hendrikd

mag idd gesloten worden, dank je wel.

ik had online gezocht naar mogelijkheden om dit op te lossen. Oa dus hier gevonden "opstarten en shift toets ingedrukt houden" maar dit haalde niets uit. Na het opstarten via de usb-stick kreeg ik eerst de mogelijkheid om "probleem op te lossen". Dit geprobeerd maar hielp dus niet. Daarna de mogelijkheid geprobeerd om Windows opnieuw te installeren met behoud van bestanden enz. Daarop kwam de melding dat dit ook niet lukte waarna 'k gewoon W10 opnieuw geïnstalleerd heb. Maar na de installatie bleek dat alle documenten, afbeeldingen, ... bewaard gebleven zijn.

Had in de bios blijkbaar het verkeerde usb-station bovenaan geplaatst. Nu met het andere station en de usb-stick W10 opnieuw kunnen installeren. Oef!

met Mediacreationtool W10 op usb-stick geplaatst en proberen op te starten via die stick (na aanpassing bios) maar ook geen resultaat ...

Laptop met Windows 10 en verjaardagsupdate. Systeemherstel geactiveerd. Gisterenavond systeemherstel willen uitvoeren, intussen met andere zaken bezig geweest en als 'k terug ging kijken, stond enkel de muisaanwijzer op 't scherm met een draaiend cirkeltje dat nu en dan versprong. Vanmorgen was de laptop vanzelf in slaapstand gegaan maar als 'k hem terug aanzette, nog altijd zelfde scherm. Uitgedaan, opnieuw opgestart: logo van Packard Bell en van Windows 10 verschijnen, daarna "Even geduld" en dan terug muisaanwijzer ... Geprobeerd met opnieuw opstarten met de shift-toets ingedrukt: geen resultaat. Iemand enig idee wat 'k nog kan proberen?

eigenaardig ... hele dag weer traag inladen van pagina's in Chrome. Net nog eens opnieuw opgestart (zonder anders iets veranderd te hebben) en nu gaat het precies wat vlotter. In elk geval, hartelijk dank voor de hulp!

(intussen die extensie wel al teruggevonden)

amai van geduldig afwachten gesproken ! En jammer dat oa de extensie van Chrome verwijderd is die 'k gebruikte bij een nieuwe tab ... zoek-results.txt

Vandaag werkt Chrome opvallend traag. Intussen AdwCleaner en Malwarebytes Antimalware laten draaien. Ook Rsit hier gevonden en log staat hierbij. Kan ik nog iets "opruimen"? Dank je wel en vriendelijke groeten. log.txt

Als ik in de oude versie van Google Maps een routebeschrijving maak, de link kopieer naar bv een Word-document en daarna terug op die link klik dan opent gewoon een algmene kaart. Dus zonder de gemaakte route ... Tot voor kort was dit geen probleem, wat kan de oorzaak zijn? (Als 'k de link gewoon kopieer en plak in de browser lukt het wel.)

OK, CCleaner gebruik 'k al jaren regelmatig. Heel veel dank!

# AdwCleaner v3.018 - Report created 01/02/2014 at 10:08:47 # Updated 28/01/2014 by Xplode # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits) # Username : Hendrik - HENDRIK-LAPTOP # Running from : C:\Users\Hendrik\Downloads\adwcleaner.exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} Key Deleted : HKCU\Software\anchorfree Key Deleted : HKCU\Software\APN PIP Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\Softonic Key Deleted : HKCU\Software\AppDataLow\Software\smartbar Key Deleted : HKLM\Software\Conduit Key Deleted : HKLM\Software\PIP ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Mozilla Firefox v26.0 (nl) [ File : C:\Users\Hendrik\AppData\Roaming\Mozilla\Firefox\Profiles\bhb1zl6r.default\prefs.js ] Line Deleted : user_pref("browser.startup.homepage", "hxxps://mail.google.com/mail/u/0/?shva=1#inbox"); -\\ Google Chrome v32.0.1700.102 [ File : C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [1814 octets] - [01/02/2014 10:05:04] AdwCleaner[s0].txt - [1589 octets] - [01/02/2014 10:08:47] ########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [1649 octets] ##########

