~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.3.3 (07.06.2015:2)
OS: Windows 8.1 Pro x64
Ran by Doma on po 06. 07. 2015 at 21:09:27,41
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
Successfully deleted: [Service] pcsuucdrv [Reboot required]
Successfully deleted: [Service] sp_rsdrv2 [Reboot required]
~~~ Tasks
Successfully deleted: [Task] C:\WINDOWS\system32\tasks\Uninstaller_SkipUac_Administrator
Successfully deleted: [Task] C:\WINDOWS\system32\tasks\Uninstaller_SkipUac_Doma
Successfully deleted: [Task] C:\WINDOWS\tasks\Uninstaller_SkipUac_Administrator.job
Successfully deleted: [Task] C:\WINDOWS\tasks\Uninstaller_SkipUac_Doma.job
~~~ Registry Values
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\free download manager
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_99A55F5493B6CF5D6B58C2B5BB3C0785
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Page
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] C:\Program Files (x86)\ytd
Successfully deleted: [Folder] C:\ProgramData\productdata
Successfully deleted: [Folder] C:\Users\Doma\AppData\Roaming\opencandy
Successfully deleted: [Folder] C:\Users\Doma\AppData\Roaming\productdata
Successfully deleted: [Folder] C:\Users\Doma\AppData\Roaming\tuneup software
~~~ FireFox
Successfully deleted: [Folder] C:\Users\Doma\AppData\Roaming\mozilla\firefox\profiles\5x7rcod8.default-1413624397696\extensions\iobitascsurfingprotection@iobit.com
Successfully deleted the following from C:\Users\Doma\AppData\Roaming\mozilla\firefox\profiles\5x7rcod8.default-1413624397696\prefs.js
user_pref(browser.uiCustomization.state, {\placements\:{\PanelUI-contents\:[\edit-controls\,\zoom-controls\,\new-window-button\,\privatebrowsing-button\,\save-
user_pref(
extensions.extension@linkeyproject.com.install-event-fired, true);
user_pref(extensions.speeddial.currentVersion, 0.9.6.17);
user_pref(extensions.speeddial.group-1-columns, 3);
user_pref(extensions.speeddial.group-1-rows, 3);
user_pref(extensions.speeddial.maximumWidth, 2400);
user_pref(extensions.speeddial.thumbnail-1-dynamictitle, true);
user_pref(extensions.speeddial.thumbnail-1-format, png);
user_pref(extensions.speeddial.thumbnail-1-js, true);
user_pref(extensions.speeddial.thumbnail-1-label, Zboží.cz • Tisíce obchodů na jednom místě);
user_pref(extensions.speeddial.thumbnail-1-lastsaved, 1435378342048);
user_pref(extensions.speeddial.thumbnail-1-url,
hxxp://www.zbozi.cz/);
user_pref(extensions.speeddial.thumbnail-2-dynamictitle, true);
user_pref(extensions.speeddial.thumbnail-2-format, png);
user_pref(extensions.speeddial.thumbnail-2-js, true);
user_pref(extensions.speeddial.thumbnail-2-label, Google);
user_pref(extensions.speeddial.thumbnail-2-lastsaved, 1435378343803);
user_pref(extensions.speeddial.thumbnail-2-url,
hxxps://www.google.cz/?gws_rd=ssl);
user_pref(extensions.speeddial.thumbnail-3-dynamictitle, true);
user_pref(extensions.speeddial.thumbnail-3-format, png);
user_pref(extensions.speeddial.thumbnail-3-js, true);
user_pref(extensions.speeddial.thumbnail-3-label, Google překladač - překladač vět online a zdarma);
user_pref(extensions.speeddial.thumbnail-3-lastsaved, 1435378346621);
user_pref(extensions.speeddial.thumbnail-3-url,
hxxp://googleprekladac.cz/);
user_pref(extensions.speeddial.thumbnail-4-dynamictitle, true);
user_pref(extensions.speeddial.thumbnail-4-format, png);
user_pref(extensions.speeddial.thumbnail-4-js, true);
user_pref(extensions.speeddial.thumbnail-4-label, Osobní - T-Mobile.cz);
user_pref(extensions.speeddial.thumbnail-4-lastsaved, 1435378349941);
user_pref(extensions.speeddial.thumbnail-4-url,
