Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by jan on di 18/03/2014 at 14:37:24,19.
Microsoft Windows 8 6.2.9200  x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\jan\Desktop\zoek.exe [Scan all users] [Script inserted] [Checkboxes used]

==== System Restore Info ======================

18/03/2014 14:38:45 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\PROGRA~2\WinZip Registry Optimizer deleted successfully
C:\PROGRA~2\COMMON~1\Symantec Shared deleted successfully
C:\PROGRA~3\Oracle deleted successfully
C:\PROGRA~3\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} deleted successfully
C:\Users\jan\AppData\Roaming\Nico Mak Computing deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1306517521-591985398-4130037631-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311551110} deleted successfully
HKEY_USERS\S-1-5-21-1306517521-591985398-4130037631-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} deleted successfully
HKEY_USERS\S-1-5-21-1306517521-591985398-4130037631-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} deleted successfully
HKEY_USERS\S-1-5-21-1306517521-591985398-4130037631-1002\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} deleted successfully
HKEY_USERS\S-1-5-21-1306517521-591985398-4130037631-1002\Software\Microsoft\Internet Explorer\SearchScopes\{843AC5F0-A4C4-4968-A500-F23A22F939B3} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110311551110} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311551110} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551110} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551110} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

ProfilePath: C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\v959hyv4.default

