JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.3 (04.10.2017)
Operating System: Windows 10 Pro x64
Ran by BBPC (Administrator) on Tue 04/11/2017 at 16:44:54.51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 5

Successfully deleted: C:\Users\BBPC\AppData\Local\nico mak computing (Folder)
Successfully deleted: C:\WINDOWS\system32\Tasks\update-S-1-5-21-3061432751-4221648749-2207211203-1001 (Task)
Successfully deleted: C:\WINDOWS\system32\Tasks\update-sys (Task)
Successfully deleted: C:\WINDOWS\Tasks\update-S-1-5-21-3061432751-4221648749-2207211203-1001.job (Task)
Successfully deleted: C:\WINDOWS\Tasks\update-sys.job (Task)

Deleted the following from C:\Users\BBPC\AppData\Roaming\Mozilla\Firefox\Profiles\a5k4s1db.default\prefs.js
user_pref(extensions.homepage@mail.ru.go_metric_url, hxxp://go.mail.ru/distib/mark/?product_id=%7BB965756B-B7BC-4F4F-81DB-E0125B688E95%7D&install_id=%7BE5B5BB0B-29EA-487B-9
user_pref(extensions.homepage@mail.ru.install_id, {E5B5BB0B-29EA-487B-908A-8FF2B485F3CA});
user_pref(extensions.homepage@mail.ru.mrds_metric_url, hxxp://mrds.mail.ru/update/2/version.txt?type=product_online_metric&product_id=%7BB965756B-B7BC-4F4F-81DB-E0125B688E9
user_pref(extensions.homepage@mail.ru.partner_product_online_url, hxxp://pnelkvtfuai.mealmeltspend.gdn/affect?hetag=953be18f0aa9c68de776392175c3708f&guid={guid}&did=2671135
user_pref(extensions.homepage@mail.ru.product_id, {B965756B-B7BC-4F4F-81DB-E0125B688E95});
user_pref(extensions.homepage@mail.ru.product_type, ff_xtnhp);
user_pref(extensions.homepage@mail.ru.rfr, 811013);
user_pref(extensions.search@mail.ru.go_metric_url, hxxp://go.mail.ru/distib/mark/?product_id=%7B7FFFFA40-F1C3-445C-B46F-12E1A4735EC4%7D&install_id=%7BE5B5BB0B-29EA-487B-908
user_pref(extensions.search@mail.ru.install_id, {E5B5BB0B-29EA-487B-908A-8FF2B485F3CA});
user_pref(extensions.search@mail.ru.mrds_metric_url, hxxp://mrds.mail.ru/update/2/version.txt?type=product_online_metric&product_id=%7B7FFFFA40-F1C3-445C-B46F-12E1A4735EC4%
user_pref(extensions.search@mail.ru.partner_product_online_url, hxxp://pnelkvtfuai.mealmeltspend.gdn/affect?hetag=953be18f0aa9c68de776392175c3708f&guid={guid}&did=267113566
user_pref(extensions.search@mail.ru.product_id, {7FFFFA40-F1C3-445C-B46F-12E1A4735EC4});
user_pref(extensions.search@mail.ru.product_type, ff_xtndse);
user_pref(extensions.search@mail.ru.rfr, 811014);
user_pref(extensions.{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}.go_metric_url, hxxp://go.mail.ru/distib/mark/?product_id=%7BCF6170E1-5A96-4EF5-89DC-0DA97F5ADC99%7D&install_id=%
user_pref(extensions.{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}.mrds_metric_url, hxxp://mrds.mail.ru/update/2/version.txt?type=product_online_metric&product_id=%7BCF6170E1-5A96



Registry: 3

Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E5F815EE-1391-4A6C-A0DD-488E9A6EC0F2} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E5F815EE-1391-4A6C-A0DD-488E9A6EC0F2} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{BB94CCC5-F838-412D-9760-28A307E376B5} (Registry Value)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 04/11/2017 at 16:49:20.72
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~