~ ZHPCleaner v2016.7.30.92 by Nicolas Coolman (2016/07/30)
~ Run by Marawan (Administrator)  (30/07/2016 22:35:20)
~ Site : https://www.nicolascoolman.com
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\Marawan\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Marawan\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 8.1 Pro, 64-bit  (Build 9600)


---\\  Services (0)
~ No malicious or unnecessary items found.


---\\  Browser internet (0)
~ No malicious or unnecessary items found.


---\\  Hosts file (1)
~ The hosts file is legitimate (21)


---\\  Scheduled automatic tasks. (4)
DELETED task: [AutoKMS] [C:\Windows\AutoKMS\AutoKMS.exe (Not File) ]  =>HackTool.AutoKMS
DELETED task: [DLL-Files FixerASKUSER] [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe (Not File) ]  =>PUP.Optional.DllFilesFixer
DELETED task: [DLL-Files.Com Fixer_MONTHLY] [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe (Not File) ]  =>PUP.Optional.DllFilesFixer
DELETED task: [DLL-Files.Com Fixer_Updates] [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe (Not File) ]  =>PUP.Optional.DllFilesFixer


---\\  Explorer ( File, Folder) (21)
MOVED file: C:\Users\Marawan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Dll-Files Fixer.lnk  [Bad : C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe]  =>PUP.Optional.DllFilesFixer
MOVED file: C:\Users\Public\Desktop\Dll-Files Fixer.lnk  [Bad : C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe]  =>PUP.Optional.DllFilesFixer
MOVED file: C:\Windows\AutoKMS\AutoKMS.exe [CODYQX4 - AutoKMS]  =>HackTool.AutoKMS
MOVED file: C:\Windows\Tasks\DLL-Files FixerASKUSER.job    =>PUP.Optional.DllFilesFixer
MOVED file: C:\Windows\Tasks\DLL-Files.Com Fixer_MONTHLY.job    =>PUP.Optional.DllFilesFixer
MOVED file: C:\Windows\Tasks\DLL-Files.Com Fixer_Updates.job    =>PUP.Optional.DllFilesFixer
MOVED file: C:\Users\Marawan\Downloads\dffsetup-d3dx9_43.exe [Dll-Files.com - Dll-Files Fixer]  =>PUP.Optional.DllFilesFixer
MOVED file: C:\Users\Marawan\Downloads\dffsetup-xinput1_3.exe [Dll-Files.com - Dll-Files Fixer]  =>PUP.Optional.DllFilesFixer
MOVED file: C:\Users\Marawan\AppData\Local\Microsoft\Windows\INetCache\IE\6R70N9BL\OCSetupHlp[1].dll [OpenCandy, Inc. - Rec Helper p104]  =>PUP.Optional.OpenCandy
MOVED file: C:\Windows\AutoKMS\AutoKMS.log    =>HackTool.AutoKMS
MOVED folder: C:\Program Files (x86)\Dll-Files.com Fixer  =>PUP.Optional.DllFilesFixer
MOVED folder: C:\ProgramData\Microsoft Toolkit  =>HackTool.AutoKMS
MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dll-Files Fixer  =>PUP.Optional.DllFilesFixer
MOVED folder: C:\Windows\AutoKMS  =>HackTool.AutoKMS
MOVED folder: C:\Users\Marawan\AppData\Roaming\dll-files.com  =>PUP.Optional.DllFilesFixer
MOVED folder: C:\Users\Marawan\AppData\Local\CrashRpt  =>.Superfluous.CrashReports
MOVED folder: C:\Windows\Installer\MSI2673.tmp-  =>Empty
MOVED folder: C:\Windows\Installer\MSI6DE7.tmp-  =>Empty
MOVED folder: C:\Windows\Installer\MSI70A7.tmp-  =>Empty
MOVED folder: C:\Windows\Installer\MSI948E.tmp-  =>Empty
MOVED folder: C:\Windows\Installer\MSI977E.tmp-  =>Empty


---\\  Registry ( Key, Value, Data) (12)
DELETED key*: HKEY_USERS\S-1-5-21-4280967382-986636991-3478002908-1001\SOFTWARE\dll-files.com []  =>PUP.Optional.DllFilesFixer
DELETED key: HKCU\Software\dll-files.com []  =>PUP.Optional.DllFilesFixer
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\dll-files.com []  =>PUP.Optional.DllFilesFixer
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} [ITool]  =>Toolbar.Ask
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Dll-Files Fixer_is1 [Dll-Files.com]  =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{863BBB38-466F-4C99-B54E-3A00E7D2B632} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe]  =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{D26C5967-D8C4-4D08-8F59-EE7F0B660C90} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe]  =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{9142E743-47C2-4D57-A7E6-4CE2A5914769} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe]  =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{C4C4D6A2-E896-42F5-B2FC-A38450573299} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe]  =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{097C7EA3-8023-446D-A9D6-F4AEA5D4D447} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe]  =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{017E08E5-7994-4B5C-8CD4-F59A240ACB58} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe]  =>PUP.Optional.DllFilesFixer
DELETED value: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\\{FF836A90-18A1-4B1F-B3B3-CBFC139EBCD2} [C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe]  =>PUP.Optional.DllFilesFixer


---\\  Summary of the elements found (5)
https://www.anti-malware.top/2016/05/04/hacktool-autokms/  =>HackTool.AutoKMS
https://www.nicolascoolman.fr/pup-optional-dllfilesfixer/  =>PUP.Optional.DllFilesFixer
https://www.nicolascoolman.fr/?p=197  =>PUP.Optional.OpenCandy
https://www.nicolascoolman.fr/?p=5145  =>.Superfluous.CrashReports
https://www.nicolascoolman.fr/?p=235  =>Toolbar.Ask


---\\  Other deletions. (3)
~ Registry Keys Tracing deleted (3)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Mozilla Firefox)
~ Browser not found (Opera Software)


---\\ Statistics
~ Items scanned : 248
~ Items found : 0
~ Items cancelled : 0
~ Items repaired : 37


~ End of clean in 00h00mn23s
~====================
ZHPCleaner-[R]-30072016-22_35_43.txt
ZHPCleaner-[S]-30072016-22_35_05.txt