~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Ultimate x86 Ran by Tony on 18/02/2016 at 12:41:52,73 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\dynconie Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\wajam_install_rasapi32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\wajam_install_rasmancs Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\WinTaske_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\WinTaske_RASMANCS ~~~ Files ~~~ Folders ~~~ FireFox Successfully deleted the following from C:\Users\Tony\AppData\Roaming\mozilla\firefox\profiles\41A66E7E5EE1\prefs.js user_pref("browser.search.searchengine.searchengine.uid", "[xpconnect wrapped nsIUUIDGenerator]"); user_pref("extensions.toolbar.mindspark._brMembers_.BUTTON_STRUCTURE", "[{\"b\":224520315,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224520316,\"c\":\"mindspark.enterse user_pref("extensions.toolbar.mindspark._brMembers_.browser.version.last", "44.0"); user_pref("extensions.toolbar.mindspark._brMembers_.firstKnownVersion", "7.38.8.45986"); user_pref("extensions.toolbar.mindspark._brMembers_.homepage", "/index.jhtml?n=782a0d33"); user_pref("extensions.toolbar.mindspark._brMembers_.hp.enabled", false); user_pref("extensions.toolbar.mindspark._brMembers_.hp.guardType", "HPR"); user_pref("extensions.toolbar.mindspark._brMembers_.initialized", true); user_pref("extensions.toolbar.mindspark._brMembers_.installation.installDate", "2016021811"); user_pref("extensions.toolbar.mindspark._brMembers_.installation.success", true); user_pref("extensions.toolbar.mindspark._brMembers_.lastActivePing", "1455790930274"); user_pref("extensions.toolbar.mindspark._brMembers_.lastKnownVersion", "7.38.8.45986"); user_pref("extensions.toolbar.mindspark._brMembers_.lssState", "{\"previousLocales\":[\"fr\",\"fr-FR\",\"en-US\",\"en\"],\"supportedLocales\":[\"de\",\"es\",\"pt\",\"ja\",\"en user_pref("extensions.toolbar.mindspark._brMembers_.options.defaultSearch", false); user_pref("extensions.toolbar.mindspark._brMembers_.options.homePageEnabled", false); user_pref("extensions.toolbar.mindspark._brMembers_.options.keywordEnabled", true); user_pref("extensions.toolbar.mindspark._brMembers_.options.tabEnabled", false); user_pref("extensions.toolbar.mindspark._brMembers_.productDeliveryOption.language", "en"); user_pref("extensions.toolbar.mindspark._brMembers_.productDeliveryOption.type", "Toolbar"); user_pref("extensions.toolbar.mindspark._brMembers_.shownUninstall", true); user_pref("extensions.toolbar.mindspark._brMembers_.startupTasks", "{\"clearPrefs\":[\"extensions.toolbar.mindspark._brMembers_.shownUninstall\"],\"undoDisableHPGuard\":[\"tru user_pref("extensions.toolbar.mindspark._brMembers_.successUrl", "hxxp://www.yessearches.com/chrome.php?uid=38965F0BDE2DB15ED04605515179DABD&ptid=sto&ts=AHEpBHQsCHYlAE..&v=201 user_pref("extensions.toolbar.mindspark._brMembers_.toolbarCollapsed", false); user_pref("extensions.toolbar.mindspark._brMembers_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._brMembers_.\"],\"filesToDelete\":[\"C:\\\\User user_pref("extensions.toolbar.mindspark.hp.enabled", false); user_pref("extensions.toolbar.mindspark.lastInstalled", "yourGSearchfinder@GSearch.com"); ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 18/02/2016 at 12:46:38,92 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~