~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.1 (02.04.2014:1) OS: Windows 8 x64 Ran by andre on 05/02/2014 at 19:44:56,70 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Suspicious HKCU\..\Run entries found. Trojan:JS/Medfos.B? Value Name Type Value Data ======================================================================================== NextLive REG_SZ C:\windows\SysWOW64\rundll32.exe "C:\Users\andre\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{8E465428-0F9C-4994-8EFE-46E0E0546DED} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Users\andre\AppData\Roaming\webplayer" Failed to delete: [Folder] "C:\Program Files (x86)\webplayer" ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 05/02/2014 at 19:53:54,13 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~