Zoek.exe v5.0.0.0 Updated 01-March-2015 Tool run by dieterzLs on zo 01/03/2015 at 22:59:16,23. Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\dieterzLs\Downloads\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 1/03/2015 23:05:37 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~2\MSXML 4.0 deleted successfully C:\PROGRA~2\PokerStars.BE deleted successfully C:\PROGRA~3\SpeedBit deleted successfully C:\Users\dieterzLs\AppData\Roaming\Octoshape deleted successfully C:\Users\dieterzLs\AppData\Roaming\redsn0w deleted successfully C:\Users\dieterzLs\AppData\Local\iRinger deleted successfully C:\Users\dieterzLs\AppData\Local\PokerStars.BE deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-280859246-1912162577-2914538768-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== FireFox Fix ====================== ProfilePath: C:\Users\DIETER~1\AppData\Roaming\Mozilla\Firefox\Profiles\r5w8sxm5.default user.js not found ---- Lines offers removed from prefs.js ---- user_pref("smi2bar002_002.leadsCatTimestampCountClickOffers", ""); user_pref("smi2bar002_002.leadsCatTimestampCountOffers", ""); ---- Lines browser.startup.page removed from prefs.js ---- user_pref("browser.startup.page", 3); ---- FireFox user.js and prefs.js backups ---- prefs_20150103_2315_.backup ==== Deleting Files \ Folders ====================== C:\PROGRA~2\MSXML 4.0 not found C:\PROGRA~2\PokerStars.BE not found C:\Users\dieterzLs\.android deleted C:\Users\dieterzLs\AppData\Roaming\appdataFr2.bin deleted C:\Users\dieterzLs\AppData\Roaming\Common deleted C:\PROGRA~3\Avg_Update_0814tb deleted C:\PROGRA~3\addeal deleted C:\Users\dieterzLs\AppData\Local\Wondershare deleted C:\Users\dieterzLs\AppData\Local\cache deleted C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Clip Converter deleted C:\Users\dieterzLs\AppData\LocalLow\AVG Security Toolbar deleted C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job deleted C:\windows\SysNative\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv deleted C:\Windows\SysNative\config\systemprofile\Searches deleted C:\Users\DIETER~1\AppData\Roaming\Mozilla\Firefox\Profiles\r5w8sxm5.default\CT2438727 deleted C:\Users\DIETER~1\AppData\Roaming\Mozilla\Firefox\Profiles\r5w8sxm5.default\CT2535304 deleted C:\Users\DIETER~1\AppData\Roaming\Mozilla\Firefox\Profiles\r5w8sxm5.default\extensions\4jHiNCYq0@Up.org deleted C:\Users\DIETER~1\AppData\Roaming\Mozilla\Firefox\Profiles\r5w8sxm5.default\extensions\Dg@0.edu deleted C:\Users\DIETER~1\AppData\Roaming\Mozilla\Firefox\Profiles\r5w8sxm5.default\extensions\efx@PcgBr.org deleted "C:\Users\dieterzLs\AppData\Roaming\PMS\PMS.conf" deleted "C:\PROGRA~2\COMMON~1\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll" deleted "C:\PROGRA~2\COMMON~1\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll" deleted "C:\PROGRA~2\COMMON~1\Wondershare\Wondershare Helper Compact\DAQExp.dll" deleted "C:\PROGRA~2\COMMON~1\Wondershare\Wondershare Helper Compact\WSHelper.exe" deleted "C:\Users\dieterzLs\AppData\Roaming\PMS" deleted "C:\PROGRA~2\COMMON~1\Wondershare" deleted "C:\PROGRA~2\COMMON~1\Wondershare\Wondershare Helper Compact" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\DIETER~1\AppData\Local\Temp ==== 2015-03-01 22:04:59 3AE7B9815BB34037632A87B8AC372202 98144 ----a-w- C:\Users\dieterzLs\AppData\Local\Temp\OldAvgSetup\tareg.exe 2015-03-01 22:04:59 1C24D830444822E275B6F98078CAF0CB 3591008 ----a-w- C:\Users\dieterzLs\AppData\Local\Temp\OldAvgSetup\setup.exe 2015-03-01 14:57:35 057631047016A448B842B96E872B132B 43008 ----a-w- C:\Users\dieterzLs\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgbndqh.dll ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== 2015-02-26 02:00:58 3B9E2AB1F3ABC53D4A423E699EB625C8 419936 ----a-w- C:\Windows\SysWOW64\locale.nls ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2015-02-26 02:00:58 3B9E2AB1F3ABC53D4A423E699EB625C8 419936 ----a-w- C:\Windows\Sysnative\locale.nls ====== C:\Windows\Sysnative\drivers ===== 2015-02-19 08:13:18 26C43960C99EE861A5D0EDC4DCF3B1C3 