Zoek.exe v5.0.0.1 Updated 24-December-2015 Tool run by Home on za 26/12/2015 at 17:28:37,55. Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Home\Downloads\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== System Restore Info ====================== 26/12/2015 17:31:09 Zoek.exe System Restore Point Created Successfully. ==== Empty Folders Check ====================== C:\Program Files\MSXML 4.0 deleted successfully C:\Program Files\Norton AntiVirus deleted successfully C:\Program Files\Norton Security Scan deleted successfully C:\Program Files\Common Files\Autodesk Shared deleted successfully C:\Users\Home\AppData\Roaming\Windows Live Writer deleted successfully C:\Users\Home\AppData\Local\CrashDumps deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-1126028178-1480402673-3683307364-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully HKEY_USERS\S-1-5-21-1126028178-1480402673-3683307364-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully HKEY_CLASSES_ROOT\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E06E2E99-0AA1-11D4-ABA6-0060082AA75C} deleted successfully HKEY_CLASSES_ROOT\CLSID\{E06E2E99-0AA1-11D4-ABA6-0060082AA75C} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} deleted successfully ==== Deleting Services ====================== ==== FireFox Fix ====================== ProfilePath: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\7k9467zg.default user.js not found ---- Lines {ACAA314B-EEBA-48e4-AD47-84E31C44796C} removed from prefs.js ---- user_pref("extensions.xpiState", "{\"app-global\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"d\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\brows ---- FireFox user.js and prefs.js backups ---- prefs_20152612_1746_.backup ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "NWEReboot"=- "mobilegeni daemon"=- ==== Deleting Files \ Folders ====================== C:\32e3b0576c0d01f7a82921 not found C:\Program Files\Common Files\DVDVideoSoft deleted C:\PROGRA~2\Pure Networks deleted C:\Program Files\NCH Software\Components\NCHToolbars deleted C:\PROGRA~2\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} deleted C:\PROGRA~2\{429CAD59-35B1-4DBC-BB6D-1DB246563521} deleted C:\Windows\system32\drivers\DrvAgent32.sys deleted C:\PROGRA~2\Fighters deleted "C:\Users\Home\daemonprocess.txt" deleted "C:\Program Files\Mobogenie\DaemonProcess.exe" deleted "C:\Program Files\Mobogenie\libeay32.dll" deleted "C:\Program Files\Mobogenie\msvcp100.dll" deleted "C:\Program Files\Mobogenie\msvcr100.dll" deleted "C:\Program Files\Mobogenie\QtCore4.dll" deleted "C:\Program Files\Mobogenie\QtGui4.dll" deleted "C:\Program Files\Mobogenie\QtNetwork4.dll" deleted "C:\Program Files\Mobogenie\QtSql4.dll" deleted "C:\Program Files\Mobogenie\QtWebKit4.dll" deleted "C:\Program Files\Mobogenie\ssleay32.dll" deleted "C:\Program Files\Mobogenie\DaemonProcess.exe" deleted "C:\Program Files\Mobogenie\libeay32.dll" deleted "C:\Program Files\Mobogenie\msvcp100.dll" deleted "C:\Program Files\Mobogenie\msvcr100.dll" deleted "C:\Program Files\Mobogenie\QtCore4.dll" deleted "C:\Program Files\Mobogenie\QtGui4.dll" deleted "C:\Program Files\Mobogenie\QtNetwork4.dll" deleted "C:\Program Files\Mobogenie\QtSql4.dll" deleted "C:\Program Files\Mobogenie\QtWebKit4.dll" deleted "C:\Program Files\Mobogenie\ssleay32.dll" deleted "C:\Program Files\Mobogenie" deleted "C:\Program Files\Mobogenie" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Home\AppData\Local\Temp ==== 2015-12-20 16:18:11 4BC64BFB93B8BFB9E4D3B02D20862B7D 42598400 ----a-w- C:\Users\Home\AppData\Local\Temp\Skype.msi 2015-12-20 11:07:04 45AB10ACEB68BD32D107CDC1BC615A01 313856 ----a-w- C:\Users\Home\AppData\Local\Temp\{7DAB28D6-F24B-4B1A-A95B-49748578FD27}\{C3C44248-B8F7-4B20-A5C7-994870B60F55}\difxapi.dll 2015-12-20 10:57:23 BA2E864CDC01731A4F144019FB3BF598 3552384 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\x64\snp2uvc.sys 2015-12-20 10:57:23 