~ ZHPFix v2019.1.22.11 by Nicolas Coolman (2019/01/22) ~ Run by Administrator (Administrator) (28/01/2019 11:15:08) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Certificate ZHPFix: Legal ~ State version : ~ Report : E:\Documents and Settings\Administrator\Desktop\ZHPFix.txt ~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\ ~ UAC : Deactivate ~ Boot Mode : Normal (Normal boot) Windows XP, 64-bit Service Pack 2 (Build 3790) ---\\ USER SCRIPT. (18) Script ZHPFix SysRestore FirewallRaz EmptyPrefetch EmptyCLSID EmptyFlash Emptytemp ShortcutFix PROXYFix SR - System [00/00/0000] [ 0] HWiNFO32/64 Kernel Driver (HWiNFO32) . (...) - \E:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS (.not file.) SR - Demand [00/00/0000] [ 0] IP in IP Tunnel Driver (IpInIp) . (...) - E:\WINDOWS\System32\DRIVERS\ipinip.sys (.not file.) SS - Demand [00/00/0000] [ 0] NetMeeting Remote Desktop Sharing (mnmsrvc) . (...) - E:\WINDOWS\system32\mnmsrvc.exe (.not file.) O108 - CMH4: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (...) -- ntshrui.dll (.not file.) O108 - CMH7: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (...) -- ntshrui.dll (.not file.) HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Sharing =>.SUP.Orphan HKLM\Software\Classes\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} =>.SUP.Orphan HKLM\Software\Wow6432Node\Classes\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} =>.SUP.Orphan HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\Sharing =>.SUP.Orphan ---\\ SOFTWARE. (0) ---\\ SERVICE. (0) ---\\ SCHEDULED TASK. (0) ---\\ INTERNET BROWSER. (0) ---\\ EXPLORER (folders, files). (23) DELETED Reboot File Temp^: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\is-BQ6HK.tmp DELETED Reboot File Temp^: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\is-JFHPB.tmp-dbinst DELETED Reboot File Temp^: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF4ED1.tmp MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF56D.tmp MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\dd_clwireg.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\dd_depcheck_NETFX20_EXP_35.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\dd_dotnetfx20error.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\dd_dotnetfx20install.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\dd_NET_Framework20x64_Setup761C.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2604092_20190128_083935812-Msi0.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2729450_20190128_085943765-Msi0.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2742596_20190128_083443656-Msi0.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2789643_20190128_084614984-Msi0.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2836941_20190128_082723890-Msi0.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2844285_20190128_083045328-Msi0.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2863239_20190128_082339765-Msi0.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2898856_20190128_081703062-Msi0.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2901111_20190128_085036484-Msi0.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB976576_20190128_084201640-Msi0.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_20190127_235340921-MSI_vc_red.msi.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Setup Log 2019-01-28 #001.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Setup Log 2019-01-28 #002.txt MOVED File Temp: E:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\uxeventlog.txt ---\\ REGISTRY (keys, values, data). (5) DELETED Key Service: HKLM\SYSTEM\CurrentControlSet\Services\HWiNFO32 [No File found] DELETED Key Service: HKLM\SYSTEM\CurrentControlSet\Services\IpInIp [No File found] DELETED Key CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Sharing [Sharing4] DELETED Key CMH: HKLM64\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Sharing [Sharing7] DELETED Key*: HKLM\Software\Classes\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} [{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} ] ---\\ COMMAND. (4) ~ EmptyPrefetch: deleted prefetcher files (4) ~ EmptyCSID: Empty CLSID folders deleted (0) ~ EmptyFlash: Empty FlashPlayer folder. ~ EmptyTemp: Local Temp folder partially emptied. (23) ---\\ UNPROCESSED. (4) SysRestore FirewallRaz ShortcutFix PROXYFix ~ The system has been restarted. ***** ~ End of report completed in 00h00mn12s