ZHPSuite is a software designed and developed by Nicolas Coolman that allows you to search, rapid and complete diagnosis and cleaning of the operating system.

ZHPSuite relies on the merger of three software, ZHPDiag, ZHPLite and ZHPFix.

In this tutorial will address three main points, analysis, diagnosing and cleaning your computer.



 Download from ZHPSuite

  • Download ZHPSuite of Nicolas Coolman on your Windows desktop.

Launch of ZHPSuite

  • Place yourself on the icon ZHPSuite and click right,
  • Select the option "Run with administrator rights" if it is present in the menu drop-down.

How to raise protection SmartScreen

  • Since the release of version 8, Microsoft integrated a system of protection against malicious sites named «» SmartScreen« . But it turns out that this filter blocks many legitimate software download. A window 'Windows has protected your computer' may appear.
  • Click on «» Run anyway and validate.
  • Accept the terms of the end user(EULA) software.

Phase 1 : Analysis

  • Set up your options by clicking the " Options« . These items will be saved for your future uses. You can check out ZHPDiag's list of modules
  • Click on «» Analysis to start the search and activate the ZHPDiag subprogram.
  • Let the progress bar to reach the end.


Items found

  • At the end of the research, A window may appear indicating the presence of items,
  • A right click on a line allows access to the blog article that gives more information.
  • Close this window of found items.


The report

  • At the end of the treatment, a research report is created of which here are excerpts below :
See an excerpt from report

~ ZHPDiag v2016.5.25.99 by Nicolas Coolman (2016/05/25)

—\\ State of Windows Security Center (7) – 0s
[HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer] NoActiveDesktopChanges: Modified
[HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciessystem] EnableLUA: OK
[HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenNOHIDDEN] CheckedValue: Modified
[HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedFolderHiddenSHOWALL] CheckedValue: OK
[HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerAssociations] Application: OK
[HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogon] Shell: OK
[HKLMSYSTEMCurrentControlSetServicesCOMSysApp] Type: OK

—\\ Recherche particulière de fichiers génériques (25) – 4s
[MD5.2617877C5761B8A696FD0368861EE6E4] – 23/04/2016 – (.Microsoft Corporation – Explorateur Windows.) — C:\WINDOWSExplorer.exe [4515256] =>.Microsoft Windows®
[MD5.0DCB89B1F3689BC6262FF30BBD603171] – 30/10/2015 – (.Microsoft Corporation – Processus hôte Windows (Rundll32).) — C:\WINDOWSSystem32rundll32.exe [59392] =>.Microsoft Corporation
[MD5. C1C81AAF533552B3C4D9F11A5FF97700] – 23/04/2016 – (.Microsoft Corporation – Application de démarrage de Windows.) — C:\WINDOWSSystem32Wininit.exe [291360] =>.Microsoft Windows Publisher®
[MD5. AE6A68A065D4C26AF4BEFAA53623B266] – 29/03/2016 – (.Microsoft Corporation – Extensions Internet pour Win32.) — C:\WINDOWSSystem32wininet.dll [2755584] =>.Microsoft Corporation
[MD5.5C156EC4E44E30331BCC865A3B61D839] – 23/04/2016 – (.Microsoft Corporation – Application d’ouverture de session Windows.) — C:\WINDOWSSystem32Winlogon.exe [585728] =>.Microsoft Corporation

—\\ Liste des services NT non Microsoft et non désactivés (24) – 4s
O23 – Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc. – MobileDeviceService.) – C:\Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe =>.Apple Inc.®
O23 – Service: ASLDR Service (ASLDRService) . (.ASUSTek Computer Inc. – ASLDR Service.) – C:\Program Files (x86)\ASUSATK PackageATK HotkeyAsLdrSrv.exe =>.ASUSTeK Computer Inc.®
O23 – Service: ASUS InstantOn Service (ASUS InstantOn) . (.ASUS – ASUS InstantOn Program.) – C:\Program Files (x86)\ASUSASUS InstantOnInsOnSrv.exe =>.ASUSTeK Computer Inc.®
O23 – Service: Asus WebStorage Windows Service (Asus WebStorage Windows Service) . (.Copyright © 2012 – Asus WebStorage Windows Service.) – C:\Program Files (x86)\ASUSWebStorage Sync Agent1.1.18.159AsusWSWinService.exe
O23 – Service: ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS – GFNEXSrv.) – C:\Program Files (x86)\ASUSATK PackageATKGFNEXGFNEXSrv.exe =>.ASUSTeK Computer Inc.®
—\\ Tâches planifiées en automatique (28) – 12s
[MD5.6A050671F2C76FB48131F12786802807] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) — C:\WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe [269504] (.Activate.) =>.Adobe Systems Incorporated®
[MD5. C6D3BB61E24F66EB976C6CC55346B5F2] [APT] [ASUS InstantOn Config] (.ASUS.) — C:\Program Files (x86)\ASUSASUS InstantOnInsOnCfg.exe [1196416] (.Activate.) =>.ASUSTeK Computer Inc.®
[MD5. DB0C938BC311B31CF90C13821AE682B3] [APT] [ASUS Live Update] (.ASUSTeK Computer Inc...) — C:\Program Files (x86)\ASUSASUS Live UpdateLiveUpdate.exe [1559936] (.Activate.) =>.ASUSTeK Computer Inc.®
[MD5.0BC5A4142F38A6BB35DECD01A2BC2ED7] [APT] [ASUS P4G] (.ASUS.) — C:\Program FilesASUSP4GBatteryLife.exe [1018240] (.Activate.) =>.ASUSTeK Computer Inc.®

  • This report can also be found in your user folder " %AppData% /ZHP and on your desktop.
  •  Send your report if you actually ask in a forum of disinfection.

Phase 2 : Diagnosis

  • Click on «» DIAGNOSIS to access the ZHPLite Diagnostic Scan,
  • Click on «» Paste the report« ,
  • Click on «» Diagnosing the report« ;
  • Click on «» Generate the script » (Orange color if present),
  • Close reporting program,

Tutorial ZHPLite


Phase 3 : Cleaning


  • Click on «» Cleaning to access the ZHPFix script cleaning subprogram,
  • In the right zone, click the "click" button Stick the script« ,
  • In the left zone, click the " Start the script« ,
  • Validate cleaning confirmation, 
  • A clean-up report appears in the editing area,
  • A cleanup report is placed on your Windows desktop,
  • The treated items are placed in a ' Quarantine that can be restored.

ZHPFix tutorial


ZHPSuite update

  • The launch of the software, a window shows the presence of a new version. For better protection for your system, do not skip this update, It is very fast…
  • Click on «» Update« .
  • All open browsers are closed. A confirmation message allows you to make a backup of your navigation pages, otherwise click 'OK'.
  • The download starts, then an end of download page on your browser.
  • Click on the desktop shortcut to start the software updated.