~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.6 (04.25.2016)
Operating System: Windows 7 Home Premium x64 
Ran by Idan (Administrator) on Thu 04/28/2016 at 11:34:24.43
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 9 

Successfully deleted: C:\windows\s.bat (File) 
Successfully deleted: C:\Users\Idan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H403NMPN (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Idan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KTVNXSD7 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Idan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OYG5HLHY (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Idan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UOB6V4QY (Temporary Internet Files Folder) 
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H403NMPN (Temporary Internet Files Folder) 
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KTVNXSD7 (Temporary Internet Files Folder) 
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OYG5HLHY (Temporary Internet Files Folder) 
Successfully deleted: C:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UOB6V4QY (Temporary Internet Files Folder) 

Deleted the following from C:\Users\Idan\AppData\Roaming\Mozilla\Firefox\Profiles\1bg2zy70.default\prefs.js
user_pref(extensions.xpiState, {\app-global\:{\{972ce4c6-7e08-4474-a285-3208198ce6fd}\:{\d\:\C:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\browser\\\\extensions\\\



Registry: 1 

Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{8fe28f46-37ad-47b2-8258-34c128636ace} (Registry Value) 




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Thu 04/28/2016 at 11:39:50.05
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~