~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Home Premium x64 Ran by Dell on 06/07/2014 at 16:58:10,56 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\pc speed maximizer Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{3004627E-F8E9-4E8B-909D-316753CBA923} ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babsolution Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\pc speed maximizer Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installcore Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\b Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\mysearchdial.mysearchdialappcore Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\UpdateTask_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\UpdateTask_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\Softonic_downloader_steam_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\Softonic_downloader_steam_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\UpdateTask_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\UpdateTask_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\Softonic_downloader_steam_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\Softonic_downloader_steam_RASMANCS Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Users\Dell\AppData\Roaming\babsolution" Successfully deleted: [Folder] "C:\Users\Dell\AppData\Roaming\pc speed maximizer" Successfully deleted: [Folder] "C:\Users\Dell\appdata\locallow\mysearchdial" Failed to delete: [Folder] "C:\Program Files (x86)\pc speed maximizer" ~~~ FireFox Successfully deleted: [File] C:\Users\Dell\AppData\Roaming\mozilla\firefox\profiles\k2srv1bi.default\user.js Successfully deleted: [File] C:\Users\Dell\AppData\Roaming\mozilla\firefox\profiles\k2srv1bi.default\searchplugins\mysearchdial.xml Successfully deleted: [Folder] C:\Users\Dell\AppData\Roaming\mozilla\firefox\profiles\k2srv1bi.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} Successfully deleted the following from C:\Users\Dell\AppData\Roaming\mozilla\firefox\profiles\k2srv1bi.default\prefs.js user_pref("extensions.buenosearch.lastB", "hxxp://start.mysearchdial.com/?f=1&a=tele_14_17_ie&cd=2XzuyEtN2Y1L1QzutDtDtBtCyBtDtD0C0C0AtB0AtByCtB0BtN0D0Tzu0SzzyEtBtN1L2XzutBtFtB user_pref("extensions.mysearchdial.AL", 2); user_pref("extensions.mysearchdial.aflt", "tele_14_17_ie"); user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutDtDtBtCyBtDtD0C0C0AtB0AtByCtB0BtN0D0Tzu0SzzyEtBtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2S user_pref("extensions.mysearchdial.cntry", "FR"); user_pref("extensions.mysearchdial.cr", "221424444"); user_pref("extensions.mysearchdial.dfltLng", ""); user_pref("extensions.mysearchdial.dfltSrch", true); user_pref("extensions.mysearchdial.dnsErr", true); user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,32 user_pref("extensions.mysearchdial.excTlbr", false); user_pref("extensions.mysearchdial.hdrMd5", "81057BBF3E5465D192B23FD66224B5FA"); user_pref("extensions.mysearchdial.hmpg", true); user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=tele_14_17_ie&cd=2XzuyEtN2Y1L1QzutDtDtBtCyBtDtD0C0C0AtB0AtByCtB0BtN0D0Tzu0SzzyEtBtN1L2XzutBt user_pref("extensions.mysearchdial.id", "0021700CCA2A262B"); user_pref("extensions.mysearchdial.instlDay", "16181"); user_pref("extensions.mysearchdial.instlRef", "140305_b"); user_pref("extensions.mysearchdial.lastB", "hxxp://start.mysearchdial.com/?f=1&a=tele_14_16_ff&cd=2XzuyEtN2Y1L1QzutDtDtBtCyBtDtD0C0C0AtB0AtByCtB0BtN0D0Tzu0SzzyEtDtN1L2XzutBtFt user_pref("extensions.mysearchdial.lastVrsnTs", "1.8.29.018:47:47"); user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=tele_14_17_ie&cd=2XzuyEtN2Y1L1QzutDtDtBtCyBtDtD0C0C0AtB0AtByCtB0BtN0D0Tzu0SzzyEtBtN1L2Xzut user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"96\",\"lastVrsn\":\"96\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"false\",\"msgTs\":0,\"lstMsgTs\ user_pref("extensions.mysearchdial.prdct", "mysearchdial"); user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); user_pref("extensions.mysearchdial.sg", "none"); user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); user_pref("extensions.mysearchdial.tlbrId", "base"); user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=tele_14_17_ie&cd=2XzuyEtN2Y1L1QzutDtDtBtCyBtDtD0C0C0AtB0AtByCtB0BtN0D0Tzu0SzzyEtBtN1L2Xz user_pref("extensions.mysearchdial.vrsn", "1.8.29.0"); user_pref("extensions.mysearchdial.vrsni", "1.8.29.0"); user_pref("extensions.mysearchdial_i.newTab", false); user_pref("extensions.mysearchdial_i.smplGrp", "none"); user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.29.018:47:47"); ~~~ Chrome Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 06/07/2014 at 17:09:29,96 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~