Hello Dave , Here is the JRT report
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.7 (07.03.2016)
Operating System: Microsoft Windows XP x86
Ran by HP Owner (Administrator) on Sat 08/06/2016 at 19:26:01.78
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 9
Successfully deleted: C:\Program Files\mozilla firefox\defaults\pref\itms.js (File)
Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\27ILIT0D (Temporary Internet Files Folder)
Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\8PMNCZ4V (Temporary Internet Files Folder)
Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\AB8L2FQJ (Temporary Internet Files Folder)
Successfully deleted: C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\SLWP2R65 (Temporary Internet Files Folder)
Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\27ILIT0D (Temporary Internet Files Folder)
Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8PMNCZ4V (Temporary Internet Files Folder)
Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\AB8L2FQJ (Temporary Internet Files Folder)
Successfully deleted: C:\WINDOWS\System32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SLWP2R65 (Temporary Internet Files Folder)
Deleted the following from C:\Documents and Settings\HP Owner\Application Data\Mozilla\Firefox\Profiles\x1p82cez.default-1427552320311\prefs.js
user_pref(extensions.toolbar.mindspark._49Members
_.BUTTON_STRUCTURE, [{\b\:221352991,\c\:\mindspark.magnify\,\p\:\L.0\},{\b\:221352992,\c\:\mindspark.enterse
user_pref(extensions.toolbar.mindspark._49Members
_.browser.version.last, 37.0);
user_pref(extensions.toolbar.mindspark._49Members
_.firstKnownVersion, 6.85.5.65368);
user_pref(extensions.toolbar.mindspark._49Members
_.homepage, hxxp://home.tb.ask.com/index.jhtml?ptb=49293990-FDA4-4ED9-81F2-CF158BFB7EF1&n=781b145b&p2=^ZO^xdm011^YYA^us&si=
user_pref(extensions.toolbar.mindspark._49Members
_.initialized, true);
user_pref(extensions.toolbar.mindspark._49Members
_.installKeysSource, LocalStorage);
user_pref(extensions.toolbar.mindspark._49Members
_.installType, XPI);
user_pref(extensions.toolbar.mindspark._49Members
_.installation.contextKey, );
user_pref(extensions.toolbar.mindspark._49Members
_.installation.installDate, 2015040603);
user_pref(extensions.toolbar.mindspark._49Members
_.installation.partnerId, ^ZO^xdm011^YYA^us);
user_pref(extensions.toolbar.mindspark._49Members
_.installation.partnerSubId, produtools);
user_pref(extensions.toolbar.mindspark._49Members
_.installation.pixelUrl, hxxp://www.utilitychest.com/install_pixels.jhtml?partner=^ZO^xdm011^YYA^us&sub_id=produtools&coId=
user_pref(extensions.toolbar.mindspark._49Members
_.installation.success, true);
user_pref(extensions.toolbar.mindspark._49Members
_.installation.toolbarId, 49293990-FDA4-4ED9-81F2-CF158BFB7EF1);
user_pref(extensions.toolbar.mindspark._49Members
_.isCompliantUninstallImplementation, true);
user_pref(extensions.toolbar.mindspark._49Members
_.lastActivePing, 1429956153347);
user_pref(extensions.toolbar.mindspark._49Members
_.lastKnownVersion, 6.85.5.65368);
user_pref(extensions.toolbar.mindspark._49Members
_.options.defaultSearch, false);
user_pref(extensions.toolbar.mindspark._49Members
_.options.homePageEnabled, false);
user_pref(extensions.toolbar.mindspark._49Members
_.options.keywordEnabled, false);
user_pref(extensions.toolbar.mindspark._49Members
_.options.tabEnabled, false);
user_pref(extensions.toolbar.mindspark._49Members
_.partnerPixelFired, true);
user_pref(extensions.toolbar.mindspark._49Members
_.successUrl, hxxp://produtools.com/thankyou_utility.php);
user_pref(extensions.toolbar.mindspark._49Members
_.toolbarCollapsed, true);
user_pref(extensions.toolbar.mindspark._49Members
_.weather.location, 02108);
user_pref(extensions.toolbar.mindspark._d9Members
_.lastActivePing, 1442337104532);
user_pref(extensions.toolbar.mindspark._d9Members
_.toolbarCollapsed, true);
user_pref(extensions.toolbar.mindspark.lastInstal
led,
[email protected]);
Registry: 1
Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\Search\\SearchAssistant (Registry Value)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sat 08/06/2016 at 19:36:38.59
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~