~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.1.0 (12.05.2016) Operating System: Windows 7 Professional x64 Ran by Ren‚e (Administrator) on 20/12/2016 at 16:49:04,50 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 19 Successfully deleted: C:\ProgramData\drivergenius (Folder) Successfully deleted: C:\Users\Ren‚e\AppData\Roaming\Mozilla\Firefox\Profiles\6tcr6jq5.default\yasearch-xb\packages\{098d453a-919d-4a74-8cca-907e207d034a}\altsearch.xml (File) Successfully deleted: C:\Users\Ren‚e\AppData\Roaming\Mozilla\Firefox\Profiles\6tcr6jq5.default\yasearch-xb\packages\{808f67be-91bf-4b74-a986-cdbc7faf318a}\mailru.xml (File) Successfully deleted: C:\Users\Ren‚e\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) Successfully deleted: C:\Users\Ren‚e\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) Successfully deleted: C:\Users\Ren‚e\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\790TFRQO (Temporary Internet Files Folder) Successfully deleted: C:\Users\Ren‚e\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) Successfully deleted: C:\Users\Ren‚e\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) Successfully deleted: C:\Users\Ren‚e\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NKRNY3D7 (Temporary Internet Files Folder) Successfully deleted: C:\Users\Ren‚e\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UXRPG72F (Temporary Internet Files Folder) Successfully deleted: C:\Users\Ren‚e\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VF1TAM1K (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\790TFRQO (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NKRNY3D7 (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UXRPG72F (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VF1TAM1K (Temporary Internet Files Folder) Deleted the following from C:\Users\Ren‚e\AppData\Roaming\Mozilla\Firefox\Profiles\6tcr6jq5.default\prefs.js user_pref(distribution.yandex.bookmarksProcessed, true); user_pref(extensions.installedDistroAddon.vb@yandex.ru, true); user_pref(extensions.installedDistroAddon.yasearch@yandex.ru, true); user_pref(extensions.vb@yandex.ru.alarms.advertisementCheck, {\expires\:30,\nextInterval\:30,\saved\:1482248389494}); user_pref(extensions.vb@yandex.ru.alarms.backgroundsRotation, {\expires\:1440,\nextInterval\:1440,\saved\:1482248389413}); user_pref(extensions.vb@yandex.ru.alarms.backup, {\expires\:1440,\nextInterval\:1440,\saved\:1482248389425}); user_pref(extensions.vb@yandex.ru.alarms.blacklistSync, {\expires\:1440,\nextInterval\:1440,\saved\:1482172755194}); user_pref(extensions.vb@yandex.ru.alarms.cloudBackgrounds, {\expires\:1440,\nextInterval\:1440,\saved\:1482172755186}); user_pref(extensions.vb@yandex.ru.alarms.dayusePoll, {\expires\:60,\nextInterval\:60,\saved\:1482248389498}); user_pref(extensions.vb@yandex.ru.alarms.dayuseSimple, {\expires\:1440,\nextInterval\:1440,\saved\:1482248389501}); user_pref(extensions.vb@yandex.ru.alarms.experiments, {\expires\:1440,\nextInterval\:1440,\saved\:1482248389416}); user_pref(extensions.vb@yandex.ru.alarms.informers, {\expires\:15,\nextInterval\:15,\saved\:1482248389480}); user_pref(extensions.vb@yandex.ru.alarms.maintenance, {\expires\:2880,\nextInterval\:2880,\saved\:1482136096558}); user_pref(extensions.vb@yandex.ru.alarms.pickup, {\expires\:1440,\nextInterval\:1440,\saved\:1482172755179}); user_pref(extensions.vb@yandex.ru.alarms.refreshSearchExamples, {\expires\:1440,\nextInterval\:1440,\saved\:1482248389433}); user_pref(extensions.vb@yandex.ru.alarms.remote-config, {\expires\:1440,\nextInterval\:1440,\saved\:1482248389408}); user_pref(extensions.vb@yandex.ru.alarms.zen.reload, {\expires\:360,\saved\:1482248405533}); user_pref(extensions.vb@yandex.ru.branding.lastupdate, 