script ZHPFix
M3 - MFPP: Plugins - [user] -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\y0h9qatq.default-1397195214921\searchplugins\VenteeRo.xml
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\do-search.xml =>PUP.DoSearches
M0 - MFSP: prefs.js [user - y0h9qatq.default-1397195214921] http://www.arabyonline.com
M0 - MFSP: user.js [user - y0h9qatq.default-1397195214921] http://www.arabyonline.com
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.arabyonline.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.arabyonline.com
O2 - BHO: AdSafe - {598AC71E-BE58-3981-B78A-5C138F423AD6} . (...) -- C:\Documents and Settings\user\Application Data\VolIE\Adsafe_32.dll
O4 - HKCU\..\Run: [LiveSupport] C:\Program Files\LiveSupport\LiveSupport.exe (.not file.) =>PUP.LiveSupport
O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- Cl� orpheline
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job [232] =>Toolbar.Ask
[MD5.6B773BA457B813850A76493B3425AB35] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files\Ask.com\UpdateTask.exe [131976] =>Toolbar.Ask
[HKCU\Software\BuzzSearch] =>PUP.BuzzSearch
[HKCU\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\Default Tab] =>Adware.Bandoo
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\Smartbar] =>Hijacker.SmartBar
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKCU\Software\Vonteera Safe ads] =>Trojan.Vonteera
[HKCU\Software\YourFileDownloader] =>PUP.YourFileDownloader
[HKLM\Software\BuzzSearch] =>PUP.BuzzSearch
[HKLM\Software\Conduit] =>Toolbar.Conduit
[HKLM\Software\Default Tab] =>Adware.Bandoo
[HKLM\Software\YourFileDownloader] =>PUP.YourFileDownloader
[HKLM\Software\babylontoolbar] =>PUP.Babylon
O43 - CFD: 01/12/2013 - 23:03:49 - [0,294] ----D C:\Program Files\FTdownloader V6.0 =>Adware.Downware
O43 - CFD: 03/01/2014 - 23:28:52 - [0] ----D C:\Program Files\greatsoaver =>PUP.GreatSaver
O43 - CFD: 09/03/2014 - 00:56:51 - [0] ----D C:\Program Files\NExtCCouup =>PUP.NetCoupon
O43 - CFD: 01/12/2013 - 23:18:21 - [0,008] ----D C:\Program Files\SecretSauce =>Adware.SecretSauce
O43 - CFD: 07/03/2014 - 13:41:31 - [0] ----D C:\Program Files\Weibsave =>PUP.Websave
O43 - CFD: 23/11/2013 - 22:17:59 - [4,560] ----D C:\Program Files\YourFileDownloader =>PUP.YourFileDownloader
O43 - CFD: 23/11/2013 - 22:17:59 - [0] ----D C:\Documents and Settings\All Users\Application Data\Babylon =>PUP.Babylon
O43 - CFD: 04/01/2014 - 19:57:22 - [0] ----D C:\Documents and Settings\All Users\Application Data\greatsoaver =>PUP.GreatSaver
O43 - CFD: 09/03/2014 - 00:58:11 - [0] ----D C:\Documents and Settings\All Users\Application Data\NExtCCouup =>PUP.NetCoupon
O43 - CFD: 07/03/2014 - 13:44:33 - [0] ----D C:\Documents and Settings\All Users\Application Data\Weibsave =>PUP.Websave
O43 - CFD: 04/01/2014 - 19:57:22 - [0] ----D C:\Documents and Settings\All Users\Application Data\YoutubeAdblocker =>PUP.TubeAdBlocker
O43 - CFD: 24/11/2013 - 15:12:52 - [0] ----D C:\Documents and Settings\user\Application Data\defaulttab =>Adware.Bandoo
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - http://search.live.com
O69 - SBI: SearchScopes [HKCU] {756D1D40-E491-4E1D-9BC6-5B37CEDE646E} [DefaultScope] - (VenteeRo) - http://www.arabyonline.com
O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} - (Newwara Customized Web Search) - http://search.conduit.com
[HKCR\CLSID\{460CCE08-552E-CC5A-E5B9-0ECB0A76143A}] (YoutubeAdblocker) =>PUP.Multiplug