Zoek.exe v5.0.0.0 Updated 31-January-2014 Tool run by Hendrik on vr 31/01/2014 at 21:16:35,08. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Hendrik\Downloads\zoek.exe [scan all users] [script inserted] ==== Older Logs ====================== C:\zoek-results2014-01-31-125429.log 437 bytes C:\zoek-results2014-01-31-160759.log 36742 bytes ==== Deleting Files \ Folders ====================== C:\Windows\SysNative\tasks\{4185EE75-E4C7-4233-AA57-E7EDB97F5860} deleted C:\Windows\SysNative\tasks\{4F496252-F4C9-4106-A959-64146F53F52B} deleted C:\Windows\SysNative\tasks\{57B76FA6-9C99-4DFE-B312-821621DE86D7} deleted C:\Windows\SysNative\tasks\{8A2A25A0-5226-4422-9915-B7556B7EABFD} deleted C:\Windows\SysNative\tasks\{D41CBA3A-66F3-4A33-AA80-D0DD81A560CA} deleted C:\Windows\SysNative\tasks\{FCD8829B-DD4C-4C34-A800-D7802777874A} deleted ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== C:\zoek_backup content ====================== C:\zoek_backup (files=569 folders=105 39945221 bytes) ==== EOF on vr 31/01/2014 at 21:26:05,32 ======================

Probleem is blijkbaar opgelost! Dank je wel voor de snelle reacties .

