Zoek.exe v5.0.0.0 Updated 12-Januari-2014 Tool run by pieter en anja on ma 13-01-2014 at 19:35:40,03. Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\pieter en anja\Desktop\zoek.exe [Scan all users] [Script inserted] ==== Older Logs ====================== C:\zoek-results2013-12-11-184537.log 3440 bytes C:\zoek-results2013-12-12-170546.log 38202 bytes C:\zoek-results2013-12-15-093304.log 41048 bytes C:\zoek-results2013-12-16-175557.log 651 bytes C:\zoek-results2013-12-16-183316.log 692 bytes ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iSafeService deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\iSafeService deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iSafeKrnl deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\iSafeKrnl deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iSafeNetFilter deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\iSafeNetFilter deleted successfully ==== FireFox Fix ====================== ProfilePath: C:\Users\pieter en anja\AppData\Roaming\Mozilla\Firefox\Profiles\iy4wii2d.default user.js not found ---- Lines browser.startup.page removed from prefs.js ---- user_pref("browser.startup.page", 3); ---- FireFox user.js and prefs.js backups ---- user_11-12-2013_1945_.backup user_16-12-2013_1855_.backup user_16-12-2013_1933_.backup prefs_11-12-2013_1945_.backup prefs_13-01-2014_1953_.backup prefs_16-12-2013_1855_.backup prefs_16-12-2013_1933_.backup ==== Batch Command(s) Run By Tool====================== De volumenaam van station C is BOOT Het volumenummer is 78AA-1088 Map van C:\Windows\System32 13-01-2014 19:35 . 13-01-2014 19:35 .. 02-11-2006 13:42 0409 26-11-2008 23:08 0413 23-09-2013 06:03 Adobe 21-10-2009 21:22 ADVANC~1 AdvancedInstallers 18-11-2009 08:03 ar-SA 18-11-2009 08:03 bg-BG 21-10-2009 21:20 Boot 26-11-2008 23:08 Branding 21-10-2009 21:22 ca-ES 27-03-2010 15:28 CANONI~1 CanonIJ Uninstaller Information 13-12-2013 18:24 catroot 02-01-2014 09:51 catroot2 27-03-2010 15:26 CHM 29-10-2012 20:40 CODEIN~1 CodeIntegrity 26-11-2008 23:08 com 09-10-2013 18:45 config 18-11-2009 08:03 cs-CZ 18-11-2009 08:03 da-DK 18-11-2009 08:03 de-DE 08-01-2014 20:13 drivers 26-11-2008 23:08 DRIVER~1 DriverStore 22-09-2012 19:00 DRVSTORE 18-11-2009 08:03 el-GR 21-10-2009 21:22 en 14-11-2013 03:21 en-US 18-11-2009 08:03 es-ES 18-11-2009 08:03 et-EE 21-10-2009 21:22 eu-ES 25-09-2009 21:46 EVENTP~1 EventProviders 23-10-2013 06:38 Extensions 18-11-2009 08:03 fi-FI 18-11-2009 08:03 fr-FR 11-03-2011 07:28 GROUPP~1 GroupPolicy 02-11-2006 11:23 GROUPP~2 GroupPolicyUsers 18-11-2009 08:03 he-IL 18-11-2009 08:03 hr-HR 18-11-2009 08:03 hu-HU 21-01-2008 03:34 ias 21-01-2008 03:34 icsxml 02-11-2006 12:18 IME 02-11-2006 11:33 inetsrv 21-02-2009 15:29 IOSUBSYS 18-11-2009 08:03 it-IT 18-11-2009 08:03 ja-JP 18-11-2009 08:03 ko-KR 02-11-2006 13:37 LICENS~1 licensing 21-12-2013 19:36 LogFiles 18-11-2009 08:03 lt-LT 18-11-2009 08:03 lv-LV 24-11-2013 19:09 Macromed 21-10-2009 21:22 MANIFE~1 manifeststore 22-08-2009 17:07 MEDIAI~1 MediaImpression Slideshow 02-11-2006 13:47 MICROS~1 Microsoft 14-12-2013 08:10 MIGRAT~1 migration 21-10-2009 21:22 migwiz 13-12-2013 18:28 MRT 29-10-2012 20:40 Msdtc 26-11-2008 23:08 MUI 18-11-2009 08:03 nb-NO 12-02-2009 19:08 NDF 02-11-2006 12:18 NETWOR~1 networklist 26-11-2008 23:08 nl 14-11-2013 03:21 nl-NL 26-11-2008 14:45 OEM 21-10-2009 21:22 oobe 18-11-2009 08:03 pl-PL 26-11-2008 23:08 PRINTI~1 Printing_Admin_Scripts 18-11-2009 08:03 pt-BR 18-11-2009 08:03 pt-PT 21-01-2008 03:34 ras 02-11-2006 12:18 RemInst 11-02-2009 23:23 restore 18-11-2009 08:03 ro-RO 14-12-2013 08:10 RTCOM 18-11-2009 08:03 ru-RU 23-10-2013 06:38 searchplugins 21-10-2009 21:22 setup 18-11-2009 08:03 sk-SK 18-11-2009 08:03 sl-SI 26-11-2008 23:08 slmgr 21-10-2009 21:22 SLUI 02-11-2006 12:18 SMI 02-11-2006 13:37 Speech 29-10-2012 20:40 spool 18-11-2009 08:03 SR-LAT~1 sr-Latn-CS 27-03-2010 15:26 STRING 18-11-2009 08:03 sv-SE 08-01-2009 11:56 sysprep 04-01-2014 14:55 Tasks 18-11-2009 08:03 th-TH 18-11-2009 08:03 tr-TR 18-11-2009 08:03 uk-UA 21-10-2009 21:22 vi-VN 28-08-2013 18:22 wbem 26-11-2008 23:08 WCN 13-02-2012 21:28 WDI 02-11-2006 14:02 wfp 17-10-2010 15:06 WINDOW~1 WindowsPowerShell 02-11-2006 12:18 winevt 26-11-2008 23:08 winrm 28-07-2013 08:42 XPSVIE~1 XPSViewer 18-11-2009 08:03 zh-CN 18-11-2009 08:03 zh-HK 18-11-2009 08:03 zh-TW 18-03-2010 14:47 A720~1 ? 