~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.4 (09.28.2015:1)
OS: Windows 7 Home Premium x64
Ran by Mahmoud on Sat 10/24/2015 at 2:17:36.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\browserpluginhelper
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{69AF5E37-2324-41E6-871D-B29D3B47AF23}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{69AF5E37-2324-41E6-871D-B29D3B47AF23}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}



~~~ Files

Successfully deleted: [File] C:\Users\Mahmoud\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.ak.facebook.com_0.localstorage
Successfully deleted: [File] C:\Users\Mahmoud\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.ak.facebook.com_0.localstorage-journal
Successfully deleted: [File] C:\Users\Mahmoud\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\wondershare player.lnk
Successfully deleted: [File] C:\Users\Mahmoud\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\wondershare player.lnk
Successfully deleted: [File] C:\Users\Mahmoud\desktop\search.lnk
Successfully deleted: [File] C:\Users\Public\Desktop\wondershare player.lnk



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{0A86B562-8EFC-41AA-8495-ABACDCEFC92A}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{1A1A0784-0081-4051-9586-E59A1BE7899D}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{1BBDEDC8-35B9-4BC0-A96E-32BCF078EE7D}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{226E4EAF-2A93-4923-899C-0F89B1AEB9F5}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{26B46281-FA64-4D76-805E-F0F2AEEDF35A}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{27C4759F-FDD0-458D-80CD-57F39A555A66}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{42033D2C-A780-4502-868D-85ED5EAAB11C}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{42C7D845-3905-409D-8788-E65D4719FCBC}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{4B6398F8-3FF2-4142-B7BB-F31C4679B3C7}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{57ED9AA9-D6EC-46E9-AD0A-9274612BD1E9}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{70BCC3E6-1F2C-49AA-AB86-A6FAC2F9B101}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{733783D4-1C22-4BD1-8A3E-1538E0E27589}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{73424E00-4D3B-486A-B489-2AE27248EFD5}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{78887B87-E9D8-4153-B778-3D38B784BE45}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{8839E9DC-3216-429A-A4A7-51DA6F87E185}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{8F994CE9-D1AF-4DF5-B85E-D71DC3267BF7}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{9684B7B9-9B3A-4137-9763-7A7C826D351A}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{B1AC1625-1404-450F-A8B0-87BE3714E7A5}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{B2284EA0-B805-49F6-9619-3E8DB096E8D2}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{C665AEC2-0C69-404E-B70B-E8D3ED6EEBF0}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{CC194C70-8E48-460F-B8BA-D748222D09DF}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{CFFF97C5-60C4-414C-86A1-9226435001C2}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{EFE52662-584A-4507-9859-CCE705869E49}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{F1EEDFCC-D90B-471B-A652-3BA20EA52A20}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{FE3EEEC3-3E31-414A-8F5F-F7232D132B5B}
Successfully deleted: [Empty Folder] C:\Users\Mahmoud\Appdata\Local\{FEDB5E2D-0FD9-4608-A8CC-719974F96616}
Successfully deleted: [Folder] C:\ProgramData\summersoft
Successfully deleted: [Folder] C:\Users\Mahmoud\Documents\add-in express
Successfully deleted: [Folder] C:\ProgramData\Browwse22saave
Successfully deleted: [Folder] C:\ProgramData\coinutinuueytoosaave
Successfully deleted: [Folder] C:\ProgramData\conntiinueetuosuavee
Successfully deleted: [Folder] C:\ProgramData\cOOntiinuetoosave
Successfully deleted: [Folder] C:\ProgramData\safe ssaave
Successfully deleted: [Folder] C:\ProgramData\ssavennshuare



~~~ FireFox

Successfully deleted the following from C:\Users\Mahmoud\AppData\Roaming\mozilla\firefox\profiles\m9y1z992.default\prefs.js

user_pref(extensions.516413257dd33.url, hxxp://veterancanadacenterzillion.net/sync2/?ext=btos&pid=924&country=FI®d=130409130957&lsd=140925220002&ver=7&ind=86386370&ssd=4
user_pref(extensions.PZTjQxxy.url, hxxp://epicbookalls.info/sync2/?q=hfZ9oemKA6aMCyVUojw7qHYMg708BNmGWj8yiihGheDUojwHrjaGrjwGrjwGqShIC7n0rjnEpjs8rTw8pjrHtNhVCT94tMVKhd99qTw
user_pref(extensions.xpiState, {\app-profile\:{\579sba62zbqt@yoehlmgvvlfr.net\:{\d\:\C:\\\\Users\\\\Mahmoud\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\
user_pref(extensions.yT9CbVA.url, hxxp://winnerhomecompletezip.net/sync2/?q=hfZ9ojC9rdk8hchEAen0rTU5tMqLDe49CNU0mUUMCMlNhd9FrHa5rTYFrjsErdCMBzqUojw9rdUGqjsFqjUGrSh7hfs0pchP
user_pref(sweetim.toolbar.scripts.1.domain-blacklist, );
user_pref(sweetim.toolbar.searchguard.UserRejectedGuard_DS, );
user_pref(sweetim.toolbar.searchguard.UserRejectedGuard_HP, );
user_pref(sweetim.toolbar.searchguard.enable, );
Emptied folder: C:\Users\Mahmoud\AppData\Roaming\mozilla\firefox\profiles\m9y1z992.default\minidumps [1292 files]



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\chgdeabpmphfhkoemjjglmilajldekbp

[C:\Users\Mahmoud\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Mahmoud\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Mahmoud\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Mahmoud\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
acfoobbgoakpihljnfedbcfaipcdlfhk,
chgdeabpmphfhkoemjjglmilajldekbp
]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sat 10/24/2015 at 2:31:31.18
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~