AF11DC325E050AF98F016313BDFEDFCF 361472 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\x64\vsnpvc64.dll 2015-12-20 10:57:23 1D0639EAF910AD2C3F0DADC4C4B5CCB0 35840 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\x64\sncduvc.sys 2015-12-20 10:57:22 FBB2490C4362FEFDEC1C2E95DFE0F7F8 291328 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\vsnp2uvc.dll 2015-12-20 10:57:22 A70F178299812DCE4CC0E802D403BE9B 3482112 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\snp2uvc.sys 2015-12-20 10:57:22 6A0A2BACE01320DBCEB098B98BEB490A 179712 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\x64\rsnpvc64.dll 2015-12-20 10:57:22 345364877EE171A20DA4F49D5272F005 301056 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\x64\csnp2uvc.dll 2015-12-20 10:57:21 5F4B71F2AA7576CE0FBD4821CFED748B 27264 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\sncduvc.sys 2015-12-20 10:57:21 447CF5E4831C9E1E5D31C05DB349779D 172032 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\snp2TUI.dll 2015-12-20 10:57:20 670B6AD5CC3FEBF77A5D0B99ED72A0B1 184320 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\rsnp2uvc.dll 2015-12-20 10:57:20 315BA42EC33FFDE8E5B3596B10E12337 176128 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\csnp2uvc.dll 2015-12-20 10:57:19 EDE3641B3AB8F337DD3DD0335C6DAC7E 166912 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\x64\rsnpx64.dll 2015-12-20 10:57:19 56B69DE178E12F4C2A25AC18E1D0BFB0 10684672 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\x64\snpstd3.sys 2015-12-20 10:57:19 4B7423FCC37664954460AC3E71752B62 111104 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\x64\hxctlflt.sys 2015-12-20 10:57:18 4B7423FCC37664954460AC3E71752B62 111104 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\x64\hxctlflt.sys 2015-12-20 10:57:16 E1FF8FB1A0779A12E91BBB82BD4E4211 18944 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\x64\csnpstd3.dll 2015-12-20 10:57:16 CA12F14A8693A495BCF752C671794239 57344 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\x64\vsnpx64.dll 2015-12-20 10:57:16 CA12F14A8693A495BCF752C671794239 57344 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\vsnpstd3.dll 2015-12-20 10:57:15 707AD08B28AAE25F05C3DADBB1F82EF0 57344 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\TwainUI.dll 2015-12-20 10:57:14 9CD6FFC9F5B999EB5DF69B9177D9848F 10371072 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\snpstd3.sys 2015-12-20 10:57:13 F4D40E1893230F62D184B5030A4C4E4E 53248 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\csnpstd3.dll 2015-12-20 10:57:13 F02EA43AE8F936124DEBF5B87F12C795 99968 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\hxctlflt.sys 2015-12-20 10:57:13 F02EA43AE8F936124DEBF5B87F12C795 99968 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\hxctlflt.sys 2015-12-20 10:57:13 C754C53F1292A30CE300EBA85EEBEBB8 172032 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\rsnpstd3.dll 2015-12-20 10:56:43 45AB10ACEB68BD32D107CDC1BC615A01 313856 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\difxapi.dll 2015-12-20 10:45:04 A205551E7BA8580D2C0FF896A4D79FA9 460248 ----a-w- C:\Users\Home\AppData\Local\Temp\_is3C54.exe 2015-12-16 10:21:56 1169BF06B5B2DFF741225631FB6009A9 10179344 ----a-w- C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\mpam-8e731c42.exe ====== Java Cache ===== ====== C:\Windows\system32 ===== 2015-12-20 12:39:53 73FC196781672E3688741667799B6CC7 758784 ----a-w- C:\Windows\System32\cohelper.dll 2015-12-20 12:27:09 A73778CBA44AC882F4483A1BAC05991B 62272 ----a-w- C:\Windows\System32\nvshext.dll 2015-12-20 12:27:08 9D7033C20C209EF90C8DF24FFBA854EF 645440 ----a-w- C:\Windows\System32\nvvsvc.exe 2015-12-20 12:27:08 0513C691BFB5B675F9F0616869030568 2561344 ----a-w- C:\Windows\System32\nvsvcr.dll 2015-12-20 12:24:44 0AA15FF9F948C8685116C1B657A0B5A9 61248 ----a-w- C:\Windows\System32\OpenCL.dll 2015-12-20 12:21:23 AEBCEA8A46A42FCFE4EA92186745EE69 89960 ----a-w- C:\Windows\System32\SQSRVRES.DLL 