~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 7.5.7 (08.18.2015:1) OS: Windows 8 Pro x64 Ran by Weltinfo on 25/08/2015 at 15:12:57,86 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Tasks ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ FireFox Successfully deleted: [File] C:\Users\Weltinfo\AppData\Roaming\mozilla\firefox\profiles\gnb12vgv.default\invalidprefs.js Successfully deleted: [File] C:\Users\Weltinfo\AppData\Roaming\mozilla\firefox\profiles\gnb12vgv.default\searchplugins\ask-search.xml Successfully deleted: [File] C:\Users\Weltinfo\AppData\Roaming\mozilla\firefox\profiles\gnb12vgv.default\searchplugins\ask-web-search.xml Successfully deleted the following from C:\Users\Weltinfo\AppData\Roaming\mozilla\firefox\profiles\gnb12vgv.default\prefs.js user_pref(browser.search.selectedEngine, Ask Web Search); user_pref(browser.startup.homepage, hxxp://home.tb.ask.com/index.jhtml?ptb=582E8AC2-876D-46C0-A088-7B4207784332&n=781af4ba&p2=^BBQ^xdm103^YYA^dz&si=CIew59WJxMQCFasEwwodFoUA ~~~ Chrome [C:\Users\Weltinfo\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset [C:\Users\Weltinfo\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted: [C:\Users\Weltinfo\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset [C:\Users\Weltinfo\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted: [] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 25/08/2015 at 15:18:35,16 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~