~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 4.8.9 (04.22.2013:1) OS: Windows 7 Professional x64 Ran by Alain Riendeau on 24-04-13 at 19:45:53,78 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit Failed to delete: [Registry Key] HKEY_CURRENT_USER\Software\datamngr Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\datamngr Failed to delete: [Registry Key] HKEY_CURRENT_USER\Software\datamngr_toolbar Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\Software\conduit Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\Software\conduitsearchscopes Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\Software\pricegong Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\Software\smartbar Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\sprotector Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\discoveryhelper.dll Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\gifanimator.dll Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\imtrprogress.dll Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\imweb.dll Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\scripthelper.exe Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\viprotocol.dll Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\wmhelper.dll Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\discoveryhelper.imesh6discovery Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\discoveryhelper.imesh6discovery.1 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\imweb.imwebcontrol Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\protocols\handler\viprotocol Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi.1 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole.1 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\conduitinstaller_rasapi32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\conduitinstaller_rasmancs Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\mybabylontb_rasapi32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\mybabylontb_rasmancs Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\widestream6-setup_rasapi32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\widestream6-setup_rasmancs Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\widestream_rasapi32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\widestream_rasmancs Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\datamngr Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sprotector Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{810E5E24-78F7-425A-9001-38CD0DBCE1C1} Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip" Successfully deleted: [Registry Key] "hkey_local_machine\software\pip" ~~~ Files Successfully deleted: [File] "C:\end" Successfully deleted: [File] C:\eula.1028.txt Successfully deleted: [File] C:\eula.1031.txt Successfully deleted: [File] C:\eula.1033.txt Successfully deleted: [File] C:\eula.1036.txt Successfully deleted: [File] C:\eula.1040.txt Successfully deleted: [File] C:\eula.1041.txt Successfully deleted: [File] C:\eula.1042.txt Successfully deleted: [File] C:\eula.2052.txt Successfully deleted: [File] C:\install.res.1028.dll Successfully deleted: [File] C:\install.res.1031.dll Successfully deleted: [File] C:\install.res.1033.dll Successfully deleted: [File] C:\install.res.1036.dll Successfully deleted: [File] C:\install.res.1040.dll Successfully deleted: [File] C:\install.res.1041.dll Successfully deleted: [File] C:\install.res.1042.dll Successfully deleted: [File] C:\install.res.2052.dll Successfully deleted: [File] C:\install.res.3082.dll ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\browse2save" Successfully deleted: [Folder] "C:\ProgramData\browseo2suaavve" Successfully deleted: [Folder] "C:\ProgramData\browser manager" Successfully deleted: [Folder] "C:\ProgramData\installmate" Successfully deleted: [Folder] "C:\ProgramData\rightclick" Successfully deleted: [Folder] "C:\ProgramData\simplitec" Successfully deleted: [Folder] "C:\ProgramData\tarma installer" Successfully deleted: [Folder] "C:\Users\Alain Riendeau\AppData\Roaming\dvdvideosoftiehelpers" Successfully deleted: [Folder] "C:\Users\Alain Riendeau\AppData\Roaming\goforfiles" Successfully deleted: [Folder] "C:\Users\Alain Riendeau\AppData\Roaming\opencandy" Successfully deleted: [Folder] "C:\Users\Alain Riendeau\AppData\Roaming\simplitec" Successfully deleted: [Folder] "C:\Users\Alain Riendeau\AppData\Roaming\widestream" Successfully deleted: [Folder] "C:\Users\Alain Riendeau\appdata\local\conduit" Successfully deleted: [Folder] "C:\Users\Alain Riendeau\appdata\local\swvupdater" Successfully deleted: [Folder] "C:\Users\Alain Riendeau\appdata\local\widestream6 air" Successfully deleted: [Folder] "C:\Users\Alain Riendeau\appdata\locallow\browse2save" Successfully deleted: [Folder] "C:\Users\Alain Riendeau\appdata\locallow\browseo2suaavve" Successfully deleted: [Folder] "C:\Users\Alain Riendeau\appdata\locallow\conduit" Successfully deleted: [Folder] "C:\Users\Alain Riendeau\appdata\locallow\pricegong" Successfully deleted: [Folder] "C:\Program Files (x86)\conduit" Successfully deleted: [Folder] "C:\Program Files (x86)\goforfiles" Successfully deleted: [Folder] "C:\Program Files (x86)\imesh applications" Successfully deleted: [Folder] "C:\Program Files (x86)\widestream6" Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\browse2save" ~~~ FireFox Successfully deleted: [File] C:\Users\Alain Riendeau\AppData\Roaming\mozilla\firefox\profiles\i0q8tl3f.default\user.js Successfully deleted: [File] C:\Users\Alain Riendeau\AppData\Roaming\mozilla\firefox\profiles\i0q8tl3f.default\searchplugins\delta.xml Successfully deleted the following from C:\Users\Alain Riendeau\AppData\Roaming\mozilla\firefox\profiles\i0q8tl3f.default\prefs.js user_pref("CT3279141.FF19Solved", "true"); user_pref("CT3279141.UserID", "UN61306599820996307"); user_pref("CT3279141.addressUrlXPETakeover", "true"); user_pref("CT3279141.autoDisableScopes", -1); user_pref("CT3279141.browser.search.defaultthis.engineName", "true"); user_pref("CT3279141.defaultSearchXPETakeover", "true"); user_pref("CT3279141.installDate", "24/2/2013 21:56:31"); user_pref("CT3279141.keyword", "true"); user_pref("CT3287819_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1365444248013,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0} user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3287819&CUI=UN13852748993022698&UM=2&SearchSource=13"); user_pref("Smartbar.ConduitSearchEngineList", "MixiDJ V5 Customized Web Search"); user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287819&SearchSource=2&CUI=UN13852748993022698&UM=2&q="); user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.speedbit.com/search.aspx?s=D2OaGA&q="); user_pref("Smartbar.keywordURLSelectedCTID", "CT3287819"); user_pref("aol_toolbar.default.homepage.check", false); user_pref("aol_toolbar.default.search.check", false); user_pref("avg.install.userHPSettings", "hxxp://www.delta-search.com/?affID=120519&babsrc=HP_ss&mntrId=76CD14DAE978B4B4"); user_pref("avg.install.userSPSettings", "Delta Search"); user_pref("browser.search.defaultthis.engineName", "MixiDJ V5 Customized Web Search"); user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287819&CUI=UN13852748993022698&UM=2&SearchSource=3&q={searchTerms}"); user_pref("browser.startup.homepage_override_url", "hxxp://search.speedbit.com/?s=D2OaGA"); user_pref("extensions.512ad9a882f76.scode", "(function(){try{if('aol.com,mail.google.com,premiumreports.info,search.babylon.com,search.gboxapp.com'.indexOf(window.self.locatio user_pref("extensions.BabylonToolbar.prtkDS", 0); user_pref("extensions.BabylonToolbar.prtkHmpg", 0); user_pref("extensions.delta.admin", false); user_pref("extensions.delta.aflt", "babsst"); user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); user_pref("extensions.delta.autoRvrt", "false"); user_pref("extensions.delta.bbDpng", "8"); user_pref("extensions.delta.cntry", "CA"); user_pref("extensions.delta.dfltLng", "en"); user_pref("extensions.delta.excTlbr", false); user_pref("extensions.delta.hdrMd5", "CBF1928E96BFF9D730E2F605FFE77E6C"); user_pref("extensions.delta.id", "76cdfdc100000000000014dae978b4b4"); user_pref("extensions.delta.instlDay", "15803"); user_pref("extensions.delta.instlRef", "sst"); user_pref("extensions.delta.lastVrsnTs", "1.8.10.013:53:31"); user_pref("extensions.delta.newTab", false); user_pref("extensions.delta.prdct", "delta"); user_pref("extensions.delta.prtnrId", "delta"); user_pref("extensions.delta.rvrt", "false"); user_pref("extensions.delta.sg", "tzb"); user_pref("extensions.delta.smplGrp", "none"); user_pref("extensions.delta.tlbrId", "base"); user_pref("extensions.delta.tlbrSrchUrl", ""); user_pref("extensions.delta.vrsn", "1.8.10.0"); user_pref("extensions.delta.vrsnTs", "1.8.10.013:53:31"); user_pref("extensions.delta.vrsni", "1.8.10.0"); user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287819&SearchSource=2&CUI=UN13852748993022698&UM=2&q="); user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3287819&CUI=UN13852748993022698&UM=2&SearchSource=13"); user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3279141&SearchSource=2&CUI=UN61306599820996307&UM=UM_ID&q=,hxxp://search.co user_pref("smartbar.originalHomepage", "hxxp://www.delta-search.com/?affID=120519&babsrc=HP_ss&mntrId=76CD14DAE978B4B4"); user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.speedbit.com/search.aspx?s=D2OaGA&q="); user_pref("smartbar.originalSearchEngine", "Google"); user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", ""); user_pref("sweetim.toolbar.previous.browser.startup.homepage", ""); user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ""); user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", ""); user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", ""); user_pref("sweetim.toolbar.searchguard.enable", ""); Emptied folder: C:\Users\Alain Riendeau\AppData\Roaming\mozilla\firefox\profiles\i0q8tl3f.default\minidumps [40 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 24-04-13 at 19:48:17,02 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~