Ad-aware van lavasoft verwijderen

corbu · 1 april 2015

Zoek.exe v5.0.0.0 Updated 31-March-2015

Tool run by anneke on wo 01-04-2015 at 14:13:11,77.

Microsoft Windows 8.1 6.3.9600 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Anneke Saariste\Desktop\zoek.exe [scan all users] [script inserted]

==== Older Logs ======================

C:\zoek-results2015-03-26-140957.log 109493 bytes

C:\zoek-results2015-03-30-143337.log 49410 bytes

C:\zoek-results2015-03-31-074159.log 34524 bytes

C:\zoek-results2015-04-01-082303.log 26251 bytes

==== Folders Found ======================

2015-03-30 14:24:43 2015-03-30 14:24:43 -------- d---a-w- C:\zoek_backup\C_Program Files_Common Files_Lavasoft

2015-03-30 14:24:06 2015-03-30 14:24:06 -------- d---a-w- C:\zoek_backup\C_Program Files_Lavasoft

2015-03-30 14:24:43 2015-03-30 14:24:48 -------- d---a-w- C:\zoek_backup\C_ProgramData_Lavasoft

2015-03-30 14:24:48 2015-03-30 14:24:48 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_Start Menu_Programs_Lavasoft

2015-03-26 13:59:29 2015-03-26 13:59:29 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_Start Menu_Programs_lavasoft_WebCompanion

2015-03-26 13:57:18 2015-03-26 13:57:19 -------- d---a-w- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion

2015-03-26 13:58:03 2015-03-26 13:59:33 -------- d---a-w- C:\zoek_backup\C_PROGRA~3_Lavasoft_Web Companion

2015-03-30 14:24:48 2015-03-30 14:24:49 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Lavasoft

2015-03-30 14:24:49 2015-03-30 14:24:49 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_Start Menu_Programs_Lavasoft

2015-03-26 13:58:05 2015-03-26 13:58:05 -------- d---a-w- C:\zoek_backup\C_Users_Anneke Saariste_AppData_Local_Lavasoft_WebCompanion.exe_Url_siq0lwf3tzgxp2khfkllybk3idtbehng

2015-03-30 14:24:49 2015-03-30 14:24:49 -------- d---a-w- C:\zoek_backup\C_Users_Anneke Saariste_AppData_Roaming_Lavasoft

2015-03-30 14:24:49 2015-03-30 14:24:49 -------- d---a-w- C:\zoek_backup\C_Users_Anneke Saariste_AppData_Roaming_LavasoftStatistics

==== Files Found ======================

--- C:\zoek_backup\C_Users_Anneke Saariste_AppData_Local_Lavasoft_AdBlockApprovedList.txt.vir ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 0

Created time: 2015-03-26 13:59:30

Modified time: 2015-02-16 10:34:00

MD5: D41D8CD98F00B204E9800998ECF8427E

SHA1: DA39A3EE5E6B4B0D3255BFEF95601890AFD80709

--- C:\zoek_backup\C_Users_Anneke Saariste_AppData_Roaming_Microsoft_Windows_Recent_LavasoftTcpService.log.lnk.vir ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 789

Created time: 2015-03-30 14:24:49

Modified time: 2015-03-10 21:39:59

MD5: F7006AE0DC3868AC5AFBCB45D19EAF53

SHA1: ED1B7808C2B28BA77C9EE651D7DCA90525848FEF

--- C:\zoek_backup\C_Windows_SysWOW64_LavasoftTcpService.dll.vir ---

Company: Lavasoft Limited

File Description:

File Version: 2.3.1.4

Product Name: LavasoftTcpService.dll

Copyright:

Original Filename:

File type: ----a-w-

File size: 332216

Created time: 2015-03-26 13:59:31

Modified time: 2015-01-23 05:39:52

MD5: 71D311C224FF8690D7CF7C2BA7219009

SHA1: 4E625E1536AE21EF16121F600E6D2CD519A78F88

--- C:\zoek_backup\C_Windows_SysWOW64_LavasoftTcpService.ini.vir ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 5160

