Zoek.exe Version 4.0.0.5 Updated 09-November-2013 Tool run by Johan on za 09-11-2013 at 9:08:46,45. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Johan\Desktop\zoek\zoek.exe [Script inserted] ==== System Restore Info ====================== 9-11-2013 9:10:19 Zoek.exe System Restore Point Created Succesfully. ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-1014159427-3594308041-3830809492-1001\Software\Microsoft\Internet Explorer\SearchScopes\{3CF01B67-072B-4AAC-AD10-EFC032B0D11F} deleted successfully HKEY_USERS\S-1-5-21-1014159427-3594308041-3830809492-1001\Software\Microsoft\Internet Explorer\SearchScopes\{41A4FAD8-C6B0-4F69-8E9D-47C2822234AD} deleted successfully HKEY_USERS\S-1-5-21-1014159427-3594308041-3830809492-1001\Software\Microsoft\Internet Explorer\SearchScopes\{C434A08A-6AE3-4891-836C-4A42AF792FEE} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater15.2.0 deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater15.2.0 deleted successfully ==== Deleting Files \ Folders ====================== C:\PROGRA~2\glindorus deleted C:\PROGRA~2\COMMON~1\DVDVideoSoft\bin deleted C:\PROGRA~2\Conduit deleted C:\PROGRA~2\COMMON~1\AVG Secure Search deleted C:\ProgramData\Conduit deleted C:\ProgramData\Wincert deleted C:\ProgramData\YTD Video Downloader deleted C:\Users\Johan\AppData\Local\Software deleted C:\Users\Johan\AppData\Local\Conduit deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader deleted C:\Windows\SysNative\roboot64.exe deleted C:\Users\Johan\AppData\LocalLow\DataMngr deleted C:\Users\Johan\AppData\LocalLow\PriceGong deleted C:\Users\Johan\AppData\LocalLow\Conduit deleted C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted C:\Windows\wininit.ini deleted C:\windows\SysNative\tasks\ViewPassword Update deleted C:\Windows\tasks\ViewPassword Update.job deleted C:\END deleted C:\Windows\SysWow64\searchplugins deleted C:\Windows\SysWow64\Extensions deleted C:\Users\Public\Desktop\YTD Video Downloader.lnk deleted C:\Users\Johan\Desktop\Youtube Downloader HD.lnk deleted "C:\PROGRA~2\ViewPassword" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Johan\AppData\Local\Temp ==== 2013-11-08 18:16:10 27C905A32039710713949A7373E0818B 53834 ----a-w- C:\Users\Johan\AppData\Local\Temp\nsuEC8F.exe 2013-11-08 17:57:55 22385EE33688B10B61DA1D8CA9549E4B 120192 ----a-w- C:\Users\Johan\AppData\Local\Temp\clear.fiClient\cabarc.exe ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== ====== C:\Windows\Sysnative\drivers ===== 2013-10-31 22:53:47 E73A7A04FDAC9DD46EE2A4257F09E91C 325120 ----a-w- C:\Windows\Sysnative\drivers\usbport.sys 2013-10-31 22:53:47 ACCEA6BC68D0C9A78EB97EE159028B4E 99840 ----a-w- C:\Windows\Sysnative\drivers\usbccgp.sys 2013-10-31 22:53:47 A83D0EC9AE4C31704442099D40BA2471 30720 ----a-w- C:\Windows\Sysnative\drivers\usbuhci.sys 2013-10-31 22:53:47 9406D801042FAF859CF81B2C886413DC 25600 ----a-w- C:\Windows\Sysnative\drivers\usbohci.sys 2013-10-31 22:53:47 861C197502A5057E68F0AC75D9EFCDD7 7808 ----a-w- C:\Windows\Sysnative\drivers\usbd.sys 2013-10-31 22:53:47 311C1DD1088E55BEAE15954D17F50646 52736 ----a-w- C:\Windows\Sysnative\drivers\usbehci.sys 2013-10-31 22:53:47 280E90CBF4B2DDD169F0728CB44D726F 343040 ----a-w- C:\Windows\Sysnative\drivers\usbhub.sys 2013-10-11 16:17:37 E2C933EDBC389386EBE6D2BA953F43D8 785624 ----a-w- C:\Windows\Sysnative\drivers\Wdf01000.sys 2013-10-11 16:16:46 80B0F7D5CCF86CEB5D402EAAF61FEC31 100864 ----a-w- C:\Windows\Sysnative\drivers\usbcir.sys 2013-10-11 16:16:46 1F775DA4CF1A3A1834207E975A72E9D7 185344 ----a-w- C:\Windows\Sysnative\drivers\usbvideo.sys 2013-10-11 16:16:45 856E76B3641746ABBC2946BED1372098 32896 ----a-w- C:\Windows\Sysnative\drivers\hidparse.sys 