2015-12-20 12:21:23 45676E87AD75D5E4B63C4D975E1184A7 73064 ----a-w- C:\Windows\System32\perf-MSSQL$MSSMLBIZ-sqlctr10.3.5500.0.dll 2015-12-20 10:57:12 2E46AFB3D8D43D9E0B807BF96ECCFD41 374056 ----a-w- C:\Windows\System32\HWLMSET2.exe 2015-12-20 10:57:12 29A3555278C01A43E88EA9433B35E5F6 15144 ----a-w- C:\Windows\System32\HWLMSET2PS.dll 2015-12-16 10:04:10 EF615B351E8EFA1416F7331CA0E14F6F 160768 ----a-w- C:\Windows\System32\d3d10_1.dll 2015-12-16 10:04:10 D10CBDF37CA457D34A3FF1D9FE83E3D1 486400 ----a-w- C:\Windows\System32\d3d10level9.dll 2015-12-16 10:04:09 F48AB8E79BB571BF8B6C4361673850B0 219648 ----a-w- C:\Windows\System32\d3d10_1core.dll 2015-12-16 10:04:09 B501DAA15E6BD35EAF8CDBC9B2711CD4 1029120 ----a-w- C:\Windows\System32\d3d10.dll 2015-12-16 10:04:09 A27CFFE4A1E007101E58FC48E57059B0 682496 ----a-w- C:\Windows\System32\d2d1.dll 2015-12-16 10:04:09 98FD032A1F825B27B8C6218C7415C203 1172480 ----a-w- C:\Windows\System32\d3d10warp.dll 2015-12-16 10:04:09 57F17A2F4DF193C85FDD2EFC25A2A862 189952 ----a-w- C:\Windows\System32\d3d10core.dll 2015-12-16 10:04:09 52C062F4CE889FCC6C445CFF47286FF3 627712 ----a-w- C:\Windows\System32\user32.dll 2015-12-16 10:04:07 F6DD4E24E44118D193762783AB9BFE56 2068480 ----a-w- C:\Windows\System32\win32k.sys 2015-12-16 10:04:07 F52CD4A817695842FC48F9B0AA8026AD 1073152 ----a-w- C:\Windows\System32\DWrite.dll 2015-12-16 10:04:07 61AC5BF24A155C95F865290F046F91EF 802304 ----a-w- C:\Windows\System32\FntCache.dll 2015-12-16 10:01:35 B2E0D2445FC1AE2354E24649A32CC3BF 179200 ----a-w- C:\Windows\System32\els.dll 2015-12-16 09:56:54 9434EC91F59296D8494315FE0EEDBFD9 2048 ----a-w- C:\Windows\System32\tzres.dll 2015-12-16 09:54:47 85ADE8C84AA95E748E538FF4D0F51510 1208832 ----a-w- C:\Windows\System32\comsvcs.dll 2015-12-16 09:54:46 13FA70BF8FC950DD42E21E62305AB22C 488448 ----a-w- C:\Windows\System32\catsrvut.dll ====== C:\Windows\system32\drivers ===== 2015-12-20 12:39:53 E36BD2E405B82C8CCD1CA7E857154A04 11164 ----a-w- C:\Windows\System32\drivers\nvphy.bin 2015-12-16 09:54:26 4DD5EF4DBBFAA5EE1880EA996C015D79 113664 ----a-w- C:\Windows\System32\drivers\rmcast.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2015-12-26 13:51:42 -------- d-----w- C:\Program Files\trend micro 2015-12-20 16:18:45 -------- d-----w- C:\Program Files\Common Files\Skype 2015-12-20 16:18:43 -------- d-----r- C:\Program Files\Skype 2015-12-20 12:39:07 -------- d-----w- C:\Program Files\Microsoft Silverlight 2015-12-20 12:23:59 -------- d-----w- C:\Program Files\NVIDIA Corporation 2015-12-20 10:57:12 -------- d-----w- C:\Program Files\Hercules ======= C: ===== ====== C:\Users\Home\AppData\Roaming ====== 2015-12-20 16:19:04 -------- d-----w- C:\Users\Home\AppData\Roaming\Skype 2015-12-20 12:28:25 -------- d-s---w- C:\Users\UpdatusUser\AppData\Roaming\Microsoft 2015-12-20 12:28:25 -------- d-----w- C:\Users\UpdatusUser\AppData\Roaming\Media Center Programs 2015-12-20 12:28:25 -------- d-----w- C:\Users\UpdatusUser\AppData\Local\Temp 2015-12-20 12:28:25 -------- d-----w- C:\Users\UpdatusUser\AppData\Local\Microsoft Help 2015-12-20 12:28:25 -------- d-----w- C:\Users\UpdatusUser\AppData\Local\Microsoft 2015-12-20 12:28:25 -------- d-----r- C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-12-20 12:28:25 -------- d-----r- C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-12-20 10:56:38 -------- d-----w- C:\Users\Home\AppData\Roaming\InstallShield 2015-12-11 10:52:32 -------- d-----w- C:\Users\Home\AppData\Roaming\NCH Software ====== C:\Users\Home ====== 2015-12-26 13:50:41 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\Users\Home\Downloads\RSIT.exe 2015-12-20 16:18:46 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-12-20 16:18:35 -------- d-----w- C:\ProgramData\Skype 2015-12-20 16:17:08 0F6EBF83963E670C8B43CC8D95644BFE 1503872 ----a-w- C:\Users\Home\Downloads\SkypeSetup.exe 2015-12-20 12:39:41 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-12-20 12:28:30 -------- d-----w- C:\Users\UpdatusUser\Searches 2015-12-20 12:28:30 -------- d-----w- C:\Users\UpdatusUser\Contacts 2015-12-20 12:28:29 6FC234AD3752E1267B34FB12BCD6718B 20 --sh--w- C:\Users\UpdatusUser\ntuser.ini 2015-12-20 12:28:25 -------- d--h--w- C:\Users\UpdatusUser\AppData 2015-12-20 12:28:25 -------- d-----w- C:\Users\UpdatusUser\Saved Games 2015-12-20 12:28:25 -------- d-----r- C:\Users\UpdatusUser\Videos 2015-12-20 12:28:25 -------- d-----r- C:\Users\UpdatusUser\Pictures 2015-12-20 12:28:25 -------- d-----r- C:\Users\UpdatusUser\Music 2015-12-20 12:28:25 -------- d-----r- C:\Users\UpdatusUser\Links 2015-12-20 12:28:25 -------- d-----r- C:\Users\UpdatusUser\Favorites 2015-12-20 12:28:25 -------- d-----r- C:\Users\UpdatusUser\Downloads 2015-12-20 12:28:25 -------- d-----r- C:\Users\UpdatusUser\Documents 2015-12-20 12:28:25 -------- d-----r- C:\Users\UpdatusUser\Desktop 2015-12-20 12:24:06 -------- d-----w- C:\ProgramData\NVIDIA Corporation 2015-12-20 11:09:59 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hercules downloads ====== C: exe-files == 2015-12-26 14:05:20 FC5D475D2F6E1A4BA7D9E546B9B6AF71 82968 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB3045305\GDR\x86\setup\1033\pfiles\sqlservr\100\setup\release\x86\setuparp.exe 2015-12-26 14:05:20 C00B30CF2C4B13E8B6E35264C9573040 73376 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB3045305\GDR\x86\setup\1033\pfiles\sqlservr\100\setup\release\x86\setup100.exe 2015-12-26 14:05:19 5E964B1AA16F8E7EBF6F5F8076F14233 437920 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB3045305\GDR\x86\setup\1033\pfiles\sqlservr\100\setup\release\x86\qphmbavs.exe 2015-12-26 14:05:18 49CD68E8ABF40DD037F094B9C5A20906 51048 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB3045305\GDR\x86\setup\1033\pfiles\sqlservr\100\setup\release\x86\oax0i8iu.exe 2015-12-26 14:05:13 F1E94CCCD90389F3613F6DDC32CA57F7 46952 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB3045305\GDR\x86\setup\1033\pfiles\sqlservr\100\setup\release\x86\b0k-cfdu.exe 2015-12-26 14:05:12 694418005D57D5B5533B527C372D36CF 46952 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB3045305\GDR\x86\setup\1033\pfiles\sqlservr\100\setup\release\x86\7bfmduuq.exe 2015-12-26 14:05:09 626EEFC690C4C842D8EC9B9250293143 116384 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB3045305\GDR\x86\setup\1033\pfiles\sqlservr\100\setup\release\setup.exe 2015-12-26 14:04:22 C00B30CF2C4B13E8B6E35264C9573040 73376 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB3045305\GDR\x86\setup100.exe 2015-12-26 14:04:15 F1E94CCCD90389F3613F6DDC32CA57F7 46952 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB3045305\GDR\x86\fixsqlregistrykey_x64.exe 2015-12-26 14:04:15 694418005D57D5B5533B527C372D36CF 46952 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB3045305\GDR\x86\fixsqlregistrykey_ia64.exe 2015-12-26 14:04:15 626EEFC690C4C842D8EC9B9250293143 116384 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB3045305\GDR\setup.exe 2015-12-26 14:04:15 5E964B1AA16F8E7EBF6F5F8076F14233 437920 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB3045305\GDR\x86\landingpage.exe 2015-12-26 14:04:15 49CD68E8ABF40DD037F094B9C5A20906 51048 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB3045305\GDR\x86\fixsqlregistrykey_x86.exe 2015-12-26 13:51:44 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Home.exe 2015-12-26 13:50:41 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\Users\Home\Downloads\RSIT.exe 2015-12-20 16:17:08 0F6EBF83963E670C8B43CC8D95644BFE 1503872 ----a-w- C:\Users\Home\Downloads\SkypeSetup.exe 2015-12-20 12:56:11 ACD1A6C8C00A21B659BE277CA9E11D6C 414000 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\CoreTemp.