1453365160); user_pref(extensions.vb@yandex.ru.clids.creationDate, 2039338:{1cedd00b-89b5-4eab-847a-c33711ffad69}:vbff:2016.11.17); user_pref(extensions.vb@yandex.ru.creator, Yandex); user_pref(extensions.vb@yandex.ru.daylyaddonstat.collect, 1482071397); user_pref(extensions.vb@yandex.ru.default.preferedLocale, ru); user_pref(extensions.vb@yandex.ru.description, Keep all your favorite sites in one place with Visual Bookmarks. Simply click on the one of the mini webpages to visit a site user_pref(extensions.vb@yandex.ru.general.install.time, 1479338648); user_pref(extensions.vb@yandex.ru.guid.value, {1cedd00b-89b5-4eab-847a-c33711ffad69}); user_pref(extensions.vb@yandex.ru.homepageURL, hxxp://visual.yandex.ru); user_pref(extensions.vb@yandex.ru.license.accepted, true); user_pref(extensions.vb@yandex.ru.name, Visual Bookmarks); user_pref(extensions.vb@yandex.ru.sdk.baseURI, resource://vb-at-yandex-dot-ru/); user_pref(extensions.vb@yandex.ru.sdk.domain, vb-at-yandex-dot-ru); user_pref(extensions.vb@yandex.ru.sdk.load.reason, startup); user_pref(extensions.vb@yandex.ru.sdk.rootURI, jar:file:///C:/Users/Ren%C3%A9e/AppData/Roaming/Mozilla/Firefox/Profiles/6tcr6jq5.default/extensions/vb@yandex.ru.xpi!/); user_pref(extensions.vb@yandex.ru.sdk.version, 2.31.3); user_pref(extensions.vb@yandex.ru.stat.usage.send, false); user_pref(extensions.vb@yandex.ru.status.firstStart, 1479384000000); user_pref(extensions.vb@yandex.ru.status.lastCollect, 1482248438148); user_pref(extensions.vb@yandex.ru.versions.lastAddon, 2.31.3); user_pref(extensions.vb@yandex.ru.versions.lastBuild, 15); user_pref(extensions.vb@yandex.ru.welcomepage.version.introduced, 2.25.1); user_pref(extensions.xpiState, {\app-profile\:{\abs@avira.com\:{\d\:\C:\\\\Users\\\\Renée\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\6tcr6jq5.defaul user_pref(extensions.yasearch@yandex.ru.autoinstall.activated, [\hxxp://bar.yandex.ru/packages/yandexbar#logo\,\hxxp://bar.yandex.ru/packages/yandexbar#mail\,\hxxp://b user_pref(extensions.yasearch@yandex.ru.branding.lastupdate, 1477486409); user_pref(extensions.yasearch@yandex.ru.chevronInstallTime, 1479338663); user_pref(extensions.yasearch@yandex.ru.chevronState, 2); user_pref(extensions.yasearch@yandex.ru.clids.creationDate, 2039338:{1cedd00b-89b5-4eab-847a-c33711ffad69}:barff:2016.11.17); user_pref(extensions.yasearch@yandex.ru.creator, Yandex); user_pref(extensions.yasearch@yandex.ru.daylyaddonstat.collect, 1482248390); user_pref(extensions.yasearch@yandex.ru.daylyaddonstat.send, 1482248409); user_pref(extensions.yasearch@yandex.ru.dayuse.collect, 1482248389); user_pref(extensions.yasearch@yandex.ru.default.preferedLocale, ru); user_pref(extensions.yasearch@yandex.ru.default.preset.url, hxxp://bar.yandex.ru/presets/default.xml); user_pref(extensions.yasearch@yandex.ru.defender.homepage.changes, 0|0|0); user_pref(extensions.yasearch@yandex.ru.defender.homepage.enabled, false); user_pref(extensions.yasearch@yandex.ru.defender.homepage.protected, about:home); user_pref(extensions.yasearch@yandex.ru.description, Quick