Script ZHPFix
R0 - HKCU\SOFTWARE\Policies\Microsoft\Internet Explorer\Main,Start Page = http://seeearch.com =>PUP.StartSearch
[MD5.00000000000000000000000000000000] [APT] [{90B1F637-2D65-41BA-95EB-D932DEB9FC48}] (...) -- C:\Users\Florian\AppData\Roaming\webssearches\UninstallManager.exe (.not file.) [0] =>Hijacker.WebsSearches
[MD5.00000000000000000000000000000000] [APT] [{988FA5AD-1DBA-44AF-A044-88B218ADF08E}] (...) -- C:\Users\Florian\Local Settings\Application Data\Bundled software uninstaller\biclient.exe (.not file.) [0] =>Adware.MegaSearch
[MD5.00000000000000000000000000000000] [APT] [{D526ACF6-9EC0-4D2D-9793-9522DE85D76D}] (...) -- C:\Users\Florian\Local Settings\Application Data\Bundled software uninstaller\bi_client.exe (.not file.) [0] =>Adware.MegaSearch
O42 - Logiciel: BrowseToSave - (...) [HKLM][64Bits] -- {BAE2FECE-25D4-42CB-A020-6DF66101DC38} =>Adware.Browse2Save
[HKLM\Software\Wow6432Node\SWEETIM] =>PUP.SweetIM
O43 - CFD: 30/03/2012 - 11:54:10 - [0] ----D C:\ProgramData\Babylon =>PUP.Babylon
O43 - CFD: 27/07/2011 - 13:20:36 - [0] ----D C:\ProgramData\BabylonUpdater =>PUP.Babylon
O43 - CFD: 02/04/2013 - 16:15:00 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma
O43 - CFD: 30/06/2013 - 16:45:33 - [] ----D C:\ProgramData\Tarma Installer =>PUP.Tarma
O43 - CFD: 01/05/2014 - 19:46:18 - [] ----D C:\ProgramData\WPM =>PUP.WpManager
O45 - LFCP:[MD5.F1AA7138B5E0E555BA620FA8ABA50199] - 17/04/2014 - 14:27:13 ---A- - C:\Windows\Prefetch\BABMAINT.EXE-ACB9885B.pf =>Hijacker.BabSolution
O51 - MPSK:{f08a10ae-b22c-11e0-96f2-0026b9204b3a}\AutoRun\command. (...) -- G:\DPFMate.exe (.not file.)
O61 - LFC: 01/05/2014 - 19:17:38 ---A- . (...) -- C:\Users\Florian\AppData\Local\Temp\a145f868-603f-47f5-888f-dff5a0fd9712\software\OptimizerPro.exe [6872592] =>PUP.OptimizerPro
O61 - LFC: 01/05/2014 - 19:17:38 ---A- . (...) -- C:\Users\Florian\AppData\Local\Temp\a145f868-603f-47f5-888f-dff5a0fd9712\software\VOPackage.exe [296161] =>Adware.Downware
O69 - SBI: SearchScopes [HKCU] 1CF84D6B556A44269CEAA13109410A5A - (Search Results) - http://dts.search-results.com =>PUP.SearchResults
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExpressFiles_RASAPI32 =>Adware.ExpressFiles
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ExpressFiles_RASMANCS =>Adware.ExpressFiles
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\kujytuo_RASAPI32 =>Virus.Kujytuo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\kujytuo_RASMANCS =>Virus.Kujytuo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LatestDLMgr_RASAPI32 =>Adware.OpenCandy
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LatestDLMgr_RASMANCS =>Adware.OpenCandy
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SmartbarExeInstaller_RASAPI32 =>Hijacker.SmartBar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SmartbarExeInstaller_RASMANCS =>Hijacker.SmartBar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SweetImSetup (1)_RASAPI32 =>PUP.SweetIM
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SweetImSetup (1)_RASMANCS =>PUP.SweetIM
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-14A0_RASAPI32 =>Adware.Yontoo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-14A0_RASMANCS =>Adware.Yontoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BAE2FECE-25D4-42CB-A020-6DF66101DC38}] =>Adware.Browse2Save^
[HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110211181110}] =>Adware.VidSaver
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211181110}] =>PUP.CrossRider
C:\ProgramData\Babylon =>PUP.Babylon^
C:\ProgramData\BabylonUpdater =>PUP.Babylon^
C:\ProgramData\InstallMate =>PUP.Tarma^
C:\ProgramData\Tarma Installer =>PUP.Tarma^
C:\ProgramData\WPM =>PUP.WpManager^
[HKLM\Software\Wow6432Node\SWEETIM] =>PUP.SweetIM^
http://nicolascoolman.webs.com/apps/blog/show/28085716-pup-startsearch =>PUP.StartSearch
http://nicolascoolman.webs.com/apps/blog/show/41962428-hijacker-webssearches =>Hijacker.WebsSearches
http://nicolascoolman.webs.com/apps/blog/show/26919368-adware-megasearch =>Adware.MegaSearch
http://nicolascoolman.webs.com/apps/blog/show/26627530-adware-browse2save =>Adware.Browse2Save
http://nicolascoolman.webs.com/apps/blog/show/29216159-pup-sweetim =>PUP.SweetIM
http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon =>PUP.Babylon
http://nicolascoolman.webs.com/apps/blog/show/29637859-toolbar-tarma =>PUP.Tarma
http://nicolascoolman.webs.com/apps/blog/show/38737316-pup-wpmanager =>PUP.WpManager
http://nicolascoolman.webs.com/apps/blog/show/26678994-hijacker-babsolution =>Hijacker.BabSolution
http://nicolascoolman.webs.com/apps/blog/show/28204239-pup-optimizerpro =>PUP.OptimizerPro
http://nicolascoolman.webs.com/apps/blog/show/26690384-adware-downware =>Adware.Downware
http://nicolascoolman.webs.com/apps/blog/show/30319724-pup-searchresults =>PUP.SearchResults
http://nicolascoolman.webs.com/apps/blog/show/26753274-adware-expressfiles =>Adware.ExpressFiles
http://nicolascoolman.webs.com/apps/blog/show/28358602-virus-kujytuo =>Virus.Kujytuo
http://nicolascoolman.webs.com/apps/blog/show/26770694-adware-opencandy =>Adware.OpenCandy
http://nicolascoolman.webs.com/apps/blog/show/26990375-hijacker-smartbar =>Hijacker.SmartBar
http://nicolascoolman.webs.com/apps/blog/show/26811836-adware-yontoo =>Adware.Yontoo
http://nicolascoolman.webs.com/apps/blog/show/27557062-adware-vidsaver =>Adware.VidSaver
http://nicolascoolman.webs.com/apps/blog/show/27583526-pup-crossrider =>PUP.CrossRider

FirewallRaz
EmptyFlash
Emptytemp
ShortcutFix