~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 8 Pro x64 
Ran by Lagish (Administrator) on ne 15.01.2017 at 13:21:19,18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 10 

Successfully deleted: C:\ProgramData\productdata (Folder) 
Successfully deleted: C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\searchplugins\mailru.xml (File) 
Successfully deleted: C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\user.js (File) 
Successfully deleted: C:\Users\Lagish\AppData\Roaming\productdata (Folder) 
Successfully deleted: C:\Windows\system32\Tasks\Driver Booster Scheduler (Task)
Successfully deleted: C:\Windows\system32\Tasks\Driver Booster SkipUAC (Lagish) (Task)
Successfully deleted: C:\Windows\system32\Tasks\Driver Booster SkipUAC (SYSTEM) (Task)
Successfully deleted: C:\Windows\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} (Task)
Successfully deleted: C:\Windows\system32\Tasks\Uninstaller_SkipUac_Lagish (Task)
Successfully deleted: C:\Windows\Tasks\Uninstaller_SkipUac_Lagish.job (Task) 

Deleted the following from C:\Users\Lagish\AppData\Roaming\Mozilla\Firefox\Profiles\ohgmn8vg.default\prefs.js
user_pref(extensions.{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}.go_metric_url, hxxp://go.mail.ru/distib/mark/?product_id=%7B3D618F9D-4B76-4F5A-8DC0-EBCA021106C6%7D&install_id=%
user_pref(extensions.{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}.mrds_metric_url, hxxp://mrds.mail.ru/update/2/version.txt?type=product_online_metric&product_id=%7B3D618F9D-4B76
user_pref(extensions.homepage@mail.ru.go_metric_url, hxxp://go.mail.ru/distib/mark/?product_id=%7BEA5E0734-5D7D-4941-A293-3A25D1BFE096%7D&install_id=%7B9D027BB7-AF6D-4708-A
user_pref(extensions.homepage@mail.ru.install_id, {9D027BB7-AF6D-4708-AA2F-D366745317E9});
user_pref(extensions.homepage@mail.ru.mrds_metric_url, hxxp://mrds.mail.ru/update/2/version.txt?type=product_online_metric&product_id=%7BEA5E0734-5D7D-4941-A293-3A25D1BFE09
user_pref(extensions.homepage@mail.ru.partner_product_online_url, hxxp://ec2-54-229-84-172.eu-west-1.compute.amazonaws.com/affect?guid={guid}&sid=16045&homesearch=1&label=8
user_pref(extensions.homepage@mail.ru.product_id, {EA5E0734-5D7D-4941-A293-3A25D1BFE096});
user_pref(extensions.homepage@mail.ru.product_type, ff_xtnhp);
user_pref(extensions.homepage@mail.ru.rfr, 818411);
user_pref(extensions.search@mail.ru.go_metric_url, hxxp://go.mail.ru/distib/mark/?product_id=%7B43384DA5-08D7-4AB1-8150-14D321EB537A%7D&install_id=%7B9D027BB7-AF6D-4708-AA2
user_pref(extensions.search@mail.ru.install_id, {9D027BB7-AF6D-4708-AA2F-D366745317E9});
user_pref(extensions.search@mail.ru.mrds_metric_url, hxxp://mrds.mail.ru/update/2/version.txt?type=product_online_metric&product_id=%7B43384DA5-08D7-4AB1-8150-14D321EB537A%
user_pref(extensions.search@mail.ru.partner_product_online_url, hxxp://ec2-54-229-84-172.eu-west-1.compute.amazonaws.com/affect?guid={guid}&sid=16045&homesearch=1&label=811
user_pref(extensions.search@mail.ru.product_id, {43384DA5-08D7-4AB1-8150-14D321EB537A});
user_pref(extensions.search@mail.ru.product_type, ff_xtndse);
user_pref(extensions.search@mail.ru.rfr, 811041);



Registry: 1 

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 15.01.2017 at 13:23:10,55
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
