Zoek.exe v5.0.0.0 Updated 04-November-2014 Tool run by Demir on di 04-11-2014 at 17:10:01,40. Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Demir\Downloads\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== System Restore Info ====================== 4-11-2014 17:11:15 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~2\AVAST Software deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-4115760437-96454440-2021199368-1000\Software\Microsoft\Internet Explorer\SearchScopes\{11C5D70D-41FE-48E1-8016-65D25C0A1017} deleted successfully HKEY_USERS\S-1-5-21-4115760437-96454440-2021199368-1000\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} deleted successfully HKEY_USERS\S-1-5-21-4115760437-96454440-2021199368-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} deleted successfully HKEY_USERS\S-1-5-21-4115760437-96454440-2021199368-1000\Software\Microsoft\Internet Explorer\SearchScopes\{D4B01A94-785C-4597-A960-F8BD8E57E75D} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-4115760437-96454440-2021199368-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{D8278076-BC68-4484-9233-6E7F1628B56C} deleted successfully ==== Running Processes ====================== C:\Windows\System32\smss.exe C:\Windows\system32\csrss.exe C:\Windows\system32\wininit.exe C:\Windows\system32\csrss.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\winlogon.exe C:\Windows\System32\spoolsv.exe C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Windows\servicing\TrustedInstaller.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Users\Demir\AppData\Roaming\Mozila\scvhost.exe C:\Users\Demir\AppData\Roaming\Apple_Updater\lsasss.exe C:\Windows\system32\conhost.exe C:\Users\Demir\AppData\Roaming\Apple_Updater\crome.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\Demir\Downloads\zoek.exe C:\Windows\system32\conhost.exe C:\Windows\system32\wuauclt.exe C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\System32\svchost.exe -k swprv ==== Deleting Services ====================== ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=- ==== Deleting Files \ Folders ====================== C:\PROGRA~2\2308189059 deleted C:\Users\Demir\AppData\Roaming\OpenCandy deleted C:\PROGRA~2\APN deleted C:\Users\Demir\AppData\Local\cache deleted C:\Users\Demir\Documents\Optimizer Pro deleted C:\Users\Demir\AppData\Roaming\son.exe deleted "C:\Windows\tasks\autokms.job" deleted "C:\Windows\autokms.exe" deleted "C:\Windows\tasks\autokmsdaily.job" deleted ==== System Specs ====================== Windows: Windows 7 Ultimate Edition Service Pack 1 (Build 7601) Memory (RAM): 3550 MB CPU Info: Pentium(R) Dual-Core CPU E6700 @ 3.20GHz CPU Speed: 3252,3 MHz Sound Card: Luidsprekers (High Definition A | Digitale audio (S/PDIF) (High D | Display Adapters: Intel(R) G41 Express Chipset | Intel(R) G41 Express Chipset | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver Monitors: 1x; Algemeen PnP-beeldscherm | Screen Resolution: 1920 X 1080 - 32 bit Network: Network Present Network Adapters: Atheros AR8131 PCI-E Gigabit Ethernet Controller (NDIS 6.20) CD / DVD Drives: No optical drives found. Ports: COM1 LPT1 Mouse: 8 Button Wheel Mouse Present Hard Disks: C: 239,6GB Hard Disks - Free: C: 201,9GB Manufacturer *: American Megatrends Inc. BIOS Info: AT/AT COMPATIBLE | 05/16/11 | _ASUS_ - 5001116 Time Zone: West-Europa (standaardtijd) Motherboard *: ASUSTeK Computer INC. P5G41T-M LX Country: Nederland Language: NLD ==== System Specs (Software) ====================== Anti-Spyware: Windows Defender disabled (Outdated) Default Browser: Google Chrome 38.0.2125.111 Internet Explorer Version: 9.0.8112.16421 Google Chrome version: 38.0.2125.111 Adobe Reader version: 11.0.9.29 Sun Java version: 1.8.0_25 (32-bit) Shockwave Player version: 12.0r112 ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Demir\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\Windows\system32 ===== 2014-11-04 16:05:31 D7324EB1EDCB8990F8522DE0311359E9 867240 ----a-w- C:\Windows\System32\npDeployJava1.dll 2014-11-04 16:05:31 2A7915FBC3601CDF5F4C2F6528A501FB 789416 ----a-w- C:\Windows\System32\deployJava1.dll 2014-10-27 15:00:00 8A4CEBF34370D689E198E6673C1F2C40 74072 ----a-w- C:\Windows\System32\XAPOFX1_5.dll 2014-10-27 15:00:00 83EBA442F07AAB8D6375D2EEC945C46C 1868128 ----a-w- C:\Windows\System32\d3dcsx_43.dll 2014-10-27 15:00:00 81DFDDFB401D663BA7E6AD1C80364216 527192 ----a-w- C:\Windows\System32\XAudio2_7.dll 2014-10-27 15:00:00 4FD7BCB9D8AF6A165E9BA0C2EB702E7C 239960 ----a-w- C:\Windows\System32\xactengine3_7.dll 2014-10-27 15:00:00 1C9B45E87528B8BB8CFA884EA0099A85 2106216 ----a-w- C:\Windows\System32\D3DCompiler_43.dll 2014-10-27 14:59:59 F81C4678A55FFEE585AC75825FAF5582 238936 ----a-w- C:\Windows\System32\xactengine3_6.dll 2014-10-27 14:59:59 E4CE2AF32F501A7F7DDDD908704A0EE6 74072 ----a-w- C:\Windows\System32\XAPOFX1_4.dll 2014-10-27 14:59:59 DB3C93E87452B8DAB4F58ED1FD2B1998 238936 ----a-w- C:\Windows\System32\xactengine3_5.dll 2014-10-27 14:59:59 D09AC80A4B5312239852836C84DF3392 235344 ----a-w- C:\Windows\System32\d3dx11_42.dll 2014-10-27 14:59:59 C811E70C8804CFFF719038250A43B464 22360 ----a-w- C:\Windows\System32\X3DAudio1_7.dll 2014-10-27 14:59:59 C6A44FC3CF2F5801561804272217B14D 1892184 ----a-w- C:\Windows\System32\D3DX9_42.dll 2014-10-27 14:59:59 B33B21DB610116262D906305CE65C354 1974616 ----a-w- C:\Windows\System32\D3DCompiler_42.dll 2014-10-27 14:59:59 B337306DFB508A1BCEF1974BFBB8D924 5501792 ----a-w- C:\Windows\System32\d3dcsx_42.dll 2014-10-27 14:59:59 8E0BB968FF41D80E5F2C747C04DB79AE 248672 ----a-w- C:\Windows\System32\d3dx11_43.dll 2014-10-27 14:59:59 8B01FB723F3B30AB3DEBDDBF97CFE577 515416 ----a-w- C:\Windows\System32\XAudio2_5.dll 2014-10-27 14:59:59 86E39E9161C3D930D93822F1563C280D 1998168 ----a-w- C:\Windows\System32\D3DX9_43.dll 2014-10-27 14:59:59 781E8B5B6FDB3C9B4E4A4A9FB019960D 1846632 ----a-w- C:\Windows\System32\D3DCompiler_41.dll 2014-10-27 14:59:59 501AC862517C5445742BEE8A2B88414E 453456 ----a-w- C:\Windows\System32\d3dx10_42.dll 2014-10-27 14:59:59 4976243BD70FAE3D1D24E49739AB2710 528216 ----a-w- C:\Windows\System32\XAudio2_6.dll 2014-10-27 14:59:59 20C835843FCEC4DEDFCD7BFFA3B91641 470880 ----a-w- C:\Windows\System32\d3dx10_43.dll 2014-10-27 14:59:59 1AA571774936717EE776DBED51E9EDF4 453456 ----a-w- C:\Windows\System32\d3dx10_41.dll 2014-10-27 14:59:58 EEA5E428CE63804F9B12D21C97B5968F 4379984 ----a-w- C:\Windows\System32\D3DX9_40.dll 2014-10-27 14:59:58 E763798CAD2A90B6AB61854F50CD47DD 22360 ----a-w- C:\Windows\System32\X3DAudio1_6.dll 2014-10-27 14:59:58 E684C5FA18ADF9EA14737757413BF727 517448 ----a-w- C:\Windows\System32\XAudio2_4.dll 2014-10-27 14:59:58 8BA296419AF3417D1E9806B83166E472 