{1EBFBDD7-1DAF-406D-85C9-E98A7709DA4C}\setup.exe 2015-12-20 12:39:53 FC76E2C9EB9A6D808DE0E5DE0D797E1A 604776 ----a-w- C:\Program Files\NVIDIA Corporation\Uninstall\nvuninst.exe 2015-12-20 12:28:33 116255CB2B94EC22EC5F0B7B513A9A1F 190272 ----a-w- C:\ProgramData\NVIDIA\Updatus\WLMerger.exe 2015-12-20 12:28:20 96A196F8D9900B91227BDACADA2EE48F 2458944 ----a-w- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe 2015-12-20 12:28:20 2E302D1E42C971E1CE3FD20D0DC46E6E 1022784 ----a-w- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe 2015-12-20 12:28:20 116255CB2B94EC22EC5F0B7B513A9A1F 190272 ----a-w- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\WLMerger.exe 2015-12-20 12:27:08 9D7033C20C209EF90C8DF24FFBA854EF 645440 ----a-w- C:\Windows\System32\nvvsvc.exe 2015-12-20 12:27:06 9015FB0779A887A87BF28C7AC3EA370F 1820480 ----a-w- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe 2015-12-20 12:27:06 23941312A4BC3CC70F87CFF068699A56 49472 ----a-w- C:\Program Files\NVIDIA Corporation\Display\nvsmartmaxapp.exe 2015-12-20 12:27:05 F765AEEBBC2C5CF124F5E71604B02FB0 857408 ----a-w- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe 2015-12-20 12:26:56 142F074DF37676A991EBD6A6F41A1025 5913920 ----a-w- C:\Program Files\NVIDIA Corporation\Control Panel Client\nvcplui.exe 2015-12-20 12:25:48 61C2761E67E7DB96F83F4064E72F2D45 363840 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\Display.ControlPanel.0\Setup.exe 2015-12-20 12:25:47 F765AEEBBC2C5CF124F5E71604B02FB0 857408 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\Display.ControlPanel.0\nvxdsync.exe 2015-12-20 12:25:37 9D7033C20C209EF90C8DF24FFBA854EF 645440 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\Display.ControlPanel.0\nvvsvc.exe 2015-12-20 12:25:37 9015FB0779A887A87BF28C7AC3EA370F 1820480 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\Display.ControlPanel.0\NVTray.exe 2015-12-20 12:25:36 23941312A4BC3CC70F87CFF068699A56 49472 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\Display.ControlPanel.0\nvSmartMaxapp.exe 2015-12-20 12:25:36 142F074DF37676A991EBD6A6F41A1025 5913920 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\Display.ControlPanel.0\nvcplui.exe 2015-12-20 12:25:34 61C2761E67E7DB96F83F4064E72F2D45 363840 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\installer.1\Setup.exe 2015-12-20 12:24:31 96A196F8D9900B91227BDACADA2EE48F 2458944 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\NVIDIA.Update.0\daemonu.exe 2015-12-20 12:24:31 2E302D1E42C971E1CE3FD20D0DC46E6E 1022784 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\NVIDIA.Update.0\ComUpdatus.exe 2015-12-20 12:24:31 116255CB2B94EC22EC5F0B7B513A9A1F 190272 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\NVIDIA.Update.0\WLMerger.exe 2015-12-20 12:24:23 63B2627E413C31C2DB5FB7B3CDE59B8A 192832 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\Display.Driver.0\dbInstaller.exe 2015-12-20 12:24:20 2D5DFFF1DCAC1A0EBD0EB67427CC04DA 69075032 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\Display.Driver.0\NVCPLSetupInt.exe 2015-12-20 12:24:17 121B7016AC12E9EF048AB19917FC2B14 363840 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\installer.0\setup.exe 2015-12-20 12:16:46 FC5D475D2F6E1A4BA7D9E546B9B6AF71 82968 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB2546951\ServicePack\x86\setup\1033\pfiles\sqlservr\100\setup\release\x86\setuparp.exe 2015-12-20 12:16:46 0057CC444261EC608B32D626D4CC5A3F 63336 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB2546951\ServicePack\x86\setup\1033\pfiles\sqlservr\100\setup\release\x86\setup100.exe 2015-12-20 12:16:45 EF3A0FCD010A24D6356F6AC9DDAA013C 423784 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB2546951\ServicePack\x86\setup\1033\pfiles\sqlservr\100\setup\release\x86\qphmbavs.exe 2015-12-20 12:16:44 49CD68E8ABF40DD037F094B9C5A20906 51048 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB2546951\ServicePack\x86\setup\1033\pfiles\sqlservr\100\setup\release\x86\oax0i8iu.exe 2015-12-20 12:16:39 F1E94CCCD90389F3613F6DDC32CA57F7 46952 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB2546951\ServicePack\x86\setup\1033\pfiles\sqlservr\100\setup\release\x86\b0k-cfdu.exe 