user.js not found
---- Lines CT2849859 removed from prefs.js ----
user_pref("CT2849859.1000234.TWC_TMP_city", "MECHELEN");
user_pref("CT2849859.1000234.TWC_TMP_country", "BE");
user_pref("CT2849859.1000234.TWC_country", "BELGIUM");
user_pref("CT2849859.1000234.TWC_locId", "BEXX0013");
user_pref("CT2849859.1000234.TWC_location", "Mechelen, Belgium");
user_pref("CT2849859.1000234.TWC_region", "OT");
user_pref("CT2849859.1000234.TWC_temp_dis", "c");
user_pref("CT2849859.1000234.TWC_wind_dis", "kmh");
user_pref("CT2849859.1000234.weatherData", "{\"icon\":\"32.png\",\"temperature\":\"6°C\",\"temperatureClear\":\"6°C\",\"highTemperature\":\"6°C\",\
user_pref("CT2849859.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2849859.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2849859.FF19Solved", "true");
user_pref("CT2849859.FirstTime", "true");
user_pref("CT2849859.FirstTimeFF3", "true");
user_pref("CT2849859.PG_ENABLE", "dHJ1ZQ==");
user_pref("CT2849859.UserID", "UN19631279542988110");
user_pref("CT2849859.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2849859.autoDisableScopes", -1);
user_pref("CT2849859.countryCode", "BE");
user_pref("CT2849859.defaultSearch", "false");
user_pref("CT2849859.embeddedsData", "[{\"appId\":\"129349798533094661\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"get
user_pref("CT2849859.enableFix404ByUser", "FALSE");
user_pref("CT2849859.enableSearchFromAddressBar", "false");
user_pref("CT2849859.firstTimeDialogOpened", "true");
user_pref("CT2849859.fixPageNotFoundError", "true");
user_pref("CT2849859.fixPageNotFoundErrorByUser", "true");
user_pref("CT2849859.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2849859.fixUrls", true);
user_pref("CT2849859.fullUserID", "UN19631279542988110.UP.20130709222026");
user_pref("CT2849859.homepageuserchanged", true);
user_pref("CT2849859.installDate", "27/3/2013 18:33:52");
user_pref("CT2849859.installType", "xpe");
user_pref("CT2849859.installUsage", "2013-03-27T20:34:08.5758055+03:00");
user_pref("CT2849859.installUsageEarly", "2013-03-27T20:34:07.8737875+03:00");
user_pref("CT2849859.installerVersion", "1.3.6.5");
user_pref("CT2849859.isCheckedStartAsHidden", true);
user_pref("CT2849859.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2849859.isFirstTimeToolbarLoading", "false");
user_pref("CT2849859.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2849859.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2849859.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"http://search.conduit.com/?ctid=CT2849859&octid=CT2849859&SearchSource
user_pref("CT2849859.lastVersion", "10.23.0.822");
user_pref("CT2849859.mam_gk_appStateReportTime.enc", "MTM2NDQwNTY1ODc0MQ==");
user_pref("CT2849859.mam_gk_appState_CouponBuddy.enc", "b24=");
user_pref("CT2849859.mam_gk_appState_PriceGong.enc", "b24=");
user_pref("CT2849859.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2
user_pref("CT2849859.mam_gk_appsDefaultEnabled.enc", "dHJ1ZQ==");
user_pref("CT2849859.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImNyaXRlcmlhcyI6W3siY3JpdGVyaWFJZCI6IjQzZmVjMDg1LWNkM
user_pref("CT2849859.mam_gk_currentVersion.enc", "MS40LjQuNg==");
user_pref("CT2849859.mam_gk_eventsCache.enc", "eyIyMjU2ZDViNC0wNmE2LTQ4YmMtYjNmMS01OTE5YzM4MzUxYTkiOnsidG9waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp7ImNhdGVnb3J
user_pref("CT2849859.mam_gk_first_time.enc", "MQ==");
user_pref("CT2849859.mam_gk_gadgetOpen.enc", "d2VsY29tZQ==");
user_pref("CT2849859.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
user_pref("CT2849859.mam_gk_lastLoginTime.enc", "MTM2NDQwNTY1ODYyMw==");
user_pref("CT2849859.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnkiOn
user_pref("CT2849859.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
user_pref("CT2849859.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiNjFfLTEiLCJpc1Rlc3QiOmZhbHN
user_pref("CT2849859.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
user_pref("CT2849859.mam_gk_showWelcomeGadget.enc", "dHJ1ZQ==");
user_pref("CT2849859.mam_gk_userId.enc", "NTNiNWQ4OGMtMWFhOS00ZjEzLTlkNzctODkyYTRmZWU5Zjk3");
user_pref("CT2849859.migrateAppsAndComponents", true);
user_pref("CT2849859.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"http%3A%2F%2Fwww.trovigo.com%2F%3Fctid%3DCT3312375%26octid%3DEB_ORIGINAL_CTID%2
user_pref("CT2849859.openThankYouPage", "true");
user_pref("CT2849859.openUninstallPage", "false");
user_pref("CT2849859.originalHomepage", "https://www.google.be");
user_pref("CT2849859.price-gong.isManagedApp", "true");
user_pref("CT2849859.revertSettingsEnabled", "false");
user_pref("CT2849859.scriptSource.enc", "aHR0cDovLzEyNy4wLjAuMToxMDAwMC9ndWkv");
user_pref("CT2849859.search.searchAppId", "129349798533094661");
user_pref("CT2849859.search.searchCount", "0");
user_pref("CT2849859.searchInNewTabEnabledByUser", "false");
user_pref("CT2849859.searchInNewTabEnabledInHidden", "true");
user_pref("CT2849859.searchSuggestEnabledByUser", "false");
user_pref("CT2849859.searchUserMode", "2");
user_pref("CT2849859.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2849859.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2849859.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2849859.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2849859\"}");