2013-10-11 16:16:45 597C3699384E53CC59587ED50CCE5CA2 76800 ----a-w- C:\Windows\Sysnative\drivers\hidclass.sys 2013-10-11 16:16:44 1A4F75E63C9FB84B85DFFC6B63FD5404 140800 ----a-w- C:\Windows\Sysnative\drivers\mrxdav.sys 2013-10-11 16:16:42 40AF23633D197905F03AB5628C558C51 1903552 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys 2013-10-11 16:16:42 314C17917AC8523EC77A710215012A65 497152 ----a-w- C:\Windows\Sysnative\drivers\afd.sys 2013-10-11 16:16:24 88612F1CE3BF42256913BF6E61C70D52 983488 ----a-w- C:\Windows\Sysnative\drivers\dxgkrnl.sys ====== C:\Windows\Tasks ====== 2013-11-08 16:11:08 0EF21E33CB8D88126FAB82F5D8A1D263 3120 ----a-w- C:\Windows\Sysnative\Tasks\{507C725D-072B-4A9A-9AD1-4F4F67380038} ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2013-11-08 20:58:28 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== 2013-10-22 20:50:55 -------- d-----w- C:\PROGRA~2\NewsLeecher 2013-10-12 16:54:13 -------- d-----w- C:\PROGRA~2\Youtube Downloader HD ======= C: ===== ====== C:\Users\Johan\AppData\Roaming ====== 2013-11-08 17:53:38 -------- d-----w- C:\Users\Public\AppData\Local\temp 2013-11-08 17:53:38 -------- d-----w- C:\Users\Default\AppData\Local\temp 2013-11-08 17:53:38 -------- d-----w- C:\Users\Default User\AppData\Local\temp 2013-11-08 17:30:53 -------- d-----w- C:\Users\Johan\AppData\Roaming\SUPERAntiSpyware.com 2013-11-02 23:35:47 -------- d-----w- C:\Users\Johan\AppData\Roaming\PowerCinema 2013-10-22 20:51:07 -------- d-----w- C:\Users\Johan\AppData\Roaming\NewsLeecher 2013-10-15 21:32:22 -------- d-----w- C:\Users\Johan\AppData\Local\Apps 2013-10-12 16:54:50 -------- d-----w- C:\Users\Johan\AppData\Locallow\WhiteSmoke_New_V6 2013-10-12 16:54:26 -------- d-----w- C:\Users\Johan\AppData\Roaming\Youtube Downloader HD 2013-10-12 16:26:14 -------- d-----w- C:\Users\Johan\AppData\Roaming\Nico Mak Computing ====== C:\Users\Johan ====== 2013-11-08 20:10:57 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\Johan\Desktop\RSITx64.exe 2013-11-08 18:21:28 -------- d-----w- C:\ProgramData\HitmanPro 2013-11-08 18:20:49 76874123C258B0FE7A5E7E8F71555D52 10264904 ----a-w- C:\Users\Johan\Desktop\HitmanPro_x64.exe 2013-11-08 17:23:18 4AD79476BBDE11188353DBFB1A5AD3E2 28356608 ----a-w- C:\Users\Johan\Desktop\SUPERAntiSpyware.exe 2013-11-08 15:13:52 B52902B7E5F7B8E5CF9FBF60E0C83E83 800136 ----a-w- C:\Users\Johan\Downloads\regclean_en.exe 2013-11-08 15:05:16 02C1EE40968BAA67C3A785CDA9807125 262 --sha-r- C:\Users\Johan\ntuser.pol 2013-10-22 20:50:56 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewsLeecher 2013-10-12 16:54:14 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Youtube Downloader HD 2013-10-11 15:28:05 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG ====== C: exe-files == 2013-11-08 20:58:28 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Johan.exe 2013-11-08 20:10:57 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\Johan\Desktop\RSITx64.exe 2013-11-08 18:27:29 5CC129CC6DC46154F8208C28C503F8A7 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-1014159427-3594308041-3830809492-1001\$INYWU5M.exe 2013-11-08 18:20:49 76874123C258B0FE7A5E7E8F71555D52 10264904 ----a-w- C:\Users\Johan\Desktop\HitmanPro_x64.exe 2013-11-08 18:19:30 26641EB6004F744A85467F11527DA8DB 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-1014159427-3594308041-3830809492-1001\$ITOTDZL.exe 2013-11-08 18:18:48 76874123C258B0FE7A5E7E8F71555D52 10264904 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-1014159427-3594308041-3830809492-1001\$RTOTDZL.exe 2013-11-08 18:16:10 27C905A32039710713949A7373E0818B 53834 ----a-w- C:\Users\Johan\AppData\Local\Temp\nsuEC8F.exe 2013-11-08 17:57:55 