~ ZHPFix v2021.8.10.319 by Nicolas Coolman (2021/08/10) ~ Run by LAID SOFI (Administrator) (05/11/2021 19:53:27) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Certificate ZHPFix: Legal ~ State version : Version OK ~ Report : C:\Users\LAID SOFI\Desktop\ZHPFix.txt ~ Quarantine : HKCU\SOFTWARE\ZHP\ZHPFix\Quarantine\ ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 7 Professional, 64-bit Service Pack 1 (Build 7601) ---\\ USER SCRIPT. (111) ÿþScript ZHPFix FirewallRaz EmptyPrefetch EmptyTemp HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan C:\Windows\Installer\56dc538.msp =>.SUP.Obsolete.Adobe [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache O108 - CMH1: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned] O108 - CMH1: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.) [Unsigned] O108 - CMH1: ANotepad++64 [64Bits] - {B298D29A-A6ED-11DE-BA8C-A68E55D89593} . (.Orphan.) [Unsigned] O108 - CMH1: BB FlashBack 2 [64Bits] - {A8065B9E-193F-4797-B62D-8F6321E7FCCB} . (.Orphan.) [Unsigned] O108 - CMH1: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Orphan.) [Unsigned] O108 - CMH1: QuickShare [64Bits] - {A8065B9E-193F-4797-B62D-8F6321E7FCCB} . (.Orphan.) [Unsigned] O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned] O108 - CMH2: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned] O108 - CMH4: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned] O108 - CMH4: FileSyncEx [64Bits] - {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} . (.Orphan.) [Unsigned] O108 - CMH4: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Orphan.) [Unsigned] O108 - CMH6: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Orphan.) [Unsigned] O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned] HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare =>.SUP.Orphan HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan C:\Windows\Installer\56dc538.msp =>.SUP.Obsolete.Adobe [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:F:\AutoRun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:I:\APK\WORD BOOKS.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:G:\Download\android_root.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\autorun.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:H:\computer.exe.FriendlyAppName =>.SUP.Orphan.MUICache O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{03d2ddc7-98b7-4fca-9a88-50c18b82ba20}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{5ec79c58-65c3-4fc6-9c59-b9a5e20a829c}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{7eef1316-eed8-4846-a3d7-abdf4b61752c}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{c5f39a3a-4fc2-4e07-9609-95728fd4abc8}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress O67 - Shell Spawning: < .bat> < batfile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: < .cpl> < cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe [Unsigned] =>.Microsoft Corporation O67 - Shell Spawning: < .cmd> < cmdfile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: < .com> < comfile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: < .evt> < evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe [Unsigned] =>.Microsoft Corporation O67 - Shell Spawning: < .exe> < exefile>[HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value O67 - Shell Spawning: < .html> < htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft® O67 - Shell Spawning: < .js> < JSFile>[HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value O67 - Shell Spawning: < .reg> < regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe [Unsigned] =>.Microsoft Corporation O67 - Shell Spawning: < .scr> < scrfile>[HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value ---\\ SOFTWARE. (0) ---\\ SERVICE. (0) ---\\ SCHEDULED TASK. (0) ---\\ INTERNET BROWSER. (0) ---\\ EXPLORER (folders, files). (56) MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\AdobeARM.log MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\chrome_installer.log MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\mb_setup.log MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\Microsoft Outlook Hotmail Connector (0).log DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\1a939789-f1e3-43f9-a8c2-03491a5a9f02.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\250d243a-64bd-4784-a4cf-6a569527ec65.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\2d1d1b12-327e-4c1d-8411-9e20b2cc44bb.tmp DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\2dcc065a-88df-49b4-ad42-f62bc0c903d6.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\31817136-1340-4ff8-87c8-f66b6962f3df.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\39be2eee-309a-496b-b64d-835cb2002cd7.tmp DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\3ac9dd55-0b8e-4d11-966d-fb07811623c4.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\4b926a7f-ee0d-431c-b797-9da5c415ed85.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\5071ac91-30f9-40e6-a0bc-2fb1f1455301.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\58381f90-6af2-4703-b8fe-7ecb1cc16790.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\58c57282-1b1d-498a-b0b8-b700df70d8a6.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\65edbe8e-b871-498b-a125-c2e385ee7afd.tmp DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\6a38ec5d-d446-4b5a-a74f-0104ba896964.tmp DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\6c302360-802f-4311-a08d-7deebcdc974b.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\6d7e72b7-425c-4556-940d-ad7bba783c2b.tmp DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\7a190427-d59e-4d01-a3d3-adbbbe71e002.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\7b822d62-afb4-45a8-a73b-9e37d34523af.tmp DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\81c82448-a53f-4538-a014-c040a8dc621f.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\843dab4a-000f-4b51-a4fa-abc9e3c758ad.tmp DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\8c9f9c43-b615-45af-9c40-790e09a89427.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\9a83b924-4bcc-469d-8f29-afe8a206e59e.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\a32c3d1f-791e-498a-b2a4-3a34d759c6b9.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\b228e722-e9fa-4a7a-a06f-be0f3ede1ecb.