user_pref("CT2849859.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"http://BittorrentBarNL.OurToolbar.c
user_pref("CT2849859.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"BittorrentBar_NL \"}");
user_pref("CT2849859.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2849859.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT2849859.serviceLayer_services_Configuration_lastUpdate", "1394873945888");
user_pref("CT2849859.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1394906796377");
user_pref("CT2849859.serviceLayer_services_appsMetadata_lastUpdate", "1394906796352");
user_pref("CT2849859.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1394906796146");
user_pref("CT2849859.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1364405648049");
user_pref("CT2849859.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1364405648927");
user_pref("CT2849859.serviceLayer_services_location_lastUpdate", "1373352937350");
user_pref("CT2849859.serviceLayer_services_login_10.14.370.24_lastUpdate", "1364490241599");
user_pref("CT2849859.serviceLayer_services_login_10.15.0.562_lastUpdate", "1371845725497");
user_pref("CT2849859.serviceLayer_services_login_10.16.2.509_lastUpdate", "1373352937412");
user_pref("CT2849859.serviceLayer_services_login_10.16.4.519_lastUpdate", "1374962675500");
user_pref("CT2849859.serviceLayer_services_login_10.16.70.505_lastUpdate", "1379013534131");
user_pref("CT2849859.serviceLayer_services_login_10.20.0.513_lastUpdate", "1386134866152");
user_pref("CT2849859.serviceLayer_services_login_10.22.3.518_lastUpdate", "1387454870792");
user_pref("CT2849859.serviceLayer_services_login_10.23.0.822_lastUpdate", "1394906849863");
user_pref("CT2849859.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1394906796122");
user_pref("CT2849859.serviceLayer_services_searchAPI_lastUpdate", "1394873945279");
user_pref("CT2849859.serviceLayer_services_serviceMap_lastUpdate", "1394873945079");
user_pref("CT2849859.serviceLayer_services_toolbarContextMenu_lastUpdate", "1394906796188");
user_pref("CT2849859.serviceLayer_services_toolbarSettings_lastUpdate", "1394905245773");
user_pref("CT2849859.serviceLayer_services_translation_lastUpdate", "1394873945061");
user_pref("CT2849859.settingsINI", true);
user_pref("CT2849859.shouldFirstTimeDialog", "false");
user_pref("CT2849859.showToolbarPermission", "false");
user_pref("CT2849859.smartbar.CTID", "CT2849859");
user_pref("CT2849859.smartbar.Uninstall", "0");
user_pref("CT2849859.smartbar.homepage", true);
user_pref("CT2849859.smartbar.isHidden", true);
user_pref("CT2849859.smartbar.toolbarName", "BittorrentBar_NL ");
user_pref("CT2849859.startPage", "false");
user_pref("CT2849859.toolbarBornServerTime", "27-3-2013");
user_pref("CT2849859.toolbarCurrentServerTime", "15-3-2014");
user_pref("CT2849859.toolbarDisabled", "true");
user_pref("CT2849859.toolbarLoginClientTime", "Wed Mar 27 2013 18:34:09 GMT+0100");
user_pref("CT2849859_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1394907020403,\"isWithState\":\"\",\"timeFromStar
user_pref("smartbar.conduitHomepageList", "http://search.conduit.com/?ctid=CT2849859&CUI=UN19631279542988110&UM=1&SearchSource=13");
user_pref("smartbar.homePageOwnerCTID", "CT2849859");
user_pref("valueApps.CT2849859./9B+7E+x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E,x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E-x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E.:2z527.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E.x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E/x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E06CG5EL8:", "6E6D686E6A746F6D7773");
user_pref("valueApps.CT2849859./9B+7E06CG5EL8:.storedInFile", false);
user_pref("valueApps.CT2849859./9B+7E06CG5EL;8I:K", "247E2D2F226A74736E74707A75737D79242F4B49474F42357D5D5C3D");
user_pref("valueApps.CT2849859./9B+7E06CG5EL;8I:K.storedInFile", false);
user_pref("valueApps.CT2849859./9B+7E0x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E1x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E2x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E31;CJ7FK;KG#NCEP@MC+VKN.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E3x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E4x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E5x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E6x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E7x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E8x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E9x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E:x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E;x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E<x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E=x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E>x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E?x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7E@x305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7EAx305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7EBE3G=;D9N9=D", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
user_pref("valueApps.CT2849859./9B+7EBE3G=;D9N9=D.storedInFile", false);
user_pref("valueApps.CT2849859./9B+7EBx305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7ECx305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7EDx305.storedInFile", true);
