Publicité
Publicité
Format du document : text/plain
Prévisualisation
~ ZHPFix v2021.8.10.319 by Nicolas Coolman (2021/08/10)
~ Run by LAID SOFI (Administrator) (05/11/2021 19:53:27)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\LAID SOFI\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Professional, 64-bit Service Pack 1 (Build 7601)
---\\ USER SCRIPT. (111)
ÿþScript ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
C:\Windows\Installer\56dc538.msp =>.SUP.Obsolete.Adobe
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
O108 - CMH1: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned]
O108 - CMH1: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.) [Unsigned]
O108 - CMH1: ANotepad++64 [64Bits] - {B298D29A-A6ED-11DE-BA8C-A68E55D89593} . (.Orphan.) [Unsigned]
O108 - CMH1: BB FlashBack 2 [64Bits] - {A8065B9E-193F-4797-B62D-8F6321E7FCCB} . (.Orphan.) [Unsigned]
O108 - CMH1: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Orphan.) [Unsigned]
O108 - CMH1: QuickShare [64Bits] - {A8065B9E-193F-4797-B62D-8F6321E7FCCB} . (.Orphan.) [Unsigned]
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH2: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH4: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned]
O108 - CMH4: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned]
O108 - CMH4: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.) [Unsigned]
O108 - CMH6: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Orphan.) [Unsigned]
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
C:\Windows\Installer\56dc538.msp =>.SUP.Obsolete.Adobe
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{03d2ddc7-98b7-4fca-9a88-50c18b82ba20}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{5ec79c58-65c3-4fc6-9c59-b9a5e20a829c}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{7eef1316-eed8-4846-a3d7-abdf4b61752c}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{c5f39a3a-4fc2-4e07-9609-95728fd4abc8}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O67 - Shell Spawning: < .bat> < batfile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: < .cpl> < cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: < .cmd> < cmdfile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: < .com> < comfile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: < .evt> < evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: < .exe> < exefile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: < .html> < htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft®
O67 - Shell Spawning: < .js> < JSFile>[HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value
O67 - Shell Spawning: < .reg> < regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: < .scr> < scrfile>[HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value
---\\ SOFTWARE. (0)
---\\ SERVICE. (0)
---\\ SCHEDULED TASK. (0)
---\\ INTERNET BROWSER. (0)
---\\ EXPLORER (folders, files). (56)
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\AdobeARM.log
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\chrome_installer.log
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\mb_setup.log
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\Microsoft Outlook Hotmail Connector (0).log
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\1a939789-f1e3-43f9-a8c2-03491a5a9f02.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\250d243a-64bd-4784-a4cf-6a569527ec65.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\2d1d1b12-327e-4c1d-8411-9e20b2cc44bb.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\2dcc065a-88df-49b4-ad42-f62bc0c903d6.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\31817136-1340-4ff8-87c8-f66b6962f3df.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\39be2eee-309a-496b-b64d-835cb2002cd7.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\3ac9dd55-0b8e-4d11-966d-fb07811623c4.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\4b926a7f-ee0d-431c-b797-9da5c415ed85.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\5071ac91-30f9-40e6-a0bc-2fb1f1455301.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\58381f90-6af2-4703-b8fe-7ecb1cc16790.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\58c57282-1b1d-498a-b0b8-b700df70d8a6.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\65edbe8e-b871-498b-a125-c2e385ee7afd.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\6a38ec5d-d446-4b5a-a74f-0104ba896964.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\6c302360-802f-4311-a08d-7deebcdc974b.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\6d7e72b7-425c-4556-940d-ad7bba783c2b.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\7a190427-d59e-4d01-a3d3-adbbbe71e002.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\7b822d62-afb4-45a8-a73b-9e37d34523af.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\81c82448-a53f-4538-a014-c040a8dc621f.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\843dab4a-000f-4b51-a4fa-abc9e3c758ad.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\8c9f9c43-b615-45af-9c40-790e09a89427.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\9a83b924-4bcc-469d-8f29-afe8a206e59e.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\a32c3d1f-791e-498a-b2a4-3a34d759c6b9.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\b228e722-e9fa-4a7a-a06f-be0f3ede1ecb.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\baa701d3-30e5-4b7d-b057-5574effea995.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\BCG2483.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\BCG2484.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\c92e58e4-43bb-40ca-94a9-0dd5ee96b372.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\d5d9dae6-892f-4023-aefc-84a8dde9aa93.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\e1fafd81-2e18-4dc3-aa33-2b004488da11.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\e8800616-1697-4f29-9368-6afbf0241c4f.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f1d442fb-0215-4205-8ab4-7b4fff28ed35.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f5ba7204-ce0b-4026-8970-776ffa23d252.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\f6b5ce02-e50a-4228-bdc8-bf7c8cdc84fe.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f702df34-0388-4842-b61a-160917f252a1.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f8e14f7a-045b-4158-b08a-375cdc95d4ba.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f924e5b7-6265-4f32-926d-65336bdf1a20.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\ffe4a1df-369e-4113-b888-51b3cec3fc7a.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\_iu14D2N.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF0962799E53031F9E.TMP
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF0DD87096CF007AD9.TMP
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF0F09F5F9E12B8347.TMP
