~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.2 (02.20.2014:1) OS: Microsoft Windows XP x86 Ran by utilisateur on 10.03.2014 at 18:15:18.39 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\domaiq uninstaller Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110211181110} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110211181110} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211181110} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Documents and Settings\utilisateur\Local Settings\Application Data\torch" Successfully deleted: [Folder] "C:\Program Files\optimizer pro" ~~~ FireFox Successfully deleted: [File] C:\Documents and Settings\utilisateur\Application Data\mozilla\firefox\profiles\0rnrd0ql.default\searchplugins\websearch.xml Successfully deleted the following from C:\Documents and Settings\utilisateur\Application Data\mozilla\firefox\profiles\0rnrd0ql.default\prefs.js user_pref("browser.search.defaultenginename", "WebSearch"); user_pref("browser.search.defaultenginename,S", "WebSearch"); user_pref("browser.search.defaulturl", "hxxp://websearch.exitingsearch.info/?pid=512&r=2014/03/09&hid=10894378538798210543&lg=EN&cc=FR&unqvl=50&l=1&q="); user_pref("browser.search.order.1", "WebSearch"); user_pref("browser.search.order.1,S", "WebSearch"); user_pref("browser.search.selectedEngine", "WebSearch"); user_pref("browser.search.selectedEngine,S", "WebSearch"); user_pref("extensions.4eZ8_p.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\ user_pref("extensions.TEgswpG1K950.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp000 user_pref("extensions.XjLCC5VUU308.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp000 user_pref("extensions.XjLCC5VUU308.url", "hxxp://getfetch.info/sync2/?q=hfZ9ofV9CShEAen0qjwGtMqLDe49CNU0mVsMCMlNhd9FqdaHrdUFqdw8rjrMBzqUojw9rdrFrdw6rdkHpch7hfs0pihPBMn0qdY8pdC user_pref("extensions.ad822269819e54827b79e0a077ea8eb7a7b662f6d389941e488646393447568dacom37180.37180.internaldb.cache/530e52021dc20843b1aa62957edeb9f8.value", "%22var%20adsDe user_pref("extensions.ad822269819e54827b79e0a077ea8eb7a7b662f6d389941e488646393447568dacom37180.37180.internaldb.cache/d5baae4ef839769f8eb7e9f9d82d8a40_FR.value", "%22var%20ca user_pref("keyword.URL", "hxxp://websearch.exitingsearch.info/?pid=512&r=2014/03/09&hid=10894378538798210543&lg=EN&cc=FR&unqvl=50&l=1&q="); ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 10.03.2014 at 18:30:53.96 Computer was rebooted End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~