Script ZHPFix


Lignes indésirables :
M3 - MFPP: Plugins - [Quentin] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\babylon.xml  =>PUP.Babylon
M2 - MFEP: RegExtension {58bd07eb-0ee0-4df0-8121-dc9b693373df} . (...) -- C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension (.not file.)  =>Hijacker.Eazel
[HKCU\Software\DataMngr]  =>PUP.Datamngr
[HKCU\Software\DataMngr_Toolbar]  =>PUP.Datamngr
[HKLM\Software\Wow6432Node\Babylon]  =>PUP.Babylon
[HKLM\Software\Wow6432Node\DataMngr]  =>PUP.Datamngr
O43 - CFD: 18/02/2013 - 13:13:35 - [0] ----D C:\ProgramData\Babylon  =>PUP.Babylon
O43 - CFD: 18/02/2013 - 13:13:34 - [] ----D C:\Users\Quentin\AppData\Roaming\Babylon  =>PUP.Babylon
O43 - CFD: 18/02/2013 - 13:14:09 - [] ----D C:\Users\Quentin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect  =>Hijacker.Eazel
O45 - LFCP:[MD5.DFC08C90983651705807462963718573] - 10/12/2014 - 20:42:56 ---A- - C:\Windows\Prefetch\BROWSERPROTECT.EXE-042AB4BC.pf  =>Hijacker.Eazel
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.BabylonToolbar_i.newTab", true);  =>PUP.Babylon
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.BabylonToolbar_i.newTabUrl", "http://www.delta-search.com/?affID=119523&babsrc=NT_ss&mntrId=4876e73500000000[...]  =>PUP.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASAPI32  =>PUP.Babylon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASMANCS  =>PUP.Babylon
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}]   =>PUP.Babylon
[HKCU\Software\DataMngr]   =>Adware.Bandoo
[HKLM\Software\Wow6432Node\DataMngr]   =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32]   =>PUP.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS]   =>PUP.Babylon
[HKLM\Software\Classes\Prod.cap]   =>PUP.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings]   =>PUP.BProtector
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}]   =>PUP.Funmoods
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}]   =>PUP.Funmoods
C:\Users\Quentin\AppData\Roaming\Mozilla\Firefox\Profiles\EP: RegExtension {58bd07eb-0ee0-4df0-8121-dc9b693373df} . (...) -- C:\extensions\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension (.not file.)   =>Hijacker.Eazel^
C:\ProgramData\Babylon   =>PUP.Babylon^
C:\Users\Quentin\AppData\Roaming\Babylon   =>PUP.Babylon^
C:\Users\Quentin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect   =>Hijacker.Eazel^
C:\Users\Quentin\AppData\Roaming\Mozilla\Firefox\Profiles\hgnwazgn.default\bprotector_extensions.sqlite   =>PUP.BProtector
C:\Users\Quentin\AppData\Roaming\Mozilla\Firefox\Profiles\hgnwazgn.default\bprotector_prefs.js   =>PUP.BProtector
[HKCU\Software\DataMngr_Toolbar]   =>PUP.Datamngr^
[HKLM\Software\Wow6432Node\Babylon]   =>PUP.Babylon^
C:\Users\Quentin\AppData\Local\Temp\uninst1.exe   =>PUP.Babylon
C:\Users\Quentin\Downloads\VLC_Media_Player_Setup.exe   =>Adware.iBryte
M3 - MFPP: Plugins - [Quentin] -- C:\Users\Quentin\AppData\Roaming\Mozilla\Firefox\Profiles\hgnwazgn.default\searchplugins\delta.xml
M3 - MFPP: Plugins - [Quentin] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-search.com
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("avg.install.userHPSettings", "http://www.delta-search.com/?affID=119523&babsrc=HP_ss&mntrId=4876e7350000000000000090f5b[...]
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("avg.install.userSPSettings", "Delta Search");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.admin", false);
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.aflt", "babsst");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.autoRvrt", "false");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.dfltLng", "en");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.excTlbr", false);
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.id", "4876e7350000000000000090f5bcadb8");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.instlDay", "15754");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.instlRef", "sst");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.newTab", false);
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.prdct", "delta");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.prtnrId", "delta");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.rvrt", "false");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.smplGrp", "none");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.tlbrId", "base");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.tlbrSrchUrl", "");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.vrsn", "1.8.10.0");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.vrsnTs", "1.8.10.013:13:55");
O69 - SBI: prefs.js [Quentin - hgnwazgn.default] user_pref("extensions.delta.vrsni", "1.8.10.0");
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Delta Search) - http://www.delta-search.com
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}]
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}]
[HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}]

Lignes superflues ou inutiles :
M2 - MFEP: prefs.js [Quentin - hgnwazgn.default\{e4f94d1e-2f53-401e-8885-681602c0ddd8}] [] McAfee Security Scan Plus v1.0 (..)    => McAfee, Inc
O41 - Driver: (ngrplwqm) . (. - .) - C:\Windows\system32\drivers\ngrplwqm.sys (.not file.)    => Fichier absent
[HKCU\Software\MCAFEE]
O43 - CFD: 19/02/2013 - 10:09:17 - [] ----D C:\ProgramData\McAfee

Lignes d'optimisation du démarrage :


EmptyClsid
Proxyfix
FirewallRaz
ShortcutFix
emptytemp
emptyflash