235856 ----a-w- C:\Windows\System32\xactengine3_3.dll 2014-10-27 14:59:58 686F8D1B4926D48227A06ACD4D41CD1E 235352 ----a-w- C:\Windows\System32\xactengine3_4.dll 2014-10-27 14:59:58 47ED15DC87AE334C13C4DACD1BE2CCED 514384 ----a-w- C:\Windows\System32\XAudio2_3.dll 2014-10-27 14:59:58 3FA06CF5079B84155D18B05C08F7131B 4178264 ----a-w- C:\Windows\System32\D3DX9_41.dll 2014-10-27 14:59:58 350FEFE18B86BD4D9AB2A96D00215A49 23376 ----a-w- C:\Windows\System32\X3DAudio1_5.dll 2014-10-27 14:59:58 3384134EEB8F223178C2EB8323003EC0 2036576 ----a-w- C:\Windows\System32\D3DCompiler_40.dll 2014-10-27 14:59:58 30686ECE80545E06D78D156EB9F7D463 69464 ----a-w- C:\Windows\System32\XAPOFX1_3.dll 2014-10-27 14:59:58 295E47A75F278580F9441041EAAEA3D2 70992 ----a-w- C:\Windows\System32\XAPOFX1_2.dll 2014-10-27 14:59:57 F3C6BE26949CAADB11DBF0086082FAC9 238088 ----a-w- C:\Windows\System32\xactengine3_2.dll 2014-10-27 14:59:57 D95EAABF5D277EF91D9CA70151209E56 68616 ----a-w- C:\Windows\System32\XAPOFX1_1.dll 2014-10-27 14:59:57 50F4A0D5E6A0BAFEFA78F353533B8E06 509448 ----a-w- C:\Windows\System32\XAudio2_2.dll 2014-10-27 14:59:56 FB4299688A0D3A37687C015AC2B9922D 1374232 ----a-w- C:\Windows\System32\D3DCompiler_36.dll 2014-10-27 14:59:56 EA752DBCE35045D3C830DC16578CC8AB 1420824 ----a-w- C:\Windows\System32\D3DCompiler_37.dll 2014-10-27 14:59:56 E3832514BD21236067B7227F6165EF95 25608 ----a-w- C:\Windows\System32\X3DAudio1_4.dll 2014-10-27 14:59:56 E34FF0115B1EE3B4E03D22AE9840EE03 507400 ----a-w- C:\Windows\System32\XAudio2_1.dll 2014-10-27 14:59:56 DD165760F1B95200A3DA2D9DFDB84234 65032 ----a-w- C:\Windows\System32\XAPOFX1_0.dll 2014-10-27 14:59:56 D9158E78A368B08D9133043EB3058C12 444776 ----a-w- C:\Windows\System32\d3dx10_36.dll 2014-10-27 14:59:56 C593FD0A96EE4B6390B653C4C641313F 25608 ----a-w- C:\Windows\System32\X3DAudio1_3.dll 2014-10-27 14:59:56 AC3C517FB0FBBE45FE44007BCD3625A7 3786760 ----a-w- C:\Windows\System32\D3DX9_37.dll 2014-10-27 14:59:56 A2650B27472C21CDD817EEEDE65648E1 467984 ----a-w- C:\Windows\System32\d3dx10_38.dll 2014-10-27 14:59:56 8F3EB548AC4ED90252394F60C77E3196 3850760 ----a-w- C:\Windows\System32\D3DX9_38.dll 2014-10-27 14:59:56 8A83673F0AB001870583FDE2B004FA59 238088 ----a-w- C:\Windows\System32\xactengine3_0.dll 2014-10-27 14:59:56 73E055AF78A64F9B2779D44407CA2AB6 267272 ----a-w- C:\Windows\System32\xactengine2_10.dll 2014-10-27 14:59:56 4A43E9A2B17E4CAFA9CB5FEC0B5B686B 462864 ----a-w- C:\Windows\System32\d3dx10_37.dll 2014-10-27 14:59:56 418CDC57E55EE79C3F86C13A19B3D5E3 479752 ----a-w- C:\Windows\System32\XAudio2_0.dll 2014-10-27 14:59:56 2E0E25252E1D41752876E9FE12ADE175 238088 ----a-w- C:\Windows\System32\xactengine3_1.dll 2014-10-27 14:59:56 103CBFC5591008AD33046E20E8E1EEBE 1491992 ----a-w- C:\Windows\System32\D3DCompiler_38.dll 2014-10-27 14:59:55 FAE7E1D578C42A7C3D9D61A99D178BD5 1123696 ----a-w- C:\Windows\System32\D3DCompiler_33.dll 2014-10-27 14:59:55 F6A9FC2AD2F9111372B5AB3BBA3707EC 17928 ----a-w- C:\Windows\System32\X3DAudio1_2.dll 2014-10-27 14:59:55 F3764552E45880DC49B82F38699AA87C 444776 ----a-w- C:\Windows\System32\d3dx10_35.dll 2014-10-27 14:59:55 CDB1CD22BAFF21F48606B3C1A18B000B 3495784 ----a-w- C:\Windows\System32\d3dx9_33.dll 2014-10-27 14:59:55 7FEBB8CE2233CBAE738B16D42ED29674 261480 ----a-w- C:\Windows\System32\xactengine2_7.dll 2014-10-27 14:59:55 77F595DEE5FFACEA72B135B1FCE1312E 