Zoek.exe v5.0.0.0 Updated 27-11-2014 Tool run by Gebruiker on vr 28/11/2014 at 17:04:17,54. Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Gebruiker\Downloads\zoek\zoek.exe.com [Scan all users] [Script inserted] ==== System Restore Info ====================== 28/11/2014 17:05:15 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~2\MSXML 4.0 deleted successfully C:\Program Files\log deleted successfully C:\PROGRA~3\Synology deleted successfully C:\Users\Gebruiker\AppData\Roaming\Hewlett-Packard deleted successfully C:\Users\Gebruiker\AppData\Local\PDFC deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-2200503823-3549685751-490178055-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully HKEY_USERS\S-1-5-21-2200503823-3549685751-490178055-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} deleted successfully HKEY_USERS\S-1-5-21-2200503823-3549685751-490178055-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully HKEY_CLASSES_ROOT\CLSID\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully HKEY_CLASSES_ROOT\CLSID\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} deleted successfully ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== C:\ConvertStart.exe deleted C:\CONVERT_post.EXE deleted C:\PROGRA~3\Package Cache deleted C:\Windows\patsearch.bin deleted C:\rei deleted C:\Users\Gebruiker\Downloads\ReimageRepair.exe deleted C:\windows\SysNative\drivers\Msft_Kernel_webinstrNew_01009.Wdf deleted C:\Windows\SysNative\config\systemprofile\Searches deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\GEBRUI~1\AppData\Local\Temp ==== 2014-11-28 14:12:14 EB4686F6F4BE2B00AA40978D551F66C4 43008 ----a-w- C:\Users\Gebruiker\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpp_q59i.dll ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== 2014-11-19 06:56:42 ADFB31FA72AFE0298A60BF4AC1045A42 550912 ----a-w- C:\Windows\SysWOW64\kerberos.dll 2014-11-19 06:56:42 98B3C919C6B9C5F810FF2CAFA339822B 186880 ----a-w- C:\Windows\SysWOW64\pku2u.dll ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2014-11-27 09:32:26 5F5BC9FC260F181C0390C09B960BE1F4 14680 ----a-w- C:\Windows\Sysnative\sh4native.exe 2014-11-19 06:56:42 8A8CB073A4B9F9D97CFA8CA9C1C851CE 728064 ----a-w- C:\Windows\Sysnative\kerberos.dll 2014-11-19 06:56:42 1306E6A1BF4D506CD687DF9F947270F2 241152 ----a-w- C:\Windows\Sysnative\pku2u.dll ====== C:\Windows\Sysnative\drivers ===== 2014-11-27 12:04:27 26C43960C99EE861A5D0EDC4DCF3B1C3 129752 ----a-w- C:\Windows\Sysnative\drivers\MBAMSwissArmy.sys 2014-11-27 12:04:00 D3311B31C470E7681B14D9B014CBF9ED 93400 ----a-w- C:\Windows\Sysnative\drivers\mbamchameleon.sys 2014-11-27 12:04:00 95EF63A7827D4E3A229CBBCB42619E93 63704 ----a-w- C:\Windows\Sysnative\drivers\mwac.sys 2014-11-27 12:04:00 5C3669B71657F22E67A1D4BD49D2CBE7 25816 ----a-w- C:\Windows\Sysnative\drivers\mbam.sys 2014-11-17 09:56:18 3B32CAA07D672F8A2E0DF5CB3A873F45 22704 ----a-w- C:\Windows\Sysnative\drivers\EsgScanner.sys 2014-11-12 07:06:06 41774FF331F609EF442B7398EE6202B1 155064 ----a-w- C:\Windows\Sysnative\drivers\ksecpkg.sys ====== C:\Windows\Tasks ====== 2014-11-18 09:58:12 407D7CFA847BDC3DA681F459A096E94C 3636 ----a-w- C:\Windows\Sysnative\Tasks\RNUpgradeHelperResumePrompt_Gebruiker 2014-11-18 09:58:10 D46698A8D27520298BE415721F62D0C8 386 ----a-w- C:\Windows\Tasks\ReclaimerUpdateFiles_Gebruiker.job 2014-11-18 09:58:10 819C42030296BCB01DBC67DCC4860E45 2996 ----a-w- C:\Windows\Sysnative\Tasks\ReclaimerUpdateFiles_Gebruiker 2014-11-18 09:58:09 9304F71AEBD4079010DED50426A917A3 2992 ----a-w- C:\Windows\Sysnative\Tasks\ReclaimerUpdateXML_Gebruiker 2014-11-18 09:58:09 166FC1627E6B7FEB95946E0763ADDE54 382 ----a-w- C:\Windows\Tasks\ReclaimerUpdateXML_Gebruiker.job 2014-11-17 09:56:47 F462583D553FDB848DC7E95256ECDBDA 3284 ----a-w- C:\Windows\Sysnative\Tasks\SpyHunter4Startup 2014-11-14 16:53:28 68D812D3E85EBD2BA79098F26C18723B 3172 ----a-w- C:\Windows\Sysnative\Tasks\{585D3844-4F30-47FF-B0CE-572B725B6273} ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2014-11-28 08:27:34 -------- d-----w- C:\Program Files\trend micro 2014-11-17 09:56:12 -------- d-----w- C:\Program Files\Enigma Software Group ======= C:\PROGRA~2 ===== 2014-11-03 11:20:15 -------- d-----w- C:\PROGRA~2\COMMON~1\Java ======= C: ===== 2014-11-17 15:27:59 D07138915E1B489BA08D2DBDFF441A60 285747 ----a-w- C:\shldr 2014-11-17 15:27:59 025926B83A938B5215F3C1DCC882F21C 8192 ----a-w- C:\shldr.mbr 2014-11-17 12:41:23 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\autoexec.bat ====== C:\Users\Gebruiker\AppData\Roaming ====== 2014-11-21 10:12:53 -------- d-sh--w- C:\Users\Gebruiker\AppData\Locallow\EmieBrowserModeList 2014-11-17 10:17:42 -------- d-sh--w- C:\Users\Gebruiker\AppData\Local\EmieBrowserModeList 2014-11-17 09:56:49 -------- d-----w- C:\Users\Gebruiker\AppData\Roaming\Enigma Software Group ====== C:\Users\Gebruiker ====== 2014-11-28 08:26:23 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Gebruiker\Downloads\RSITx64.exe 2014-11-27 19:58:32 5A6F21141B846BD3CE1ED0BD0F19C3AF 2148864 ----a-w- C:\Users\Gebruiker\Downloads\adwcleaner_4.102 (1).exe 2014-11-27 19:52:39 5A6F21141B846BD3CE1ED0BD0F19C3AF 2148864 ----a-w- C:\Users\Gebruiker\Downloads\adwcleaner_4.102.exe 2014-11-27 12:03:08 33398D340008A0577507FCA7FD443622 19828376 ----a-w- C:\Users\Gebruiker\Downloads\mbam-setup-2.0.3.1025.exe 2014-11-21 07:13:45 1E96140198DA25E0CE13D59F14DD1870 3456600 ----a-w- C:\Users\Gebruiker\Downloads\tuppsetup_2005.exe 2014-11-17 09:56:47 -------- d-----w- C:\Users\Gebruiker\Start Menu 2014-11-17 09:55:02 2312A73CC833FFDAFEE32D6A87A769D2 2998656 ----a-w- C:\Users\Gebruiker\Downloads\SpyHunter-Installer.exe 2014-11-10 10:18:00 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud ====== C: exe-files == 2014-11-28 13:56:13 B58B04EEA88F9506BB65EEF2F58A9024 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2200503823-3549685751-490178055-1000\$I30TZME.exe 2014-11-28 08:27:34 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Gebruiker.exe 2014-11-28 08:26:23 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Gebruiker\Downloads\RSITx64.exe 2014-11-27 19:58:32 5A6F21141B846BD3CE1ED0BD0F19C3AF 2148864 ----a-w- C:\Users\Gebruiker\Downloads\adwcleaner_4.102 (1).exe 2014-11-27 19:52:39 5A6F21141B846BD3CE1ED0BD0F19C3AF 2148864 ----a-w- C:\Users\Gebruiker\Downloads\adwcleaner_4.102.exe 2014-11-27 12:03:08 33398D340008A0577507FCA7FD443622 19828376 ----a-w- C:\Users\Gebruiker\Downloads\mbam-setup-2.0.3.1025.exe 2014-11-27 09:32:26 5F5BC9FC260F181C0390C09B960BE1F4 14680 ----a-w- C:\Windows\System32\sh4native.exe === C: other files == 2014-11-27 12:04:27 26C43960C99EE861A5D0EDC4DCF3B1C3 129752 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys 2014-11-27 12:04:00 D3311B31C470E7681B14D9B014CBF9ED 93400 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys 2014-11-27 12:04:00 95EF63A7827D4E3A229CBBCB42619E93 63704 ----a-w- C:\Windows\System32\drivers\mwac.sys 2014-11-27 12:04:00 5C3669B71657F22E67A1D4BD49D2CBE7 25816 ----a-w- C:\Windows\System32\drivers\mbam.sys 2014-11-23 15:38:17 736137D3B1850409A571B8C921FA5ACA 48480204 ----a-w- C:\Users\Gebruiker\Downloads\'14_11_22 KSK Maldegem - Lovendegem.zip ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-2200503823-3549685751-490178055-1000\Software\Microsoft\Windows\CurrentVersion\Run] "HP Officejet Pro 8600 (NET)"="C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe -deviceID CN2BIB3HDF05KD:NW -scfn HP Officejet Pro 8600 (NET) -AutoStart 1" "Data Replicator 3"="C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe /MIN" "ApplePhotoStreams"="C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" "DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun" "GarminExpressTrayApp"="C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" "OXUpdater"="C:\Users\Gebruiker\AppData\Local\Open-Xchange\OXUpdater\OXUpdater.exe" "OXDrive"="C:\Users\Gebruiker\AppData\Local\Open-Xchange\OXDrive\OXDrive.exe" "iCloudServices"="C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IMSS"="C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" "PDF Complete"="C:\Program Files (x86)\PDF Complete\pdfsty.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "OfficeScanNT Monitor"="C:\Program Files (x86)\Trend Micro\Client Server Security Agent\pccntmon.exe -HideWindow" "APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" "beid"="C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe /startup" "TkBellExe"="C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe -osboot" "iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe" "QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "HP Officejet Pro 8600 (NET)"="C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe -deviceID CN2BIB3HDF05KD:NW -scfn HP Officejet Pro 8600 (NET) -AutoStart 1" "Data Replicator 3"="C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe /MIN" "ApplePhotoStreams"="C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" "DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun" "GarminExpressTrayApp"="C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" "OXUpdater"="C:\Users\Gebruiker\AppData\Local\Open-Xchange\OXUpdater\OXUpdater.exe" "OXDrive"="C:\Users\Gebruiker\AppData\Local\Open-Xchange\OXDrive\OXDrive.exe" "iCloudServices"="C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "EvtMgr6"="C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming" ==== Startup Folders ====================== 2014-05-26 06:37:31 1061 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk 2013-06-06 09:50:17 1932 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Inktwaarschuwingen controleren - HP Officejet Pro 8600 (netwerk).lnk 2013-06-01 12:45:23 1111 ------w- C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Verzenden naar OneNote.lnk 2013-06-01 15:23:17 2693 ------w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CLS 2013.10.lnk 2014-04-05 16:06:06 1250 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [25/11/2014 20:16] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [30/05/2013 12:08] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [30/05/2013 12:08] C:\Windows\tasks\HP Photo Creations Communicator.job --a------ C:\ProgramData\HP Photo Creations\Communicator.exe [21/02/2011 11:11] C:\Windows\tasks\ReclaimerUpdateFiles_Gebruiker.job --a------ C:\Users\Gebruiker\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe [18/11/2014 07:56] C:\Windows\tasks\ReclaimerUpdateXML_Gebruiker.job --a------ C:\Users\Gebruiker\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe [18/11/2014 07:56] C:\Windows\tasks\RNUpgradeHelperLogonPrompt_Gebruiker.job --a------ C:\Users\Gebruiker\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe [18/11/2014 07:56] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\Apple Diagnostics" [C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\HP Officejet Pro 8600.exe_{B7D467C4-919E-4EA4-BA0B-4FEEE696C907}" [C:\Program Files\HP\HP Officejet Pro 8600\Bin\HP Officejet Pro 8600.exe] "C:\Windows\SysNative\tasks\HP Photo Creations Communicator" [C:\ProgramData\HP Photo Creations\Communicator.exe] "C:\Windows\SysNative\tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2200503823-3549685751-490178055-1000" [C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe] "C:\Windows\SysNative\tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2200503823-3549685751-490178055-1000" [C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe] "C:\Windows\SysNative\tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2200503823-3549685751-490178055-1000" [C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe] "C:\Windows\SysNative\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2200503823-3549685751-490178055-1000" [C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\SysNative\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2200503823-3549685751-490178055-1000" [C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\SysNative\tasks\ReclaimerUpdateFiles_Gebruiker" [C:\Users\Gebruiker\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe] "C:\Windows\SysNative\tasks\ReclaimerUpdateXML_Gebruiker" [C:\Users\Gebruiker\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe] "C:\Windows\SysNative\tasks\RMCreator" [C:\Program Files (x86)\Hewlett-Packard\Recovery\Reminder.exe] "C:\Windows\SysNative\tasks\RNUpgradeHelperLogonPrompt_Gebruiker" [C:\Users\Gebruiker\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe] "C:\Windows\SysNative\tasks\RNUpgradeHelperResumePrompt_Gebruiker" [C:\Users\Gebruiker\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe] "C:\Windows\SysNative\tasks\ScanToPCActivationApp.exe_{EA0A3F7A-3BC6-4D7B-BFA5-FF6E5F75C36A}" [C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe] "C:\Windows\SysNative\tasks\ScanToPCActivationApp.exe_{FA225A7E-35EA-4B24-B0FD-F690A1872D9D}" [C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe] "C:\Windows\SysNative\tasks\SpyHunter4Startup" ["C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe"] "C:\Windows\SysNative\tasks\User_Feed_Synchronization-{EF3D93DE-011E-4BA2-A73A-DFA7EAAE6C80}" [C:\Windows\system32\msfeedssync.exe] "C:\Windows\SysNative\tasks\{59F707EC-3671-44AB-9C19-A3708F77EFD6}" [C:\IDIS Center\Client\G2Client.exe] "C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe] "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "{9D2AA73B-6049-4799-B8AC-925723370070}"="C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext" [17/09/2014 