129752 ----a-w- C:\Windows\Sysnative\drivers\MBAMSwissArmy.sys 2015-02-19 08:08:11 CA43F8904E24BBE49982E4C0B29E6579 25816 ----a-w- C:\Windows\Sysnative\drivers\mbam.sys 2015-02-19 08:08:11 A646C2DDB8C46E9B20A326FAF566646C 63704 ----a-w- C:\Windows\Sysnative\drivers\mwac.sys 2015-02-19 08:08:11 478CC94C937D235CB0A96AB8F2359D81 93400 ----a-w- C:\Windows\Sysnative\drivers\mbamchameleon.sys 2015-02-11 07:50:00 E45CDE1C8340DFEDF1D6724263F39E5B 458824 ----a-w- C:\Windows\Sysnative\drivers\cng.sys 2015-02-11 07:49:59 C60C6B9A2E50B0404F6789C62B428C03 95680 ----a-w- C:\Windows\Sysnative\drivers\ksecdd.sys 2015-02-11 07:49:59 78D152A9FD5747FF6AA89C79F0346F62 155072 ----a-w- C:\Windows\Sysnative\drivers\ksecpkg.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2015-03-01 16:21:53 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== ======= C: ===== ====== C:\Users\dieterzLs\AppData\Roaming ====== 2015-03-01 22:04:46 -------- d-----w- C:\Windows\SysNative\config\systemprofile\AppData\Local\Avg2015 2015-03-01 22:01:06 -------- d-----w- C:\Users\dieterzLs\AppData\Local\Avg2015 2015-02-19 14:49:05 -------- d-----w- C:\Users\dieterzLs\AppData\Local\Steam 2015-02-19 07:56:07 -------- d-----w- C:\Users\dieterzLs\AppData\Locallow\Temp ====== C:\Users\dieterzLs ====== 2015-03-01 16:20:26 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\dieterzLs\Downloads\RSITx64.exe 2015-03-01 15:36:04 722821DE247038BB934D9B2AC3812D98 23315064 ----a-w- C:\Users\dieterzLs\Downloads\Popcorn-Time-0.3.7.2-Setup.exe ====== C: exe-files == 2015-03-01 22:04:59 3AE7B9815BB34037632A87B8AC372202 98144 ----a-w- C:\Users\dieterzLs\AppData\Local\Temp\OldAvgSetup\tareg.exe 2015-03-01 22:04:59 1C24D830444822E275B6F98078CAF0CB 3591008 ----a-w- C:\Users\dieterzLs\AppData\Local\Temp\OldAvgSetup\setup.exe 2015-03-01 16:22:00 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\dieterzLs.exe 2015-03-01 16:20:26 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\dieterzLs\Downloads\RSITx64.exe 2015-03-01 15:36:04 722821DE247038BB934D9B2AC3812D98 23315064 ----a-w- C:\Users\dieterzLs\Downloads\Popcorn-Time-0.3.7.2-Setup.exe === C: other files == ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-280859246-1912162577-2914538768-1000\Software\Microsoft\Windows\CurrentVersion\Run] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe" "FlashGet 3"="C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe -minimize" "Facebook Update"="C:\Users\dieterzLs\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" "MobileDocuments"="C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe" "Spotify Web Helper"="C:\Users\dieterzLs\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "ApplePhotoStreams"="C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:http://go.microsoft.com/fwlink/?LinkID=122915 /build:7601" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:http://go.microsoft.com/fwlink/?LinkID=122915 /build:7601" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "GrooveMonitor"="C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" "PlusService"="C:\Program Files (x86)\Yuna Software\Messenger Plus\PlusService.exe" "AppleSyncNotifier"="C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" "APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" "QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime" "Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe" "Wondershare Helper Compact.exe"="C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe" "MFARestart"="C:\ProgramData\MFAData\pack\avgrunasx.exe /usereg" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe" "FlashGet 3"="C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe -minimize" "Facebook Update"="C:\Users\dieterzLs\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" "MobileDocuments"="C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe" "Spotify Web Helper"="C:\Users\dieterzLs\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "ApplePhotoStreams"="C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Windows Mobile-based device management"="%WINDIR%\WindowsMobile\wmdcBase.exe " ==== Startup Folders ====================== 2014-09-10 20:29:19 1159 ----a-w- C:\Users\dieterzLs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [05/02/2015 09:54] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-280859246-1912162577-2914538768-1000Core.job --a------ C:\Users\dieterzLs\AppData\Local\Facebook\Update\FacebookUpdate.exe [12/07/2012 19:46] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-280859246-1912162577-2914538768-1000UA.job --a------ C:\Users\dieterzLs\AppData\Local\Facebook\Update\FacebookUpdate.exe [12/07/2012 19:46] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [01/09/2014 22:51] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [01/09/2014 22:51] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Ad-Aware Update (Weekly)" [C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe] "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-280859246-1912162577-2914538768-1000Core" [C:\Users\dieterzLs\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-280859246-1912162577-2914538768-1000UA" [C:\Users\dieterzLs\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\{206598C1-F9A3-4B59-8333-9D8507CC7E43}" [C:\Program Files (x86)\Skype\\Phone\Skype.exe] "C:\Windows\SysNative\tasks\{36860732-11AA-4EA6-82CD-318E0FED6A45}" ["c:\program files (x86)\mozilla firefox\firefox.exe"] "C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe] ==== Firefox Start and Search pages ====================== ProfilePath: C:\Users\DIETER~1\AppData\Roaming\Mozilla\Firefox\Profiles\r5w8sxm5.default user_pref("browser.startup.homepage", "https://www.facebook.com/"); user_pref("browser.search.selectedEngine", "Search"); user_pref("keyword.URL", "http://www.samenc.com/search/?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&rls=ZFTVfreF&q="); ==== Firefox Extensions ====================== ProfilePath: C:\Users\DIETER~1\AppData\Roaming\Mozilla\Firefox\Profiles\r5w8sxm5.default - flashget3 Extension - C:\Users\dieterzLs\AppData\Roaming\Mozilla\Firefox\Profiles\r5w8sxm5.default\extensions\{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A} - iMacros for Firefox - C:\Users\dieterzLs\AppData\Roaming\Mozilla\Firefox\Profiles\r5w8sxm5.default\extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} - iMacros for Firefox - %ProfilePath%\extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} - flashget3 Extension - %ProfilePath%\extensions\{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A} - Image and Flash Blocker - %ProfilePath%\extensions\imgflashblocker@shimon.chohen.xpi - Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi - Greasemonkey - %ProfilePath%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi - User Agent Switcher - %ProfilePath%\extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi AppDir: C:\Program Files (x86)\Mozilla Firefox - Skype extension - %AppDir%\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\dieterzLs\AppData\Roaming\Mozilla\Firefox\Profiles\r5w8sxm5.default C62322C77D1AAB77B1CF1130FCC3673A - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll - Shockwave Flash 3CD19649B2C3023D65E67C056457A2BC - C:\Users\dieterzLs\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin E38864F36399E120D70828BEF16DEB3A - C:\ProgramData\id Software\QuakeLive\npquakezero.dll - QUAKE LIVE ==== Chromium Look ====================== Google Chrome Version: 38.0.2125.111 (Possible outdated, latest Stable version: 40.0.2214.115) ==== Chromium Fix ====================== C:\Users\dieterzLs\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.stlyrics.com_0.localstorage deleted successfully C:\Users\dieterzLs\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.stlyrics.com_0.localstorage-journal deleted successfully C:\Users\dieterzLs\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markit00.re-markit.co_0.localstorage deleted successfully C:\Users\dieterzLs\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markit00.re-markit.co_0.localstorage-journal deleted successfully C:\Users\dieterzLs\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.re-markit00.re-markit.co_0.localstorage deleted successfully C:\Users\dieterzLs\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.re-markit00.re-markit.co_0.localstorage-journal deleted successfully C:\Users\dieterzLs\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_customers-research.com_0.localstorage deleted successfully C:\Users\dieterzLs\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_customers-research.com_0.localstorage-journal deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {AC854C16-CA1E-43f1-8513-0D2F36C726ED} Google Url="http://www.samenc.com/search/?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t&rls=ZFTVfreF" ==== Reset Google Chrome ====================== C:\Users\dieterzLs\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Users\dieterzLs\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully ==== shortcuts on Users Desktops ====================== C:\Users\dieterzLs\Desktop\App-opstartprogramma van Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --show-app-list C:\Users\dieterzLs\Desktop\BS.Player FREE.lnk - C:\Program Files (x86)\Webteh\BSplayer\bsplayer.exe C:\Users\dieterzLs\Desktop\Computer.lnk - C:\Users\dieterzLs\Desktop\Dropbox.lnk - C:\Users\dieterzLs\AppData\Roaming\Dropbox\bin\Dropbox.exe /home C:\Users\dieterzLs\Desktop\Limewire Downloads - Shortcut.lnk - D:\Downloads\Limewire Downloads C:\Users\dieterzLs\Desktop\Quake 3 Arena.lnk - C:\Program Files (x86)\Activision\Quake 3 + Team Arena\Game\quake3.exe C:\Users\dieterzLs\Desktop\Quake 3 Team Arena.lnk - C:\Program Files (x86)\Activision\Quake 3 + Team Arena\Game\quake3.exe +set fs_game missionpack C:\Users\dieterzLs\Desktop\Soulseek.lnk - C:\Program Files (x86)\Soulseek\slsk.exe C:\Users\dieterzLs\Desktop\Spotify.lnk - C:\Users\dieterzLs\AppData\Roaming\Spotify\spotify.exe C:\Users\dieterzLs\Desktop\Yousendit Downloads - Shortcut.lnk - D:\Downloads\Yousendit Downloads C:\Users\dieterzLs\Desktop\µTorrent.lnk - ==== shortcuts on All Users Desktop ====================== C:\Users\Public\Desktop\Adobe Reader 9.lnk - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe C:\Users\Public\Desktop\DisplayFusion.lnk - C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\Public\Desktop\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Users\Public\Desktop\Nero Home.lnk - C:\Program Files (x86)\Nero\Nero 7\Nero Home\NeroHome.exe -ScParameter=8 C:\Users\Public\Desktop\Nero StartSmart.lnk - C:\Program Files (x86)\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe -ScParameter=8 C:\Users\Public\Desktop\QuickTime Player.lnk - C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe C:\Users\Public\Desktop\SmartFTP Client.lnk - C:\Windows\Installer\{F8A7921E-517F-459D-9591-DE38D1EF61A5}\Icon_SmartFTP.exe C:\Users\Public\Desktop\Steam.lnk - C:\Program Files (x86)\Steam\Steam.exe C:\Users\Public\Desktop\TmNationsForever.lnk - C:\Program Files (x86)\TmNationsForever\TmForeverLauncher.exe C:\Users\Public\Desktop\Unibet.lnk - C:\Microgaming\Poker\unibetpokerMPP\mppoker.exe C:\Users\Public\Desktop\VLC media player.lnk - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe C:\Users\Public\Desktop\Winamp.lnk - C:\Program Files (x86)\Winamp\winamp.exe ==== shortcuts in Users Start Menu ====================== C:\Users\dieterzLs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox.lnk - C:\Users\dieterzLs\AppData\Roaming\Dropbox\bin\Dropbox.exe /home C:\Users\dieterzLs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Uninstall Dropbox.lnk - C:\Users\dieterzLs\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\App-opstartprogramma van Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --show-app-list C:\Users\dieterzLs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk - C:\Users\dieterzLs\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup ==== shortcuts in All Users Start Menu ====================== C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Verwijder Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\chameleon.