i scan friend’s PC and seems have a lot of potentially unwanted programs and toolbars and Trojan that may change web browser settings to turn on proxy services
scan and cleaning done by AdwCleaner,Malwarebytes ,JRT
and now while opening web browser Malwarebytes still show warning about pup proxy that wont removed
do i have to reinstall all web browsers !!!
Here is all scan logs and attached fresh Farbar scan
thanks in advance
while it was not allowed to attached more than four files i will post JRT logs here
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.6 (04.25.2016)
Operating System: Windows 7 Professional x86
Ran by ASSISTANT-OP (Administrator) on Mon 06/13/2016 at 0:36:32.64
File System: 35
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi (File)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi (File)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2BRDT52Z (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3QT7QJHR (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\69J3DG6J (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8IAFH8DH (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9LDXAU9P (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DHL2Y94X (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ERAWR44J (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EXGI2L67 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GP4D3809 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M44NZN53 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ONK2ZMPX (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TQ9W9ASF (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VYC1A3QH (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WG2D01SS (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y1ET9LI3 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\ASSISTANT-OP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YI82L3LB (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\prefetch\FREE PHOTO CONVERTER.EXE-4ADE7016.pf (File)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2BRDT52Z (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3QT7QJHR (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\69J3DG6J (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8IAFH8DH (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9LDXAU9P (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DHL2Y94X (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ERAWR44J (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EXGI2L67 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GP4D3809 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M44NZN53 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ONK2ZMPX (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TQ9W9ASF (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VYC1A3QH (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WG2D01SS (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y1ET9LI3 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YI82L3LB (Temporary Internet Files Folder)
Registry: 0
Scan was completed on Mon 06/13/2016 at 0:37:43.44
End of JRT log