81768 ----a-w- C:\Windows\System32\xinput1_3.dll 2014-10-27 14:59:55 75F206C195BBACA6EF28565B1C0CD75C 1124720 ----a-w- C:\Windows\System32\D3DCompiler_34.dll 2014-10-27 14:59:55 5B441670A4F5F8BCCE76741902B8AF56 1358192 ----a-w- C:\Windows\System32\D3DCompiler_35.dll 2014-10-27 14:59:55 5AA9987F2E62B56D7661B6901901F927 443752 ----a-w- C:\Windows\System32\d3dx10_34.dll 2014-10-27 14:59:55 499210C45AFEAADEE8CF4DCF7D5E570B 266088 ----a-w- C:\Windows\System32\xactengine2_8.dll 2014-10-27 14:59:55 46EE68F04A75A1CCF40235EA6F1CBA05 267112 ----a-w- C:\Windows\System32\xactengine2_9.dll 2014-10-27 14:59:55 44BFEC5C9C82A2EE9871D88FD3B9A0E2 3734536 ----a-w- C:\Windows\System32\d3dx9_36.dll 2014-10-27 14:59:55 3EF18B78D17C962F2B71AC1CB7757684 3727720 ----a-w- C:\Windows\System32\d3dx9_35.dll 2014-10-27 14:59:55 39000E033D39D19CCCE21AEAFCCE2476 255848 ----a-w- C:\Windows\System32\xactengine2_6.dll 2014-10-27 14:59:55 37A8171ACCF46A9C196054066C28827F 443752 ----a-w- C:\Windows\System32\d3dx10_33.dll 2014-10-27 14:59:55 1CA939918ED1B930059B3A882DE6F648 3497832 ----a-w- C:\Windows\System32\d3dx9_34.dll 2014-10-27 14:59:54 F1726346E583442541FE73429F8E9C10 62672 ----a-w- C:\Windows\System32\xinput1_1.dll 2014-10-27 14:59:54 86C93789E9006F1AC47ED9DD47D4C8A1 251672 ----a-w- C:\Windows\System32\xactengine2_5.dll 2014-10-27 14:59:54 7C9952111F4C743B9F0D8B68B6ED93C9 229584 ----a-w- C:\Windows\System32\xactengine2_1.dll 2014-10-27 14:59:54 797E24743937D67D69F28F2CF5052EE8 2414360 ----a-w- C:\Windows\System32\d3dx9_31.dll 2014-10-27 14:59:54 6F34F7405807DCBF0B9BF6811C94C6D9 440080 ----a-w- C:\Windows\System32\d3dx10.dll 2014-10-27 14:59:54 69D841744B2BAE38FBB2D40A230A549C 236824 ----a-w- C:\Windows\System32\xactengine2_3.dll 2014-10-27 14:59:54 6550E1A0A7BE611592C31222FCB981FB 237848 ----a-w- C:\Windows\System32\xactengine2_4.dll 2014-10-27 14:59:54 5C4D3843B491C047B7A619901FBD2EC1 230168 ----a-w- C:\Windows\System32\xactengine2_2.dll 2014-10-27 14:59:54 33B62BE226934E1B01F5043870C70427 62744 ----a-w- C:\Windows\System32\xinput1_2.dll 2014-10-27 14:59:54 26AF232140C88B42D92A88F2198EDF6A 3426072 ----a-w- C:\Windows\System32\d3dx9_32.dll 2014-10-27 14:59:54 121B131EAA369D8F58DACC5C39A77D80 15128 ----a-w- C:\Windows\System32\x3daudio1_1.dll 2014-10-27 14:59:52 E415862612E65F10D7D888443ECD7594 2388176 ----a-w- C:\Windows\System32\d3dx9_30.dll 2014-10-27 14:59:52 BE19B603DFBAA829EE5B7749B3BA97DB 2323664 ----a-w- C:\Windows\System32\d3dx9_28.dll 2014-10-27 14:59:52 BC831661963763AC4D504C5CABB1FDD9 2222800 ----a-w- C:\Windows\System32\d3dx9_24.dll 2014-10-27 14:59:52 99F4FC172A5ACE36CF00AA7038D23F2C 2332368 ----a-w- C:\Windows\System32\d3dx9_29.dll 2014-10-27 14:59:52 852EDC778A7A50077694F84D8E601234 2319568 ----a-w- C:\Windows\System32\d3dx9_27.dll 2014-10-27 14:59:52 5B48FE9D6686F0D54B26A005ACE24D1D 2337488 ----a-w- C:\Windows\System32\d3dx9_25.dll 2014-10-27 14:59:52 523AB607EEF81CC4D909E7FEBD8A788E 2297552 ----a-w- C:\Windows\System32\d3dx9_26.dll 2014-10-27 14:59:52 4E961525CC7FF0E5D7DA19E170B7C14C 14032 ----a-w- C:\Windows\System32\x3daudio1_0.dll 2014-10-27 14:59:52 2112FE0C46662D429347A7D7B49E3ECE 230096 ----a-w- C:\Windows\System32\xactengine2_0.dll ====== C:\Windows\system32\drivers ===== ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2014-11-04 16:05:08 -------- d-----w- C:\Program Files\Common Files\Java 2014-11-04 01:21:48 -------- d-----w- C:\Program Files\trend micro 2014-11-03 15:28:53 -------- d--h--w- C:\Program Files\InstallShield Installation Information 2014-11-03 15:28:53 -------- d-----w- C:\Program Files\Infogrames 2014-11-03 15:28:32 -------- d-----w- C:\Program Files\Common Files\InstallShield 2014-10-27 14:58:05 -------- d-----w- C:\Program Files\Strife ======= C: ===== ====== C:\Users\Demir\AppData\Roaming ====== 2014-11-03 15:29:48 -------- d-----w- C:\Users\Demir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-11-02 20:15:07 -------- d-----w- C:\Users\Demir\AppData\Roaming\Apple_Updater 2014-11-02 20:15:03 -------- d-----w- C:\Users\Demir\AppData\Roaming\Mozila 2014-10-27 15:00:00 -------- d-----w- C:\Users\Demir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Strife ====== C:\Users\Demir ====== 2014-11-04 16:04:56 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-11-04 16:03:51 3A582BF6FD39DC6A52AAF316126B40BA 638888 ----a-w- C:\Users\Demir\Downloads\chromeinstall-8u25.exe 2014-11-04 01:21:09 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\Users\Demir\Downloads\RSIT.exe 2014-11-03 15:28:53 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Infogrames 2014-10-27 15:00:00 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Strife ====== C: exe-files == 2014-11-04 16:04:56 AA3520FB0133A56BEE1DB34D74DBEF64 0 ----a-we C:\ProgramData\Oracle\Java\javapath\java.exe 2014-11-04 16:04:56 75D477E868CA51EC1B09D730570F322B 0 ----a-we C:\ProgramData\Oracle\Java\javapath\javaw.exe 2014-11-04 16:04:56 691D49FB44EDE9788288CABE4F7E0DAF 0 ----a-we C:\ProgramData\Oracle\Java\javapath\javaws.exe 2014-11-04 16:04:52 E3E6B18458FFB07CB24D7A0BA77C9FDF 15784 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\pack200.exe 2014-11-04 16:04:52 DC197DCE6325CBAC905DE0D0E3BA3E8E 15784 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\rmid.exe 2014-11-04 16:04:52 BB8C890E3E6372F2720709262BD42BF4 30632 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\jabswitch.exe 2014-11-04 16:04:52 B719E0F43166037DF46B5CFBE60A5118 15784 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\jjs.exe 2014-11-04 16:04:52 AA3520FB0133A56BEE1DB34D74DBEF64 176552 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\java.exe 2014-11-04 16:04:52 A458E2535E46151690E53E2A03FAA711 15784 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\keytool.exe 2014-11-04 16:04:52 9BFAEF308D50779F6B255CB7BA7DCA5A 15784 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\kinit.exe 2014-11-04 16:04:52 7AB1F1B3FB6C3DACA34EA2F988CDF5AC 16296 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\orbd.exe 2014-11-04 16:04:52 75EE99C7F0038C746D82C76221ECA4EF 16296 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\policytool.exe 2014-11-04 16:04:52 75D477E868CA51EC1B09D730570F322B 176552 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\javaw.exe 2014-11-04 16:04:52 74713E9C1B01B152DDD3A1A3519A3647 15784 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\java-rmi.exe 2014-11-04 16:04:52 70E67429D2C011FD0419AF899A8D0D70 68520 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\javacpl.exe 2014-11-04 16:04:52 691D49FB44EDE9788288CABE4F7E0DAF 272296 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\javaws.exe 2014-11-04 16:04:52 67F763B09F4BC8689E6FA9761E068D74 159656 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\unpack200.exe 2014-11-04 16:04:52 57E1F756FAA787623DFCD2C1B2AACC68 51112 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\ssvagent.exe 2014-11-04 16:04:52 4367C05B0CF5553E71B34F51003D0615 76200 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\jp2launcher.exe 2014-11-04 16:04:52 4109C4DB4BD48F5BF8115C7523A6B6F8 15784 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\klist.exe 2014-11-04 16:04:52 33D2AF53E209DA3E2BA939EB89801DC0 16296 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\rmiregistry.exe 2014-11-04 16:04:52 29E65AC6AFD8A0A9CAA361FF6F7B4886 16296 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\servertool.exe 2014-11-04 16:04:52 28FC00F89631B0F6E1E9CA386FADD566 16296 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\tnameserv.exe 2014-11-04 16:04:52 26C7F32186B1F0364CD06EA69227A79D 15784 ----a-w- C:\Program Files\Java\jre1.8.0_25\bin\ktab.exe 2014-11-04 16:03:51 3A582BF6FD39DC6A52AAF316126B40BA 638888 ----a-w- C:\Users\Demir\Downloads\chromeinstall-8u25.exe 2014-11-04 01:21:48 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Demir.exe 2014-11-04 01:21:09 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\Users\Demir\Downloads\RSIT.exe 2014-11-03 15:29:24 8B2F2EF980128B56654E52586043E402 954112 ----a-w- C:\Program Files\Infogrames\RollerCoaster Tycoon 2\rct2.exe 2014-11-03 15:28:53 FB6674A519505CC93E28CF600BBC23A3 168448 ----a-w- C:\Program Files\InstallShield Installation Information\{72DF62BD-FF36-424E-AA5F-D89BAFF2C249}\Setup.exe 2014-11-03 15:28:32 B3FD01873BD5FD163AB465779271C58F 614532 ----a-w- C:\Program Files\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe 2014-11-03 15:25:43 FB6674A519505CC93E28CF600BBC23A3 168448 ----a-w- C:\Users\Demir\Desktop\Rollercoaster Tycoon 2\Setup.exe 2014-11-03 15:25:42 98E537AB2EB4E8179F37D81952934E3D 953490 ----a-w- C:\Users\Demir\Desktop\Rollercoaster Tycoon 2\Swedish\rct2.exe 2014-11-03 15:25:42 1063E8FFE572D97CF3BF318D207C7EE4 151552 ----a-w- C:\Users\Demir\Desktop\Rollercoaster Tycoon 2\Autorun.exe 2014-11-03 15:25:41 F7901EB9350DE2EE16D0DDC3ED65BC13 6868431 ----a-w- C:\Users\Demir\Desktop\Rollercoaster Tycoon 2\Spanish\rct2.exe 2014-11-03 15:25:41 ED1DFA851B9ABBAA6EA24F37E49347A4 954235 ----a-w- C:\Users\Demir\Desktop\Rollercoaster Tycoon 2\German\rct2.exe 2014-11-03 15:25:41 E78F90AAF9277E5392D3A397C1EF8B72 140288 ----a-w- C:\Users\Demir\Desktop\Rollercoaster Tycoon 2\DirectX\dxsetup.exe 2014-11-03 15:25:41 E6E209B1592B2F0C609F2270DF8072F5 954425 ----a-w- C:\Users\Demir\Desktop\Rollercoaster Tycoon 2\Italian\rct2.exe 2014-11-03 15:25:41 90D27E633E3AE45C240DEBC0657F8870 952808 ----a-w- C:\Users\Demir\Desktop\Rollercoaster Tycoon 2\English\rct2.exe 2014-11-03 15:25:41 8B2F2EF980128B56654E52586043E402 954112 ----a-w- C:\Users\Demir\Desktop\Rollercoaster Tycoon 2\Dutch\rct2.exe 2014-11-03 15:25:41 32A5ACCF013E77ECE6CFA948849BAAE6 953917 ----a-w- C:\Users\Demir\Desktop\Rollercoaster Tycoon 2\French\rct2.exe 2014-11-03 15:22:45 697D1E5E6452171F0B9FE3849889BC90 1385808 ----a-w- C:\Users\Demir\AppData\Roaming\uTorrent\updates\3.4.2_34944.exe 2014-11-02 20:15:08 537A5A9B401E409E3D6339FDD651D047 897536 ----a-w- C:\Users\Demir\AppData\Roaming\Apple_Updater\lsasss.exe 2014-11-02 20:15:03 B233248B8471AE9D70EBCC89A0318C8F 897536 ----a-w- C:\Users\Demir\AppData\Roaming\Mozila\btc.exe === C: other files == 2014-11-04 16:04:52 CE44A9D4918DCDC7CCCF5503BF4D7A3D 14130 ----a-w- C:\Program Files\Java\jre1.8.0_25\lib\deploy\ffjcext.zip 2014-11-02 20:15:08 BD3B3902B59438C22E0CEF6EA0986B86 1396245 ----a-w- C:\Users\Demir\AppData\Roaming\Apple_Updater\x.zip 2014-11-02 20:15:03 BE7050B2ED0F7A27CB07EA4FEDB04421 462699 ----a-w- C:\Users\Demir\AppData\Roaming\Mozila\update.zip 2014-11-02 20:15:03 26FEEB38F43268917665233C58B89008 8287 ----a-w- C:\Users\Demir\AppData\Roaming\Mozila\ff.zip ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-4115760437-96454440-2021199368-1000\Software\Microsoft\Windows\CurrentVersion\Run] "Samsung Appstore"="C:\Users\Demir\AppData\Roaming\Mozila\scvhost.exe sevdim inanamayacagin kadar seni esmer kiz kirpiklerimde cirpinan su tuzlu gozyasimda ihanetin adi yok" "Apple Updater"="C:\Users\Demir\AppData\Roaming\Apple_Updater\lsasss.exe sevdim inanamayacagin kadar seni esmer kiz kirpiklerimde cirpinan su tuzlu gozyasimda ihanetin adi yok" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:http://go.microsoft.com/fwlink/?LinkID=122915 /build:7601" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:http://go.microsoft.com/fwlink/?LinkID=122915 /build:7601" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="C:\Windows\system32\igfxtray.exe" "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" "Persistence"="C:\Windows\system32\igfxpers.exe" "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "BCSSync"="C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices" "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe -atboottime" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Samsung Appstore"="C:\Users\Demir\AppData\Roaming\Mozila\scvhost.exe sevdim inanamayacagin kadar seni esmer kiz kirpiklerimde cirpinan su tuzlu gozyasimda ihanetin adi yok" "Apple Updater"="C:\Users\Demir\AppData\Roaming\Apple_Updater\lsasss.exe sevdim inanamayacagin kadar seni esmer kiz kirpiklerimde cirpinan su tuzlu gozyasimda ihanetin adi yok" ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [23-09-2014 21:05] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [14-04-2013 17:38] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [14-04-2013 17:38] ==== Other Scheduled Tasks ====================== "C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\system32\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files\Google\Update\GoogleUpdate.exe] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe] "C:\Windows\system32\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe] "C:\Windows\system32\tasks\User_Feed_Synchronization-{6D2119A9-077C-41F0-A7F8-847082CCBB19}" [C:\Windows\system32\msfeedssync.exe] "C:\Windows\system32\tasks\Norton Management\Norton Error Analyzer" [C:\Program Files\Norton Management\Engine\3.2.2.12\SymErr.exe] "C:\Windows\system32\tasks\Norton Management\Norton Error Processor" [C:\Program Files\Norton Management\Engine\3.2.2.12\SymErr.exe] "C:\Windows\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Chromium Look ====================== Google Slides - Demir\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek Google Docs - Demir\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Demir\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Demir\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - Demir\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Google