Script ZHPFix
O23 - Service: BrowserDefendert (BrowserDefendert) . (...) - C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe (.not file.) =>Hijacker.Eazel
[HKCU\Software\5b558dd1e66deb48]
[HKCU\Software\BI]
[HKLM\Software\Wow6432Node\5b558dd1e66deb48]
[HKLM\Software\Wow6432Node\DataMngr] =>PUP.Datamngr
O43 - CFD: 27/07/2013 - 16:24:10 - [0] ----D C:\ProgramData\Babylon =>Toolbar.Babylon
O43 - CFD: 01/09/2013 - 19:46:43 - [0] ----D C:\ProgramData\BrowserDefender =>Hijacker.Eazel
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.admin", false); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.aflt", "babsst"); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}"); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.dfltLng", "en"); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.excTlbr", false); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.id", "0cc8ba79000000000000002511a8d2d2"); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.instlDay", "15655"); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.instlRef", "sst"); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.tlbrId", "base"); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "http://search.babylon.com/?babsrc=TB_def&mntrId=0cc8ba79000000000000002511a8d2[...] =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.vrsn", "1.8.3.8"); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar.vrsni", "1.8.3.8"); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); =>Toolbar.Babylon
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.3.811:28:44"); =>Toolbar.Babylon
[HKCU\Software\5b558dd1e66deb48\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1339.144]:dllName="BrowserDefender.dll" =>Hijacker.Eazel
[HKCU\Software\5b558dd1e66deb48\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1339.144]:exeName="BrowserDefender.exe" =>Hijacker.Eazel
[HKCU\Software\5b558dd1e66deb48\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1339.144]:folderName="BrowserDefender" =>Hijacker.Eazel
[HKCU\Software\5b558dd1e66deb48\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1339.144]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\5b558dd1e66deb48\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1339.144]:serviceName="BrowserDefendert" =>Hijacker.Eazel
[HKCU\Software\5b558dd1e66deb48\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1339.144]:version="2.6.1339.144"
[HKCU\Software\5b558dd1e66deb48]:version="2.6.1519.190"
[HKLM\Software\Wow6432Node\5b558dd1e66deb48]:version="2.6.1519.190"
SS - | Auto 10/07/1658 0 | (BrowserDefendert) . (...) - C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe =>Hijacker.Eazel
[HKLM\SYSTEM\CurrentControlSet\Services\BrowserDefendert] =>Hijacker.Eazel^
[HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\escort.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\escortapp.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\escorteng.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\esrv.EXE] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\DataMngr] =>Adware.Bandoo
[HKLM\Software\Classes\Prod.cap] =>Toolbar.Babylon
[HKCU\Software\BI] =>Adware.MegaSearch
[HKLM\Software\Classes\AppID\escorTlbr.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\escort.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\escortApp.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\escortEng.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\escorTlbr.DLL] =>PUP.Funmoods
C:\ProgramData\Babylon =>Toolbar.Babylon^
C:\ProgramData\BrowserDefender =>Hijacker.Eazel^
[HKCU\Software\5b558dd1e66deb48\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1339.144]:dllName="BrowserDefender.dll" =>Hijacker.Eazel^
C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe =>Hijacker.Eazel^
[HKCU\Software\Delta]
[HKLM\Software\Wow6432Node\Delta]
O43 - CFD: 27/07/2013 - 16:24:41 - [0] ----D C:\Program Files (x86)\Delta
O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Cl� orpheline
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Cl� orpheline
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.admin", false);
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.aflt", "babsst");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.autoRvrt", "false");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.bbDpng", "1");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.cntry", "FR");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.dfltLng", "fr");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.excTlbr", false);
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.ffxUnstlRst", true);
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.hdrMd5", "F0AEEA90A7269FEA57E1508026F66C58");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.id", "0cc8ba79000000000000002511a8d2d2");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.instlDay", "15913");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.instlRef", "sst");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.lastVrsnTs", "1.8.22.016:24:44");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.newTab", false);
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.prdct", "delta");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.prtnrId", "delta");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.rvrt", "false");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.sg", "azb");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.smplGrp", "none");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.tlbrId", "base");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.tlbrSrchUrl", "");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.vrsn", "1.8.22.0");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.vrsnTs", "1.8.22.016:24:44");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta.vrsni", "1.8.22.0");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta_i.babExt", "");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta_i.babTrack", "affID=123884&tsp=4956");
O69 - SBI: prefs.js [ninie lolo - ep8ti82w.default] user_pref("extensions.delta_i.srcExt", "ss");
[HKLM\Software\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}] =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A047FE02-C91C-41CB-898C-4ED21B86025A}] =>Toolbar.Orange
[HKLM\Software\Classes\SearchBar.Client] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}] =>Toolbar.DeltaSearch
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim