Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPFix v2021.4.11.290 by Nicolas Coolman (2021/04/11)
~ Run by LAID BEN ALI (Administrator) (15/05/2021 21:07:47)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\LAID BEN ALI\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro Education, 64-bit (Build 19042)
---\\ USER SCRIPT. (111)
Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
C:\Windows\Installer\56dc538.msp =>.SUP.Obsolete.Adobe
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
O108 - CMH1: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned]
O108 - CMH1: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.) [Unsigned]
O108 - CMH1: ANotepad++64 [64Bits] - {B298D29A-A6ED-11DE-BA8C-A68E55D89593} . (.Orphan.) [Unsigned]
O108 - CMH1: BB FlashBack 2 [64Bits] - {A8065B9E-193F-4797-B62D-8F6321E7FCCB} . (.Orphan.) [Unsigned]
O108 - CMH1: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Orphan.) [Unsigned]
O108 - CMH1: QuickShare [64Bits] - {A8065B9E-193F-4797-B62D-8F6321E7FCCB} . (.Orphan.) [Unsigned]
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH2: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH4: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned]
O108 - CMH4: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned]
O108 - CMH4: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.) [Unsigned]
O108 - CMH6: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Orphan.) [Unsigned]
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
C:\Windows\Installer\56dc538.msp =>.SUP.Obsolete.Adobe
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{03d2ddc7-98b7-4fca-9a88-50c18b82ba20}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{5ec79c58-65c3-4fc6-9c59-b9a5e20a829c}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{7eef1316-eed8-4846-a3d7-abdf4b61752c}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{c5f39a3a-4fc2-4e07-9609-95728fd4abc8}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O67 - Shell Spawning: <.bat>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.cpl>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.com>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.evt>[HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.exe>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.html>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft®
O67 - Shell Spawning: <.js>[HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value
O67 - Shell Spawning: <.reg>[HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.scr>[HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value
---\\ SOFTWARE. (0)
---\\ SERVICE. (0)
---\\ SCHEDULED TASK. (0)
---\\ INTERNET BROWSER. (0)
---\\ EXPLORER (folders, files). (1)
MOVED File : C:\Windows\Installer\56dc538.msp
---\\ REGISTRY (keys, values, data). (82)
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx [ FileSyncEx ]
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip [7-Zip ]
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 [ANotepad++64 ]
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 [BB FlashBack 2 ]
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu [BriefcaseMenu ]
DELETED Reboot Key ^: HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}
DELETED Reboot Key ^: HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare [QuickShare ]
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32 ]
NOT FOUND Key: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
DELETED Key: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 [WinRAR32 ]
DELETED Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx [ FileSyncEx ]
DELETED Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip [7-Zip ]
DELETED Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu [BriefcaseMenu ]
DELETED Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32 ]
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\23170F69-40C1-278A-1000-000100020000}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\B298D29A-A6ED-11DE-BA8C-A68E55D89593}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\A8065B9E-193F-4797-B62D-8F6321E7FCCB}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\85BBD920-42A0-1069-A2E4-08002B30309D}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\B41DB860-8EE4-11D2-9906-E49FADC173CA}
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
NOT FOUND Key CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx
NOT FOUND Key CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Key: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
NOT FOUND Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx
NOT FOUND Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer]
REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{03d2ddc7-98b7-4fca-9a88-50c18b82ba20}\\DhcpNameServer]
REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5ec79c58-65c3-4fc6-9c59-b9a5e20a829c}\\DhcpNameServer]
REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7eef1316-eed8-4846-a3d7-abdf4b61752c}\\DhcpNameServer]
REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{c5f39a3a-4fc2-4e07-9609-95728fd4abc8}\\DhcpNameServer]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\batfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\cplfile\shell\cplopen\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\cmdfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\comfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\evtfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\exefile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\htmlfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\jsfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\regfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\scrfile\shell\open\command\\]
DELETED Value: H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: F:\AutoRun.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\autorun.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\computer.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: F:\AutoRun.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\autorun.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\computer.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
---\\ COMMAND. (0)
---\\ UNPROCESSED. (2)
Script ZHPFix
FirewallRaz
~ The system has been restarted.