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk - C:\Program Files (x86)\VideoLAN\VLC\Documentation.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk - C:\Program Files (x86)\VideoLAN\VLC\NEWS.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk - C:\Program Files (x86)\VideoLAN\VLC\VideoLAN Website.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player - reset preferences and cache files.lnk - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe --reset-config --reset-plugins-cache vlc://quit C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe -Iskins C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe ==== shortcuts in Quick Launch ====================== C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BS.Player FREE.lnk - C:\Program Files (x86)\Webteh\BSplayer\bsplayer.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk - C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE /recycle C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero Home.lnk - C:\Program Files (x86)\Nero\Nero 7\Nero Home\NeroHome.exe -ScParameter=8 C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart.lnk - C:\Program Files (x86)\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe -ScParameter=8 C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Unibet.lnk - C:\Microgaming\Poker\unibetpokerMPP\mppoker.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk - C:\Program Files (x86)\Winamp\winamp.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk - C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Calculator.lnk - C:\Windows\system32\calc.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Notepad.lnk - C:\Windows\system32\notepad.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Paint.lnk - C:\Windows\system32\mspaint.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\SmartFTP - Shortcut.lnk - D:\Windows.old\Program Files (x86)\SmartFTP Client\SmartFTP.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Windows Live Messenger .lnk - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\BS.lnk - C:\Program Files (x86)\Webteh\BSplayer\bsplayer.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Office Outlook 2007.lnk - C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Popcorn Time.lnk - C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe --no-proxy-server C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Spotify.lnk - C:\Users\dieterzLs\AppData\Roaming\Spotify\spotify.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Steam.lnk - C:\Program Files (x86)\Steam\Steam.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Winamp.lnk - C:\Program Files (x86)\Winamp\winamp.exe C:\Users\dieterzLs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe ==== Reset IE Proxy ====================== Value(s) before fix: "ProxyEnable"=dword:00000000 Value(s) after fix: "ProxyEnable"=dword:00000000 ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\dieterzLs\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\dieterzLs\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\TEMP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== C:\Users\dieterzLs\AppData\Local\Mozilla\Firefox\Profiles\r5w8sxm5.default\Cache emptied successfully C:\Users\dieterzLs\AppData\Local\Mozilla\Firefox\Profiles\r5w8sxm5.default\cache2 emptied successfully ==== Empty Chrome Cache ====================== C:\Users\dieterzLs\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache is not empty, a reboot is needed ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=281 folders=82 13667891 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\dieterzLs\AppData\Local\Temp will be emptied at reboot C:\Users\TEMP\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\DIETER~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\dieterzLs\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\6XFTTM4Y\admin.brightcove.com" not found ==== EOF on ma 02/03/2015 at 9:25:32,58 ======================