Created time: 2015-03-26 13:59:31

Modified time: 2015-02-16 10:33:22

MD5: 67FACE597B10A793F34C43CC7761FB77

SHA1: E563A81D6C98AE857284A791F2E40C30340E8DAA

--- C:\zoek_backup\C_Windows_SysWOW64_LavasoftTcpServiceOff.ini.vir ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 2856

Created time: 2015-03-26 13:59:31

Modified time: 2015-02-16 10:33:22

MD5: B0DC5D5E8F120E2BC1AC29EF2855F4C4

SHA1: 34EC659DAA9165E9B0A21BA9DED54EE299A88AE8

--- C:\zoek_backup\C_Program Files_Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.0.56\extern\Lavasoft.xml ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 2246

Created time: 2015-03-30 14:24:42

Modified time: 2014-10-09 09:09:26

MD5: 878B2CB9072ED6EB61B22EE175B176B2

SHA1: 7203DCBE920894D32F48DA98C1BF1B119469F585

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Interop.LavasoftTcpServiceLib.dll ---

Company:

File Description:

File Version: 1.0.0.0

Product Name: Assembly imported from type library 'LavasoftTcpServiceLib'.

Copyright:

Original Filename: Interop.LavasoftTcpServiceLib.dll

File type: ----a-w-

File size: 51552

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:38:20

MD5: C2B92B80D2E9169E4F349D28C9C7FCD5

SHA1: 9C061721C85BC454FB567CE3BF74756D264CB95E

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.AdAware.dll ---

Company:

File Description: AdAware

File Version: 1.0.0.0

Product Name: AdAware

Original Filename: Lavasoft.AdAware.dll

File type: ----a-w-

File size: 13128

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:38:22

MD5: 9DE5ECCAD0A310D8C405F7D41569D6C3

SHA1: 452D8D577C2A1A77DA5291A210C9A71501EE3777

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.adblocker.dll ---

Company:

File Description: Lavasoft.adblocker

File Version: 1.0.0.0

Product Name: Lavasoft.adblocker

Original Filename: Lavasoft.adblocker.dll

File type: ----a-w-

File size: 94536

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:38:34

MD5: F6BB060C019BB44D95205FF132502E28

SHA1: 4951CA0A62AD8FA9766A9B1A6FF33ABDEB6A62C7

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.Automation.dll ---

Company:

File Description: Lavasoft.Automation

File Version: 1.0.0.0

Product Name: Automation

Original Filename: Lavasoft.Automation.dll

File type: ----a-w-

File size: 18256

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:38:24

MD5: AB06C18DDB6470BAA2500C02CBDB8F87

SHA1: 39EA2E637F53C1F19FD7EA9DF65D73F3282A70FC

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.CSharp.Utilities.dll ---

Company:

File Description: Lavasoft.CSharp.Utilities

File Version: 1.0.5501.11593

Product Name: Lavasoft.CSharp.Utilities

Original Filename: Lavasoft.CSharp.Utilities.dll

File type: ----a-w-

File size: 39256

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:38:24

MD5: 856DB616E46E6017A0DF6EE635D0158D

SHA1: 94C8C58CA7B0EB9CA92A3BE6C80EA52E46613DD3

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.IEController.dll ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 172368

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:38:26

MD5: 7F279F299B651B87C6E7C31101746D09

SHA1: CF6DF67ABE8969526C2CCF7A89D8D497D1589260

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.PUP.Management.dll ---

Company:

File Description: Lavasoft.PUP.Management

File Version: 1.0.0.0

Product Name: Lavasoft.PUP.Management

Original Filename: Lavasoft.PUP.Management.dll

File type: ----a-w-

File size: 119128

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:39:22

MD5: E6DFDFA58F89273DBDCEF558F674BD26

SHA1: 0149A452E58957600BF9CE078F6D06347962067F

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.SearchProtect.Business.dll ---

Company:

File Description: SearchProtect.Business

File Version: 1.0.0.0

Product Name: SearchProtect.Business

Original Filename: Lavasoft.SearchProtect.Business.dll

File type: ----a-w-

File size: 174440

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:38:28

MD5: 74B68CFBB976710DE46B920A86219C89

SHA1: EF4ACA78A98DFF1B652936836EBED90C60924F88

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.SearchProtect.Business.dll.config ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 755