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\baa701d3-30e5-4b7d-b057-5574effea995.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\BCG2483.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\BCG2484.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\c92e58e4-43bb-40ca-94a9-0dd5ee96b372.tmp DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\d5d9dae6-892f-4023-aefc-84a8dde9aa93.tmp DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\e1fafd81-2e18-4dc3-aa33-2b004488da11.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\e8800616-1697-4f29-9368-6afbf0241c4f.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f1d442fb-0215-4205-8ab4-7b4fff28ed35.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f5ba7204-ce0b-4026-8970-776ffa23d252.tmp DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\f6b5ce02-e50a-4228-bdc8-bf7c8cdc84fe.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f702df34-0388-4842-b61a-160917f252a1.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f8e14f7a-045b-4158-b08a-375cdc95d4ba.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\f924e5b7-6265-4f32-926d-65336bdf1a20.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\ffe4a1df-369e-4113-b888-51b3cec3fc7a.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\_iu14D2N.tmp MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF0962799E53031F9E.TMP MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF0DD87096CF007AD9.TMP DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF0F09F5F9E12B8347.TMP DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF1EFCD200A4CB920D.TMP MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF3F7B92CD6ED4E699.TMP MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF492F03A6629C4F71.TMP MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DF6C4477E829F803F1.TMP MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\~DFA3568B4D0646AC76.TMP DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\~nsu.tmp DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\FXSAPIDebugLogFile.txt MOVED File Temp: C:\Users\LAIDSO~1\AppData\Local\Temp\Setup Log 2021-11-05 #001.txt DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\scoped_dir4132_2045212198 DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\scoped_dir4808_1088731069 DELETED Reboot File Temp^: C:\Users\LAIDSO~1\AppData\Local\Temp\scoped_dir4808_915100407 ---\\ REGISTRY (keys, values, data). (61) NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu [BriefcaseMenu ] DELETED Reboot Key ^: HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} DELETED Key: HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} [{85BBD920-42A0-1069-A2E4-08002B30309D} ] NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare DELETED Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32 ] NOT FOUND Key: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} NOT FOUND Key: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 NOT FOUND Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx NOT FOUND Key: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip DELETED Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu [BriefcaseMenu ] DELETED Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 [WinRAR32 ] NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\FileSyncEx NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\23170F69-40C1-278A-1000-000100020000} NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\B298D29A-A6ED-11DE-BA8C-A68E55D89593} NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\BB FlashBack 2 NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\A8065B9E-193F-4797-B62D-8F6321E7FCCB} NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\85BBD920-42A0-1069-A2E4-08002B30309D} NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\QuickShare NOT FOUND Key CMH: HKLM64\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\CLSID\B41DB860-8EE4-11D2-9906-E49FADC173CA} NOT FOUND Key CMH: HKLM64\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 NOT FOUND Key CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\FileSyncEx NOT FOUND Key CMH: HKLM64\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip NOT FOUND Key CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu NOT FOUND Key CMH: HKLM64\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu NOT FOUND Key: HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} NOT FOUND Key: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 NOT FOUND Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu NOT FOUND Key: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 NOT FOUND Data Shell Spawning: [HKLM\SOFTWARE\Classes\\] DELETED Value: H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: F:\AutoRun.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\WORD BOOKS.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\WORD BOOKS.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: G:\Download\android_root.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: G:\Download\android_root.exe.ApplicationCompany [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\autorun.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\computer.exe.FriendlyAppName [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\Programs\%8'A'* DHH1/\WordKutools-8.9.0.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: F:\AutoRun.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\HTI Box ZzKey Nokia By ALi Hassani\HTI Box ZzKey Nokia By ALi Hassani\zzNk_Tool.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\WORD BOOKS.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: I:\APK\WORD BOOKS.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: G:\Download\android_root.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: G:\Download\android_root.exe.ApplicationCompany [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\autorun.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] DELETED Value: H:\computer.exe.FriendlyAppName [HKU\S-1-5-21-1731802759-2347302766-840830235-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] ---\\ COMMAND. (2) ~ EmptyPrefetch: deleted prefetcher files (130) ~ EmptyTemp: Local Temp folder partially emptied. (56) ---\\ UNPROCESSED. (2) ÿþScript ZHPFix FirewallRaz ~ The system has been restarted. ***** ~ End of report completed in 00h00mn21s