22385EE33688B10B61DA1D8CA9549E4B 120192 ----a-w- C:\Users\Johan\AppData\Local\Temp\clear.fiClient\cabarc.exe 2013-11-08 17:23:18 4AD79476BBDE11188353DBFB1A5AD3E2 28356608 ----a-w- C:\Users\Johan\Desktop\SUPERAntiSpyware.exe 2013-11-08 15:21:49 969351D1A58EC7ECB96A9CE1E2E1399D 420752 ----a-w- C:\Users\Johan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1RBMCAVE\WinZip180.exe 2013-11-08 15:13:52 B52902B7E5F7B8E5CF9FBF60E0C83E83 800136 ----a-w- C:\Users\Johan\Downloads\regclean_en.exe 2013-11-08 15:04:56 1FF033E93713C97593280B3B9537318D 553687 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-1014159427-3594308041-3830809492-1001\$RNYWU5M.exe === C: other files == ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-1014159427-3594308041-3830809492-1001\Software\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="C:\Users\Johan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "HP Deskjet 3050A J611 series (NET)"="C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe -deviceID CN34I1CJ3X05WK:NW -scfn HP Deskjet 3050A J611 series (NET) -AutoStart 1" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "IsMyWinLockerReboot"="msiexec.exe /qn /x{voidguid}" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce] "IsMyWinLockerReboot"="msiexec.exe /qn /x{voidguid}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SuiteTray"="C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" "BackupManagerTray"="C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe -h -k" "LManager"="C:\Program Files (x86)\Launch Manager\LManager.exe" "ArcadeMovieService"="C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" "AVG_UI"="C:\Program Files (x86)\AVG\AVG2014\avgui.exe /TRAYONLY" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "HP Software Update"="C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="C:\Users\Johan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "HP Deskjet 3050A J611 series (NET)"="C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe -deviceID CN34I1CJ3X05WK:NW -scfn HP Deskjet 3050A J611 series (NET) -AutoStart 1" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="C:\Windows\system32\igfxtray.exe" "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" "Persistence"="C:\Windows\system32\igfxpers.exe" "RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "Power Management"="C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe" "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe " ==== Startup Registry Disabled ====================== [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-] "Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\"" "ROC_ROC_JULY_P1"="\"C:\\Program Files (x86)\\AVG Secure Search\\ROC_ROC_JULY_P1.exe\" / /PROMPT /CMPID=ROC_JULY_P1" ==== Startup Registry Disabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Spotify" "hkey"="HKCU" "command"="\"C:\\Users\\Johan\\AppData\\Roaming\\Spotify\\Spotify.exe\" /uri spotify:autostart" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\VDownloader] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="VDownloader" "hkey"="HKLM" "command"="\"C:\\Program Files\\VDownloader\\VDownloader.exe\" /silent" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Johan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^VDownloader.lnk] "path"="C:\\Users\\Johan\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\VDownloader.lnk" "backup"="C:\\Windows\\pss\\VDownloader.lnk.Startup" "backupExtension"=".Startup" "command"="C:\\PROGRA~2\\VDOWNL~1\\VDOWNL~1.EXE /silent" "item"="VDownloader" ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [08-10-2013 19:32] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\0" [c:\program