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:25:36

MD5: C65A69188413E28741FB6DF9F45C024C

SHA1: E92ED6DA52264214A74DA46AC12FE1928134DBD6

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.SearchProtect.Repositories.dll ---

Company:

File Description: SearchProtect.Repositories

File Version: 1.0.0.0

Product Name: SearchProtect.Repositories

Original Filename: Lavasoft.SearchProtect.Repositories.dll

File type: ----a-w-

File size: 33136

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:38:28

MD5: E15617F9C04B9C7D7B515AF9582B1B64

SHA1: CAA0FBA0C5F7A628858412ADE15FA1635DEB17C9

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.SearchProtect.Repositories.dll.config ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 80

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:25:38

MD5: A286796695995884F4087756F92422D4

SHA1: 1EC84A362E28A5D6B0D01DB8430339CDD3FF5B2E

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.SearchProtect.Service.Logger.dll ---

Company:

File Description: ServiceLogger

File Version: 1.0.0.0

Product Name: ServiceLogger

Original Filename: Lavasoft.SearchProtect.Service.Logger.dll

File type: ----a-w-

File size: 12144

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:38:30

MD5: F2EBFD3ABA19AD53B4B4088FFED7EEB0

SHA1: CD5B4DC0D7A44C4BBE26A26CD742D8C0EEAB6B76

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.SearchProtect.WcfService.dll ---

Company:

File Description: SPWcfLib

File Version: 1.0.0.0

Product Name: SPWcfLib

Original Filename: Lavasoft.SearchProtect.WcfService.dll

File type: ----a-w-

File size: 32616

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:38:30

MD5: 97582CBC82233733C1D3D6764B97298E

SHA1: A52BF0FC3E53EAAA123E4317A775CB7A93767C99

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.SearchProtect.WinService.exe ---

Company:

File Description: SPWindowsService

File Version: 1.0.0.0

Product Name: SPWindowsService

Original Filename: Lavasoft.SearchProtect.WinService.exe

File type: ----a-w-

File size: 15208

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:38:32

MD5: DA3827D45021462B8328337221EB357E

SHA1: 569296554792CA30BA77751214444CBF8020D340

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.SearchProtect.WinService.exe.config ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 1574

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:25:38

MD5: 519F1D65E6F64833E4E8B35C2C5C0743

SHA1: A9913D8FE3241AE66BE2D71107A0BC5702A5E75D

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.SysInfo.dll ---

Company:

File Description: Lavasoft.SysInfo

File Version: 1.0.0.0

Product Name: Lavasoft.SysInfo

Original Filename: Lavasoft.SysInfo.dll

File type: ----a-w-

File size: 65352

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:39:24

MD5: DAEA309B60CDF7EFA75A85B3AE1C6D56

SHA1: 5E37C519DD916F0406CF49D809B0C788E54DEB5C

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.Utils.dll ---

Company:

File Description: Utils

File Version: 1.0.0.0

Product Name: Utils

Original Filename: Lavasoft.Utils.dll

File type: ----a-w-

File size: 72000

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:38:34

MD5: 72886E4BD30DDD9D12284A5CA2921BAC

SHA1: D4C7AC0A9F072D91FEA3AD49ADB60160CE1DEDF6

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.Utils.SqlLite.dll ---

Company:

File Description: Utils.SqlLite

File Version: 1.0.0.0

Product Name: Utils.SqlLite

Original Filename: Lavasoft.Utils.SqlLite.dll

File type: ----a-w-

File size: 15696

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:38:32

MD5: 41C79A4C05B023B22281C2F4DFD63BD1

SHA1: BA2AD8FCB538B56C4FC1E2B3A1443437C7EF1A2E

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\Application\Lavasoft.Utils.SqlLite.dll.config ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 80

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:25:28

MD5: A286796695995884F4087756F92422D4

SHA1: 1EC84A362E28A5D6B0D01DB8430339CDD3FF5B2E

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\TcpService\2.3.1.4\LavasoftLSPInstaller.exe ---

Company: Lavasoft Limited

File Description:

File Version: 2.3.1.4

Product Name: LavasoftLSPInstaller.exe

Copyright:

