Zoek.exe v5.0.0.1 Updated 31-December-2015 Tool run by Olaf De Wit on wo 07/09/2016 at 10:46:52,36. Microsoft Windows 8.1 6.3.9600 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Olaf De Wit\Downloads\zoek (3).exe [Scan all users] [Script inserted] ==== Older Logs ====================== C:\zoek-results2015-11-23-205402.log 161137 bytes C:\zoek-results2016-08-30-105812.log 86269 bytes ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SlimService deleted successfully ==== FireFox Fix ====================== ProfilePath: C:\Users\OLAFDE~1\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.schijtprofiel user.js not found ---- FireFox user.js and prefs.js backups ---- prefs_20160709_1107_.backup ProfilePath: C:\Users\OLAFDE~1\AppData\Roaming\Mozilla\Firefox\Profiles\iwfxxajf.default user.js not found ---- FireFox user.js and prefs.js backups ---- prefs_20160709_1107_.backup ProfilePath: C:\Users\OLAFDE~1\AppData\Roaming\Mozilla\Firefox\Profiles\m5piylsg.Standaardgebruiker user.js not found ---- FireFox user.js and prefs.js backups ---- prefs_20160709_1107_.backup ProfilePath: C:\Users\OLAFDE~1\AppData\Roaming\Mozilla\Firefox\Profiles\sckioql6.stupid shit user.js not found ---- FireFox user.js and prefs.js backups ---- prefs_20160709_1107_.backup ProfilePath: C:\Users\OLAFDE~1\AppData\Roaming\Mozilla\SeaMonkey\Profiles\0eizuwpg.default user.js not found ---- FireFox user.js and prefs.js backups ---- prefs_20160709_1107_.backup ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\AutorunsDisabled] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\AutorunsDisabled\skypec2c] ==== Registry Fix Code x64 ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\PROTOCOLS\Handler\AutorunsDisabled] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\PROTOCOLS\Handler\AutorunsDisabled\skypec2c] ==== Batch Command(s) Run By Tool====================== Sucessfully reset the Winsock Catalog. You must restart the computer in order to complete the reset. ==== Deleting Files \ Folders ====================== C:\0b9d3572-f2eb-48be-a1b4-33762813992e.exe deleted C:\PROGRA~3\SlimWare Utilities Inc deleted C:\PROGRA~3\ReviverSoft deleted C:\PROGRA~3\Package Cache deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ReviverSoft deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimCleaner Plus deleted C:\WINDOWS\Tasks\Start Driver Reviver for OlafDeWit@Olaf De Wit(logon).job deleted C:\windows\SysNative\Tasks\Start Driver Reviver for OlafDeWit@Olaf De Wit(logon) deleted C:\windows\SysNative\Tasks\Start Driver Reviver Schedule deleted C:\windows\SysNative\Tasks\Start Driver Reviver Update deleted C:\windows\SysNative\tasks\SlimCleaner Plus (Scheduled Scan - Olaf De Wit) deleted C:\WINDOWS\tasks\SlimCleaner Plus (Scheduled Scan - Olaf De Wit).job deleted C:\Users\OLAFDE~1\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.schijtprofiel\extensions\firefox@ghostery.com.xpi deleted C:\Users\OLAFDE~1\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.schijtprofiel\jetpack deleted C:\Users\Public\Desktop\Driver Reviver.lnk deleted C:\Users\Public\Desktop\SlimCleaner Plus.lnk deleted "C:\WINDOWS\Installer\3d3134.msi" deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\cookiefilter.db" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\settings" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimDrivers\settings.db" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimDrivers\supdates.db" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\Cookies" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\Cookies-journal" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\data_0" deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\data_1" deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\data_2" deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\data_3" deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\index" deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Logs\2016-09-07 08" deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Logs\2016-09-07 08" deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\Local Storage\ui_main_0.localstorage" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\Local Storage\ui_main_0.localstorage-journal" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimDrivers\Logs\2016-09-07 10-03-21 0.log" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimDrivers" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Logs" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\Local Storage" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimDrivers\Logs" not