Sheets - Demir\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap Color My Twitter - Demir\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmbdmchmkmjamopihbpmnknbkflciolk Google Wallet - Demir\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - Demir\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Chromium Fix ====================== C:\Users\Demir\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.ask.com_0.localstorage deleted successfully C:\Users\Demir\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.ask.com_0.localstorage-journal deleted successfully C:\Users\Demir\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lmbdmchmkmjamopihbpmnknbkflciolk_0.localstorage deleted successfully C:\Users\Demir\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lmbdmchmkmjamopihbpmnknbkflciolk_0.localstorage-journal deleted successfully C:\Users\Demir\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_lmbdmchmkmjamopihbpmnknbkflciolk_0 deleted successfully C:\Users\Demir\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lmbdmchmkmjamopihbpmnknbkflciolk deleted successfully C:\Users\Demir\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmbdmchmkmjamopihbpmnknbkflciolk deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.default-search.net?sid=476&aid=214&itype=n&ver=13892&tm=482&src=hmp" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{11C5D70D-41FE-48E1-8016-65D25C0A1017}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{11C5D70D-41FE-48E1-8016-65D25C0A1017}] not found New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&form=IE8SRC&src=IE-SearchBox" ==== HijackThis Entries ====================== O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKCU\..\Run: [Samsung Appstore] "C:\Users\Demir\AppData\Roaming\Mozila\scvhost.exe" "sevdim inanamayacagin kadar seni esmer kiz kirpiklerimde cirpinan su tuzlu gozyasimda ihanetin adi yok" O4 - HKCU\..\Run: [Apple Updater] "C:\Users\Demir\AppData\Roaming\Apple_Updater\lsasss.exe" "sevdim inanamayacagin kadar seni esmer kiz kirpiklerimde cirpinan su tuzlu gozyasimda ihanetin adi yok" O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user') O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 O9 - Extra button: PokerStars.eu - {07BA1DA9-F501-4796-8728-74D1B91A6CD5} - C:\Program Files\PokerStars.EU\PokerStarsUpdate.exe (file missing) O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe ==== Empty IE Cache ====================== C:\Users\Demir\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Demir\AppData\Local\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Demir\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Demir\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Demir\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\Demir\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=93 folders=42 4108237 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Demir\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Demir\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Demir\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found "C:\Users\Demir\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmbdmchmkmjamopihbpmnknbkflciolk" not found ==== EOF on di 04-11-2014 at 17:20:36,89 ======================