2015-12-20 12:16:38 694418005D57D5B5533B527C372D36CF 46952 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB2546951\ServicePack\x86\setup\1033\pfiles\sqlservr\100\setup\release\x86\7bfmduuq.exe 2015-12-20 12:16:36 596DA4B8942D5C82EC26DC9DD4BBE720 106344 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB2546951\ServicePack\x86\setup\1033\pfiles\sqlservr\100\setup\release\setup.exe 2015-12-20 12:16:06 0057CC444261EC608B32D626D4CC5A3F 63336 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB2546951\ServicePack\x86\setup100.exe 2015-12-20 12:16:05 EF3A0FCD010A24D6356F6AC9DDAA013C 423784 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB2546951\ServicePack\x86\landingpage.exe 2015-12-20 12:16:05 49CD68E8ABF40DD037F094B9C5A20906 51048 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB2546951\ServicePack\x86\fixsqlregistrykey_x86.exe 2015-12-20 12:16:04 F1E94CCCD90389F3613F6DDC32CA57F7 46952 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB2546951\ServicePack\x86\fixsqlregistrykey_x64.exe 2015-12-20 12:16:04 694418005D57D5B5533B527C372D36CF 46952 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB2546951\ServicePack\x86\fixsqlregistrykey_ia64.exe 2015-12-20 12:16:04 596DA4B8942D5C82EC26DC9DD4BBE720 106344 ----a-w- C:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB2546951\ServicePack\setup.exe 2015-12-20 11:09:41 69F474563782B9533D91DAD5D7DC1726 13096 ----a-w- C:\Users\Home\Desktop\Herculus Downloads\Webcam Station Evolution SE\hdrvupd.exe 2015-12-20 11:09:39 E44812DDA97A01421DE39CBB5423E6DE 5642096 ----a-w- C:\Users\Home\Desktop\Herculus Downloads\Webcam Station Evolution SE\StationEvSE.exe 2015-12-20 11:09:38 B3D635897AE26B090E156B4397FF1BCE 36864 ----a-w- C:\Users\Home\Desktop\Herculus Downloads\Webcam Station Evolution SE\SendTo.exe 2015-12-20 11:09:37 79A0CC2D332F1019D626F7DA42060AC7 8799232 ----a-w- C:\Users\Home\Desktop\Herculus Downloads\Webcam Station Evolution SE\ffmpeg.exe 2015-12-20 11:09:36 A205551E7BA8580D2C0FF896A4D79FA9 460248 ----a-w- C:\Program Files\InstallShield Installation Information\{C3C44248-B8F7-4B20-A5C7-994870B60F55}\setup.exe 2015-12-20 10:57:12 2E46AFB3D8D43D9E0B807BF96ECCFD41 374056 ----a-w- C:\Windows\System32\HWLMSET2.exe 2015-12-20 10:57:11 A205551E7BA8580D2C0FF896A4D79FA9 460248 ----a-w- C:\Program Files\InstallShield Installation Information\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\setup.exe 2015-12-20 10:45:04 A205551E7BA8580D2C0FF896A4D79FA9 460248 ----a-w- C:\Users\Home\AppData\Local\Temp\_is3C54.exe === C: other files == 2015-12-20 12:56:11 3C15A609E2DA557764E6878D8681C63C 15664 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\CoreTemp.{1EBFBDD7-1DAF-406D-85C9-E98A7709DA4C}\NVI2SystemService64.sys 2015-12-20 12:56:11 2BF9E110033DF33FE5B6A6DE18259DF8 13488 ----a-w- C:\Program Files\NVIDIA Corporation\Installer2\CoreTemp.{1EBFBDD7-1DAF-406D-85C9-E98A7709DA4C}\NVI2SystemService32.sys 2015-12-20 10:57:23 BA2E864CDC01731A4F144019FB3BF598 3552384 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\x64\snp2uvc.sys 2015-12-20 10:57:23 1D0639EAF910AD2C3F0DADC4C4B5CCB0 35840 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\x64\sncduvc.sys 2015-12-20 10:57:22 A70F178299812DCE4CC0E802D403BE9B 3482112 ----a-w- C:\Windows\System32\DriverStore\FileRepository\hcamuvc.inf_0cd7c911\snp2uvc.sys 2015-12-20 10:57:22 A70F178299812DCE4CC0E802D403BE9B 3482112 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\snp2uvc.sys 2015-12-20 10:57:21 5F4B71F2AA7576CE0FBD4821CFED748B 27264 ----a-w- C:\Windows\System32\DriverStore\FileRepository\hcamuvc.inf_0cd7c911\sncduvc.sys 2015-12-20 10:57:21 5F4B71F2AA7576CE0FBD4821CFED748B 27264 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\sncduvc.sys 2015-12-20 10:57:19 56B69DE178E12F4C2A25AC18E1D0BFB0 10684672 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\x64\snpstd3.sys 2015-12-20 10:57:19 4B7423FCC37664954460AC3E71752B62 111104 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\x64\hxctlflt.sys 