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF1EFCD200A4CB920D.TMP
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF3F7B92CD6ED4E699.TMP
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF492F03A6629C4F71.TMP
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF6C4477E829F803F1.TMP
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DFA3568B4D0646AC76.TMP
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\~nsu.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\FXSAPIDebugLogFile.txt
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\Setup Log 2021-11-05 #001.txt
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\scoped_dir4132_2045212198
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\scoped_dir4808_1088731069
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\scoped_dir4808_915100407
---\\ REGISTRY (keys, values, data). (61)
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu [BriefcaseMenu ]
DELETED Reboot Key ^: HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}
DELETED Key: HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} [{85BBD920-42A0-1069-A2E4-08002B30309D} ]
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32 ]
NOT FOUND Key: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
NOT FOUND Key: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
NOT FOUND Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx
NOT FOUND Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip
DELETED Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu [BriefcaseMenu ]
DELETED Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32 ]
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\FileSyncEx
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\23170F69-40C1-278A-1000-000100020000}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\B298D29A-A6ED-11DE-BA8C-A68E55D89593}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\A8065B9E-193F-4797-B62D-8F6321E7FCCB}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\85BBD920-42A0-1069-A2E4-08002B30309D}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\B41DB860-8EE4-11D2-9906-E49FADC173CA}
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
NOT FOUND Key CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\FileSyncEx
NOT FOUND Key CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key: HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Data Shell Spawning: [HKLM\SOFTWARE\Classes\\]
DELETED Value: H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: F:\AutoRun.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\autorun.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\computer.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: F:\AutoRun.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\autorun.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\computer.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
---\\ COMMAND. (2)
~ EmptyPrefetch: deleted prefetcher files (130)
~ EmptyTemp: Local Temp folder partially emptied. (56)
---\\ UNPROCESSED. (2)
ÿþScript ZHPFix
FirewallRaz
~ The system has been restarted.
***** ~ End of report completed in 00h00mn21s
~ Run by LAID SOFI (Administrator) (05/11/2021 19:53:27)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Certificate ZHPFix: Legal
~ State version : Version OK
~ Report : C:\Users\LAID SOFI\Desktop\ZHPFix.txt
~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 7 Professional, 64-bit Service Pack 1 (Build 7601)
---\\ USER SCRIPT. (111)
ÿþScript ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
C:\Windows\Installer\56dc538.msp =>.SUP.Obsolete.Adobe
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
O108 - CMH1: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned]
O108 - CMH1: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.) [Unsigned]
O108 - CMH1: ANotepad++64 [64Bits] - {B298D29A-A6ED-11DE-BA8C-A68E55D89593} . (.Orphan.) [Unsigned]
O108 - CMH1: BB FlashBack 2 [64Bits] - {A8065B9E-193F-4797-B62D-8F6321E7FCCB} . (.Orphan.) [Unsigned]
O108 - CMH1: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Orphan.) [Unsigned]
O108 - CMH1: QuickShare [64Bits] - {A8065B9E-193F-4797-B62D-8F6321E7FCCB} . (.Orphan.) [Unsigned]
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH2: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH4: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned]
O108 - CMH4: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned]
O108 - CMH4: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.) [Unsigned]
O108 - CMH6: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Orphan.) [Unsigned]
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
C:\Windows\Installer\56dc538.msp =>.SUP.Obsolete.Adobe
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{03d2ddc7-98b7-4fca-9a88-50c18b82ba20}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{5ec79c58-65c3-4fc6-9c59-b9a5e20a829c}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{7eef1316-eed8-4846-a3d7-abdf4b61752c}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{c5f39a3a-4fc2-4e07-9609-95728fd4abc8}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O67 - Shell Spawning: < .bat> < batfile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: < .cpl> < cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: < .cmd> < cmdfile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: < .com> < comfile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: < .evt> < evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: < .exe> < exefile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: < .html> < htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft®
O67 - Shell Spawning: < .js> < JSFile>[HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value
O67 - Shell Spawning: < .reg> < regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: < .scr> < scrfile>[HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value
---\\ SOFTWARE. (0)
---\\ SERVICE. (0)
---\\ SCHEDULED TASK. (0)
---\\ INTERNET BROWSER. (0)
---\\ EXPLORER (folders, files). (56)
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\AdobeARM.log
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\chrome_installer.log
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\mb_setup.log
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\Microsoft Outlook Hotmail Connector (0).log
