~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 7.6.4 (09.28.2015:1) OS: Windows 8.1 x64 Ran by Antoine on 27/10/2015 at 14:04:22,88 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Tasks Failed to delete: [Task] C:\WINDOWS\system32\tasks\DriverDoc_UPDATES Successfully deleted: [Task] C:\WINDOWS\system32\tasks\DriverDocRunAtStartup Successfully deleted: [Task] C:\WINDOWS\system32\tasks\Uninstaller_SkipUac_Antoine Successfully deleted: [Task] C:\WINDOWS\Tasks\DriverDoc_UPDATES.job Successfully deleted: [Task] C:\WINDOWS\Tasks\Uninstaller_SkipUac_Antoine.job ~~~ Registry Values Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\20131121 Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-2789941858-3135364229-2788140389-1001\Software\Microsoft\Internet Explorer\Main\\Start Page ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} ~~~ Files Successfully deleted: [File] C:\Users\Antoine\AppData\Roaming\sp_data.sys Successfully deleted: [File] C:\Users\Antoine\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.publikeco00.publikeco.com_0.localstorage ~~~ Folders Successfully deleted: [Folder] C:\ProgramData\productdata Successfully deleted: [Folder] C:\Users\Antoine\AppData\Roaming\productdata Successfully deleted: [Folder] C:\Users\Antoine\AppData\Roaming\solvusoft ~~~ FireFox Successfully deleted: [Folder] C:\Users\Antoine\AppData\Roaming\mozilla\firefox\profiles\vz8bnx8u.default-1442603132941\extensions\iobitascsurfingprotection@iobit.com Successfully deleted the following from C:\Users\Antoine\AppData\Roaming\mozilla\firefox\profiles\vz8bnx8u.default-1442603132941\prefs.js user_pref(extensions.xpiState, {\app-profile\:{\iobitascsurfingprotection@iobit.com\:{\d\:\C:\\\\Users\\\\Antoine\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Prof Emptied folder: C:\Users\Antoine\AppData\Roaming\mozilla\firefox\profiles\vz8bnx8u.default-1442603132941\minidumps [4 files] ~~~ Chrome [C:\Users\Antoine\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset [C:\Users\Antoine\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted: papbadoldddalgcjcicnikcfenodpghp [C:\Users\Antoine\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset [C:\Users\Antoine\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted: [ booedmolknjekdopkepjjeckmjkdpfgl, flpcjncodpafbgdpnkljologafpionhb, papbadoldddalgcjcicnikcfenodpghp ] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 27/10/2015 at 14:10:56,32 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~