user_pref("valueApps.CT2849859./9B+7Etx305.storedInFile", true);
user_pref("valueApps.CT2849859./9B-0?3G>D", "6C6A6C693F6B72757A4774727820764D4C2125507E7B522A53285829592D282C5C2F292D");
user_pref("valueApps.CT2849859./9B-0?3G>D.storedInFile", false);
user_pref("valueApps.CT2849859./9B-0?3G@6:5;", "");
user_pref("valueApps.CT2849859./9B-0?3G@6:5;.storedInFile", false);
user_pref("valueApps.CT2849859./9B-0?3GFA7EF", "2B2E2C3D");
user_pref("valueApps.CT2849859./9B-0?3GFA7EF.storedInFile", false);
user_pref("valueApps.CT2849859./9B-3=3ECCJA=F>", "247E333D2C452F4135276F297B7E7D21202F26313E4249357D37382F3A494D5D513F283338435D6554695B65546D57695D5D
user_pref("valueApps.CT2849859./9B-3=3ECCJA=F>.storedInFile", false);
user_pref("valueApps.CT2849859./9B/>01=9A6K6<IM;KRIE@PDAWM", "6A696B7273747576");
user_pref("valueApps.CT2849859./9B/>01=9A6K6<IM;KRIE@PDAWM.storedInFile", false);
user_pref("valueApps.CT2849859./9B3=>@44I48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F");
user_pref("valueApps.CT2849859./9B3=>@44I48?.storedInFile", false);
user_pref("valueApps.CT2849859./9B5BA==9CJAG", "6B3E70696E6B41447A704348734747484A4C7B7B4F");
user_pref("valueApps.CT2849859./9B5BA==9CJAG.storedInFile", false);
user_pref("valueApps.CT2849859./9B6B11G4C56B>F;P;ANR@P", "6E6D686E6A746F6D7670777275");
user_pref("valueApps.CT2849859./9B6B11G4C56B>F;P;ANR@P.storedInFile", false);
user_pref("valueApps.CT2849859./9B90E@.3C;7B=?OFB>>RHIQS", "393F352F3E");
user_pref("valueApps.CT2849859./9B90E@.3C;7B=?OFB>>RHIQS.storedInFile", false);
user_pref("valueApps.CT2849859./9B9643G3/9E", "6A");
user_pref("valueApps.CT2849859./9B9643G3/9E.storedInFile", false);
user_pref("valueApps.CT2849859./9B;45>:BI9I7IE", "2B2E2C3D");
user_pref("valueApps.CT2849859./9B;45>:BI9I7IE.storedInFile", false);
user_pref("valueApps.CT2849859./9B<:222H64<", "393F352F3E");
user_pref("valueApps.CT2849859./9B<:222H64<.storedInFile", false);
user_pref("valueApps.CT2849859./9B<:222H64<L8DAJ", "6D70706E7674727976732A7973727D76757E7C");
user_pref("valueApps.CT2849859./9B<:222H64<L8DAJ.storedInFile", false);
user_pref("valueApps.CT2849859./9B=+03EH8H8J?:", "4443");
user_pref("valueApps.CT2849859./9B=+03EH8H8J?:.storedInFile", false);
user_pref("valueApps.CT2849859./9B?+E2A52D8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
user_pref("valueApps.CT2849859./9B?+E2A52D8.storedInFile", false);
user_pref("valueApps.CT2849859./9B?B0D:8AJ62<H", "6D");
user_pref("valueApps.CT2849859./9B?B0D:8AJ62<H.storedInFile", false);
user_pref("valueApps.CT2849859./9BA@0<0BI6A7GN:6@L?", "6C");
user_pref("valueApps.CT2849859./9BA@0<0BI6A7GN:6@L?.storedInFile", false);
user_pref("valueApps.CT2849859.PG_ENABLE", "74727565");
user_pref("valueApps.CT2849859.PG_ENABLE.storedInFile", false);
user_pref("valueApps.CT2849859.SF_JUST_INSTALLED", "46414C5345");
user_pref("valueApps.CT2849859.SF_JUST_INSTALLED.storedInFile", false);
user_pref("valueApps.CT2849859.SF_STATUS", "454E41424C4544");
user_pref("valueApps.CT2849859.SF_STATUS.storedInFile", false);
user_pref("valueApps.CT2849859.SF_USER_ID", "6369645F3135333230313431393130323631383034393031");
user_pref("valueApps.CT2849859.SF_USER_ID.storedInFile", false);
user_pref("valueApps.CT2849859._key_cl_active", "36323966373230312D323065662D343430662D623531332D316533643463653262376261");
user_pref("valueApps.CT2849859._key_cl_active.storedInFile", false);
user_pref("valueApps.CT2849859.cbfirsttime", "536174204D617220313520323031342031393A30383A333820474D542B30313030");
user_pref("valueApps.CT2849859.cbfirsttime.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_appStateReportTime", "31333934393036373939303638");
user_pref("valueApps.CT2849859.mam_gk_appStateReportTime.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_appState_Clarity_Active", "6F6E");
user_pref("valueApps.CT2849859.mam_gk_appState_Clarity_Active.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_appState_CouponBuddy", "6F6E");
user_pref("valueApps.CT2849859.mam_gk_appState_CouponBuddy.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_appState_Easytobook", "6F6E");
user_pref("valueApps.CT2849859.mam_gk_appState_Easytobook.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_appState_Easytobook_targeted", "6F6E");
user_pref("valueApps.CT2849859.mam_gk_appState_Easytobook_targeted.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_appState_PriceGong", "6F6E");
user_pref("valueApps.CT2849859.mam_gk_appState_PriceGong.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_appState_WindowShopper", "6F6E");
user_pref("valueApps.CT2849859.mam_gk_appState_WindowShopper.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_appsConfig.storedInFile", true);
user_pref("valueApps.CT2849859.mam_gk_appsDefaultEnabled", "74727565");
user_pref("valueApps.CT2849859.mam_gk_appsDefaultEnabled.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_calledSetupService", "31");
user_pref("valueApps.CT2849859.mam_gk_calledSetupService.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_currentVersion", "312E31332E302E3137");
user_pref("valueApps.CT2849859.mam_gk_currentVersion.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_eventsCache", "7B2238613439663263332D643331382D343938302D396631642D353531363532633838653238223A7B22746F706963223
