~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.1.1 (02.11.2017) Operating System: Windows 7 Starter x64 Ran by widen-finalis (Limited) on 04/03/2017 at 7:31:12,11 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 21 Successfully deleted: C:\ProgramData\pdfforge (Folder) Successfully deleted: C:\ProgramData\productdata (Folder) Successfully deleted: C:\ProgramData\Start Menu\Programs\comodo\geekbuddy (Folder) Successfully deleted: C:\ProgramData\Start Menu\Programs\disk speedup.lnk (Shortcut) Successfully deleted: C:\Users\Public\Desktop\geekbuddy.lnk (Shortcut) Successfully deleted: C:\Users\widen-finalis\AppData\Roaming\Mozilla\Firefox\Profiles\5bjtyrii.default\user.js (File) Successfully deleted: C:\Users\widen-finalis\AppData\Roaming\pdfforge (Folder) Successfully deleted: C:\Users\widen-finalis\AppData\Roaming\software informer (Folder) Successfully deleted: C:\Windows\System32\Tasks\Uninstaller_SkipUac_widen-finalis (Task) Successfully deleted: C:\Windows\System32\wscm32.dll (File) Successfully deleted: C:\Windows\System32\wscm64.dll (File) Successfully deleted: C:\Program Files\comodo\geekbuddy (Folder) Successfully deleted: C:\Program Files\software informer (Folder) Successfully deleted: C:\Users\widen-finalis\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6NAIQPIO (Temporary Internet Files Folder) Successfully deleted: C:\Users\widen-finalis\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R4P0LKNP (Temporary Internet Files Folder) Successfully deleted: C:\Users\widen-finalis\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9YJQ19K (Temporary Internet Files Folder) Successfully deleted: C:\Users\widen-finalis\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WERAGL7L (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6NAIQPIO (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R4P0LKNP (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9YJQ19K (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WERAGL7L (Temporary Internet Files Folder) Registry: 9 Successfully deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Free Download Manager (Registry Value) Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\tvncontrol (Registry Value) Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\0133751488491124mcinstcleanup (Registry Key) Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\GeekBuddyRSP (Registry Key) Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814} (Registry Key) Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1A6B6AD0-2735-498F-834C-AFCEA37847C2} (Registry Key) Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AEA429F3-D2D4-4BD7-A03E-5357DA017733} (Registry Key) Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\Search\\SearchAssistant (Registry Value) Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{84F23192-A475-4038-B5C0-8584777F2DF4} (Registry Value) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 04/03/2017 at 7:54:03,02 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~