2015-12-20 10:57:18 4B7423FCC37664954460AC3E71752B62 111104 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\x64\hxctlflt.sys 2015-12-20 10:57:14 9CD6FFC9F5B999EB5DF69B9177D9848F 10371072 ----a-w- C:\Windows\System32\DriverStore\FileRepository\hcsilver.inf_31bd4d0c\snpstd3.sys 2015-12-20 10:57:14 9CD6FFC9F5B999EB5DF69B9177D9848F 10371072 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\snpstd3.sys 2015-12-20 10:57:13 F02EA43AE8F936124DEBF5B87F12C795 99968 ----a-w- C:\Windows\System32\DriverStore\FileRepository\hcsilver.inf_31bd4d0c\hxctlflt.sys 2015-12-20 10:57:13 F02EA43AE8F936124DEBF5B87F12C795 99968 ----a-w- C:\Windows\System32\DriverStore\FileRepository\hcamuvc.inf_0cd7c911\hxctlflt.sys 2015-12-20 10:57:13 F02EA43AE8F936124DEBF5B87F12C795 99968 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video1\hxctlflt.sys 2015-12-20 10:57:13 F02EA43AE8F936124DEBF5B87F12C795 99968 ----a-w- C:\Users\Home\AppData\Local\Temp\{A0886D9A-D79C-4595-B905-389099624F77}\{8678BD65-D66E-48BB-8531-91D0EF8998A1}\drivers\video\hxctlflt.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_USERS\S-1-5-21-1126028178-1480402673-3683307364-1005\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner.exe /MONITOR" "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun" [HKEY_USERS\S-1-5-21-1126028178-1480402673-3683307364-1006\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "hpsysdrv"="c:\hp\support\hpsysdrv.exe" "KBD"="C:\HP\KBD\KbdStub.EXE" "OsdMaestro"="C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" "RtHDVCpl"="RtHDVCpl.exe" "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe -atboottime" "APSDaemon"="C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "BCSSync"="C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices" "MSC"="c:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey" "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" "Windows Defender"="%ProgramFiles%\Windows Defender\MSASCui.exe -hide" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner.exe /MONITOR" "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun" ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ [Undetermined Task] C:\Windows\tasks\ReclaimerUpdateFiles_Gebruiker.job --a------ [Undetermined Task] C:\Windows\tasks\ReclaimerUpdateXML_Gebruiker.job --a------ [Undetermined Task] ==== Other Scheduled Tasks ====================== "C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\system32\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\system32\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\system32\tasks\DriverWhiz_DailyScan" [C:\Program Files\DriverWhiz\DriverWhiz.exe] "C:\Windows\system32\tasks\DriverWhiz_ScheduledScan" [C:\Program Files\DriverWhiz\DriverWhiz.exe] "C:\Windows\system32\tasks\ReclaimerUpdateFiles_Gebruiker" [C:\Users\Gebruiker\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.30\agent\rnupgagent.exe] "C:\Windows\system32\tasks\ReclaimerUpdateXML_Gebruiker" [C:\Users\Gebruiker\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.30\agent\rnupgagent.exe] "C:\Windows\system32\tasks\User_Feed_Synchronization-{BFDBF359-5210-483F-A632-B05BCF4A496B}" [C:\Windows\system32\msfeedssync.exe] "C:\Windows\system32\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files\Apple Software Update\SoftwareUpdate.exe] "C:\Windows\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "{20a82645-c095-46ed-80e3-08825760534b}"="c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension" [01/09/2009 19:39] ==== Firefox Extensions ====================== AppDir: C:\Program Files\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\7k9467zg.default 4309AB4CA623C7D1C8E35F8050F1EB8F - C:\Program Files\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 6.5.1 D77772C1F032BFECE4C67A20A9281FD9 - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 6.5.1 FB76465D6DC853CC3FEA8C7DFDEAD221 - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 