[HKCU\Software\delta LTD] =>Toolbar.DeltaSearch
[HKLM\Software\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}] =>Adware.iWinArcade
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}] =>Toolbar.Ask&Record
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}] =>Toolbar.Ask&Record
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv] =>Toolbar.Agent
[HKLM\Software\BabylonToolbar] =>PUP.Babylon
[HKCU\Software\default tab] =>Adware.IMBooster
[HKLM\Software\default tab] =>Adware.IMBooster
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKLM\Software\Classes\Prod.cap] =>PUP.Babylon
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}] =>Adware.Browse2Save
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}] =>Toolbar.Yahoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}] =>Toolbar.Yahoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}] =>Toolbar.Yahoo
[HKLM\Software\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}] =>Adware.BrowseFox
[HKLM\Software\Classes\Toolbar.CT2458743] =>Toolbar.Conduit
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:LiveSupport =>PUP.LiveSupport^
C:\Program Files\FTdownloader V6.0 =>Adware.Downware^
C:\Program Files\greatsoaver =>PUP.GreatSaver^
C:\Program Files\NExtCCouup =>PUP.NetCoupon^
C:\Program Files\SecretSauce =>Adware.SecretSauce^
C:\Program Files\Weibsave =>PUP.Websave^
C:\Program Files\YourFileDownloader =>PUP.YourFileDownloader^
C:\Documents and Settings\All Users\Application Data\Babylon =>PUP.Babylon^
C:\Documents and Settings\All Users\Application Data\greatsoaver =>PUP.GreatSaver^
C:\Documents and Settings\All Users\Application Data\NExtCCouup =>PUP.NetCoupon^
C:\Documents and Settings\All Users\Application Data\Weibsave =>PUP.Websave^
C:\Documents and Settings\All Users\Application Data\YoutubeAdblocker =>PUP.TubeAdBlocker^
C:\Documents and Settings\user\Application Data\defaulttab =>Adware.Bandoo^
C:\Documents and Settings\user\Application Data\YourFileDownloader =>PUP.YourFileDownloader^
C:\Program Files\Ask.com =>Toolbar.AskBar
C:\Program Files\Conduit =>Toolbar.Conduit
C:\Program Files\Webplayer setup =>Adware.SocialSkinz
C:\Program Files\SimilarSites =>Adware.SimilarSites
C:\Program Files\Optimizer Pro =>PUP.OptimizerPro
C:\Documents and Settings\All Users\Application Data\InstallMate =>PUP.Tarma
C:\Documents and Settings\user\Application Data\SimilarSites =>Adware.SimilarSites
C:\Documents and Settings\user\Local Settings\Application Data\AskToolbar =>Toolbar.AskTBar
C:\Documents and Settings\user\Local Settings\Application Data\Conduit =>Toolbar.Conduit
C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job =>Toolbar.Ask^
C:\Program Files\Ask.com\UpdateTask.exe =>Toolbar.Ask^
[HKCU\Software\BuzzSearch] =>PUP.BuzzSearch^
[HKCU\Software\Conduit] =>Toolbar.Conduit^
[HKCU\Software\Default Tab] =>Adware.Bandoo^
[HKCU\Software\Smartbar] =>Hijacker.SmartBar^
[HKCU\Software\Vonteera Safe ads] =>Trojan.Vonteera^
[HKCU\Software\YourFileDownloader] =>PUP.YourFileDownloader^
[HKLM\Software\BuzzSearch] =>PUP.BuzzSearch^
[HKLM\Software\Conduit] =>Toolbar.Conduit^
[HKLM\Software\Default Tab] =>Adware.Bandoo^
[HKLM\Software\YourFileDownloader] =>PUP.YourFileDownloader^
[HKLM\Software\babylontoolbar] =>PUP.Babylon^
[HKCR\CLSID\{460CCE08-552E-CC5A-E5B9-0ECB0A76143A}] (YoutubeAdblocker) =>PUP.Multiplug^
EmptyCLSID
ShortcutFix
FirewallRaz
EmptyTemp
EmptyFlash
Proxyfix
Sysrestore