user_pref("valueApps.CT2849859.mam_gk_eventsCache.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_existingUsersRecoveryDone", "31");
user_pref("valueApps.CT2849859.mam_gk_existingUsersRecoveryDone.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_first_time", "31");
user_pref("valueApps.CT2849859.mam_gk_first_time.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_gadgetOpen", "30");
user_pref("valueApps.CT2849859.mam_gk_gadgetOpen.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_lastLoginTime", "31333934393036373939333630");
user_pref("valueApps.CT2849859.mam_gk_lastLoginTime.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_localization.storedInFile", true);
user_pref("valueApps.CT2849859.mam_gk_mamEnabled", "66616C7365");
user_pref("valueApps.CT2849859.mam_gk_mamEnabled.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_migrated_from_ls", "31");
user_pref("valueApps.CT2849859.mam_gk_migrated_from_ls.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_new_welcome_experience", "31");
user_pref("valueApps.CT2849859.mam_gk_new_welcome_experience.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_settings1.13.0.17.storedInFile", true);
user_pref("valueApps.CT2849859.mam_gk_showWelcomeGadget", "74727565");
user_pref("valueApps.CT2849859.mam_gk_showWelcomeGadget.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_stamp", "38345F30");
user_pref("valueApps.CT2849859.mam_gk_stamp.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_userBornDate", "4E2F41");
user_pref("valueApps.CT2849859.mam_gk_userBornDate.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_userId", "31346336646335372D313361362D343032352D396538322D613134636162333762333630");
user_pref("valueApps.CT2849859.mam_gk_userId.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_user_approval_interacted", "31");
user_pref("valueApps.CT2849859.mam_gk_user_approval_interacted.storedInFile", false);
user_pref("valueApps.CT2849859.mam_gk_welcomeDialogMode", "31");
user_pref("valueApps.CT2849859.mam_gk_welcomeDialogMode.storedInFile", false);
---- Lines conduit removed from prefs.js ----
user_pref("browser.newtab.url", "http://search.conduit.com/?ctid=CT3312375&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=EB_SSPV&Lay=1&UM=2&UP=SPD4
user_pref("plugin.state.npconduitfirefoxplugin", 0);
---- Lines valueApps removed from prefs.js ----
user_pref("valueApps.storage.mam_gk_userId", "31346336646335372D313361362D343032352D396538322D613134636162333762333630");
---- Lines ask.com removed from prefs.js ----
user_pref("browser.search.order.1", "Ask.com");
---- Lines crossrider removed from prefs.js ----
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_meta.value", "%7B%22handleb
user_pref("extensions.crossrider.bic", "1430ca90b2432440c81159d81142999e");
---- Lines smartbar removed from prefs.js ----
user_pref("smartbar.machineId", "BFUGMVEEK6OCVW2RCWQ8GWKQYKHXEL/GTEOBUWRHOP11Q2AZNBN1NJI+5TPLR/FXCPTKECVMXY3MP9LEHBHVUW");
---- Lines a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510 removed from prefs.js ----
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d2
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d2
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.active", true);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.addressbar", "NA");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.addressbarenhanced", "");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.asyncdb.was_copied", "true");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.asyncdb_dbWasSet", true);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.asyncdb_dbWasSet_FF25_FIX", true);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.asyncinternaldb.was_copied", "true");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.asyncinternaldb_dbWasSet", true);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.asyncinternaldb_dbWasSet_FF25_FIX", true);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.backgroundver", 1);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.certdomaininstaller", "");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.changeprevious", false);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.cookie.InstallationTime.expiration", "Fri Feb 01
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.cookie.InstallationTime.value", "%221387486642%2
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.cookie.InstallerParams.expiration", "Fri Feb 01 
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.cookie.InstallerParams.value", "%7B%22source_id%
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.cookie.jw_token.expiration", "Fri Feb 01 2030 00
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.cookie.jw_token.value", "%22152ab919-f1b9-2769-7
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.cookie.uc.expiration", "Fri Mar 21 2014 18:28:32
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.cookie.uc.value", "%22%5C%22BE%5C%22%22");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.description", "iWebar");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.domain", "");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.enablesearch", false);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.homepage", "");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.iframe", false);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.InstallationThankYouPage", true);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.InstallationTime", 1387486642);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.installer.expiration", "Fri Feb 01 20
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.installer.value", "%7B%22InstallerIde
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.InstallerIdentifiers.expiration", "Fr
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.InstallerIdentifiers.value", "%7B%22i
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.InstallerParams.expiration", "Fri Feb
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.InstallerParams.value", "%7B%22source
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.InstallerParamsCache.expiration", "Fr
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.InstallerParamsCache.value", "%7B%22s
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.InstallerUserIdentifiersCache.expirat
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.InstallerUserIdentifiersCache.value",
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.monetization_plugin_bundledUrls.expir
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.monetization_plugin_bundledUrls.value
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.monetization_plugin_bundledWithHash.e
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.monetization_plugin_bundledWithHash.v
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.monetization_plugin_notBundledArr_.ex
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.monetization_plugin_notBundledArr_.va
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_appVer.expiration", "Fri Fe
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_appVer.value", "247");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_lastVersion.expiration", "F
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_lastVersion.value", "25");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_meta.expiration", "Fri Feb 
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_nextCheck.expiration", "Sun
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_nextCheck.value", "true");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_queue.expiration", "Fri Feb
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_queue.value", "%7B%7D");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_remote_resources.expiration
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_remote_resources.value", "%
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_183015.expiration"
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_196378.expiration"
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_353989.expiration"
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_353990.expiration"
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_353991.expiration"
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_376579.expiration"
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_376579.value", "%2
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_483924.expiration"
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_483925.expiration"
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_534129.expiration"
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.lastDailyReport", "1394896101974");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.lastUpdate", "1394907021458");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.manifesturl", "");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.name", "iWebar");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.newtab", "");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.opensearch", "");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.pluginsurl", "https://w9u6a2p6.ssl.hwcdn.net/plu
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.pluginsversion", 114);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.publisher", "iWebar");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.searchstatus", 0);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.setnewtab", false);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.thankyou", "");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.updateinterval", 360);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.ver", 247);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.apps", "35510");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.bic", "1430ca90b2432440c81159d81142999e");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.cid", 35510);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.FilesValidatorDueTime", "1394896101917");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.firstrun", false);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.hadappinstalled", true);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.installationdate", 1387486842);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.modetype", "production");
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.reportInstall", true);
user_pref("extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.statsDailyCounter", 138);
---- FireFox user.js and prefs.js backups ---- 