Heb pc heropgestart, zoek.exe opnieuw uitgevoerd en nu liep het duidelijk wel verder . Log: Zoek.exe v5.0.0.0 Updated 31-January-2014 Tool run by Hendrik on vr 31/01/2014 at 16:39:53,44. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Hendrik\Downloads\zoek.exe [scan all users] [script inserted] [Checkboxes used] ==== Older Logs ====================== C:\zoek-results2014-01-31-125429.log 437 bytes ==== Empty Folders Check ====================== C:\PROGRA~2\AGEIA Technologies deleted successfully C:\PROGRA~2\FileStream deleted successfully C:\PROGRA~2\MSXML 4.0 deleted successfully C:\PROGRA~2\Notificatoin deleted successfully C:\Program Files\log deleted successfully C:\ProgramData\Oracle deleted successfully C:\Users\Hendrik\AppData\Roaming\BitTorrent deleted successfully C:\Users\Hendrik\AppData\Roaming\Lite deleted successfully C:\Users\Hendrik\AppData\Roaming\TP deleted successfully C:\Users\Hendrik\AppData\Local\calibre-cache deleted successfully C:\Users\Hendrik\AppData\Local\ms-drivers deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DA5A2A9E-DF07-4a8e-B423-BC5CD4D1880C} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HssTrayService deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\HssTrayService deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssWd deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HssWd deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\HssWd deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\HssWd deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\hshld deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hshld deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\hshld deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\hshld deleted successfully ==== Registry Fix Code x64 ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DA5A2A9E-DF07-4a8e-B423-BC5CD4D1880C}] ==== Deleting Files \ Folders ====================== C:\ProgramData\eSellerate deleted C:\Users\Hendrik\AppData\Roaming\BitLord deleted C:\Users\Hendrik\AppData\Roaming\Hotspot Shield deleted C:\Users\Hendrik\AppData\Roaming\GetRightToGo deleted C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming\Hotspot Shield deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield deleted C:\Windows\wininit.ini deleted C:\Windows\SysWow64\AI_RecycleBin deleted C:\Users\Hendrik\AppData\Roaming\Mozilla\Firefox\Profiles\bhb1zl6r.default\jetpack deleted C:\Users\Hendrik\AppData\Roaming\Mozilla\Firefox\Profiles\bhb1zl6r.default\extensions\{941E9C01-F8E0-493E-B814-E693BC99A1A1} deleted "C:\Users\Hendrik\AppData\Roaming\Mozilla\Firefox\Profiles\bhb1zl6r.default\searchplugins\duckduckgo.xml" deleted "C:\PROGRA~2\Hotspot Shield\bin\af_proxy.dll" deleted "C:\PROGRA~2\Hotspot Shield\bin\HSSCP.exe" deleted "C:\PROGRA~2\Hotspot Shield\bin\zlib1.dll" deleted "C:\PROGRA~2\Hotspot Shield\bin\lang\gui-eng.dll" deleted "C:\PROGRA~2\Hotspot Shield" deleted "C:\ProgramData\Hotspot Shield" deleted "C:\PROGRA~2\Hotspot Shield\bin" deleted "C:\PROGRA~2\Hotspot Shield\bin\lang" deleted "C:\ProgramData\Hotspot Shield\config" deleted "C:\ProgramData\Hotspot Shield\config\hsspx" deleted ==== Folders Found In C:\Users\Hendrik\AppData\Roaming\Tyre ====================== 2013-09-06 15:51:44 dc----w- C:\Users\Hendrik\AppData\Roaming\Tyre\BMW 2013-09-06 15:51:44 dc----w- C:\Users\Hendrik\AppData\Roaming\Tyre\DPTracks 2013-09-06 15:51:44 dc----w- C:\Users\Hendrik\AppData\Roaming\Tyre\TomTom 2013-09-06 15:52:36 dc----w- C:\Users\Hendrik\AppData\Roaming\Tyre\Tip ==== Files Found In C:\Users\Hendrik\AppData\Roaming\Tyre ====================== 2006-12-01 08:13:48 40960 -c--a-w- FF4139F975A27DBCA2D41F4A2C1ED432 C:\Users\Hendrik\AppData\Roaming\Tyre\appstop.exe 2008-05-20 13:13:38 7823 -c--a-w- ADD667817F25BCE331A213AB3CC9621F C:\Users\Hendrik\AppData\Roaming\Tyre\loading.gif 2009-05-18 12:58:16 11 -c--a-w- 7918F9D419B1D3556FF8F4EB582DECA1 C:\Users\Hendrik\AppData\Roaming\Tyre\UTF8Code.txt 2010-01-11 12:38:48 16950 -c--a-w- F42547446D1F2A1D2A15F43281090B7A C:\Users\Hendrik\AppData\Roaming\Tyre\Tyre_dir.tdf 2010-11-01 15:18:12 61894 -c--a-w- 4EC7117AFEF1A2F5A7BE2DECB354FC7F C:\Users\Hendrik\AppData\Roaming\Tyre\bmw.png 2010-11-15 13:58:34 1171 -c--a-w- ED5968A370527FB4C8A1550547AA220D C:\Users\Hendrik\AppData\Roaming\Tyre\Ergens op aarde.itn 2011-05-20 11:12:26 373 -c--a-w- 0A3CF848C902D45E8500B9E585603177 C:\Users\Hendrik\AppData\Roaming\Tyre\Languages.tdf 2011-11-07 10:21:08 3097 -c--a-w- 8C5148195CE547A60431A3E306C5CA43 C:\Users\Hendrik\AppData\Roaming\Tyre\Tyre_lib.html 2011-11-07 10:25:04 2675 -c--a-w- 19B3643BD2741DCE5829B867C3D034FD C:\Users\Hendrik\AppData\Roaming\Tyre\Tyre_st.html 2011-11-07 10:25:36 3326 -c--a-w- 