Original Filename:

File type: ----a-w-

File size: 291032

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:39:50

MD5: 9BFF17A104CC9F301DDE5C9B121F6C35

SHA1: E193C8B0AD69D2DEE8310DCDED1BC1428462909F

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\TcpService\2.3.1.4\LavasoftLSPInstaller.ini ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 116

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:25:34

MD5: 1B97D004C654307E875388012D0292DE

SHA1: 148C8DF905EC0520B6A7651F39E655F3F045E4F8

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\TcpService\2.3.1.4\LavasoftLSPInstaller64.exe ---

Company: Lavasoft Limited

File Description:

File Version: 2.3.1.4

Product Name: LavasoftLSPInstaller64.exe

Copyright:

Original Filename:

File type: ----a-w-

File size: 335056

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:39:52

MD5: 0380853114708FF97B3FC98BAA39C82A

SHA1: 647FC5071B12CA267088127731A8B35693FF47E4

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\TcpService\2.3.1.4\LavasoftTcpService.dll ---

Company: Lavasoft Limited

File Description:

File Version: 2.3.1.4

Product Name: LavasoftTcpService.dll

Copyright:

Original Filename:

File type: ----a-w-

File size: 332216

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:39:52

MD5: 71D311C224FF8690D7CF7C2BA7219009

SHA1: 4E625E1536AE21EF16121F600E6D2CD519A78F88

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\TcpService\2.3.1.4\LavasoftTcpService.exe ---

Company: Lavasoft Limited

File Description:

File Version: 2.3.1.4

Product Name: LavasoftTcpService.exe

Copyright:

Original Filename:

File type: ----a-w-

File size: 1364392

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:39:54

MD5: 9BE23D81CE76E1DB0B5BF4E4E7359307

SHA1: 24CB6E53828254CF93043B00B53A4DA4F57D9325

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\TcpService\2.3.1.4\LavasoftTcpService.tlb ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 51660

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:25:34

MD5: 04ECAE4E4F9D8DF9A235A9ACD5CFA74A

SHA1: 7AB3AD7296ABFD1B5851E6596D01175CD994A91A

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\TcpService\2.3.1.4\LavasoftTcpService64.dll ---

Company: Lavasoft Limited

File Description:

File Version: 2.3.1.4

Product Name: LavasoftTcpService64.dll

Copyright:

Original Filename:

File type: ----a-w-

File size: 378832

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:39:54

MD5: 9E324D1774D1D2FC656B04523E20C456

SHA1: 0A424791F99F9B1D1406511CE630E1B51832DDE7

--- C:\zoek_backup\C_PROGRA~2_Lavasoft_Web Companion\TcpService\2.3.1.4\LavasoftTcpServiceCert.dll ---

Company: Lavasoft Limited

File Description:

File Version: 2.3.1.4

Product Name: LavasoftTcpServiceCert.dll

Original Filename:

File type: ----a-w-

File size: 190712

Created time: 2015-03-26 13:57:19

Modified time: 2015-01-23 05:39:56

MD5: AAAC84812CA437A9FF7C715D372F67CF

SHA1: 6FFC2FF6A8CBB70397AAA8DF7D4CB71B65CC21B8

==== Registry Search Results for "lavasoft" ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InProcServer32]

@="C:\\PROGRA~1\\Lavasoft\\AD-AWA~1\\AD-AWA~1\\115202~1.729\\ADAWAR~1.DLL"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\AppId_Catalog\27D3E74E]

"AppFullPath"="C:\\Program Files (x86)\\Lavasoft\\Web Companion\\TcpService\\2.3.1.4\\LavasoftTcpService.exe"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\27D3E74E]

"AppFullPath"="C:\\Program Files (x86)\\Lavasoft\\Web Companion\\TcpService\\2.3.1.4\\LavasoftTcpService.exe"

[HKEY_USERS\S-1-5-21-585850754-2346500513-583478177-1002\Software\ATI\ACE\Settings\Graphics\PowerXpress\Px4.0\ProfilelessAppList\3]

"Filepath"="\\device\\harddiskvolume4\\program files (x86)\\lavasoft\\web companion\\application\\webcompanion.exe"