deleted ==== Orphaned Tasks deleted from Registry ====================== Start Driver Reviver Schedule deleted Start Driver Reviver Update deleted ==== Firefox Start and Search pages ====================== ProfilePath: C:\Users\OLAFDE~1\AppData\Roaming\Mozilla\Firefox\Profiles\iwfxxajf.default user_pref("browser.search.defaultenginename", "Bing"); ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "bdwteff@bitdefender.com"="C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff" [24/03/2015 11:54] ==== Firefox Extensions ====================== ProfilePath: C:\Users\OLAFDE~1\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.schijtprofiel - FEBE - C:\Users\Olaf De Wit\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.schijtprofiel\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} - LeechBlock - C:\Users\Olaf De Wit\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.schijtprofiel\extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387} - Flashblock - %ProfilePath%\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} - FEBE - %ProfilePath%\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} - LeechBlock - %ProfilePath%\extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387} - Bookmark Deduplicator - %ProfilePath%\extensions\bookmarkdeduplicator@foxhatdev.xpi - Bookmark Duplicate Cleaner - %ProfilePath%\extensions\bookmarkdup@localghost.net.xpi - CookieKeeper - %ProfilePath%\extensions\cookiekeeper@cookiekeeper.mozdev.org.xpi - Element Hiding Helper for Adblock Plus - %ProfilePath%\extensions\elemhidehelper@adblockplus.org.xpi - Video Downloader Professional - %ProfilePath%\extensions\ffext_basicvideoext@startpage24.xpi - Bookmarks Checker - check for bad links - %ProfilePath%\extensions\firefoxbookmarkchecker@everhelper.me.xpi - FlashStopper - %ProfilePath%\extensions\flashstopper@byo.co.il.xpi - Self-Destructing Cookies - %ProfilePath%\extensions\jid0-9XfBwUWnvPx4wWsfBWMCm4Jj69E@jetpack.xpi - Wikiwand: Wikipedia Modernized - %ProfilePath%\extensions\jid1-D7momAzRw417Ag@jetpack.xpi - Flash Control - %ProfilePath%\extensions\jid1-sNL73VCI4UB0Fw@jetpack.xpi - OPIE - %ProfilePath%\extensions\OPIE@guid.customsoftwareconsult.com.xpi - The Addon Bar restored - %ProfilePath%\extensions\the-addon-bar@GeekInTraining-GiT.xpi - Undetermined - %ProfilePath%\extensions\uBlock0@raymondhill.net.xpi - Undetermined - %ProfilePath%\extensions\uMatrix@raymondhill.net.xpi - Trnh Qun L Phin - %ProfilePath%\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi - Speed Dial - %ProfilePath%\extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi - NoScript - %ProfilePath%\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi - Video DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi - Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi - BetterPrivacy em:version1.74 em:type2 em:creatorGreg Yardley version 0.2 www.yardley.ca em:descriptionquot - %ProfilePath%\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi - YouTube Flash Video Player - %ProfilePath%\extensions\{f3bd3dd2-2888-44c5-91a2-2caeb33fb898}.xpi - UnMHT - %ProfilePath%\extensions\{f759ca51-3a91-4dd1-ae78-9db5eee9ebf0}.xpi ProfilePath: C:\Users\OLAFDE~1\AppData\Roaming\Mozilla\Firefox\Profiles\iwfxxajf.default - FEBE - %ProfilePath%\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} ProfilePath: C:\Users\OLAFDE~1\AppData\Roaming\Mozilla\Firefox\Profiles\m5piylsg.Standaardgebruiker - Flash Video Downloader - YouTube HD Download [4K] - %ProfilePath%\extensions\artur.dubovoy@gmail.com - FEBE - %ProfilePath%\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} - CookieKeeper - %ProfilePath%\extensions\cookiekeeper@cookiekeeper.mozdev.org.xpi - Element Hiding Helper for Adblock Plus - %ProfilePath%\extensions\elemhidehelper@adblockplus.org.xpi - FlashStopper - %ProfilePath%\extensions\flashstopper@byo.co.il.xpi - Self-Destructing Cookies - %ProfilePath%\extensions\jid0-9XfBwUWnvPx4wWsfBWMCm4Jj69E@jetpack.xpi - Undetermined - %ProfilePath%\extensions\jid1-HAV2inXAnQPIeA@jetpack.xpi - Flash Control - %ProfilePath%\extensions\jid1-sNL73VCI4UB0Fw@jetpack.xpi - OPIE - %ProfilePath%\extensions\OPIE@guid.customsoftwareconsult.com.xpi - The Addon Bar restored - %ProfilePath%\extensions\the-addon-bar@GeekInTraining-GiT.xpi - Undetermined - %ProfilePath%\extensions\uBlock0@raymondhill.net.xpi - Trnh Qun L Phin - %ProfilePath%\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi - Speed Dial - %ProfilePath%\extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi - NoScript - %ProfilePath%\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi - Video DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi - Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi - YouTube Flash Video Player - %ProfilePath%\extensions\{f3bd3dd2-2888-44c5-91a2-2caeb33fb898}.xpi - UnMHT - %ProfilePath%\extensions\{f759ca51-3a91-4dd1-ae78-9db5eee9ebf0}.xpi ProfilePath: C:\Users\OLAFDE~1\AppData\Roaming\Mozilla\Firefox\Profiles\sckioql6.stupid shit - FEBE - C:\Users\Olaf De Wit\AppData\Roaming\Mozilla\Firefox\Profiles\sckioql6.stupid shit\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} - Flashblock - C:\Users\Olaf De Wit\AppData\Roaming\Mozilla\Firefox\Profiles\sckioql6.stupid shit\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} - Flashblock - %ProfilePath%\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} - FEBE - %ProfilePath%\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} - Bookmark Duplicate Cleaner - %ProfilePath%\extensions\bookmarkdup@localghost.net.xpi - CookieKeeper - %ProfilePath%\extensions\cookiekeeper@cookiekeeper.mozdev.org.xpi - Element Hiding Helper for Adblock Plus - %ProfilePath%\extensions\elemhidehelper@adblockplus.org.xpi - Wikiwand: Wikipedia Modernized - %ProfilePath%\extensions\jid1-D7momAzRw417Ag@jetpack.xpi - Flash Control - %ProfilePath%\extensions\jid1-sNL73VCI4UB0Fw@jetpack.xpi - Video DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi - Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi ProfilePath: C:\Users\OLAFDE~1\AppData\Roaming\Mozilla\SeaMonkey\Profiles\0eizuwpg.default - DOM - %ProfilePath%\extensions\inspector@mozilla.org.xpi - ChatZilla - %ProfilePath%\extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}.xpi AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Olaf De Wit\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.schijtprofiel 18CF51689186AEB9D1D149AEB0E92D03 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL - Microsoft Office 2013 8CE35D76726DFC8C3848BB26B3C79A54 - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1224194.dll - Shockwave for Director / Shockwave for Director 62D98B286C805E193568037B70D936D2 - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll - Shockwave Flash CAF78E18A9E1380A0A38065B3B1210E0 - C:\Users\Olaf De Wit\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin.dll - VASCO Card Reader Plugin 1CDD28B47D8198F868349BDFBCD1281B - C:\Users\Olaf De Wit\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin64.dll - VASCO Card Reader Plugin Profilepath: C:\Users\Olaf De Wit\AppData\Roaming\Mozilla\Firefox\Profiles\iwfxxajf.default 18CF51689186AEB9D1D149AEB0E92D03 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL - Microsoft Office 2013 8CE35D76726DFC8C3848BB26B3C79A54 - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1224194.dll - Shockwave for Director / Shockwave for Director CAF78E18A9E1380A0A38065B3B1210E0 - C:\Users\Olaf De Wit\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin.dll - VASCO Card Reader Plugin 1CDD28B47D8198F868349BDFBCD1281B - C:\Users\Olaf De Wit\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin64.dll - VASCO Card Reader Plugin Profilepath: C:\Users\Olaf De Wit\AppData\Roaming\Mozilla\Firefox\Profiles\m5piylsg.Standaardgebruiker 18CF51689186AEB9D1D149AEB0E92D03 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL - Microsoft Office 2013 8CE35D76726DFC8C3848BB26B3C79A54 - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1224194.dll - Shockwave for Director / Shockwave for Director CAF78E18A9E1380A0A38065B3B1210E0 - C:\Users\Olaf De Wit\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin.dll - VASCO Card Reader Plugin 1CDD28B47D8198F868349BDFBCD1281B - C:\Users\Olaf De Wit\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin64.dll - VASCO Card Reader Plugin Profilepath: C:\Users\Olaf De Wit\AppData\Roaming\Mozilla\Firefox\Profiles\sckioql6.stupid shit 18CF51689186AEB9D1D149AEB0E92D03 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL - Microsoft Office 2013 8CE35D76726DFC8C3848BB26B3C79A54 - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1224194.dll - Shockwave for Director / Shockwave for Director CAF78E18A9E1380A0A38065B3B1210E0 - C:\Users\Olaf De Wit\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin.dll - VASCO Card Reader Plugin 1CDD28B47D8198F868349BDFBCD1281B - C:\Users\Olaf De Wit\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin64.dll - VASCO Card Reader Plugin ==== Chromium Look ====================== Google Chrome Version: 46.0.2490.86 HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions fabcmochhfpldjekobfaaggijgohadih - No path found[] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions fcfenmboojpjinhpgggodefccipikbpd - No path found[] Google Slides - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek Video Downloader - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiimdkdngfcipjohbjenkahhlhccpdbc Google Docs - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Flash Master - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\cacfnookefkldifaigjdedpophfjkjeh selector is not a valid CSS selector - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb uBlock₀ - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm Google Search - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Session Buddy - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko Video Downloader professional - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil Wikiwand - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\emffkefkbkpkgpdeeooapgaicgmcbolj Bitdefender Wallet - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabcmochhfpldjekobfaaggijgohadih Google Sheets - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap EditThisCookie - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg Google Docs Offline - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi Speed Dial 2 - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpfpebmajhhopeonhlcgidhclcccjcik Chromarks - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdheengilgkagjehknnnofigbmlnnfj noflashcontent - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhjanpmhcanjknkcfjiikkjdecjkmngn Flashcontrol - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidmkgnfgnkihnjeklbekckimkipmoe Ghostery - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij GetThemAll Video Downloader - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbkekaeindpfpcoldfckljplboolgkfm Chrome Web Store Payments - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia Chrome Media Router - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm f*ck overlays - Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppedokobpbdajgiejhnjfbdjlgobcpkp Ghostery - Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Extensions\bbkekonodcdmedgffkkbgmnnekbainbg noflashcontent - Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Extensions\cfkmglogfkpfekddlalobmhdbkjneejb TabHamster - Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Extensions\flaibmngbecjljogddbgojfenfcneanb Video Downloader Pro - Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Extensions\ibehiiilehaakkhkigckfjfknboalpbe uBlock₀ - Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida History Eraser - Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Extensions\lfpoajlbkhlfoeeokbppmecpplmieedm FVD Video Downloader - Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Extensions\neacgcjokggofibnbfapeaejhclmpple selector is not a valid CSS selector - Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp Edit This Cookie - Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Extensions\ppmhhincfabcahokokgpdcckmjghpian ==== Chromium Fix ====================== C:\Users\Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Local Storage\http_image-search-pony.soft32.com_0.localstorage deleted successfully C:\Users\Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adult-planet.info_0.localstorage deleted successfully C:\Users\Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Local Storage\http_adultstarvlog.com_0.localstorage deleted successfully C:\Users\Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabcmochhfpldjekobfaaggijgohadih deleted successfully C:\Users\Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpfpebmajhhopeonhlcgidhclcccjcik deleted successfully C:\Users\Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jpfpebmajhhopeonhlcgidhclcccjcik_0.localstorage deleted successfully C:\Users\Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_jpfpebmajhhopeonhlcgidhclcccjcik_0 deleted successfully C:\Users\Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiimdkdngfcipjohbjenkahhlhccpdbc deleted successfully C:\Users\Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_aiimdkdngfcipjohbjenkahhlhccpdbc_0.localstorage deleted successfully C:\Users\Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil deleted successfully C:\Users\Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\elicpjhcidhpjomhibiffojpinpmmpil deleted successfully C:\Users\Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbkekaeindpfpcoldfckljplboolgkfm