access to all Yandex features); user_pref(extensions.yasearch@yandex.ru.general.install.time, 1479338568); user_pref(extensions.yasearch@yandex.ru.guid.value, {1cedd00b-89b5-4eab-847a-c33711ffad69}); user_pref(extensions.yasearch@yandex.ru.homepageURL, hxxps://element.yandex.ru); user_pref(extensions.yasearch@yandex.ru.license.accepted, true); user_pref(extensions.yasearch@yandex.ru.mailruStat.gversion, 0); user_pref(extensions.yasearch@yandex.ru.mailruStat.sversion, 0); user_pref(extensions.yasearch@yandex.ru.migrated.australis, true); user_pref(extensions.yasearch@yandex.ru.name, Yandex Elements); user_pref(extensions.yasearch@yandex.ru.native_comps.hxxp://bar-widgets.yandex.ru/packages/approved/143/manifest.xml#typosquatting.all.settings.jsonLastModified, Tue, 24 Se user_pref(extensions.yasearch@yandex.ru.native_comps.hxxp://bar-widgets.yandex.ru/packages/approved/143/manifest.xml#typosquatting.all.settings.lastUpdate, 1482248383477); user_pref(extensions.yasearch@yandex.ru.native_comps.hxxp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox.all.settings.nativeqs.removed, true); user_pref(extensions.yasearch@yandex.ru.native_comps.hxxp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox.all.settings.searchName, Яндекс); user_pref(extensions.yasearch@yandex.ru.native_comps.hxxp://bar-widgets.yandex.ru/packages/approved/286/manifest.xml#browseroffer.all.settings.no-flash.suggest-session, {\ user_pref(extensions.yasearch@yandex.ru.native_comps.hxxp://bar-widgets.yandex.ru/packages/approved/286/manifest.xml#browseroffer.all.settings.turbo-video.suggest-session, user_pref(extensions.yasearch@yandex.ru.native_comps.hxxp://bar-widgets.yandex.ru/packages/approved/286/manifest.xml#browseroffer.all.settings.widgetSuggest.history, {\htt user_pref(extensions.yasearch@yandex.ru.native_comps.hxxp://bar.yandex.ru/packages/yandexbar#geolocation.all.settings.position, {\latitude\:\45.7593880\,\longitude\:\ user_pref(extensions.yasearch@yandex.ru.native_comps.hxxp://bar.yandex.ru/packages/yandexbar#geolocation.all.settings.wifi.data, 0,b8:26:6c:4a:69:fa,-70); user_pref(extensions.yasearch@yandex.ru.native_comps.hxxp://bar.yandex.ru/packages/yandexbar#translator.all.settings.last_update, 1482071271566); user_pref(extensions.yasearch@yandex.ru.stat.usage.send, false); user_pref(extensions.yasearch@yandex.ru.static.hxxp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox.all.settings.enginename, Яндекс); user_pref(extensions.yasearch@yandex.ru.static.hxxp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox.all.settings.firststart, true); user_pref(extensions.yasearch@yandex.ru.static.hxxp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox.all.settings.tutor.installTime, 1478129100); user_pref(extensions.yasearch@yandex.ru.static.hxxp://bar-widgets.yandex.ru/packages/approved/176/manifest.xml#smartbox.all.settings.tutor.shownCounter, 1); user_pref(extensions.yasearch@yandex.ru.vendor.default.cookie, true); user_pref(extensions.yasearch@yandex.ru.versions.lastAddon, 8.20.4); user_pref(extensions.yasearch@yandex.ru.versions.lastBuild, 1); user_pref(extensions.yasearch@yandex.ru.welcomepage.dontshow, true); Registry: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 20/12/2016 at 16:53:12,76 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~