~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.3 (03.23.2014:1) OS: Windows 7 Home Premium x64 Ran by Mack on 05-04-2014 at 21:03:21,57 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-1716648849-722197210-3348466993-1000\Software\Microsoft\Internet Explorer\Main\\Start Page ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\secman.dll Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Myfree Codec Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babsolution Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\delta Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1716648849-722197210-3348466993-1000\Software\sweetim Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Myfree Codec Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\delta Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\babylon" Successfully deleted: [Folder] "C:\ProgramData\trymedia" Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader" Successfully deleted: [Folder] "C:\Users\Mack\AppData\Roaming\goforfiles" Successfully deleted: [Folder] "C:\Users\Mack\appdata\local\torch" Successfully deleted: [Folder] "C:\Program Files (x86)\myfree codec" Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader" Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{06618443-4A39-4C5D-8A22-44E9CE62A5F3} Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{1C886988-E320-4EB6-A372-73FBC01D8623} Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{1CA64C21-7196-4C3B-9922-1295FEDEBE27} Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{28752505-BF8B-4101-B896-ACA325DD7D46} Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{60EFE6F0-57A4-4BEE-BA27-7AC7A8D2C412} Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{6B0C2880-3766-4F4F-A33A-411A69B55881} Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{81A9AD8E-FE4B-470E-872A-010729BBC202} Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{87740E9C-19C1-4C0A-BF91-E8C74FED7619} Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{87A9E41C-907A-457A-8976-597A55386FF7} Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{89F73960-6F94-406F-AE00-B3B723AC26A9} Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{8AAF604E-10BB-49D1-B5A3-4D6BAA09CCBA} Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{97C4EC8B-69D4-4E55-83CF-D0CD2E6EA297} Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{E9C594EC-7592-489F-A12E-6A87AD11B098} Successfully deleted: [Empty Folder] C:\Users\Mack\appdata\local\{F17C6DEF-3B0D-4F63-B4D3-1E8356010E5A} ~~~ FireFox Successfully deleted the following from C:\Users\Mack\AppData\Roaming\mozilla\firefox\profiles\1qyagrws.default-1390594755629\prefs.js user_pref("extensions.SVHf9lR.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf( Emptied folder: C:\Users\Mack\AppData\Roaming\mozilla\firefox\profiles\1qyagrws.default-1390594755629\minidumps [2 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 05-04-2014 at 21:11:12,88 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~