Script ZHPFix [HKLM\Software\Google\Chrome\Extensions\ammjbfijeglcdlnlnhlkdhgjnlgmpehe] [HKLM\Software\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde] [HKLM\Software\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo] [HKLM\Software\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp] [HKLM\Software\Google\Chrome\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla] [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{112BA211-334C-4A90-90EC-2AD1CDAB287C}] [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}] [HKLM\SYSTEM\CurrentControlSet\Services\70e6ca8c] [HKLM\SYSTEM\CurrentControlSet\Services\Util glindorus] [HKLM\SYSTEM\CurrentControlSet\Services\WajamUpdaterV2] [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\delta] [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Wajam] [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\fst_fr_9_is1] [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\glindorus] [HKLM\Software\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}] [HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] [HKLM\Software\Wow6432Node\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] [HKLM\Software\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}] [HKLM\Software\Wow6432Node\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}] [HKLM\Software\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] [HKLM\Software\Wow6432Node\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] [HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] [HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] [HKLM\Software\Wow6432Node\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] [HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] [HKLM\Software\Wow6432Node\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] [HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] [HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] [HKLM\Software\Wow6432Node\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}] [HKLM\Software\Classes\AppID\escort.dll] [HKLM\Software\Classes\AppID\escortapp.dll] [HKLM\Software\Classes\AppID\escorteng.dll] [HKLM\Software\Classes\AppID\esrv.EXE] [HKLM\Software\Classes\escort.escortIEPane] [HKLM\Software\Classes\escort.escortIEPane.1] [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp] [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater] [HKCU\Software\Tutorials] [HKLM\Software\Wow6432Node\Tutorials] [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}] [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0e1230f8-ea50-42a9-983c-d22abc2eed3b}] [HKLM\Software\Classes\Prod.cap] [HKLM\Software\Classes\AppID\priam_bho.DLL] [HKLM\Software\Classes\Installer\Features\25BD30E1BC5D83343A835E62DDD4D41B] [HKLM\Software\Classes\Installer\Products\25BD30E1BC5D83343A835E62DDD4D41B] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\25BD30E1BC5D83343A835E62DDD4D41B] [HKLM\Software\Wow6432Node\Classes\Installer\Features\25BD30E1BC5D83343A835E62DDD4D41B] [HKLM\Software\Wow6432Node\Classes\Installer\Products\25BD30E1BC5D83343A835E62DDD4D41B] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}] [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}] [HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] [HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] [HKLM\Software\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}] [HKLM\Software\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}] [HKLM\Software\Wow6432Node\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}] [HKLM\Software\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}] [HKLM\Software\Classes\delta.deltaappCore] [HKLM\Software\Classes\delta.deltaappCore.1] [HKLM\Software\Classes\delta.deltadskBnd] [HKLM\Software\Classes\delta.deltadskBnd.1] [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A] [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}] [HKLM\Software\Classes\delta.deltaHlpr] [HKLM\Software\Classes\delta.deltaHlpr.1] [HKLM\Software\Classes\esrv.deltaESrvc] [HKLM\Software\Classes\esrv.deltaESrvc.1] [HKLM\Software\Classes\EDToolBand.EDToolBandObj] [HKLM\Software\Classes\EDToolBand.EDToolBandObj.1] [HKLM\Software\Classes\wajam.WajamBHO] [HKLM\Software\Classes\wajam.WajamBHO.1] [HKLM\Software\Classes\wajam.WajamDownloader] [HKLM\Software\Classes\wajam.WajamDownloader.1] [HKLM\Software\Classes\AppID\escorTlbr.DLL] [HKLM\Software\Wow6432Node\Classes\delta.deltaappCore] [HKLM\Software\Wow6432Node\Classes\delta.deltaappCore.1] [HKLM\Software\Wow6432Node\Classes\delta.deltadskBnd] [HKLM\Software\Wow6432Node\Classes\delta.deltadskBnd.1] [HKLM\Software\Wow6432Node\Classes\delta.deltaHlpr] [HKLM\Software\Wow6432Node\Classes\delta.deltaHlpr.1] [HKLM\Software\Wow6432Node\Classes\esrv.deltaESrvc] [HKLM\Software\Wow6432Node\Classes\esrv.deltaESrvc.1] [HKLM\Software\Wow6432Node\Classes\escort.escortIEPane] [HKLM\Software\Wow6432Node\Classes\escort.escortIEPane.1] [HKLM\Software\Wow6432Node\Classes\EDToolBand.EDToolBandObj] [HKLM\Software\Wow6432Node\Classes\EDToolBand.EDToolBandObj.1] [HKLM\Software\Wow6432Node\Classes\wajam.WajamBHO] [HKLM\Software\Wow6432Node\Classes\wajam.WajamBHO.1] [HKLM\Software\Wow6432Node\Classes\wajam.WajamDownloader] [HKLM\Software\Wow6432Node\Classes\wajam.WajamDownloader.1] [HKLM\Software\Wow6432Node\Classes\AppID\escort.DLL] [HKLM\Software\Wow6432Node\Classes\AppID\escortApp.DLL] [HKLM\Software\Wow6432Node\Classes\AppID\escortEng.DLL] [HKLM\Software\Wow6432Node\Classes\AppID\escorTlbr.DLL] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F} [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:Search Protection [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:YSearchProtection [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]:upfst_fr_9.exe C:\Program Files (x86)\fst_fr_9 C:\Program Files (x86)\Wajam C:\ProgramData\Babylon C:\ProgramData\DSearchLink C:\Users\meduse47\AppData\Roaming\BabSolution C:\Users\meduse47\AppData\Roaming\Babylon C:\Users\meduse47\AppData\Local\fst_fr_9 C:\Users\meduse47\AppData\Local\Wajam C:\Users\meduse47\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam C:\Users\meduse47\AppData\Local\Software C:\Users\meduse47\AppData\Local\fst_fr_9\upfst_fr_9.exe C:\Program Files (x86)\Yahoo!\Search Protection\SearchProtection.exe C:\Program Files (x86)\fst_fr_9\fst_fr_9.exe C:\Users\meduse47\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammjbfijeglcdlnlnhlkdhgjnlgmpehe C:\Users\meduse47\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde C:\Users\meduse47\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo C:\Users\meduse47\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp C:\Users\meduse47\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla C:\Users\meduse47\AppData\Roaming\BabSolution\Shared\BabMaint.exe [HKCU\Software\BabSolution] [HKCU\Software\Wajam] [HKCU\Software\glindorus] [HKLM\Software\Wow6432Node\glindorus] C:\Users\meduse47\AppData\Local\Temp\BoxoreInstaller.exe C:\Users\meduse47\AppData\Local\Temp\DeltaTB_20130715.exe C:\Users\meduse47\AppData\Local\Temp\wajam_download.exe C:\Windows\Installer\2fa22d.msi C:\Windows\Installer\39080.msi C:\Users\meduse47\AppData\Local\Temp\OB.exe C:\Users\meduse47\AppData\Local\Temp\WajamIM.EXE C:\Users\meduse47\AppData\Local\Temp\OBBoxore.EXE C:\Users\meduse47\AppData\Local\Temp\GoogleToolbarInstaller1.log C:\Users\meduse47\AppData\Local\Temp\GoogleToolbarInstaller2.log EmptyFlash EmptyTemp EmptyCLSID