prefs_20141803_1445_.backup

==== Registry Fix Code x64 ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551110}] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551110}] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}] 

==== Deleting Files \ Folders ======================

C:\PROGRA~3\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} not found
C:\Program Files (x86)\iWebar deleted
C:\ProgramData\ShopperPro deleted
C:\PROGRA~2\ShopperPro deleted
C:\PROGRA~2\SearchProtect deleted
C:\Users\jan\AppData\Roaming\OpenCandy deleted
C:\PROGRA~3\Ask deleted
C:\Users\jan\AppData\Local\SearchProtect deleted
C:\Windows\SysNative\roboot64.exe deleted
C:\Users\jan\Downloads\SoftonicDownloader_voor_bittorrent.exe deleted
C:\windows\SysNative\tasks\ShopperPro deleted
C:\windows\SysNative\tasks\SMupdate1 deleted
C:\windows\SysNative\tasks\Microsoft\Windows\Maintenance\SMupdate2 deleted
C:\windows\SysNative\tasks\Microsoft\Windows\Multimedia\SMupdate3 deleted
C:\Windows\Syswow64\SearchProtect deleted
C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\v959hyv4.default\searchplugins\askcom.xml deleted
C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\v959hyv4.default\searchplugins\conduit-search.xml deleted
C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\v959hyv4.default\valueApps deleted
C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\v959hyv4.default\CT2849859 deleted
C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\v959hyv4.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com deleted
C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\v959hyv4.default\smartbar deleted
"C:\Windows\tasks\iWebar-chromeinstaller.job" deleted
"C:\Windows\tasks\iWebar-codedownloader.job" deleted
"C:\Windows\tasks\iWebar-enabler.job" deleted
"C:\Windows\tasks\iWebar-firefoxinstaller.job" deleted
"C:\Windows\tasks\iWebar-updater.job" deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====
====== C:\Users\jan\AppData\Local\Temp ====
====== Java Cache =====
====== C:\Windows\SysWOW64 =====
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
====== C:\Windows\Sysnative\drivers =====
====== C:\Windows\Tasks ======
====== C:\Windows\Temp ======
======= C:\Program Files =====
2014-03-18 10:55:55	--------	d-----w-	C:\Program Files\trend micro
======= C:\PROGRA~2 =====
======= C: =====
====== C:\Users\jan\AppData\Roaming ======
====== C:\Users\jan ======
2014-03-18 10:55:12	662C39FC1E27131551D557862CEC47F0	935175	----a-w-	C:\Users\jan\Desktop\RSITx64.exe

====== C: exe-files ==
2014-03-18 10:55:55	9A2347903D6EDB84C10F288BC0578C1C	388608	----a-w-	C:\Program Files\trend micro\jan.exe
2014-03-18 10:55:12	662C39FC1E27131551D557862CEC47F0	935175	----a-w-	C:\Users\jan\Desktop\RSITx64.exe
2014-03-15 20:29:24	E677174AA15D1B9D9E0B0F1C8DB8CC56	892120	----a-w-	C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\33.0.1750.154\33.0.1750.154_33.0.1750.146_chrome_updater.exe
2014-03-13 18:12:17	8AC4B9F42019F815AB776E2BB9544FC8	372960	----a-w-	C:\ProgramData\NVIDIA\Updatus\Packages\000058f0\updatus.18048733_RUNASUSER.exe
2014-03-12 18:01:56	1B099372350DD1165D511FB1F89BDC10	372632	----a-w-	C:\ProgramData\NVIDIA\Updatus\Packages\000058df\updatus.18039961_RUNASUSER.exe
2014-03-11 17:26:11	58B07C8E0661AE5CC018E2CCC03E5099	372456	----a-w-	C:\ProgramData\NVIDIA\Updatus\Packages\000058d4\updatus.18034300_RUNASUSER.exe
=== C: other files ==

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-1306517521-591985398-4130037631-1002\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent"
"EPLTarget\P0000000000000000"="C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIJBE.EXE /EPT EPLTarget\P0000000000000000 /M XP-700 Series"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"ASUS InstantKey"="C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe"
"RemoteControl10"="C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe"
"UpdatePSTShortCut"="C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe C:\Program Files (x86)\Cyberlink\DVD Suite UpdateWithCreateOnce Software\CyberLink\PowerStarter"
"ASUSWebStorage"="C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe /S"
"LogMeIn Hamachi Ui"="C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start"
"AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui"
"EEventManager"="C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
"YTDownloader"="C:\Program Files (x86)\YTDownloader\YTDownloader.exe /boot"
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent"
"EPLTarget\P0000000000000000"="C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIJBE.EXE /EPT EPLTarget\P0000000000000000 /M XP-700 Series"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\PROGRA~2\\SearchProtect\\SearchProtect\\bin\\SPVC32Loader.dll C:\\PROGRA~2\\NVIDIA~1\\3DVISI~1\\nvStInit.dll,C:\\Windows\\SysWOW64\\nvinit.dll"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\Windows\system32\igfxtray.exe"
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"
"RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s"
"RtHDVBg"="C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3 "
"ACMON"="C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\PROGRA~2\\NVIDIA~1\\3DVISI~1\\NVSTIN~1.DLL,C:\\Windows\\system32\\nvinitx.dll"