09:19] ==== Firefox Extensions ====================== ProfilePath: C:\Users\GEBRUI~1\AppData\Roaming\Mozilla\Sunbird\Profiles\vrbkjm3e.default - Timezone Definitions for Mozilla Calendar - C:\Program Files (x86)\Mozilla Sunbird\extensions\calendar-timezones@mozilla.org - Talkback - C:\Program Files (x86)\Mozilla Sunbird\extensions\talkback@mozilla.org - Lightning stub extension for Sunbird - C:\Program Files (x86)\Mozilla Sunbird\extensions\{e2fda1a4-762b-4020-b5ad-a41df1933103} ProfilePath: C:\Users\GEBRUI~1\AppData\Roaming\Mozilla\Firefox\Profiles\2whm5v3b.default - Undetermined - C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\2whm5v3b.default\extensions\faststartff@gmail.com - Undetermined - %ProfilePath%\extensions\13g9k22o@B.edu AppDir: C:\Program Files (x86)\Mozilla Firefox - Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\2whm5v3b.default 20AF900395CA5AD66A9134CF032B0435 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll - RealPlayer Video Downloader for HTML5 (32-bit) 18CF51689186AEB9D1D149AEB0E92D03 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL - Microsoft Office 2013 66640A55AEFF3819C94E0A8D40D7E0AD - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll - Shockwave for Director / Shockwave for Director FDF7B2D69F2B7AF5B77124FCCB1DE2FC - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll - RocketLife Secure Plug-In Layer ==== Chromium Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions edaibbiobngpbmeonadpbfafbkimjbdd - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx[21/02/2013 02:59] Logitech SetPoint - Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\edaibbiobngpbmeonadpbfafbkimjbdd ==== Chromium Fix ====================== C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.livelyrics00.live-lyrics.com_0.localstorage deleted successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.livelyrics00.live-lyrics.com_0.localstorage-journal deleted successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage deleted successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage-journal deleted successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_e-services.mobistar.be_0.localstorage deleted successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_e-services.mobistar.be_0.localstorage-journal deleted successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_searches.omiga-plus.com_0.localstorage deleted successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_searches.omiga-plus.com_0.localstorage-journal deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com/" "Default_Page_URL"="http://www.google.com" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://www.google.com" "Default_Page_URL"="http://www.google.com" "Start Page"="http://www.google.com" "Search Page"="http://www.google.com" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://www.google.com" "Default_Page_URL"="http://www.google.com" "Start Page"="http://www.google.com" "Search Page"="http://www.google.com" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="http://www.google.com/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=CMDTDFJS" ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77GRMQ1O will be deleted at reboot C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GCFVBYVE will be deleted at reboot C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H8HVEFU5 will be deleted at reboot C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V9F7HOAB will be deleted at reboot C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y3XSYB6O will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\Gebruiker\AppData\Local\Mozilla\Firefox\Profiles\2whm5v3b.default\Cache emptied successfully C:\Users\Gebruiker\AppData\Local\Mozilla\Firefox\Profiles\2whm5v3b.default\cache2 emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=34 folders=10 20825596 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Gebruiker\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\GEBRUI~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77GRMQ1O" not found "C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GCFVBYVE" not found "C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H8HVEFU5" not found "C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V9F7HOAB" not found "C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y3XSYB6O" not found ==== EOF on vr 28/11/2014 at 18:32:48,00 ======================