[HKEY_USERS\S-1-5-21-585850754-2346500513-583478177-1002\Software\Microsoft\Internet Explorer\SearchScopes\{85A60A59-D3D8-468F-B598-FB4393789EF4}]

"FaviconPath"="C:\\ProgramData\\Lavasoft\\Web Companion\\Icons\\google.ico"

==== C:\zoek_backup content ======================

C:\zoek_backup (files=13032 folders=422 1488854213 bytes)

==== EOF on wo 01-04-2015 at 14:16:23,59 ======================

# AdwCleaner v4.200 - Logbestand aangemaakt 01/04/2015 op 13:56:14

# Laatste update 29/03/2015 door Xplode

# Database : 2015-03-29.1 [server]

# Besturingssysteem : Windows 8.1 (x64)

# Gebruikersnaam : anneke - ANNEKE

# Gestart vanuit : C:\Users\Anneke Saariste\Downloads\adwcleaner_4.200.exe

# Optie : Verwijderen

***** [ Services ] *****

***** [ Bestanden / Mappen ] *****

***** [ Geplande taken ] *****

Taak Verwijderd : avayvaxvaa

***** [ Snelkoppelingen ] *****

***** [ Register ] *****

Sleutel Verwijderd : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd

Sleutel Verwijderd : HKCU\Software\Classes\pokki

Sleutel Verwijderd : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\wajam.com

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com

Sleutel Verwijderd : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect

Sleutel Verwijderd : HKCU\Software\Mozilla\Extends

Sleutel Verwijderd : HKLM\SOFTWARE\5664411b-a35b-db47-91d0-f3d49cefe777

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}

Sleutel Verwijderd : HKCU\Software\InstallCore

Sleutel Verwijderd : HKCU\Software\Optimizer Pro

Sleutel Verwijderd : HKCU\Software\Pokki

Sleutel Verwijderd : HKCU\Software\Softonic

Sleutel Verwijderd : HKCU\Software\WEDLMNGR

Sleutel Verwijderd : HKCU\Software\Vosteran Browser

Sleutel Verwijderd : HKCU\Software\Appscion

Sleutel Verwijderd : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Sleutel Verwijderd : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}

Sleutel Verwijderd : HKCU\Software\AppDataLow\Software\adawarebp

Sleutel Verwijderd : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}

Sleutel Verwijderd : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Sleutel Verwijderd : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Sleutel Verwijderd : HKLM\SOFTWARE\mystartsearchSoftware

Sleutel Verwijderd : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}

Sleutel Verwijderd : HKLM\SOFTWARE\IHProtect

Sleutel Verwijderd : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\outlook-express.nl.softonic.com

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\softonic.com

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\vosteran.com

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\wajam.com

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\windows-live-mail.nl.softonic.com

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.wajam.com

***** [ Webbrowsers ] *****

-\\ Internet Explorer v11.0.9600.17416

-\\ Mozilla Firefox v36.0.4 (x86 nl)

-\\ Google Chrome v41.0.2272.101

[C:\Users\Anneke Saariste\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Verwijderd [search Provider] : hxxp://vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ggbc_15_05_ie&cd=2XzuyEtN2Y1L1Qzu0AtDtB0B0BzzyDyDyE0Dzy0B0FyC0EtCtN0D0Tzu0StCtCtBtCtN1L2XzutAtFyBtFtBtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAyBtDyB0AyB0DtCtG0AzzyB0CtGyCyB0A0CtG0DyB0EtDtGtCyB0C0BzztA0F0FtD0EtCtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzyzzyByBzz0BtBzztGtB0AyB0BtGyE0EtDyCtG0AyC0CzztGtCyDtBtDyEyD0DtCtAyEyC0B2Q&cr=126731716&ir=

[C:\Users\Anneke Saariste\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Verwijderd [search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3331493&octid=EB_ORIGINAL_CTID&ISID=F60A67D6-1243-46B5-9BB6-49B302884526&SearchSource=58&CUI=&UM=8&UP=SP21C7A77C-A0BB-4853-99EA-8F78C63D796F&q={searchTerms}&SSPV=