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\AtherosSvc]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\gupdate]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\gupdatem]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\McAWFwk]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\McComponentHostService]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\mcmscsvc]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\McNaiAnn]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\McNASvc]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\McODS]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\McOobeSv]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\McProxy]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\MSK80Service]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\Steam Client Service]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\TeamViewer8]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\ZAtheros Bt&Wlan Coex Agent]


==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a-------- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [11/03/2014 18:48]
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [27/03/2013 18:06]
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [27/03/2013 18:06]
C:\Windows\tasks\Norton Security Scan for jan.job --ah------- C:\PROGRA2\NORTON2\Engine\4011.16\Nss.exe []

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\Windows\SysNative\tasks\Adobe-online actualiseringsprogramma" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe]
"C:\Windows\SysNative\tasks\ASUS InstantOn Config" [C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe]
"C:\Windows\SysNative\tasks\ASUS Live Update" [C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe]
"C:\Windows\SysNative\tasks\ASUS P4G" [C:\Program Files\ASUS\P4G\BatteryLife.exe]
"C:\Windows\SysNative\tasks\ASUS Touchpad Launcher (x64)" [C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe]
"C:\Windows\SysNative\tasks\ASUS USB Charger Plus" ["C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"]
"C:\Windows\SysNative\tasks\AsusVibeSchedule" ["C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe"]
"C:\Windows\SysNative\tasks\BtTray" [C:\Program]
"C:\Windows\SysNative\tasks\BtvStack" [C:\Program]
"C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\Norton Security Scan for jan" [C:\PROGRA~2\NORTON~2\Engine\401~1.16\Nss.exe]
"C:\Windows\SysNative\tasks\StartMenuAutoupdate" [C:\Program Files (x86)\IObit\Start Menu 8\AutoUpdate.exe]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [26/12/2013 22:42]

==== Firefox Extensions ======================

ProfilePath: C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\v959hyv4.default
- Shopper-Pro - %ProfilePath%\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\v959hyv4.default
95812430959AE88CDD0301AB3A71913B	- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll -	Shockwave Flash
D775FA6F1E88B3B99E69E8A0D6C3A819	- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll -	Shockwave Flash
AE7B288233C212C62CD544BF768C45E6	- C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll -	Shockwave for Director / Shockwave for Director


==== Deleted Firefox Extensions ======================

C:\Users\jan\AppData\Roaming\Mozilla\Firefox\Profiles\v959hyv4.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF} deleted

==== Chrome Look ======================

Google Docs - jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
iWebar - jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cigiagpbkapepgklncnajbakkpkopmam
avast Online Security - jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Google Wallet - jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
ShopperPro - jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojhagnahfpegocdhlopgljpaafeogmcc

==== Chrome Fix ======================

C:\Users\jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojhagnahfpegocdhlopgljpaafeogmcc deleted successfully
C:\Users\jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cigiagpbkapepgklncnajbakkpkopmam deleted successfully
C:\Users\jan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cigiagpbkapepgklncnajbakkpkopmam_0.localstorage deleted successfully
C:\Users\jan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cigiagpbkapepgklncnajbakkpkopmam_0.localstorage-journal deleted successfully
C:\Users\jan\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cigiagpbkapepgklncnajbakkpkopmam_0 deleted successfully
C:\Users\jan\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cigiagpbkapepgklncnajbakkpkopmam deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.be/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.be/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google\Chrome\ExtensionInstallForcelist deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ShopperPro deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\jan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\jan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\jan\AppData\Local\Mozilla\Firefox\Profiles\v959hyv4.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\jan\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=537 folders=87 85853645 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\jan\AppData\Local\Temp will be emptied at reboot
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\jan\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on di 18/03/2014 at 14:59:07,93 ======================