~ ZHPFix v2021.4.11.290 by Nicolas Coolman (2021/04/11) ~ Run by LAID BEN ALI (Administrator) (15/05/2021 21:07:47) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Certificate ZHPFix: Legal ~ State version : Version OK ~ Report : C:\Users\LAID BEN ALI\Desktop\ZHPFix.txt ~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\ ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Pro Education, 64-bit (Build 19042) ---\\ USER SCRIPT. (111) Script ZHPFix FirewallRaz EmptyPrefetch EmptyTemp HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan C:\Windows\Installer\56dc538.msp =>.SUP.Obsolete.Adobe [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache O108 - CMH1: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned] O108 - CMH1: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.) [Unsigned] O108 - CMH1: ANotepad++64 [64Bits] - {B298D29A-A6ED-11DE-BA8C-A68E55D89593} . (.Orphan.) [Unsigned] O108 - CMH1: BB FlashBack 2 [64Bits] - {A8065B9E-193F-4797-B62D-8F6321E7FCCB} . (.Orphan.) [Unsigned] O108 - CMH1: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Orphan.) [Unsigned] O108 - CMH1: QuickShare [64Bits] - {A8065B9E-193F-4797-B62D-8F6321E7FCCB} . (.Orphan.) [Unsigned] O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned] O108 - CMH2: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned] O108 - CMH4: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned] O108 - CMH4: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned] O108 - CMH4: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.) [Unsigned] O108 - CMH6: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Orphan.) [Unsigned] O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned] HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan C:\Windows\Installer\56dc538.msp =>.SUP.Obsolete.Adobe [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{03d2ddc7-98b7-4fca-9a88-50c18b82ba20}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{5ec79c58-65c3-4fc6-9c59-b9a5e20a829c}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{7eef1316-eed8-4846-a3d7-abdf4b61752c}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{c5f39a3a-4fc2-4e07-9609-95728fd4abc8}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe [Unsigned] =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe [Unsigned] =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft® O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe [Unsigned] =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value ---\\ SOFTWARE. (0) ---\\ SERVICE. (0) ---\\ SCHEDULED TASK. (0) ---\\ INTERNET BROWSER. (0) ---\\ EXPLORER (folders, files). (1) MOVED File : C:\Windows\Installer\56dc538.msp ---\\ REGISTRY (keys, values, data). (82) DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx [ FileSyncEx ] DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip [7-Zip ] DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 [ANotepad++64 ] DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 [BB FlashBack 2 ] DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu [BriefcaseMenu ] DELETED Reboot Key ^: HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} DELETED Reboot Key ^: HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare [QuickShare ] DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32 ] NOT FOUND Key: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} DELETED Key: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 [WinRAR32 ] DELETED Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx [ FileSyncEx ] DELETED Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip [7-Zip ] DELETED Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu [BriefcaseMenu ] DELETED Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32 ] NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\23170F69-40C1-278A-1000-000100020000} NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\B298D29A-A6ED-11DE-BA8C-A68E55D89593} NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\A8065B9E-193F-4797-B62D-8F6321E7FCCB} NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\85BBD920-42A0-1069-A2E4-08002B30309D} NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\B41DB860-8EE4-11D2-9906-E49FADC173CA} NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 NOT FOUND Key CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx NOT FOUND Key CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip NOT FOUND Key CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu NOT FOUND Key CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 NOT FOUND Key: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 NOT FOUND Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx NOT FOUND Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip NOT FOUND Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu NOT FOUND Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer] REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{03d2ddc7-98b7-4fca-9a88-50c18b82ba20}\\DhcpNameServer] REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{5ec79c58-65c3-4fc6-9c59-b9a5e20a829c}\\DhcpNameServer] REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7eef1316-eed8-4846-a3d7-abdf4b61752c}\\DhcpNameServer] REPLACED Data TCPIP: 192.168.0.1 [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{c5f39a3a-4fc2-4e07-9609-95728fd4abc8}\\DhcpNameServer] REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\batfile\shell\open\command\\] REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\cplfile\shell\cplopen\command\\] REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\cmdfile\shell\open\command\\] REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\comfile\shell\open\command\\] REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\evtfile\shell\open\command\\] REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\exefile\shell\open\command\\] REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\htmlfile\shell\open\command\\] REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\jsfile\shell\open\command\\] REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\regfile\shell\open\command\\] REPLACED Data Shell Spawning: [HKLM64\SOFTWARE\Classes\scrfile\shell\open\command\\] DELETED Value: H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: F:\AutoRun.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\WORD BOOKS.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\WORD BOOKS.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: G:\Download\android_root.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: G:\Download\android_root.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\autorun.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\computer.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\Programs\إظافات لوورد\WordKutools-8.9.0.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: F:\AutoRun.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\WORD BOOKS.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\WORD BOOKS.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: G:\Download\android_root.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: G:\Download\android_root.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\autorun.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\computer.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] ---\\ COMMAND. (0) ---\\ UNPROCESSED. (2) Script ZHPFix FirewallRaz ~ The system has been restarted. ***** ~ End of report completed in 00h03mn17s