6.5.1 CB58D3E54AD243BF2B4583C6BF7C1BE0 - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 6.5.1 8F5DA8D6227DD1CE0879969C757B19F4 - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 6.5.1 FFBEFFCB8A811961BD7BA2350789F979 - C:\Program Files\QuickTime\Plugins\npqtplugin6.dll - QuickTime Plug-in 6.5.1 A9780238A8131ADD499602F513D072CD - C:\Program Files\QuickTime\Plugins\npqtplugin7.dll - QuickTime Plug-in 6.5.1 667CB7D2CAF917608421E5250462C0AA - C:\Program Files\Adobe\Reader 9.0\Reader\browser\nppdf32.dll - Adobe Acrobat 667CB7D2CAF917608421E5250462C0AA - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll - Adobe Acrobat F9AD6B49D9112CEF665762783C96EAC0 - C:\Program Files\Sony\Media Go\npmediago.dll - Media Go Detector 30257426F6DA31808C6698EC01DE2D97 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll - RealPlayer Version Plugin 94DFB62F51D7BCB03F80F9D33BB7F54F - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll - RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) 985EFF8B21F8F825AA156B2BD268F2B9 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll - RealJukebox NS Plugin AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation C45A130CA14334073C0FF795897A1D22 - c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll - Silverlight Plug-In 46A59E6F7F7C1679AC7C4655E055326D - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll - iTunes Application Detector F92FC494F7E9760802180B5493DD4F90 - C:\Windows\system32\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director 5DF56521E8985BFD8F21A3D97A4D4574 - C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_235.dll - Shockwave Flash D2B5242013356AF422A42B9FAA4056C2 - C:\Users\Home\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.2\npVascoCardReaderPlugin.dll - VASCO Card Reader Plugin B24F014C6DDA5A39CE7FCB2A8B862C5A - c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrlui.dll - Microsoft® Silverlight ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="https://www.google.be/" "Default_Page_URL"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_BE&c=73&bd=Pavilion&pf=desktop" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_BE&c=73&bd=Pavilion&pf=desktop" "Default_Page_URL"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_BE&c=73&bd=Pavilion&pf=desktop" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}] not found New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="https://www.google.be/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}" ==== All HKLM and HKCU SearchScopes ====================== HKLM\SearchScopes "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC HKLM\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} - http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 HKLM\SearchScopes\{6B3CBFAA-449A-4CF7-A617-0C78FBC4BD5A} - http://nl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06 HKCU\SearchScopes "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}" HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms} HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie deleted successfully ==== Empty IE Cache ====================== C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Home\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Home\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Home\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\Home\AppData\Local\Mozilla\Firefox\Profiles\7k9467zg.default\cache2 emptied successfully ==== Empty Chrome Cache ====================== No Chrome User Data found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=1415 folders=156 245549281 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Home\AppData\Local\Temp will be emptied at reboot C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Home\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Home\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found ==== EOF on za 26/12/2015 at 17:55:18,92 ======================