***** ~ End of report completed in 00h03mn17s
~ Run by LAID BEN ALI (Administrator) (15/05/2021 21:07:47)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\LAID BEN ALI\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Pro Education, 64-bit (Build 19042)
---\\ USER SCRIPT. (111)
Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
C:\Windows\Installer\56dc538.msp =>.SUP.Obsolete.Adobe
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
O108 - CMH1: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned]
O108 - CMH1: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.) [Unsigned]
O108 - CMH1: ANotepad++64 [64Bits] - {B298D29A-A6ED-11DE-BA8C-A68E55D89593} . (.Orphan.) [Unsigned]
O108 - CMH1: BB FlashBack 2 [64Bits] - {A8065B9E-193F-4797-B62D-8F6321E7FCCB} . (.Orphan.) [Unsigned]
O108 - CMH1: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Orphan.) [Unsigned]
O108 - CMH1: QuickShare [64Bits] - {A8065B9E-193F-4797-B62D-8F6321E7FCCB} . (.Orphan.) [Unsigned]
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH2: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH4: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned]
O108 - CMH4: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned]
O108 - CMH4: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.) [Unsigned]
O108 - CMH6: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Orphan.) [Unsigned]
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
C:\Windows\Installer\56dc538.msp =>.SUP.Obsolete.Adobe
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{03d2ddc7-98b7-4fca-9a88-50c18b82ba20}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{5ec79c58-65c3-4fc6-9c59-b9a5e20a829c}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{7eef1316-eed8-4846-a3d7-abdf4b61752c}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{c5f39a3a-4fc2-4e07-9609-95728fd4abc8}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O67 - Shell Spawning: <.bat>
O67 - Shell Spawning: <.cpl>
O67 - Shell Spawning: <.cmd>
O67 - Shell Spawning: <.com>
O67 - Shell Spawning: <.evt>
O67 - Shell Spawning: <.exe>
O67 - Shell Spawning: <.html>
O67 - Shell Spawning: <.js>
O67 - Shell Spawning: <.reg>
O67 - Shell Spawning: <.scr>
---\\ SOFTWARE. (0)
---\\ SERVICE. (0)
---\\ SCHEDULED TASK. (0)
---\\ INTERNET BROWSER. (0)
---\\ EXPLORER (folders, files). (1)
MOVED File : C:\Windows\Installer\56dc538.msp
---\\ REGISTRY (keys, values, data). (82)
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx [ FileSyncEx ]
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip [7-Zip ]
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 [ANotepad++64 ]
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 [BB FlashBack 2 ]
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu [BriefcaseMenu ]
DELETED Reboot Key ^: HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}
DELETED Reboot Key ^: HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare [QuickShare ]
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32 ]
NOT FOUND Key: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
DELETED Key: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 [WinRAR32 ]
DELETED Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx [ FileSyncEx ]
DELETED Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip [7-Zip ]
DELETED Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu [BriefcaseMenu ]
DELETED Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32 ]
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\23170F69-40C1-278A-1000-000100020000}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\B298D29A-A6ED-11DE-BA8C-A68E55D89593}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\A8065B9E-193F-4797-B62D-8F6321E7FCCB}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\85BBD920-42A0-1069-A2E4-08002B30309D}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\B41DB860-8EE4-11D2-9906-E49FADC173CA}
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
NOT FOUND Key CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx
NOT FOUND Key CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Key: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
NOT FOUND Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx
NOT FOUND Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer]
REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{03d2ddc7-98b7-4fca-9a88-50c18b82ba20}\\DhcpNameServer]
REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5ec79c58-65c3-4fc6-9c59-b9a5e20a829c}\\DhcpNameServer]
REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7eef1316-eed8-4846-a3d7-abdf4b61752c}\\DhcpNameServer]
REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{c5f39a3a-4fc2-4e07-9609-95728fd4abc8}\\DhcpNameServer]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\batfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\cplfile\shell\cplopen\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\cmdfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\comfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\evtfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\exefile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\htmlfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\jsfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\regfile\shell\open\command\\]
REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\scrfile\shell\open\command\\]
DELETED Value: H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: F:\AutoRun.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\autorun.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\computer.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: F:\AutoRun.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\autorun.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\computer.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
---\\ COMMAND. (0)
---\\ UNPROCESSED. (2)
Script ZHPFix
FirewallRaz
~ The system has been restarted.
***** ~ End of report completed in 00h03mn17s