~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 4.8.9 (04.22.2013:1) OS: Windows 7 Home Premium x64 Ran by Miko on 26/04/2013 at 16:54:07,77 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113} Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-3350098849-2002721018-650873411-1001\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Bar Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Page Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\Default_Search_URL Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL\\Default Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\searchURL\\Default Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smartbar Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\Software\smartbar Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\scripthelper.exe Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\viprotocol.dll Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\protocols\handler\viprotocol Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi.1 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole.1 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\iminent_rasapi32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\iminent_rasmancs Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\wajam_install_rasapi32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\wajam_install_rasmancs Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\wajamupdater_rasapi32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\wajamupdater_rasmancs Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} ~~~ Files Successfully deleted: [File] "C:\end" Successfully deleted: [File] C:\Windows\syswow64\shoB403.tmp ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\partner" Successfully deleted: [Folder] "C:\Users\Miko\AppData\Roaming\opencandy" Successfully deleted: [Folder] "C:\Users\Miko\appdata\local\conduit" Successfully deleted: [Folder] "C:\Users\Miko\appdata\locallow\conduit" Successfully deleted: [Folder] "C:\Program Files (x86)\conduit" Successfully deleted: [Empty Folder] C:\Users\Miko\appdata\local\{0868B158-7CB5-46A5-981F-10CFD954F12D} Successfully deleted: [Empty Folder] C:\Users\Miko\appdata\local\{19763FA9-A4E4-4774-9EFB-CA03A2AD70B8} Successfully deleted: [Empty Folder] C:\Users\Miko\appdata\local\{20F1413B-5077-446D-8FA7-F8477AF13AF3} Successfully deleted: [Empty Folder] C:\Users\Miko\appdata\local\{371AFC39-AC7A-4951-8909-118456630002} Successfully deleted: [Empty Folder] C:\Users\Miko\appdata\local\{3AADF1A3-0AE9-4EBC-8C9E-4B6CF4831B05} Successfully deleted: [Empty Folder] C:\Users\Miko\appdata\local\{767F07CD-5F1D-405D-9DD2-CB14EBA143FC} Successfully deleted: [Empty Folder] C:\Users\Miko\appdata\local\{8E35D35D-493C-4181-9BB9-F17A41911E34} Successfully deleted: [Empty Folder] C:\Users\Miko\appdata\local\{AAC88C8E-2C51-40B1-B75F-9AC111DEABD5} Successfully deleted: [Empty Folder] C:\Users\Miko\appdata\local\{AE832DF1-50CB-4FE0-AAF9-7370D992B948} ~~~ FireFox Successfully deleted: [Folder] C:\Users\Miko\AppData\Roaming\mozilla\firefox\profiles\2t2jfdfl.default\smartbar Successfully deleted: [Registry Value] hkey_local_machine\software\mozilla\firefox\extensions\\webbooster@iminent.com Successfully deleted the following from C:\Users\Miko\AppData\Roaming\mozilla\firefox\profiles\2t2jfdfl.default\prefs.js user_pref("CT2851639_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1365967926903,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0} user_pref("browser.search.defaultengine", "Ask.com"); user_pref("browser.search.order.1", "Ask.com"); user_pref("iminent.webbooster.scripts.minibar.enabledAds", "false"); user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent100", "1351987904105"); user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent109", "1351897158111"); user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent110", "1351984633277"); user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent111", "1351897158096"); user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent112", "1351897158126"); user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent122", "1351897158136"); user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent109", "1351984855395"); user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent110", "1351984859682"); user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent111", "1351984855391"); user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent112", "1351984855397"); user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent122", "1351984855399"); user_pref("smartBar.searchInNewTabOwner", "CT2851639"); user_pref("smartbar.machineId", "TE29ITLJOIRXPMWZAXUJ2SA1G4IOSSU7UIIFLPZLAGXYESRB3T4QIFMAACF/HBTX5NWVANKPUXAXBYD/OWTOOA"); Emptied folder: C:\Users\Miko\AppData\Roaming\mozilla\firefox\profiles\2t2jfdfl.default\minidumps [91 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 26/04/2013 at 17:01:13,91 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~