deleted successfully C:\Users\Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nbkekaeindpfpcoldfckljplboolgkfm_0.localstorage deleted successfully C:\Users\Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Extensions\ibehiiilehaakkhkigckfjfknboalpbe deleted successfully C:\Users\Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Local Extension Settings\ibehiiilehaakkhkigckfjfknboalpbe deleted successfully C:\Users\Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Extensions\neacgcjokggofibnbfapeaejhclmpple deleted successfully C:\Users\Olaf De Wit\AppData\Roaming\Opera Software\Opera Stable\Local Storage\chrome-extension_neacgcjokggofibnbfapeaejhclmpple_0.localstorage deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" ==== All HKLM and HKCU SearchScopes ====================== HKLM\SearchScopes "DefaultScope"="{DC6B075B-449F-48E1-82D3-2FDE2319178E}" HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - No_Url_Value HKLM\SearchScopes\{DC6B075B-449F-48E1-82D3-2FDE2319178E} - http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=DCJB HKLM\Wow6432Node\SearchScopes "DefaultScope"="{DC6B075B-449F-48E1-82D3-2FDE2319178E}" HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - No_Url_Value HKLM\Wow6432Node\SearchScopes\{DC6B075B-449F-48E1-82D3-2FDE2319178E} - http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=DCJB HKCU\SearchScopes "DefaultScope"="{DC6B075B-449F-48E1-82D3-2FDE2319178E}" HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms} HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms} HKCU\SearchScopes\{DC6B075B-449F-48E1-82D3-2FDE2319178E} - http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=DCJB ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B092921321B09AF46BAFE1A1075E9292 deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\fabcmochhfpldjekobfaaggijgohadih deleted successfully HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Driver Reviver deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3129290B-0B12-4FA9-B6FA-1E1A70E52929} deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SlimCleaner Plus deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\B092921321B09AF46BAFE1A1075E9292 deleted successfully ==== Empty IE Cache ====================== C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Olaf De Wit\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\Olaf De Wit\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\Olaf De Wit\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\Users\Olaf De Wit\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully ==== Empty FireFox Cache ====================== C:\Users\Olaf De Wit\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.schijtprofiel\storage\default\https+++www.pinterest.com\cache emptied successfully C:\Users\Olaf De Wit\AppData\Roaming\Mozilla\Firefox\Profiles\febeprof.schijtprofiel\storage\default\https+++www.porndig.com\cache emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Olaf De Wit\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully C:\Users\Olaf De Wit\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== No Java Cache Found ==== C:\zoek_backup content ====================== C:\zoek_backup (files=1363 folders=450 951160383 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\MSSQL$ADK\AppData\Local\Temp emptied successfully C:\Users\Olaf De Wit\AppData\Local\Temp will be emptied at reboot C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\WINDOWS\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\WINDOWS\Temp successfully emptied C:\Users\OLAFDE~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\cookiefilter.db" not found "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\settings" not found "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimDrivers\settings.db" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimDrivers\supdates.db" not deleted "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\Cookies" not found "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\Cookies-journal" not found "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\Local Storage\ui_main_0.localstorage" not found "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimCleaner Plus\Cache\Local Storage\ui_main_0.localstorage-journal" not found "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc\SlimDrivers\Logs\2016-09-07 10-03-21 0.log" not found "C:\Users\Olaf De Wit\AppData\Local\SlimWare Utilities Inc" not deleted ==== EOF on wo 07/09/2016 at 11:20:41,84 ======================