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\1a939789-f1e3-43f9-a8c2-03491a5a9f02.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\250d243a-64bd-4784-a4cf-6a569527ec65.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\2d1d1b12-327e-4c1d-8411-9e20b2cc44bb.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\2dcc065a-88df-49b4-ad42-f62bc0c903d6.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\31817136-1340-4ff8-87c8-f66b6962f3df.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\39be2eee-309a-496b-b64d-835cb2002cd7.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\3ac9dd55-0b8e-4d11-966d-fb07811623c4.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\4b926a7f-ee0d-431c-b797-9da5c415ed85.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\5071ac91-30f9-40e6-a0bc-2fb1f1455301.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\58381f90-6af2-4703-b8fe-7ecb1cc16790.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\58c57282-1b1d-498a-b0b8-b700df70d8a6.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\65edbe8e-b871-498b-a125-c2e385ee7afd.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\6a38ec5d-d446-4b5a-a74f-0104ba896964.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\6c302360-802f-4311-a08d-7deebcdc974b.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\6d7e72b7-425c-4556-940d-ad7bba783c2b.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\7a190427-d59e-4d01-a3d3-adbbbe71e002.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\7b822d62-afb4-45a8-a73b-9e37d34523af.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\81c82448-a53f-4538-a014-c040a8dc621f.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\843dab4a-000f-4b51-a4fa-abc9e3c758ad.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\8c9f9c43-b615-45af-9c40-790e09a89427.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\9a83b924-4bcc-469d-8f29-afe8a206e59e.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\a32c3d1f-791e-498a-b2a4-3a34d759c6b9.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\b228e722-e9fa-4a7a-a06f-be0f3ede1ecb.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\baa701d3-30e5-4b7d-b057-5574effea995.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\BCG2483.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\BCG2484.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\c92e58e4-43bb-40ca-94a9-0dd5ee96b372.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\d5d9dae6-892f-4023-aefc-84a8dde9aa93.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\e1fafd81-2e18-4dc3-aa33-2b004488da11.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\e8800616-1697-4f29-9368-6afbf0241c4f.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f1d442fb-0215-4205-8ab4-7b4fff28ed35.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f5ba7204-ce0b-4026-8970-776ffa23d252.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\f6b5ce02-e50a-4228-bdc8-bf7c8cdc84fe.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f702df34-0388-4842-b61a-160917f252a1.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f8e14f7a-045b-4158-b08a-375cdc95d4ba.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f924e5b7-6265-4f32-926d-65336bdf1a20.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\ffe4a1df-369e-4113-b888-51b3cec3fc7a.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\_iu14D2N.tmp
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF0962799E53031F9E.TMP
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF0DD87096CF007AD9.TMP
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF0F09F5F9E12B8347.TMP
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF1EFCD200A4CB920D.TMP
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF3F7B92CD6ED4E699.TMP
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF492F03A6629C4F71.TMP
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF6C4477E829F803F1.TMP
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DFA3568B4D0646AC76.TMP
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\~nsu.tmp
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\FXSAPIDebugLogFile.txt
MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\Setup Log 2021-11-05 #001.txt
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\scoped_dir4132_2045212198
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\scoped_dir4808_1088731069
DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\scoped_dir4808_915100407
---\\ REGISTRY (keys, values, data). (61)
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu [BriefcaseMenu ]
DELETED Reboot Key ^: HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}
DELETED Key: HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} [{85BBD920-42A0-1069-A2E4-08002B30309D} ]
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare
DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32 ]
NOT FOUND Key: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
NOT FOUND Key: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
NOT FOUND Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx
NOT FOUND Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip
DELETED Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu [BriefcaseMenu ]
DELETED Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32 ]
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\FileSyncEx
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\23170F69-40C1-278A-1000-000100020000}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\B298D29A-A6ED-11DE-BA8C-A68E55D89593}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\A8065B9E-193F-4797-B62D-8F6321E7FCCB}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\85BBD920-42A0-1069-A2E4-08002B30309D}
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare
NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\B41DB860-8EE4-11D2-9906-E49FADC173CA}
NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
NOT FOUND Key CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\FileSyncEx
NOT FOUND Key CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip
NOT FOUND Key CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key: HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}
NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu
NOT FOUND Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
NOT FOUND Data Shell Spawning: [HKLM\SOFTWARE\Classes\\]
DELETED Value: H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: F:\AutoRun.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\autorun.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\computer.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: F:\AutoRun.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: I:\APK\WORD BOOKS.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: G:\Download\android_root.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\autorun.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
DELETED Value: H:\computer.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
---\\ COMMAND. (2)
~ EmptyPrefetch: deleted prefetcher files (130)
~ EmptyTemp: Local Temp folder partially emptied. (56)
---\\ UNPROCESSED. (2)
ÿþScript ZHPFix
FirewallRaz
~ The system has been restarted.
***** ~ End of report completed in 00h00mn21s