[C:\Users\Anneke Saariste\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Verwijderd [search Provider] : hxxp://www.mystartsearch.com/web/?type=dspp&ts=1422373342&from=sien&uid=ST1000LM014-1EJ164-SSHD_W381XVR8&q={searchTerms}

[C:\Users\Anneke Saariste\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Verwijderd [Extension] : booedmolknjekdopkepjjeckmjkdpfgl

[C:\Users\Anneke Saariste\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Verwijderd [Extension] : flpcjncodpafbgdpnkljologafpionhb

[C:\Users\Anneke Saariste\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Verwijderd [Extension] : fcfenmboojpjinhpgggodefccipikbpd

[C:\Users\Anneke Saariste\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Verwijderd [Default_Search_Provider_Data] :

*************************

AdwCleaner[R0].txt - [30434 bytes] - [01/04/2015 13:53:37]

AdwCleaner[s0].txt - [7532 bytes] - [01/04/2015 13:56:14]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [7591 bytes] ##########

kweezie wabbit · 2 april 2015

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InProcServer32];r
@=-;r
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|Lavasoft|Web Companion|Application|zh-Hans|WebCompanion.resources.dll];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\AppId_Catalog\27D3E74E];r
"AppFullPath"=-;r
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\27D3E74E];r
"AppFullPath"=-;r
[HKEY_USERS\S-1-5-21-585850754-2346500513-583478177-1002\Software\ATI\ACE\Settings\Graphics\PowerXpress\Px4.0\ProfilelessAppList\3];r
"Filepath"=-;r
[HKEY_USERS\S-1-5-21-585850754-2346500513-583478177-1002\Software\Microsoft\Internet Explorer\SearchScopes\{85A60A59-D3D8-468F-B598-FB4393789EF4}];r
"FaviconPath"=-;r

Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\Zoek-results.log.)
Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

corbu · 2 april 2015

Zoek.exe v5.0.0.0 Updated 31-March-2015

Tool run by anneke on do 02-04-2015 at 9:46:46,85.

Microsoft Windows 8.1 6.3.9600 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Anneke Saariste\Desktop\zoek.exe [scan all users] [script inserted]

==== Older Logs ======================

C:\zoek-results2015-03-26-140957.log 109493 bytes

C:\zoek-results2015-03-30-143337.log 49410 bytes

C:\zoek-results2015-03-31-074159.log 34524 bytes

C:\zoek-results2015-04-01-082303.log 26251 bytes

C:\zoek-results2015-04-01-121623.log 18641 bytes

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InProcServer32]

@=-

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters\AppId_Catalog\27D3E74E]

"AppFullPath"=-

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\27D3E74E]

"AppFullPath"=-

[HKEY_USERS\S-1-5-21-585850754-2346500513-583478177-1002\Software\ATI\ACE\Settings\Graphics\PowerXpress\Px4.0\ProfilelessAppList\3]

"Filepath"=-

Explorer\SearchScopes\{85A60A59-D3D8-468F-B598-FB4393789EF4}]

"FaviconPath"=-

==== C:\zoek_backup content ======================

C:\zoek_backup (files=13032 folders=422 1488854213 bytes)

==== EOF on do 02-04-2015 at 9:47:37,91 ======================

kweezie wabbit · 18 april 2015

Sorry voor de late reactie maar deze was even van mijn radar verdwenen.

Kan je ter controle zoek.exe nog eens uitvoeren?

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

lavasoft;z
lavasoft;a

Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\Zoek-results.log.)
Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

corbu · 21 april 2015

Zoek.exe v5.0.0.0 Updated 08-April-2015

Tool run by anneke on di 21-04-2015 at 15:56:42,66.

Microsoft Windows 8.1 6.3.9600 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Anneke Saariste\Desktop\zoek.exe [scan all users] [script inserted]

==== Older Logs ======================

C:\zoek-results2015-03-26-140957.log 109493 bytes

C:\zoek-results2015-03-30-143337.log 49410 bytes

C:\zoek-results2015-03-31-074159.log 34524 bytes

C:\zoek-results2015-04-01-082303.log 26251 bytes

C:\zoek-results2015-04-01-121623.log 18641 bytes

C:\zoek-results2015-04-02-074737.log 1519 bytes