0B84381DEFE5275407EF650DFF283DE2 C:\Users\Hendrik\AppData\Roaming\Tyre\Tyre_sv.html 2012-04-10 13:39:44 7513 -c--a-w- E0C32D2F723BAE5988682F0F79923567 C:\Users\Hendrik\AppData\Roaming\Tyre\Tyre_wp_2.tdf 2012-04-10 13:40:36 3774 -c--a-w- 45F0325E5C04B8B29D5DF8B3B258EA00 C:\Users\Hendrik\AppData\Roaming\Tyre\Tyre_wp_1.tdf 2012-04-17 06:29:06 708 -c--a-w- 6F597231B742B25EF79990428BD61A2C C:\Users\Hendrik\AppData\Roaming\Tyre\pois.txt 2012-09-25 14:17:08 10461 -c--a-w- 8442126CAC57C559B18ABC1A1B461C22 C:\Users\Hendrik\AppData\Roaming\Tyre\Tyre_names.html 2012-11-09 15:22:00 41472 -c--a-w- 17C2E4281FADD04771695A94FB82D878 C:\Users\Hendrik\AppData\Roaming\Tyre\gpx2itn.exe 2012-12-07 20:13:58 21614 -c--a-w- 7A6DE14707F04C13B8CD220774137593 C:\Users\Hendrik\AppData\Roaming\Tyre\Tyre_routes.html 2012-12-07 20:39:26 32848 -c--a-w- 5AF59B371D9D085B4BE8EFCE80697EE2 C:\Users\Hendrik\AppData\Roaming\Tyre\Tyre_libs.html 2012-12-07 21:18:28 7930 -c--a-w- 8FB8CF14D2C99AACEE73D630464A61C6 C:\Users\Hendrik\AppData\Roaming\Tyre\Tyre_optwp.html 2012-12-07 21:24:04 6143 -c--a-w- 05D79BFECB12FB915980E7F294ECF4C8 C:\Users\Hendrik\AppData\Roaming\Tyre\Tyre_optwp_calc.html 2013-02-26 11:19:48 12579 -c--a-w- C2E75E99C9AF805110D71307EC5F0B87 C:\Users\Hendrik\AppData\Roaming\Tyre\Tyre_tracks.html 2013-06-24 19:54:40 124572 -c--a-w- DB14B8924FE69A55B19588A67E5C387A C:\Users\Hendrik\AppData\Roaming\Tyre\Tyre_6.tdf 2013-07-19 08:05:12 38420 -c--a-w- 0B90EE9243833FCF4DAA3A48CA3CD796 C:\Users\Hendrik\AppData\Roaming\Tyre\English.gtl 2013-07-19 08:07:44 41360 -c--a-w- FCF5A5CE105238909CF5D0140D962756 C:\Users\Hendrik\AppData\Roaming\Tyre\Frysk.gtl 2013-07-19 08:09:26 39816 -c--a-w- 53B248D7D8A78CFA5DF7EE63AAE0FA73 C:\Users\Hendrik\AppData\Roaming\Tyre\Catala.gtl 2013-07-19 08:10:26 41788 -c--a-w- 1DA8B4C4325F401A035C7B476F2894F9 C:\Users\Hendrik\AppData\Roaming\Tyre\Espanol.gtl 2013-07-19 08:10:38 43208 -c--a-w- F85658498699BA67A064FE28FEA8EC66 C:\Users\Hendrik\AppData\Roaming\Tyre\Francais.gtl 2013-07-19 08:11:42 40975 -c--a-w- 88848B0217F32DA3991EE19ADD853F53 C:\Users\Hendrik\AppData\Roaming\Tyre\Portugues.gtl 2013-07-19 08:14:52 39729 -c--a-w- 2A303192AE972684D662AD0F36E9DBF8 C:\Users\Hendrik\AppData\Roaming\Tyre\Cestina.gtl 2013-07-19 08:15:28 38834 -c--a-w- 3F902E53EFCFA13F822049E6EE223B26 C:\Users\Hendrik\AppData\Roaming\Tyre\Dansk.gtl 2013-07-19 08:15:46 42007 -c--a-w- 5D8119559DDBB04772F20227BFBEA8DE C:\Users\Hendrik\AppData\Roaming\Tyre\Deutsch.gtl 2013-07-19 08:16:26 42095 -c--a-w- 3D48311E1865B9C5AC56C70070E4DB6D C:\Users\Hendrik\AppData\Roaming\Tyre\Italiano.gtl 2013-07-19 08:16:50 38495 -c--a-w- 2C7464483F082EF2A641D1864F534E75 C:\Users\Hendrik\AppData\Roaming\Tyre\Norsk.gtl 2013-07-19 08:18:36 60461 -c--a-w- E5E9AF6D475839C5F457598BD79CF458 C:\Users\Hendrik\AppData\Roaming\Tyre\Russian.gtl 2013-07-19 08:19:02 39661 -c--a-w- BBDB16E3043FC6617C33E4F441A4EE23 C:\Users\Hendrik\AppData\Roaming\Tyre\Polski.gtl 2013-07-19 08:19:30 35777 -c--a-w- 7E8310C94DC6BDBC8F2A2F1C4A01C4ED C:\Users\Hendrik\AppData\Roaming\Tyre\Simplified Chinese.gtl 2013-07-19 08:19:56 38769 -c--a-w- 918DAF111749A0189D316879A15C3426 C:\Users\Hendrik\AppData\Roaming\Tyre\Suomi.gtl 2013-07-19 08:20:16 40045 -c--a-w- 1F45F982A57606EDC9C52C5C8D923AAA C:\Users\Hendrik\AppData\Roaming\Tyre\Svenska.gtl 2013-07-19 08:20:36 35782 -c--a-w- BCC5D91CA741773F18F2A41AD13C7BF4 C:\Users\Hendrik\AppData\Roaming\Tyre\Traditional Chinese.gtl 2013-07-19 08:21:02 39439 -c--a-w- B798B9AB7ED048F50BFA256213A25716 C:\Users\Hendrik\AppData\Roaming\Tyre\Turkce.gtl 2013-08-01 08:37:52 41982 -c--a-w- 9F1C581D5850978CA2575DBE867D96BF C:\Users\Hendrik\AppData\Roaming\Tyre\Nederlands.gtl 2013-09-06 15:51:53 2584148 -c--a-w- 08C57DA8CDB05CDC80DD20D97D50C675 C:\Users\Hendrik\AppData\Roaming\Tyre\TyreSetup.exe 2013-09-06 15:52:35 15 -c--a-w- AD4410705C973EF1D2B699A3C0D0CEB6 C:\Users\Hendrik\AppData\Roaming\Tyre\Default.tfl 2013-09-06 15:52:35 15 -c--a-w- AD4410705C973EF1D2B699A3C0D0CEB6 C:\Users\Hendrik\AppData\Roaming\Tyre\favorites.txt 2014-01-25 15:39:56 1816 -c--a-w- 701705F335C3AF4318F86FAFD9F93D87 C:\Users\Hendrik\AppData\Roaming\Tyre\MessageToUsers.html ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Hendrik\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== ====== C:\Windows\Sysnative\drivers ===== 2014-01-30 22:24:39 0BB97D43299910CBFBA59C461B99B910 25928 ----a-w- C:\Windows\Sysnative\drivers\mbam.sys 2014-01-15 09:26:46 AD64450A4ABE076F5CB34CC08EEACB07 30208 ----a-w- C:\Windows\Sysnative\drivers\TsUsbGD.sys 2014-01-15 09:26:46 313F68E1A3E6345A4F47A36B07062F34 19456 ----a-w- C:\Windows\Sysnative\drivers\rdpvideominiport.sys 2014-01-15 09:26:46 17C6B51CBCCDED95B3CC14E22791F85E 57856 ----a-w- C:\Windows\Sysnative\drivers\TsUsbFlt.sys 2014-01-15 09:22:16 FFA06EF43987ED0DD42AD59B260C0C78 7808 ----a-w- C:\Windows\Sysnative\drivers\usbd.sys 2014-01-15 09:22:16 DD253AFC3BC6CBA412342DE60C3647F3 30720 ----a-w- C:\Windows\Sysnative\drivers\usbuhci.sys 2014-01-15 09:22:16 DCA68B0943D6FA415F0C56C92158A83A 99840 ----a-w- C:\Windows\Sysnative\drivers\usbccgp.sys 2014-01-15 09:22:16 8D1196CFBB223621F2C67D45710F25BA 343040 ----a-w- C:\Windows\Sysnative\drivers\usbhub.sys 2014-01-15 09:22:16 765A92D428A8DB88B960DA5A8D6089DC 25600 ----a-w- C:\Windows\Sysnative\drivers\usbohci.sys 2014-01-15 09:22:16 18A85013A3E0F7E1755365D287443965 53248 ----a-w- C:\Windows\Sysnative\drivers\usbehci.sys 2014-01-15 09:22:16 12FEB33791920678F8433701C822BCFD 325120 ----a-w- C:\Windows\Sysnative\drivers\usbport.sys 2014-01-15 09:22:15 3555BA97171CD153118F73FDCCC8BFDE 376768 ----a-w- C:\Windows\Sysnative\drivers\netio.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2014-01-31 09:50:50 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== 2014-01-13 16:55:36 -------- d-----w- C:\PROGRA~2\BlueStacks 2014-01-02 17:12:05 -------- d-----w- C:\PROGRA~2\InternetCalls.com ======= C: ===== ====== C:\Users\Hendrik\AppData\Roaming ====== 2014-01-02 17:12:14 -------- dc----w- C:\Users\Hendrik\AppData\Roaming\InternetCalls ====== C:\Users\Hendrik ====== 2014-01-31 09:50:20 662C39FC1E27131551D557862CEC47F0 935175 -c--a-w- C:\Users\Hendrik\Downloads\RSITx64.exe 2014-01-30 22:23:52 683FDD3D773C58B262DC07CD0C6CE938 10285040 -c--a-w- C:\Users\Hendrik\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-26 22:23:04 22557C4952C896BFD1028A82FFEAEC48 2546497 -c--a-w- C:\Users\Hendrik\Downloads\PoiEdit2007-2-NLD.exe 2014-01-21 20:05:28 -------- dc----r- C:\Users\Hendrik\Music 2014-01-15 18:37:37 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-01-13 16:55:36 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks 2014-01-13 16:16:47 -------- dc----w- C:\Users\Hendrik\decrypt 2014-01-02 17:12:08 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InternetCalls ====== C: exe-files == 2014-01-31 10:09:43 3F05C52C278B707C16652E648A57902E 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-1191951822-230774151-2282679725-1000\$IH0JXNB.exe 2014-01-31 09:50:51 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Hendrik.exe 2014-01-31 09:50:20 662C39FC1E27131551D557862CEC47F0 935175 -c--a-w- C:\Users\Hendrik\Downloads\RSITx64.exe 2014-01-30 22:23:52 683FDD3D773C58B262DC07CD0C6CE938 10285040 -c--a-w- C:\Users\Hendrik\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-29 17:18:13 95538B9357EE263A75A3349550974262 364288 -c--a-w- C:\Users\Hendrik\AppData\Local\NVIDIA\NvBackend\Packages\0000577a\updatus.17734322_RUNASUSER.exe 2014-01-29 17:17:58 F1F92AD02D1B24779EDB2B9D99EB7450 3193160 -c--a-w- C:\Users\Hendrik\AppData\Local\NVIDIA\NvBackend\Packages\00005773\dao.17731592.exe 2014-01-29 09:22:06 BD556495B9E1E00A2A55D4E6131C2EA0 981160 ----a-w- C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\32.0.1700.102\32.0.1700.102_32.0.1700.76_chrome_updater.exe 2014-01-28 19:07:07 9769BD78485E5C4F8AD5CAB3B1F8A029 32710608 -c--a-w- C:\Users\Hendrik\AppData\Roaming\Spotify\Spotify_new.exe 2014-01-27 15:09:52 6226A8E84105B0B90EF8946FD60FF03F 8257536 -c--a-w- C:\Users\Hendrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SOHAP8XW\SpotifyFullSetup[1].exe 2014-01-26 22:23:04 22557C4952C896BFD1028A82FFEAEC48 2546497 -c--a-w- C:\Users\Hendrik\Downloads\PoiEdit2007-2-NLD.exe === C: other files == 2014-01-31 09:39:47 F93171B9F1DD602A6676DA5AE350DB7B 103 -c--a-w- C:\Users\Hendrik\AppData\Local\Temp\utt1D21.tmp.bat 2014-01-30 22:24:39 0BB97D43299910CBFBA59C461B99B910 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys 2014-01-30 21:19:59 75EC11CC5F3F039E81113ABFB908110E 536213 ----a-w- C:\Users\Hendrik\Downloads\Tor Browser\FirefoxPortable\Data\profile\extensions\staged\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi ==== Startup Registry Enabled ====================== [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "Copy"="C:\Users\Hendrik\AppData\Roaming\Copy\CopyAgent.exe" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-1191951822-230774151-2282679725-1000\Software\Microsoft\Windows\CurrentVersion\Run] "Copy"="C:\Users\Hendrik\AppData\Roaming\Copy\CopyAgent.exe" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" "RoboForm"="C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" "GoogleChromeAutoLaunch_5AE393E819AF6946586466E0F295AD2F"="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --no-startup-window" "Spotify Web Helper"="C:\Users\Hendrik\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "InternetCalls"="C:\Program Files (x86)\InternetCalls.com\InternetCalls\InternetCalls.exe -nosplash -minimized" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run] "Copy"="C:\Users\Hendrik\AppData\Roaming\Copy\CopyAgent.exe" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" "LManager"="C:\Program Files (x86)\Launch Manager\LManager.exe" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "BlueStacks Agent"="C:\Program Files (x86)\BlueStacks\HD-Agent.