ZHPCleaner v2020.4.27.194 by Nicolas Coolman (2020/04/27) ~ Run by Elena (Administrator) (02/05/2020 18:12:41) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Legal ~ Type : Reparar ~ Report : C:\Users\Elena\Desktop\ZHPCleaner (R).txt ~ Quarantine : C:\Users\Elena\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Home, 64-bit (Build 18362) ---\ Alternate Data Stream (ADS). (0) ~ No malintencionados o innecesarios artículos encontrados. (ADS) ---\ Servicios (0) ~ No malintencionados o innecesarios artículos encontrados. (Servicio) ---\ Navegadores de Internet (0) ~ No malintencionados o innecesarios artículos encontrados. (Navegador) ---\ Hosts carpeta (2) REEMPLAZO: ?? Número de redirecciones encontrados 1/4 ---\ Tareas automáticas programadas. (0) ~ No malintencionados o innecesarios artículos encontrados. (Tarea) ---\ Explorador ( Archivos, Carpetas ) (4) MOVIDO carpeta: C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filtering.dll [Visicom Media Inc. - Anti-phishing Domain Advisor (Powered by Pa] =>.SUP.VisicomMedia MOVIDO carpeta: C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filtering.exe [Visicom Media Inc. - Anti-phishing Domain Advisor (Powered by Pa] =>.SUP.VisicomMedia MOVIDO archivo: C:\ProgramData\Mobile Partner =>Toolbar.YahooPartner MOVIDO archivo: C:\Users\Elena\AppData\Local\Google\Update =>Heuristic.Suspect ---\ Registro ( Claves, Valores, Datos) (32) BORRADOS clave*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Panda Security URL Filtering ['C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filtering.exe' (Not File)] =>SUP.Optional.StartSearch BORRADOS clave*: HKLM\SOFTWARE\Wow6432Node\pandasecuritytb [AdditionalScan 323] =>.SUP.VisicomMedia BORRADOS clave**: HKLM\SOFTWARE\pandasecuritytb [AdditionalScan 458] =>.SUP.VisicomMedia BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\account.booking.com [] =>PUP.Optional.Booking BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\akamaihd.net [] =>.SUP.AkamaiHD BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\akamaized.net [] =>.SUP.AkamaiHD BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\booking.com [] =>PUP.Optional.Booking BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\engine.witbooking.com [] =>PUP.Optional.Booking BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\grupotortuga.com [] =>PUP.Optional.Tortuga BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\hivemedia.akamaized.net [] =>.SUP.AkamaiHD BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\opinionstage.com [] =>PUP.Optional.OnStage BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\secure.booking.com [] =>PUP.Optional.Booking BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\witbooking.com [] =>PUP.Optional.Booking BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.booking.com [] =>PUP.Optional.Booking BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.opinionstage.com [] =>PUP.Optional.OnStage BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\account.booking.com [28] =>PUP.Optional.Booking BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\akamaihd.net [] =>.SUP.AkamaiHD BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\akamaized.net [] =>.SUP.AkamaiHD BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\booking.com [] =>PUP.Optional.Booking BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\engine.witbooking.com [401] =>PUP.Optional.Booking BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\grupotortuga.com [] =>PUP.Optional.Tortuga BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\hivemedia.akamaized.net [40] =>.SUP.AkamaiHD BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\opinionstage.com [] =>PUP.Optional.OnStage BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\secure.booking.com [166] =>PUP.Optional.Booking BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\witbooking.com [] =>PUP.Optional.Booking BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.booking.com [2246] =>PUP.Optional.Booking BORRADOS clave*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.opinionstage.com [] =>PUP.Optional.OnStage BORRADOS clave**: [X64] HKLM\SOFTWARE\Wow6432Node\pandasecuritytb [] =>.SUP.VisicomMedia BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9B9BF5E1-0E0E-418D-B9C7-7A7EB56B22B3} [C:\Program Files (x86)\pandasecuritytb (Not File)] =>.SUP.VisicomMedia BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} [C:\Program Files (x86)\pandasecuritytb (Not File)] =>.SUP.VisicomMedia BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ba20b5da-0f48-40c5-b8c9-2cda4ecf75c2} [C:\Program Files (x86)\Toolbar Cleaner (Not File)] =>PUP.Optional.ToolbarCleaner BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB2DE08D-AF76-42f2-80E9-E5EEE624A973} [C:\Program Files (x86)\pandasecuritytb (Not File)] =>.SUP.VisicomMedia ---\ Resumen de elementos en su estación de trabajo (9) https://nicolascoolman.eu/2017/03/18/superfluous-visicommedia/ =>.SUP.VisicomMedia https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>Toolbar.YahooPartner https://nicolascoolman.eu/wp-content/uploads/2019/01/Informations-Sécurité-Zone-antimalware.jpg =>Heuristic.Suspect https://nicolascoolman.eu/2017/09/11/sup-startsearch/ =>SUP.Optional.StartSearch https://nicolascoolman.eu/forum/Topic/booking-logiciel-potentiellement-indesirable-pup-lpi/ =>PUP.Optional.Booking https://nicolascoolman.eu/2017/12/26/sup-akamaihd/ =>.SUP.AkamaiHD https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Tortuga https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.OnStage https://www.nicolascoolman.com/fr/pup-toolbarcleaner/ =>PUP.Optional.ToolbarCleaner ---\ Limpieza adicional. (5) ~ Clave de registro Tracing borrados (5) ~ Quitar los antiguos informes de ZHPCleaner. (0) ---\ Resultado de la reparación. ~ Reparación llevada a cabo con éxito ~ Google Chrome OK ~ Internet Explorer OK ~ Opera OK ---\ STATISTIQUES ~ Items escaneado : 1325 ~ Items encontrado : 0 ~ artículos cancelados : 0 ~ Ahorro de espacio (bytes) : 0 ~ Items opciones : 8/15 ---\ OPCIONES NO ACTIVAS ~ Análisis temporal de archivos ~ Análisis temporal de carpetas ~ Análisis de CLSID de carpetas vacías ~ Vaciar otro análisis de carpetas ~ Análisis de carpetas locales vacías ~ Análisis de archivos de instalación obsoleto ~ End of clean in 00h01mn59s ---\ Reporte (2) ZHPCleaner-[S]-02052020-18_09_18.txt ZHPCleaner-[R]-02052020-18_14_40.txt ZHPCleaner Report