~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.9.0 (06.07.2015:1) OS: Windows Se7en Titan x86 Ran by Acer on 08/06/2015 at 15:08:44,37 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Tasks Successfully deleted: [Task] C:\Windows\System32\tasks\Driver Booster SkipUAC (Acer) Successfully deleted: [Task] C:\Windows\System32\tasks\Uninstaller_SkipUac_Acer ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Update PodoWeb Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Util PodoWeb ~~~ Files Successfully deleted: [File] C:\Windows\wininit.ini Successfully deleted: [File] C:\Users\Acer\appdata\local\google\chrome\user data\default\local storage\http_static.audienceinsights.net_0.localstorage Successfully deleted: [File] C:\Users\Acer\appdata\local\google\chrome\user data\default\local storage\http_static.audienceinsights.net_0.localstorage-journal ~~~ Folders Successfully deleted: [Empty Folder] C:\Users\Acer\appdata\local\{0EBDF813-BA61-43E4-BF10-77158F624ACB} Successfully deleted: [Empty Folder] C:\Users\Acer\appdata\local\{1F22E6ED-4388-44CD-867C-11C6DCD9F9F3} Successfully deleted: [Empty Folder] C:\Users\Acer\appdata\local\{22A63951-D91F-4FBE-A8F4-6259990FCAE3} Successfully deleted: [Empty Folder] C:\Users\Acer\appdata\local\{3EEB690A-3581-4021-B927-39F741DC244E} Successfully deleted: [Empty Folder] C:\Users\Acer\appdata\local\{4A84E995-AA9B-4BDA-91F2-2561B20200DE} Successfully deleted: [Empty Folder] C:\Users\Acer\appdata\local\{7655FFD3-88D3-48DE-AFB5-A752BA073782} Successfully deleted: [Empty Folder] C:\Users\Acer\appdata\local\{84BAB94B-9E3B-4B5C-8D77-F24166927396} Successfully deleted: [Empty Folder] C:\Users\Acer\appdata\local\{B8A465BA-840A-45D0-8B1C-B59CF9B20F33} Successfully deleted: [Empty Folder] C:\Users\Acer\appdata\local\{D17905B6-DFBC-4DB7-A497-BDA043BA6E88} Successfully deleted: [Empty Folder] C:\Users\Acer\appdata\local\{D4755ADF-7861-4209-886C-23B9C41C17BF} Successfully deleted: [Folder] C:\ProgramData\productdata Successfully deleted: [Folder] C:\Users\Acer\AppData\Roaming\productdata Successfully deleted: [Folder] C:\Users\Acer\start menu\programs\browser manager ~~~ FireFox Successfully deleted: [File] C:\Users\Acer\AppData\Roaming\mozilla\firefox\profiles\war40a0p.default\searchplugins\ask-search.xml Successfully deleted the following from C:\Users\Acer\AppData\Roaming\mozilla\firefox\profiles\war40a0p.default\prefs.js user_pref(browser.search.searchengine.alias, delta-homes); user_pref(browser.search.searchengine.desc, this is my first firefox searchEngine); user_pref(browser.search.searchengine.name, delta-homes); user_pref(browser.search.searchengine.ptid, wpm05203); user_pref(browser.search.searchengine.uid, ST9250827AS_5RG876YQXXXX5RG876YQ); user_pref(browser.search.selectedEngine, delta-homes); user_pref(extensions.LVD-SAE.newTabSearchURL, \hxxp://dts.search.ask.com/sr?gct=hp&o=APN10644A&qrsc=2871&l=dis&sver=3&t_type=0&dateOfInstall=2015-05-23&d=533-783-0&v=2.1-7 user_pref(extensions.LVD-SAE.searchURL, \hxxp://dts.search.ask.com/sr?gct=ds&o=APN10644&qrsc=2871&l=dis&sver=3&t_type=0&dateOfInstall=2015-05-23&d=533-783-0&v=2.1-737-0&ap user_pref(extensions.saeListDS, [\delta-homes\,\LVD-SAE@iacsearchandmedia.com\]); user_pref(extensions.xpiState, {\app-profile\:{\hxdktejdcjoommivy@gbuqmjjezghzucm.net\:{\d\:\C:\\\\Users\\\\Acer\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profi Emptied folder: C:\Users\Acer\AppData\Roaming\mozilla\firefox\profiles\war40a0p.default\minidumps [24 files] ~~~ Chrome [C:\Users\Acer\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset [C:\Users\Acer\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted: [C:\Users\Acer\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset [C:\Users\Acer\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted: [ fopdddcinljmpmioaklghcalngfhbaen, gkcefkcdkepgkpbgncjchhbjgoanleod ] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 08/06/2015 at 15:21:01,28 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~