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Copy"="C:\Users\Hendrik\AppData\Roaming\Copy\CopyAgent.exe" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" "RoboForm"="C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" "GoogleChromeAutoLaunch_5AE393E819AF6946586466E0F295AD2F"="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --no-startup-window" "Spotify Web Helper"="C:\Users\Hendrik\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "InternetCalls"="C:\Program Files (x86)\InternetCalls.com\InternetCalls\InternetCalls.exe -nosplash -minimized" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\\Windows\\SysWOW64\\nvinit.dll" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "Acer ePower Management"="C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe" "MSC"="C:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey" "IgfxTray"="C:\Windows\system32\igfxtray.exe" "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" "Persistence"="C:\Windows\system32\igfxpers.exe" "Nvtmru"="C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" "NvBackend"="C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" "ShadowPlay"="C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart" "ETDWare"="%ProgramFiles%\Elantech\ETDCtrl.exe " [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\\Windows\\system32\\nvinitx.dll" ==== Startup Registry Disabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeAAMUpdater-1.0] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="AdobeAAMUpdater-1.0" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\OOBE\\PDApp\\UWA\\UpdaterStartupUtility.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BackupManagerTray] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="BackupManagerTray" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\NewTech Infosystems\\Packard Bell MyBackup\\BackupManagerTray.exe\" -h -k" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BCSSync] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="BCSSync" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Microsoft Office\\Office14\\BCSSync.exe\" /DelayServices" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BitTorrent] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="BitTorrent" "hkey"="HKCU" "command"="\"C:\\Users\\Hendrik\\AppData\\Roaming\\BitTorrent\\BitTorrent.exe\" /MINIMIZED" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Google Update] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Google Update" "hkey"="HKCU" "command"="\"C:\\Users\\Hendrik\\AppData\\Local\\Google\\Update\\GoogleUpdate.exe\" /c" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GoogleChromeAutoLaunch_5AE393E819AF6946586466E0F295AD2F] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="GoogleChromeAutoLaunch_5AE393E819AF6946586466E0F295AD2F" "hkey"="HKCU" "command"="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --no-startup-window" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GoogleDriveSync] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="GoogleDriveSync" "hkey"="HKCU" "command"="\"C:\\Program Files (x86)\\Google\\Drive\\googledrivesync.exe\" /autostart" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TomTomHOME.exe] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="TomTomHOME.exe" "hkey"="HKCU" "command"="\"C:\\Program Files (x86)\\TomTom HOME 2\\TomTomHOMERunner.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^MozyHome Status.lnk] "path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\MozyHome Status.lnk" "backup"="C:\\Windows\\pss\\MozyHome Status.lnk.CommonStartup" "backupExtension"=".CommonStartup" "command"="C:\\PROGRA~1\\MozyHome\\mozystat.exe " "item"="MozyHome Status" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Hendrik^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Stickies.lnk] "path"="C:\\Users\\Hendrik\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Stickies.lnk" "backup"="C:\\Windows\\pss\\Stickies.lnk.Startup" "backupExtension"=".Startup" "command"="C:\\PROGRA~2\\Stickies\\stickies.exe " "item"="Stickies" ==== Startup Folders ====================== 2013-06-20 20:35:15 1069 -c--a-w- C:\Users\Hendrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [26/04/2013 06:05] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [26/04/2013 