~ ZHPCleaner v2016.7.30.92 by Nicolas Coolman (2016/07/30)
~ Run by Marawan (Administrator) (30/07/2016 22:35:20)
~ Site : https://www.nicolascoolman.com
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\Marawan\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Marawan\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 8.1 Pro, 64-bit (Build 9600)


---\\ Services (0)
~ No malicious or unnecessary items found.


---\\ Browser internet (0)
~ No malicious or unnecessary items found.


---\\ Hosts file (1)
~ The hosts file is legitimate (21)


---\\ Scheduled automatic tasks. (4)
DELETED task: [AutoKMS] [C:\Windows\AutoKMS\AutoKMS.exe (Not File) ] =>HackTool.AutoKMS
DELETED task: [DLL-Files FixerASKUSER] [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe (Not File) ] =>PUP.Optional.DllFilesFixer
DELETED task: [DLL-Files.Com Fixer_MONTHLY] [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe (Not File) ] =>PUP.Optional.DllFilesFixer
DELETED task: [DLL-Files.Com Fixer_Updates] [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe (Not File) ] =>PUP.Optional.DllFilesFixer


---\\ Explorer ( File, Folder) (21)
MOVED file: C:\Users\Marawan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Dll-Files Fixer.lnk [Bad : C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe] =>PUP.Optional.DllFilesFixer
MOVED file: C:\Users\Public\Desktop\Dll-Files Fixer.lnk [Bad : C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe] =>PUP.Optional.DllFilesFixer
MOVED file: C:\Windows\AutoKMS\AutoKMS.exe [CODYQX4 - AutoKMS] =>HackTool.AutoKMS
MOVED file: C:\Windows\Tasks\DLL-Files FixerASKUSER.job =>PUP.Optional.DllFilesFixer
MOVED file: C:\Windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job =>PUP.Optional.DllFilesFixer
MOVED file: C:\Windows\Tasks\DLL-Files.Com Fixer_Updates.job =>PUP.Optional.DllFilesFixer
MOVED file: C:\Users\Marawan\Downloads\dffsetup-d3dx9_43.exe [Dll-Files.com - Dll-Files Fixer] =>PUP.Optional.DllFilesFixer
MOVED file: C:\Users\Marawan\Downloads\dffsetup-xinput1_3.exe [Dll-Files.com - Dll-Files Fixer] =>PUP.Optional.DllFilesFixer
MOVED file: C:\Users\Marawan\AppData\Local\Microsoft\Windows\INetCache\IE\6R70N9BL\OCSetupHlp[1].dll [OpenCandy, Inc. - Rec Helper p104] =>PUP.Optional.OpenCandy
MOVED file: C:\Windows\AutoKMS\AutoKMS.log =>HackTool.AutoKMS
MOVED folder: C:\Program Files (x86)\Dll-Files.com Fixer =>PUP.Optional.DllFilesFixer
MOVED folder: C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS
MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dll-Files Fixer =>PUP.Optional.DllFilesFixer
MOVED folder: C:\Windows\AutoKMS =>HackTool.AutoKMS
MOVED folder: C:\Users\Marawan\AppData\Roaming\dll-files.com =>PUP.Optional.DllFilesFixer
MOVED folder: C:\Users\Marawan\AppData\Local\CrashRpt =>.Superfluous.CrashReports
MOVED folder: C:\Windows\Installer\MSI2673.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6DE7.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI70A7.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI948E.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI977E.tmp- =>Empty


---\\ Registry ( Key, Value, Data) (12)
DELETED key*: HKEY_USERS\S-1-5-21-4280967382-986636991-3478002908-1001\SOFTWARE\dll-files.com [] =>PUP.Optional.DllFilesFixer
DELETED key: HKCU\Software\dll-files.com [] =>PUP.Optional.DllFilesFixer
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\dll-files.com [] =>PUP.Optional.DllFilesFixer
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} [ITool] =>Toolbar.Ask
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Dll-Files Fixer_is1 [Dll-Files.com] =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{863BBB38-466F-4C99-B54E-3A00E7D2B632} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe] =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{D26C5967-D8C4-4D08-8F59-EE7F0B660C90} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe] =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{9142E743-47C2-4D57-A7E6-4CE2A5914769} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe] =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{C4C4D6A2-E896-42F5-B2FC-A38450573299} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe] =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{097C7EA3-8023-446D-A9D6-F4AEA5D4D447} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe] =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{017E08E5-7994-4B5C-8CD4-F59A240ACB58} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe] =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{FF836A90-18A1-4B1F-B3B3-CBFC139EBCD2} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe] =>PUP.Optional.DllFilesFixer


---\\ Summary of the elements found (5)
https://www.anti-malware.top/2016/05/04/hacktool-autokms/ =>HackTool.AutoKMS
https://www.nicolascoolman.fr/pup-optional-dllfilesfixer/ =>PUP.Optional.DllFilesFixer
https://www.nicolascoolman.fr/?p=197 =>PUP.Optional.OpenCandy
https://www.nicolascoolman.fr/?p=5145 =>.Superfluous.CrashReports
https://www.nicolascoolman.fr/?p=235 =>Toolbar.Ask


---\\ Other deletions. (3)
~ Registry Keys Tracing deleted (3)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Mozilla Firefox)
~ Browser not found (Opera Software)


---\\ Statistics
~ Items scanned : 248
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 37


~ End of clean in 00h00mn23s
~====================
ZHPCleaner-[R]-30072016-22_35_43.txt
ZHPCleaner-[S]-30072016-22_35_05.txt