Script ZHPFix O23 - Service: SafetyNut Manager (SafetyNutManager) . (...) - C:\Program Files (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe (.not file.) =>Adware.Bandoo [MD5.00000000000000000000000000000000] [APT] [SomotoUpdateCheckerAutoStart] (...) -- C:\Users\Maison Atelier\AppData\Local\FilesFrog Update Checker\update_checker.exe (.not file.) [0] =>Adware.MegaSearch [HKCU\Software\ToolbarCleaner] O45 - LFCP:[MD5.564EBEA1C2397A50AF96F79DA7F29A04] - 19/10/2013 - 20:00:00 ---A- - C:\Windows\Prefetch\UPDATERSERVICE.EXE-7B0C15AC.pf O50 - IFEO:Image File Execution Options - bitguard.exe - tasklist.exe =>PUP.BitGuard O50 - IFEO:Image File Execution Options - browserdefender.exe - tasklist.exe =>Hijacker.Eazel O50 - IFEO:Image File Execution Options - browsermngr.exe - tasklist.exe =>Toolbar.Babylon O50 - IFEO:Image File Execution Options - browserprotect.exe - tasklist.exe =>Hijacker.Eazel O50 - IFEO:Image File Execution Options - bundlesweetimsetup.exe - tasklist.exe =>PUP.SweetIM O50 - IFEO:Image File Execution Options - delta babylon.exe - tasklist.exe =>Toolbar.Babylon O50 - IFEO:Image File Execution Options - iminentsetup.exe - tasklist.exe =>Adware.IMBooster O50 - IFEO:Image File Execution Options - sweetimsetup.exe - tasklist.exe =>PUP.SweetIM SS - | Auto 10/07/1658 0 | (SafetyNutManager) . (...) - C:\Program Files (x86)\Movies Toolbar\SafetyNut\SafetyNutManager.exe =>Adware.Bandoo [HKLM\SYSTEM\CurrentControlSet\Services\SafetyNutManager] =>Adware.Bandoo^ O50 - IFEO:Image File Execution Options - deltatb.exe - tasklist.exe =>Toolbar.DeltaSearch O50 - IFEO:Image File Execution Options - deltatb_2501-c733154b.exe - tasklist.exe =>Toolbar.DeltaSearch C:\Users\Maison Atelier\AppData\Roaming\Mozilla\Firefox\Profiles\8b2t471l.default\prefs.js (.not file.) O20 - AppInit_DLLs: . (...) - C:\Program Files (x86)\movies~1\safety~1\x64\safety~2.dll (.not file.) [MD5.00000000000000000000000000000000] [APT] [Ad-Aware Antivirus Scheduled Scan] (...) -- C:\Program Files (x86)\AD-AWA~1\AdAwareLauncher.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{BCD8D552-3113-46F9-B564-7AF2036DF12D}] (...) -- C:\Users\Maison Atelier\Downloads\OOo_3.2.0_Win32Intel_install_wJRE_fr(2).exe (.not file.) [0] O45 - LFCP:[MD5.AB45BA2D68A547CD7BC50A44D0844B5C] - 14/10/2013 - 14:16:25 ---A- - C:\Windows\Prefetch\TSLITE3.EXE-6314F60C.pf O45 - LFCP:[MD5.FF104DAEF06B41C9167CC380B367A7ED] - 18/10/2013 - 19:56:53 ---A- - C:\Windows\Prefetch\AOM.EXE-ABD07C38.pf O45 - LFCP:[MD5.F13DBD605FD1EC5648DA63DC058407B1] - 19/10/2013 - 20:00:48 ---A- - C:\Windows\Prefetch\APACHE.EXE-6FD012AD.pf [MD5.29AD3CEEC70CC0D38840BC6A25ECA0B1] [SPRF][16/10/2013] (...) -- C:\Users\Maison Atelier\AppData\Local\Temp\Quarantine.exe [344355] O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 OPT:O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe FirewallRaz EmptyTemp EMPTYCLSID ShortcutFix