06:05] C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1191951822-230774151-2282679725-1000Core.job --a------ C:\Users\Hendrik\AppData\Local\Google\Update\GoogleUpdate.exe [02/05/2013 16:39] C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1191951822-230774151-2282679725-1000UA.job --a------ C:\Users\Hendrik\AppData\Local\Google\Update\GoogleUpdate.exe [02/05/2013 16:39] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\AdobeAAMUpdater-1.0-Hendrik-laptop-Hendrik" [C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe] "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-1191951822-230774151-2282679725-1000Core" [C:\Users\Hendrik\AppData\Local\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-1191951822-230774151-2282679725-1000UA" [C:\Users\Hendrik\AppData\Local\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\Open URL by RoboForm" [C:\Windows\system32\rundll32.exe url.dll,FileProtocolHandler "http://www.roboform.com/test-pass.html?aaa=KICMNJMJHMJMOMHMLJMMCNIMPMOMJJCNLMOMPMNMCNOJOMKMLJCNMJJMPMLJOMHMHMNMGMPMNJLJJNJICMIMCNGMCNNMFMGMCNOMPMCNGMNMPMPMFMJMCNOMCNIMJMPMOMCNNMJNPICMPMFMIJAJLILJOMFMOMIMHMJNHICMMJBJKJLIMJJNBJCMHLKJBJLJNIGJEJJNKJCMJNNICMJNDJCMBJDJ"] "C:\Windows\SysNative\tasks\Run RoboForm TaskBar Icon" [C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe] "C:\Windows\SysNative\tasks\{4185EE75-E4C7-4233-AA57-E7EDB97F5860}" [C:\Users\Hendrik\Downloads\Spotify Installer.exe] "C:\Windows\SysNative\tasks\{4F496252-F4C9-4106-A959-64146F53F52B}" [C:\Users\Hendrik\AppData\Roaming\Spotify\spotify.exe] "C:\Windows\SysNative\tasks\{57B76FA6-9C99-4DFE-B312-821621DE86D7}" [C:\Users\Hendrik\Downloads\SpotifySetup.exe] "C:\Windows\SysNative\tasks\{867C6285-A589-469F-8CF2-8FACB16A8CCC}" ["c:\program files (x86)\mozilla firefox\firefox.exe"] "C:\Windows\SysNative\tasks\{8A2A25A0-5226-4422-9915-B7556B7EABFD}" [C:\Users\Hendrik\Downloads\Spotify Installer.exe] "C:\Windows\SysNative\tasks\{D41CBA3A-66F3-4A33-AA80-D0DD81A560CA}" [C:\Users\Hendrik\Downloads\SpotifySetup.exe] "C:\Windows\SysNative\tasks\{FCD8829B-DD4C-4C34-A800-D7802777874A}" [C:\Users\Hendrik\Downloads\SpotifySetup.exe] "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "{22119944-ED35-4ab1-910B-E619EA06A115}"="C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox" [21/10/2013 10:17] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Hendrik\AppData\Roaming\Mozilla\Firefox\Profiles\bhb1zl6r.default - Deutsches Wrterbuch erweitert fr sterreich - %ProfilePath%\extensions\de-AT@dictionaries.addons.mozilla.org - DoNotTrackMe: Online Privacy Protection - %ProfilePath%\extensions\donottrackplus@abine.com - Dictionnaires franais - %ProfilePath%\extensions\fr-dicollecte@dictionaries.addons.mozilla.org - EPUBReader - %ProfilePath%\extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} - DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} - Adblock Plus Pop-up Addon - %ProfilePath%\extensions\adblockpopups@jessehakanen.net.xpi - AutoCopy 2 - %ProfilePath%\extensions\autocopy2@teo.pl.xpi - Belgium eID - %ProfilePath%\extensions\belgiumeid@eid.belgium.be.xpi - Gmelius - %ProfilePath%\extensions\gmailadsremover@florian.bersier.xpi - ahsweN Forum Smiley - %ProfilePath%\extensions\info@ahswen.com.xpi - Lightbeam - %ProfilePath%\extensions\jid1-F9UJ2thwoAm5gQ@jetpack.xpi - cleanr Videos for YouTube - %ProfilePath%\extensions\jid1-rVWl1u7MJL7d2g@jetpack.xpi - Deutsch DE Language Pack - %ProfilePath%\extensions\langpack-de@firefox.mozilla.org.xpi - Ecosia - The search engine that plants trees em:descriptionEcosia is a search engine that donates 80 of its income to a tree planting program in Brazil. By searching with Ecosia you can help the environment for free - %ProfilePath%\extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi - Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi AppDir: C:\Program Files (x86)\Mozilla Firefox - Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be - Hotspot Shield Extension - %AppDir%\browser\extensions\afext@anchorfree.com - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Hendrik\AppData\Roaming\Mozilla\Firefox\Profiles\bhb1zl6r.default 2557FBC582910A71CDEB0F22886D118D - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll - Shockwave Flash C36444D7301A8C881FC7296B092609C7 - C:\Users\Hendrik\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll - Google Update 68BCBB241EF254BC5100D9E6C06ECC71 - C:\Users\Hendrik\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll - Google Talk Plugin Video Accelerator 99FE6AFE80EB7FE3EEB75DC504A326A3 - C:\Users\Hendrik\AppData\Roaming\Mozilla\plugins\npo1d.dll - Google Talk Plugin Video Renderer AF42019A3B0EDBFA6878F75B9377A792 - C:\Users\Hendrik\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll - Google Talk Plugin ==== Deleted Firefox Extensions ====================== C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afext@anchorfree.com deleted ==== Chrome Look ====================== Google Docs - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf Open with Office Web Apps Viewer - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcknfcclbcpdeopdopomkdbjmldgdeld Sothink Flash Downloader for Chrome - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\biceobciobbhhkplgocbaigojbnepcoi YouTube - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo HelloFax 50 Free Fax Pages - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\bocmleclimfnadgmcdgecijlblfcmfnm Last updated at time on date - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb Ecosia - The search engine that plants trees - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\clellnciejhoedgepbdilbkdkaoecgpc Google Search - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Free Smileys & Emoticons - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\eadohofilecbkoopckifdpenihdpdbfm Gmail Offline - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk DoNotTrackMe Online Privacy Protection - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd Free Smileys Emoticons - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjbbjfdilbioabojmcplalojlmdngbjl Hola Better Internet - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio ProxMate - Proxy on steroids - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgjpnmnpjmabddgmjdiaggacbololbjm BitTorrent Surf (Beta) - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibpbofogepkkeoockhkfcgngjkimndlp The Great Suspender - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\klbibkeccnjlkjkiokjodocebajanakg Video Downloader - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp Google Wallet - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Chrome Fix ====================== C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjbbjfdilbioabojmcplalojlmdngbjl deleted successfully C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fjbbjfdilbioabojmcplalojlmdngbjl_0.localstorage deleted successfully C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fjbbjfdilbioabojmcplalojlmdngbjl_0.localstorage-journal deleted successfully C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fjbbjfdilbioabojmcplalojlmdngbjl deleted successfully C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\eadohofilecbkoopckifdpenihdpdbfm deleted successfully C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp deleted successfully C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lfmhcpmkbdkbgbmkjoiopeeegenkdikp_0.localstorage deleted successfully C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lfmhcpmkbdkbgbmkjoiopeeegenkdikp_0.localstorage-journal deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://packardbell.msn.com/" "Search Page"="http://www.google.com" "Search Bar"="http://www.google.com/ie" "Default_Search_URL"="http://www.google.com/ie" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] @="http://www.google.com/search?q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search] "SearchAssistant"="http://www.google.com/ie" "Default_Search_URL"="http://www.google.com/ie" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://packardbell.msn.com/" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.msn.com/results.asp?q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search] "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" {E653FCC0-8214-4D64-84DE-880B9B40BDC5} Google Url="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8" ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\HotspotShield deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Hendrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Hendrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4A17X4RH will be deleted at reboot C:\Users\Hendrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SOHAP8XW will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\Hendrik\AppData\Local\Mozilla\Firefox\Profiles\bhb1zl6r.default\Cache emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=563 folders=105 39926505 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Users\Hendrik\AppData\Local\Temp will be emptied at reboot C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Hendrik\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Hendrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4A17X4RH" not found "C:\Users\Hendrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SOHAP8XW" not found ==== EOF on vr 31/01/2014 at 17:07:59,47 ======================