cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.5 (08.05.2015:1)
OS: Windows 7 Ultimate x86
Ran by ramzayy on 08.08.2015 at 0:40:01,61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully deleted: [Service] ppfd_vt_1_10_0_21 [Reboot required]
Successfully deleted: [Service] woryrire [Reboot required]
Successfully deleted: [Service] wsfd_vt_1_10_0_20 [Reboot required]



~~~ Tasks

Successfully deleted: [Task] C:\Windows\Tasks\PhraseProfessor Auto Updater 1.10.0.21 Core.job



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\gmsd_de_005010051
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\gmsd_de_005010054



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110211181110}



~~~ Files

Successfully deleted: [File] C:\Users\ramzayy\Appdata\Local\nsd7691.tmp
Successfully deleted: [File] C:\Users\ramzayy\Appdata\Local\nsi4393.tmp
Successfully deleted: [File] C:\Users\ramzayy\Appdata\Local\nsnA1E5.tmp
Successfully deleted: [File] C:\Users\ramzayy\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_hggpkhijoeadmdfmlbdepfbngmhaldci_0.localstorage-journal
Successfully deleted: [File] C:\Users\ramzayy\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.audienceinsights.net_0.localstorage
Successfully deleted: [File] C:\Users\ramzayy\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.audienceinsights.net_0.localstorage-journal



~~~ Folders

Successfully deleted: [Folder] C:\Program Files\gmsd_de_005010054 [Adware.EoRezo]
Successfully deleted: [Folder] C:\Users\ramzayy\Appdata\Local\update~1
Successfully deleted: [Folder] C:\Users\ramzayy\AppData\Roaming\pdfconvert



~~~ FireFox

Successfully deleted the following from C:\Users\ramzayy\AppData\Roaming\mozilla\firefox\profiles\8fq43fcg.default\prefs.js

user_pref(extensions.delta.admin, false);
user_pref(extensions.delta.aflt, babsst);
user_pref(extensions.delta.appId, {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3});
user_pref(extensions.delta.autoRvrt, false);
user_pref(extensions.delta.bbDpng, 14);
user_pref(extensions.delta.cntry, DE);
user_pref(extensions.delta.dfltLng, en);
user_pref(extensions.delta.excTlbr, false);
user_pref(extensions.delta.ffxUnstlRst, true);
user_pref(extensions.delta.hdrMd5, F6AC94ACC48572948E8C25AC7C8994B5);
user_pref(extensions.delta.id, b2bdd98a00000000000020cf300a909e);
user_pref(extensions.delta.instlDay, 15864);
user_pref(extensions.delta.instlRef, sst);
user_pref(extensions.delta.lastVrsnTs, 1.8.21.512:30:32);
user_pref(extensions.delta.newTab, false);
user_pref(extensions.delta.prdct, delta);
user_pref(extensions.delta.prtnrId, delta);
user_pref(extensions.delta.rvrt, false);
user_pref(extensions.delta.sg, azb);
user_pref(extensions.delta.smplGrp, azb);
user_pref(extensions.delta.storage\\storage\\mpvinpagemutex, 8ecd5635a9a901dbb62ba6ee509901b6@@@Fri Jun 26 2015 19:40:50 GMT+0200);
user_pref(extensions.delta.tlbrId, base);
user_pref(extensions.delta.tlbrSrchUrl, );
user_pref(extensions.delta.vrsn, 1.8.21.5);
user_pref(extensions.delta.vrsnTs, 1.8.21.512:30:32);
user_pref(extensions.delta.vrsni, 1.8.21.5);
user_pref(extensions.delta_i.babExt, );
user_pref(extensions.delta_i.babTrack, affID=121845);
user_pref(extensions.delta_i.srcExt, ss);
Emptied folder: C:\Users\ramzayy\AppData\Roaming\mozilla\firefox\profiles\8fq43fcg.default\minidumps [24 files]



~~~ Chrome


[C:\Users\ramzayy\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\ramzayy\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\ramzayy\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\ramzayy\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.08.2015 at 0:43:57,44
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Publicité


Signaler le contenu de ce document

Publicité