~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Home Premium x64 Ran by janot on 13/09/2014 at 18:20:40,38 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\\DisplayName Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\\URL ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-813451756-248047063-479339143-1001\Software\sweetim Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-813451756-248047063-479339143-1001\Software\web assistant Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211701196} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211701196} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{2ECF55DC-5F7D-48AF-B18C-7C3D1F4E9635} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{56A38400-5A9C-B267-A7C7-19662BF792CC} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{987e52d4-8597-4b8f-bc9b-d19602a9293b} ~~~ Files Successfully deleted: [File] C:\Windows\syswow64\sho57FE.tmp ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\big fish" Successfully deleted: [Folder] "C:\ProgramData\big fish games" Successfully deleted: [Folder] "C:\Users\janot\AppData\Roaming\big fish games" Successfully deleted: [Folder] "C:\bigfishcache" Successfully deleted: [Empty Folder] C:\Users\janot\appdata\local\{0B37630F-D9BB-4F5C-A6C8-D7940D4B121F} Successfully deleted: [Empty Folder] C:\Users\janot\appdata\local\{2E0FA32F-0D18-4FCF-AAD2-1FEC8DE1B8AF} Successfully deleted: [Empty Folder] C:\Users\janot\appdata\local\{4CB52A8D-D340-4485-818B-ED7CC8014A3F} Successfully deleted: [Empty Folder] C:\Users\janot\appdata\local\{5079AC0D-DDF4-4722-8E8E-B5249BD63C74} Successfully deleted: [Empty Folder] C:\Users\janot\appdata\local\{866913AF-64D2-423A-A32F-4C4F84CA76EA} Successfully deleted: [Empty Folder] C:\Users\janot\appdata\local\{A506C524-D4F4-4556-A1E8-50CCDAC94E75} Successfully deleted: [Empty Folder] C:\Users\janot\appdata\local\{B916B1C7-DF46-4682-9094-729B28C1835D} Successfully deleted: [Empty Folder] C:\Users\janot\appdata\local\{CBF76641-2140-4362-9FCF-6BFE423CB038} Successfully deleted: [Empty Folder] C:\Users\janot\appdata\local\{E31059C2-DD7A-4820-92C2-3837EEFF8E18} ~~~ FireFox Successfully deleted: [File] C:\user.js Successfully deleted the following from C:\Users\janot\AppData\Roaming\mozilla\firefox\profiles\laratfks.default\prefs.js user_pref("extensions.a217e8200a3b343dfb9518ec01d483d7fb98c68091f3f41a1bb1c692cf84781e9com27096.27096.plugins.plugin_31.code", "if (!appAPI.monetize || appAPI.monetize.isNeedT Emptied folder: C:\Users\janot\AppData\Roaming\mozilla\firefox\profiles\laratfks.default\minidumps [43 files] ~~~ Chrome Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 13/09/2014 at 18:47:37,06 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~