28-02-2011 08:10 8EFFB~1 ?????8?????? 0 bestand(en) 0 bytes 108 map(pen) 529.119.436.800 bytes beschikbaar ==== Deleting Files \ Folders ====================== C:\Program Files\Mozilla Firefox\components\msservice.js deleted C:\Users\pieter en anja\AppData\Roaming\Smiley.ico deleted C:\Users\pieter en anja\AppData\Roaming\eCyber deleted C:\Users\pieter en anja\AppData\Local\BearShare deleted C:\Users\pieter en anja\AppData\Local\avgchrome deleted C:\Users\pieter en anja\AppData\Local\AppsHat Mobile Apps deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC deleted C:\Users\pieter en anja\Downloads\SoftonicDownloader_voor_minecraft (1).exe deleted C:\Users\pieter en anja\Downloads\SoftonicDownloader_voor_minecraft (2).exe deleted C:\Users\pieter en anja\Downloads\SoftonicDownloader_voor_minecraft (3).exe deleted C:\Users\pieter en anja\Downloads\SoftonicDownloader_voor_minecraft (4).exe deleted C:\Users\pieter en anja\Downloads\SoftonicDownloader_voor_minecraft (5).exe deleted C:\Users\pieter en anja\Downloads\SoftonicDownloader_voor_minecraft (6).exe deleted C:\Users\pieter en anja\Downloads\SoftonicDownloader_voor_minecraft (7).exe deleted C:\Users\pieter en anja\Downloads\SoftonicDownloader_voor_minecraft.exe deleted C:\Users\pieter en anja\AppData\LocalLow\mediabarbs deleted C:\Users\pieter en anja\AppData\LocalLow\DataMngr deleted C:\Windows\system32\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted C:\Windows\System32\searchplugins deleted C:\Windows\System32\Extensions deleted ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"="C:\Program Files\McAfee\SiteAdvisor" [02-01-2014 09:51] ==== Firefox Extensions ====================== ProfilePath: C:\Users\pieter en anja\AppData\Roaming\Mozilla\Firefox\Profiles\iy4wii2d.default - Microsoft .NET Framework Assistant - %ProfilePath%\extensions\{20a82645-c095-46ed-80e3-08825760534b} AppDir: C:\Program Files\Mozilla Firefox - Undetermined - %AppDir%\extensions\{129b29a3-f554-444b-aa12-8ead59836cc8} - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\pieter en anja\AppData\Roaming\Mozilla\Firefox\Profiles\iy4wii2d.default F891089A6AB9E12FEDEBCC5EC0F40D66 - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll - Shockwave Flash 5B92CB0A3EEE50F6B9AE036B4F9B0F0C - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin BE501CBC29B2025A263D80D399F1797A - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll - Silverlight Plug-In B27CCB1168B1960AEC6E9D3E0E0F0D2A - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrlui.dll - Microsoft® Silverlight ==== Chrome Look ====================== ==== Chrome Fix ====================== C:\Users\pieter en anja\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.incredibar.com_0.localstorage deleted successfully C:\Users\pieter en anja\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.incredibar.com_0.localstorage-journal deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.nl/" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] @="http://www.google.com/search/?q=%s" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.nl/" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.msn.com/results.asp?q=%s" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0191A6B0-1154-4C22-9182-23A95BBE92D9}" {0191A6B0-1154-4C22-9182-23A95BBE92D9} Google Url="http://www.google.com/search?q={searchTerms}&rlz=1I7MEDB_nl" {67A2568C-7A0A-4EED-AECC-B5405DE63B64} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MEDB" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== shortcuts on Users Desktops ====================== C:\Users\pieter en anja\Desktop\adwcleaner.exe - Snelkoppeling.lnk - C:\Users\pieter en anja\Downloads\adwcleaner.exe C:\Users\pieter en anja\Desktop\Google Desktop.lnk - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Users\pieter en anja\Desktop\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe C:\Users\pieter en anja\Desktop\KPN Assistent.lnk - C:\Program Files\KPN\KPN Assistent\KPN Assistent\KPN_Assistent.exe C:\Users\pieter en anja\Desktop\Spotify.lnk - C:\Users\pieter en anja\AppData\Roaming\Spotify\spotify.exe C:\Users\pieter en anja\Desktop\windows mail.lnk - C:\Program Files\Windows Mail\WinMail.exe ==== shortcuts on All Users Desktop ====================== C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\Public\Desktop\Google Earth.lnk - C:\Program Files\Google\Google Earth\client\googleearth.exe C:\Users\Public\Desktop\KPN Installatie Assistent.lnk - C:\Program Files\KPN\KPN Installatie Assistent\KPN_IA.exe C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe ==== shortcuts in Users Start Menu ====================== C:\Users\pieter en anja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player\Uninstall.lnk - C:\Users\pieter en anja\AppData\Local\WebPlayer\Uninstall.exe C:\Users\pieter en anja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk - C:\Program Files\WinRAR\Rar.txt C:\Users\pieter en anja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\What is new in the latest version.lnk - C:\Program Files\WinRAR\WhatsNew.txt C:\Users\pieter en anja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR help.lnk - C:\Program Files\WinRAR\WinRAR.chm C:\Users\pieter en anja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk - C:\Program Files\WinRAR\WinRAR.exe ==== shortcuts in All Users Start Menu ====================== C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GCH Guitar academy\Guitar Tuner.lnk - C:\Program Files\GCH Guitar academy\tuner.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GCH Guitar academy\Uninstall.lnk - C:\Program Files\GCH Guitar academy\uninstall.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth\Uninstall Google Earth Plug-in.lnk - C:\Windows\System32\msiexec.exe /x {4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E} FEEDBACK=1 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk - C:\Program Files\Microsoft Silverlight\5.1.20913.0\Silverlight.Configuration.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk - C:\Program Files\WinRAR\Rar.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\What is new in the latest version.lnk - C:\Program Files\WinRAR\WhatsNew.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR help.lnk - C:\Program Files\WinRAR\WinRAR.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk - C:\Program Files\WinRAR\WinRAR.exe ==== shortcuts in Quick Launch ====================== C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\pieter en anja\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\pieter en anja\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe C:\Users\pieter en anja\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe C:\Users\pieter en anja\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk - C:\Program Files\Nero\Nero8\Nero StartSmart\NeroStartSmart.exe -ScParameter=65 C:\Users\pieter en anja\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\pieter en anja\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\pieter en anja\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk - C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 ==== Empty IE Cache ====================== C:\Users\pieter en anja\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\pieter en anja\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\pieter en anja\AppData\Local\Mozilla\Firefox\Profiles\iy4wii2d.default\Cache emptied successfully ==== Empty Chrome Cache ====================== C:\Users\pieter en anja\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=203 folders=21 75893754 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Public\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Users\pieter en anja\AppData\Local\Temp will be emptied at reboot C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\PIETER~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\pieter en anja\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found ==== EOF on ma 13-01-2014 at 19:57:07,94 ======================