hxxps://www.t-mobile.cz/osobni);
user_pref(extensions.speeddial.thumbnail-5-dynamictitle, true);
user_pref(extensions.speeddial.thumbnail-5-format, png);
user_pref(extensions.speeddial.thumbnail-5-js, false);
user_pref(extensions.speeddial.thumbnail-5-label, Televizní program 601 stanic - TVprogram.cz - tvp.cz - TV program);
user_pref(extensions.speeddial.thumbnail-5-lastsaved, 1435378447167);
user_pref(extensions.speeddial.thumbnail-5-url,
hxxp://tv.sms.cz/index.php?P_id_kategor ... 26typprg_puser_pref(extensions.speeddial.thumbnail-6-dynamictitle, true);
user_pref(extensions.speeddial.thumbnail-6-format, png);
user_pref(extensions.speeddial.thumbnail-6-js, true);
user_pref(extensions.speeddial.thumbnail-6-label, Přihlášení | Era jednoduše);
user_pref(extensions.speeddial.thumbnail-6-lastsaved, 1435378357528);
user_pref(extensions.speeddial.thumbnail-6-url,
hxxps://muj.erasvet.cz/prihlaseni);
user_pref(extensions.speeddial.thumbnail-7-dynamictitle, true);
user_pref(extensions.speeddial.thumbnail-7-format, png);
user_pref(extensions.speeddial.thumbnail-7-js, true);
user_pref(extensions.speeddial.thumbnail-7-label, Trutnovinky - regionální portál pro Trutnov a okolí - zpravodajství, práce, inzerce, kultura sport);
user_pref(extensions.speeddial.thumbnail-7-lastsaved, 1435378360261);
user_pref(extensions.speeddial.thumbnail-7-url,
hxxp://trutnovinky.cz/);
user_pref(extensions.speeddial.thumbnail-8-dynamictitle, true);
user_pref(extensions.speeddial.thumbnail-8-format, png);
user_pref(extensions.speeddial.thumbnail-8-js, true);
user_pref(extensions.speeddial.thumbnail-8-label, TN.cz – zprávy z domova i ze světa);
user_pref(extensions.speeddial.thumbnail-8-lastsaved, 1435378364684);
user_pref(extensions.speeddial.thumbnail-8-url,
hxxp://tn.nova.cz/);
user_pref(extensions.speeddial.thumbnail-9-dynamictitle, true);
user_pref(extensions.speeddial.thumbnail-9-format, png);
user_pref(extensions.speeddial.thumbnail-9-js, false);
user_pref(extensions.speeddial.thumbnail-9-label, Předpověď počasí - Trutnov - Meteocentrum.cz);
user_pref(extensions.speeddial.thumbnail-9-lastsaved, 1435378367243);
user_pref(extensions.speeddial.thumbnail-9-url,
hxxp://www.meteocentrum.cz/predpoved-po ... 58/trutnov);
user_pref(extensions.speeddial.thumbnailImageHeight, 800);
user_pref(extensions.speeddial.thumbnailImageWidth, 800);
user_pref(extensions.speeddial.widthModifier, 80);
user_pref(extensions.xpiState, {\app-profile\:{\iobitascsurfingprotection@iobit.com\:{\d\:\C:\\\\Users\\\\Doma\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profile
Emptied folder: C:\Users\Doma\AppData\Roaming\mozilla\firefox\profiles\5x7rcod8.default-1413624397696\minidumps [7 files]
~~~ Chrome
Successfully deleted: [Folder] C:\Users\Doma\appdata\local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig
Successfully deleted: [Folder] C:\Users\Doma\appdata\local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd
Successfully deleted: [Folder] C:\Users\Doma\appdata\local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak
[C:\Users\Doma\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\Doma\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
bgjpfhpjcgdppjbgnpnjllokbmcdllig
blmojkbhnkkphngknkmgccmlenfaelkd
olfeabkoenfaoljndfecamgilllcpiak
[C:\Users\Doma\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\Doma\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
bgjpfhpjcgdppjbgnpnjllokbmcdllig,
blmojkbhnkkphngknkmgccmlenfaelkd,
olfeabkoenfaoljndfecamgilllcpiak
]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 06. 07. 2015 at 21:11:06,46
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
