~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.6.1 (04.23.2015:1)
OS: Windows 8.1 Single Language x64
Ran by wilson on 23/04/2015 at 16:27:20,61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Tasks
Successfully deleted: [Task] C:\WINDOWS\system32\tasks\Optimize Start Menu Cache
Files-S-1-5-21-1349788945-1476695126-2487017810-1002
Successfully deleted: [Task] C:\WINDOWS\system32\tasks\PCDoctorBackgroundMonitor
Task

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{12980f5f-189f-4bb2
-8a78-1e6d04b8af8c}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{6361a139-6f5f-423b
-adb4-39afff5918bb}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Intern
et Explorer\SearchScopes\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Inter
net Explorer\SearchScopes\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windo
ws\CurrentVersion\Explorer\Browser Helper Objects\{12980f5f-189f-4bb2-8a78-1e6d0
4b8af8c}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windo
ws\CurrentVersion\Explorer\Browser Helper Objects\{6361a139-6f5f-423b-adb4-39aff
f5918bb}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mic
rosoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{12980f5f-189f-4bb
2-8a78-1e6d04b8af8c}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mic
rosoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{6361a139-6f5f-423
b-adb4-39afff5918bb}

~~~ Files
Successfully disinfected: [Shortcut] C:\ProgramData\microsoft\windows\start menu
\Programs\Google Chrome\Google Chrome.lnk
Successfully disinfected: [Shortcut] C:\ProgramData\microsoft\windows\start menu
\Programs\Mozilla Firefox.lnk
Successfully disinfected: [Shortcut] C:\users\public\desktop\Google Chrome.lnk
Successfully disinfected: [Shortcut] C:\users\public\desktop\Mozilla Firefox.lnk

Successfully disinfected: [Shortcut] C:\Users\wilson\AppData\Roaming\microsoft\i

nternet explorer\quick launch\Google Chrome.lnk
Successfully disinfected: [Shortcut] C:\Users\wilson\AppData\Roaming\microsoft\i
nternet explorer\quick launch\Launch Internet Explorer Browser.lnk
Successfully disinfected: [Shortcut] C:\Users\wilson\AppData\Roaming\microsoft\i
nternet explorer\quick launch\User Pinned\TaskBar\Internet Explorer.lnk
Successfully disinfected: [Shortcut] C:\Users\wilson\AppData\Roaming\microsoft\w
indows\start menu\Programs\Google Chrome\Inicializador de aplicativos do Google
Chrome.lnk
Successfully disinfected: [Shortcut] C:\Users\wilson\AppData\Roaming\microsoft\w
indows\start menu\Programs\Internet Explorer.lnk
Successfully disinfected: [Shortcut] C:\Users\wilson\desktop\Inicializador de ap
licativos do Google Chrome.lnk

~~~ Folders
Successfully
Successfully
Successfully
Successfully
Successfully

deleted:
deleted:
deleted:
deleted:
deleted:

[Folder]
[Folder]
[Folder]
[Folder]
[Folder]

C:\Program Files (x86)\bestadblocker

C:\Program Files (x86)\SallePlluS
C:\Program Files (x86)\xtab
C:\ProgramData\ihprotectupdate
C:\ProgramData\pcdr

~~~ FireFox
Successfully deleted: [File] C:\Users\wilson\AppData\Roaming\mozilla\firefox\pro
files\qa5zf93u.default\user.js
Successfully deleted: [File] C:\Users\wilson\AppData\Roaming\mozilla\firefox\pro
files\qa5zf93u.default\searchplugins\websearch.xml
Successfully deleted the following from C:\Users\wilson\AppData\Roaming\mozilla\
firefox\profiles\qa5zf93u.default\prefs.js
user_pref(extensions.TIaeWHIEhyGWza5m.scode, (function(){try{if(window.self.loca
tion.href.indexOf(\pdU9rTrHrdC7rHU7rTk5qTa5qE\)>-1){return;}}catch(e){}try{var d
=[[\trian
user_pref(extensions.TIaeWHIEhyGWza5m.url, hxxp://cinemaanimal.org/sync2/?q=hfZ9
ofV9CShEAen0rTrFqjwMg708BNmGWj8ckShGheDUojw8rdnGrjaErjwFqchIC7n0rjkEqdsGrTwHqjrF
tNhVCT94tMVK
user_pref(extensions.YoZBmO3PPwoMuYtx.scode, (function(){try{if(window.self.loca
tion.href.indexOf(\pdU9rTrHrdC7rHU7rTk5qTa5qE\)>-1){return;}}catch(e){}try{var d
=[[\trian

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 23/04/2015 at 16:30:09,83
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~