files (x86)\internet explorer\iexplore.exe] "C:\Windows\SysNative\tasks\4677" [wscript.exe C:\Users\Johan\AppData\Local\Temp\launchie.vbs //B] "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\Adobe-online actualiseringsprogramma" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe] "C:\Windows\SysNative\tasks\clear.fi" ["C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe"] "C:\Windows\SysNative\tasks\clear.fiAgent" ["C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe"] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\DMREngine" ["C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe"] "C:\Windows\SysNative\tasks\EgisUpdate" ["C:\Program Files\EgisTec IPS\EgisUpdate.exe"] "C:\Windows\SysNative\tasks\HPCustParticipation HP Deskjet 3050A J611 series" ["C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPCustPartic.exe"] "C:\Windows\SysNative\tasks\PMMUpdate" ["C:\Program Files\EgisTec IPS\PMMUpdate.exe"] "C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe] "C:\Windows\SysNative\tasks\{91D219E9-2499-49F5-90A9-2F350B753097}" [C:\Program Files (x86)\MagicDisc\MagicDisc.exe] ==== Firefox Extensions Registry ====================== [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "{cb056958-eb1d-47a5-a7c2-35fd94d51b3f}"="C:\Program Files (x86)\ViewPassword\134.xpi" [] ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions jmojojliiicbbihpjmiepllaiflnjobc - C:\Program Files (x86)\ViewPassword\134.crx[] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.be/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=WDCXWD5000BPVT-22HXZT3_WD-WX41E81FHK97FHK97&ts=1383923644&type=default&q={searchTerms}" "Search Page"="http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=WDCXWD5000BPVT-22HXZT3_WD-WX41E81FHK97FHK97&ts=1383923644&type=default&q={searchTerms}" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=WDCXWD5000BPVT-22HXZT3_WD-WX41E81FHK97FHK97&ts=1383923644&type=default&q={searchTerms}" "Search Page"="http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=WDCXWD5000BPVT-22HXZT3_WD-WX41E81FHK97FHK97&ts=1383923644&type=default&q={searchTerms}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{33BB0A4E-99AF-4226-BDF6-49120163DE86}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] not found New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.be/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-1014159427-3594308041-3830809492-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DD000E12-C224-49A5-899E-0B37DBD95F15} deleted successfully HKEY_USERS\S-1-5-21-1014159427-3594308041-3830809492-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DD000E12-C224-49A5-899E-0B37DBD95F15} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{DD000E12-C224-49A5-899E-0B37DBD95F15} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DD000E12-C224-49A5-899E-0B37DBD95F15} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-1014159427-3594308041-3830809492-1001\Software\Mozilla\Firefox\Extensions\{cb056958-eb1d-47a5-a7c2-35fd94d51b3f} deleted successfully ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\jmojojliiicbbihpjmiepllaiflnjobc deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VDownloader deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Johan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Johan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache is not empty, a reboot is needed ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Johan\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Johan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\X6M8X544\bin.snmmd.nl" not found ==== EOF on za 09-11-2013 at 9:26:47,42 ======================