~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.5.6 (08.30.2013:1) OS: Windows (TM) Vista Home Premium x64 Ran by D on 01/09/2013 at 12:36:21,12 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011341191} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011341191} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6DB6E780-CBF9-4BD4-908F-B7752B7CCBA4} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{BA5E0CCB-D8A9-4F11-897E-E72AB4FAABC5} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{6DB6E780-CBF9-4BD4-908F-B7752B7CCBA4} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{BA5E0CCB-D8A9-4F11-897E-E72AB4FAABC5} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Users\D\appdata\locallow\datamngr" Successfully deleted: [Empty Folder] C:\Users\D\appdata\local\{415BFE8B-DE50-47AD-B81B-CACEFE7FF24B} Successfully deleted: [Empty Folder] C:\Users\D\appdata\local\{8D06A1F9-CCDE-489D-BA2A-2C36BDC954FE} Successfully deleted: [Empty Folder] C:\Users\D\appdata\local\{9287D2E5-1F97-462E-86C6-E99F6E08A31C} Successfully deleted: [Empty Folder] C:\Users\D\appdata\local\{D7EBCB27-1057-4519-AFF2-56A1DAC8B9D7} Successfully deleted: [Empty Folder] C:\Users\D\appdata\local\{E500322F-11B1-4F5F-A3E8-26F131587CC5} ~~~ FireFox Successfully deleted: [File] C:\Users\D\AppData\Roaming\mozilla\firefox\profiles\q3qikadi.default\searchplugins\absearch-search.xml Successfully deleted: [Folder] C:\Users\D\AppData\Roaming\mozilla\firefox\profiles\q3qikadi.default\extensions\crossriderapp3491@crossrider.com Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\{c7ae725d-fa5c-4027-bb4c-787ef9f8248a} Successfully deleted the following from C:\Users\D\AppData\Roaming\mozilla\firefox\profiles\q3qikadi.default\prefs.js user_pref("extensions.crossrider.bic", "140d9178df4114b80cf890a251f53129"); user_pref("extensions.crossriderapp3491.3491.InstallationTime", 1378031734); user_pref("extensions.crossriderapp3491.3491.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); user_pref("extensions.crossriderapp3491.3491.cookie.InstallationTime.value", "1378031734"); user_pref("extensions.crossriderapp3491.bic", "140d9178df4114b80cf890a251f53129"); user_pref("extensions.crossriderapp3491.firstrun", false); user_pref("extensions.crossriderapp3491.installationdate", 1378031734); user_pref("extensions.crossriderapp3491.lastcheck", 22967196); user_pref("extensions.crossriderapp3491.lastcheckitem", 22967196); user_pref("extensions.crossriderapp3491.reportInstall", true); Emptied folder: C:\Users\D\AppData\Roaming\mozilla\firefox\profiles\q3qikadi.default\minidumps [8 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 01/09/2013 at 12:45:06,80 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~