401613206752-1505294336944-1505294443019\extensions\wrc@avast.com.xpi DEPLACÉ Fichier Firefox: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2wvdzxjf.default-1401613206752-1505294458921-1505296487196\extensions\sp@avast.com.xpi DEPLACÉ Fichier Firefox: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2wvdzxjf.default-1401613206752-1505294458921-1505296487196\extensions\wrc@avast.com.xpi DEPLACÉ Fichier Firefox: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\4nbygz0o.default-1401613206752-1540504245649\extensions\jid1-q4sG8pYhq8KGHs@jetpack.xpi DEPLACÉ Fichier Firefox: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\4nbygz0o.default-1401613206752-1540504245649\extensions\wrc@avast.com.xpi DEPLACÉ Fichier Firefox: C:\Program Files (x86)\Mozilla Firefox\Plugins\np-mswmp.dll DEPLACÉ Fichier Firefox: C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll DEPLACÉ Fichier Firefox: C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.FRA DEPLACÉ Fichier Firefox: C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin6.dll DEPLACÉ Fichier Firefox: C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin7.dll DEPLACÉ Fichier Firefox: C:\Program Files (x86)\Mozilla Firefox\Plugins\WMP Firefox Plugin License.rtf DEPLACÉ Fichier Firefox: C:\Program Files (x86)\Mozilla Firefox\Plugins\WMP Firefox Plugin RelNotes.txt DEPLACÉ Fichier Firefox: C:\Program Files\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi DEPLACÉ Fichier Firefox: C:\Program Files\Mozilla Firefox\browser\features\aushelper@mozilla.org.xpi DEPLACÉ Fichier Firefox: C:\Program Files\Mozilla Firefox\browser\features\clicktoplay-rollout@mozilla.org.xpi DEPLACÉ Fichier Firefox: C:\Program Files\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi DEPLACÉ Fichier Firefox: C:\Program Files\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi DEPLACÉ Fichier Firefox: C:\Program Files\Mozilla Firefox\browser\features\followonsearch@mozilla.com.xpi DEPLACÉ Fichier Firefox: C:\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi DEPLACÉ Fichier Firefox: C:\Program Files\Mozilla Firefox\browser\features\onboarding@mozilla.org.xpi DEPLACÉ Fichier Firefox: C:\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi DEPLACÉ Fichier Firefox: C:\Program Files\Mozilla Firefox\browser\features\shield-recipe-client@mozilla.org.xpi DEPLACÉ Fichier Firefox: C:\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi ---\\ EXPLORATEUR ( Dossiers, Fichiers ). (14) DEPLACÉ Fichier Temp: C:\Users\USER\AppData\Local\Temp\moz-update-new-backup-update.log DEPLACÉ Fichier Temp: C:\Users\USER\AppData\Local\Temp\moz-update-new-last-update.log DEPLACÉ Fichier Temp: C:\Users\USER\AppData\Local\Temp\~DF8778FB131BF70033.TMP DEPLACÉ Fichier Temp: C:\Users\USER\AppData\Local\Temp\~DF87ACFC5381E73CC4.TMP DEPLACÉ Fichier Temp: C:\Users\USER\AppData\Local\Temp\~DFB2EB4F0EFDB087EA.TMP SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\USER\AppData\Local\Temp\~DFEB3D7CACAAC37E27.TMP SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\USER\AppData\Local\Temp\~nsuA.tmp SUPPRIMÉ Redémarrage Fichier Temp^: C:\Users\USER\AppData\Local\Temp\FXSAPIDebugLogFile.txt DEPLACÉ Fichier Shortcut: C:\Users\USER\Desktop\Tor Browser\Browser\firefox.exe DEPLACÉ Fichier Shortcut: C:\Users\USER\Desktop\Start Tor Browser.lnk DEPLACÉ Fichier Shortcut: C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk SUPPRIMÉ Dossier : C:\Program Files\Mozilla Firefox SUPPRIMÉ Dossier : C:\Program Files (x86)\Mozilla Firefox SUPPRIMÉ Dossier : C:\Users\USER\Desktop\Anciennes données de Firefox ---\\ REGISTRE ( Clés, Valeurs, Données ). (1) SUPPRIMÉ Clé Product: HKCU\Software\Microsoft\Installer\Products\6BBFDF96D153C8B4988D68D79C0D2A4A [] ---\\ COMMANDE. (3) ~ EmptyCSID: Dossiers CLSID vides supprimés (0) ~ EmptyTemp: Dossier Local temp partiellement vidé (8) ~ EmptyFlash: Fichiers Temporaires supprimés. (2) ---\\ NON TRAITÉ. (0) ~ Le système a été redémarré. ***** ~ Fin de rapport terminé en 00h00mn59s