cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows Vista (TM) Home Premium x86
Ran by user on 28/05/2013 at 17:56:53,20
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{230C22EE-865B-4F83-92C2-08CF69DA6578}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2418}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{B3D1C463-0C12-4F24-BCB2-7943255E8DC0}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{230C22EE-865B-4F83-92C2-08CF69DA6578}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2418}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{B3D1C463-0C12-4F24-BCB2-7943255E8DC0}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}



~~~ Files

Successfully deleted: [File] "C:\Users\user\AppData\Local\Temp\searchqu.ini"
Successfully deleted: [File] "C:\Users\user\AppData\Local\Temp\searchqutoolbar-manifest.xml"
Successfully deleted: [File] "C:\Users\user\AppData\Local\Temp\setupdatamngr_searchqu.exe"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\bettersoft"
Successfully deleted: [Folder] "C:\Users\user\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\user\AppData\Roaming\cacaoweb"
Successfully deleted: [Folder] "C:\Users\user\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\user\AppData\Roaming\pdfforge"
Successfully deleted: [Folder] "C:\Users\user\appdata\local\babylon"
Successfully deleted: [Folder] "C:\Users\user\appdata\local\minibar"
Successfully deleted: [Folder] "C:\Users\user\appdata\locallow\toolbar4"
Successfully deleted: [Folder] "C:\Program Files\websearch"



~~~ FireFox

Successfully deleted: [File] C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\hesxjglr.default\searchplugins\search.xml
Successfully deleted: [File] C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\hesxjglr.default\searchplugins\search_results.xml
Successfully deleted: [File] C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\hesxjglr.default\searchplugins\websearch.xml
Successfully deleted: [Folder] C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\hesxjglr.default\extensions\ffxtlbr@babylon.com
Failed to delete: [Folder] C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\hesxjglr.default\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
Successfully deleted the following from C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\hesxjglr.default\prefs.js

user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
user_pref("browser.search.defaultenginename", "WebSearch");
user_pref("browser.search.defaultenginename,S", "WebSearch");
user_pref("browser.search.defaulturl", "hxxp://websearch.pu-results.info/?pid=724&r=2013/04/16&hid=81205558&lg=EN&cc=BE&l=1&q=");
user_pref("browser.search.order.1", "WebSearch");
user_pref("browser.search.order.1,S", "WebSearch");
user_pref("browser.search.selectedEngine", "WebSearch");
user_pref("browser.search.selectedEngine,S", "WebSearch");
user_pref("browser.startup.homepage", "hxxp://websearch.pu-results.info/?pid=724&r=2013/04/16&hid=81205558&lg=EN&cc=BE");
user_pref("extensions.5148770d1525e.scode", "(function(){try{if('aol.com,mail.google.com,premiumreports.info,search.babylon.com,search.gboxapp.com'.indexOf(window.self.locatio
user_pref("keyword.URL", "hxxp://websearch.pu-results.info/?pid=724&r=2013/04/16&hid=81205558&lg=EN&cc=BE&l=1&q=");
Emptied folder: C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\hesxjglr.default\minidumps [4 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28/05/2013 at 17:58:16,26
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Publicité


Signaler le contenu de ce document

Publicité