Zoek.exe v5.0.0.0 Updated 02-March-2014 Tool run by Maxim on wo 05/03/2014 at 20:45:51,58. Microsoft Windows 7 Home Premium 6.1.7600 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Vrij\Desktop\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== Older Logs ====================== \zoek-results2013-03-27-171810.log 14351 bytes ==== Empty Folders Check ====================== C:\PROGRA~2\ContinueToSave deleted successfully C:\PROGRA~2\MSXML 4.0 deleted successfully C:\PROGRA~2\SafeSaver deleted successfully C:\Program Files\McAfee deleted successfully C:\Users\Maxim\AppData\Local\VirtualStore deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-2826479152-1464123832-2615865384-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FAF10747-03FC-31AC-863E-A2AAAFEAD505} deleted successfully HKEY_USERS\S-1-5-21-2826479152-1464123832-2615865384-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FAF10747-03FC-31AC-863E-A2AAAFEAD505} deleted successfully HKEY_USERS\S-1-5-21-2826479152-1464123832-2615865384-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FAF10747-03FC-31AC-863E-A2AAAFEAD505} deleted successfully HKEY_USERS\S-1-5-21-2826479152-1464123832-2615865384-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FAF10747-03FC-31AC-863E-A2AAAFEAD505} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{FAF10747-03FC-31AC-863E-A2AAAFEAD505} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FAF10747-03FC-31AC-863E-A2AAAFEAD505} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bichcsds deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\bichcsds deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\darjfgyk deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\darjfgyk deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\isojiwus deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\isojiwus deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pviefozd deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\pviefozd deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\qbsgacbt deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\qbsgacbt deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vjktqlmy deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vjktqlmy deleted successfully ==== Registry Fix Code x64 ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}] [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FAF10747-03FC-31AC-863E-A2AAAFEAD505}] ==== Deleting Files \ Folders ====================== C:\ProgramData\savenasHHarie deleted C:\PROGRA~2\SaveShare deleted C:\Users\Maxim\AppData\Roaming\OpenCandy deleted C:\PROGRA~3\0hjz91jz.cpp deleted C:\PROGRA~3\doqvt7cle.cpp deleted C:\PROGRA~3\elwa6ji8.cpp deleted C:\PROGRA~3\zj19zjh0.zvv deleted C:\PROGRA~3\StarApp deleted C:\PROGRA~3\OberonGameConsole deleted C:\PROGRA~3\safe save deleted C:\PROGRA~3\continuuetosave deleted C:\PROGRA~3\InstallMate deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\savenasHHarie deleted C:\Users\Maxim\AppData\LocalLow\continuuetosave deleted C:\Users\School\AppData\LocalLow\BRowse2save deleted C:\Users\School\AppData\LocalLow\savenasHHarie deleted C:\Users\School\AppData\LocalLow\BittorrentBar_NL deleted C:\Users\School\AppData\LocalLow\PriceGong deleted C:\Users\School\AppData\LocalLow\Conduit deleted C:\Users\Vrij\AppData\LocalLow\BRowse2save deleted C:\Users\Vrij\AppData\LocalLow\savenasHHarie deleted C:\Users\Vrij\AppData\LocalLow\safe save deleted C:\Users\Vrij\AppData\LocalLow\continuuetosave deleted C:\Users\Vrij\AppData\LocalLow\BittorrentBar_NL deleted C:\Users\Vrij\AppData\LocalLow\PriceGong deleted C:\Users\Vrij\AppData\LocalLow\Conduit deleted C:\Windows\wininit.ini deleted C:\Users\Vrij\Desktop\Muziek2\master.rar.exe deleted "C:\Windows\tasks\ReclaimerResumeInstallLogin_Maxim.job" deleted "C:\Windows\tasks\ReclaimerResumeInstall_Maxim.job" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Maxim\AppData\Local\Temp ==== 2014-02-26 16:36:10 BB76291E8FC4C40E518683CA24179D6D 183337 ----a-w- C:\Users\Vrij\AppData\Local\Temp\~+JF8848804748646192987.dll 2014-02-26 16:35:42 BB76291E8FC4C40E518683CA24179D6D 183337 ----a-w- C:\Users\Vrij\AppData\Local\Temp\Low\tapi.dll 2014-02-23 18:36:22 0F050B3DF3BF212EE6311A3EA9A0E75E 163840 ----a-w- C:\Users\Vrij\AppData\Local\Temp\Low\rjxx.dll 2014-02-21 07:30:17 9EB54EABFB8B9FA02BFC48AF3A9FD020 41984 ----a-w- C:\Users\School\AppData\Local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgtm_ix.dll ====== Java Cache ===== 2014-02-28 09:04:16 8C5DD785FAD1F9390FD182A57837A9F4 356 ----a-w- C:\Users\School\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-3bfada52 2014-02-26 16:36:10 9AF122BBDE8F8339B7B29CF69B5C6C6D 183337 ----a-w- C:\Users\Vrij\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\13e39f4e-3034deb2 2014-02-21 18:15:05 CA30EF7E3AC0225A8BF11B6AE6075F6D 699 ----a-w- C:\Users\Vrij\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\15ef4818-280ca1ea 2014-02-27 21:17:16 DE2401AE3628EE2B517148C99C5EDBAF 26840 ----a-w- C:\Users\Vrij\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\4d6c0158-445a6c35 2014-02-27 21:17:16 3DE78737B728811AF38EA780DE5F5ED7 26840 ----a-w- C:\Users\Vrij\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\4d6c0158-5c231b3d 2014-02-26 16:36:07 3DE78737B728811AF38EA780DE5F5ED7 26840 ----a-w- C:\Users\Vrij\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\45ae5864-1ec3e191 2014-02-26 16:36:07 3DE78737B728811AF38EA780DE5F5ED7 26840 ----a-w- C:\Users\Vrij\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\45ae5864-6b11112f 2014-02-27 21:17:20 750C3814D5F961420047ED9A43CB120F 183337 ----a-w- C:\Users\Vrij\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\7883268-1ef6ec75 2014-02-27 21:17:14 8B70F436DCDAF11A5B3162819DCBFB44 540 ----a-w- C:\Users\Vrij\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\64b28673-4812d9a2 2014-02-26 16:35:52 0C1309A924198D695862DA05B7DE1E98 540 ----a-w- C:\Users\Vrij\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60\36e8e6bc-6d0bee4f ====== C:\Windows\SysWOW64 ===== ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== ====== C:\Windows\Sysnative\drivers ===== ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2014-03-03 18:42:14 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== ======= ===== ====== C:\Users\Maxim\AppData\Roaming ====== 2014-02-17 13:17:17 -------- d-----w- C:\Users\School\AppData\Roaming\DropboxMaster 2014-02-17 13:16:51 -------- d-----w- C:\Users\School\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-02-17 13:16:27 -------- d-----w- C:\Users\Maxim\AppData\Roaming\Dropbox 2014-02-17 13:16:02 -------- d-----w- C:\Users\School\AppData\Roaming\Dropbox 2014-02-16 18:50:54 -------- d-----w- C:\Users\School\AppData\Local\Akamai ====== C:\Users\Maxim ====== 2014-03-03 18:40:44 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\Vrij\Desktop\RSITx64.exe 2014-02-17 13:17:53 -------- d-----r- C:\Users\School\Dropbox 2014-02-16 19:06:31 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-02-16 19:06:26 -------- d-----w- C:\ProgramData\regid.1991-06.com.microsoft ====== C: exe-files == 2014-03-04 17:38:29 99EDAB82414D23D14947415E5C502FE1 786136 ----a-w- C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\33.0.1750.146\33.0.1750.146_33.0.1750.117_chrome_updater.exe 2014-03-03 18:42:14 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Maxim.exe 2014-03-03 18:40:44 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\Vrij\Desktop\RSITx64.exe 2014-03-03 18:31:23 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\Vrij\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TA1YB23P\RSITx64.exe === C: other files == ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-2826479152-1464123832-2615865384-1000\Software\Microsoft\Windows\CurrentVersion\Run] "Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent" [HKEY_USERS\S-1-5-21-2826479152-1464123832-2615865384-1001\Software\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" "Spotify"="C:\Users\Vrij\AppData\Roaming\Spotify\Spotify.exe /uri spotify:autostart" "Spotify Web Helper"="C:\Users\Vrij\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" "SuiteTray"="C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" "EgisUpdate"="C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe -d" "EgisTecPMMUpdate"="C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe" "NortonOnlineBackupReminder"="C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe UNATTENDED" "Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" "BackupManagerTray"="C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe -h -k" "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun" "LManager"="C:\Program Files (x86)\Launch Manager\LManager.exe" "MDS_Menu"="C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso UpdateWithCreateOnce Software\CyberLink\MediaShow Espresso\5.6" "ArcadeMovieService"="C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe" "CommonToolkitTray"="C:\Program Files (x86)\Fighters\Tray\FightersTray.exe" "APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" "BCSSync"="C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe /DelayServices" "TkBellExe"="C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe -osboot" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "PWRISOVM.EXE"="C:\Program Files (x86)\PowerISO\PWRISOVM.EXE" "iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="c:\\progra~2\\savesh~1\\sprote~1.dll" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "RtHDVBg"="C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 " "AmIcoSinglun64"="C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" "ODDPwr"="C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe" "mwlDaemon"="C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" "IgfxTray"="C:\Windows\system32\igfxtray.exe" "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" "Persistence"="C:\Windows\system32\igfxpers.exe" "PLFSetI"="C:\Windows\PLFSetI.exe" "Acer ePower Management"="C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe" "MSC"="c:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey" "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe " ==== Startup Folders ====================== 2014-02-17 13:17:21 1391 ----a-w- C:\Users\School\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk 2010-05-14 04:14:59 1782 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk 2012-12-27 17:10:33 834 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [21/02/2014 15:34] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [27/12/2012 18:06] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [27/12/2012 18:06] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2826479152-1464123832-2615865384-1001" [C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe] "C:\Windows\SysNative\tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2826479152-1464123832-2615865384-1001" [C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe] "C:\Windows\SysNative\tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2826479152-1464123832-2615865384-1001" [C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe] "C:\Windows\SysNative\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2826479152-1464123832-2615865384-1000" [C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\SysNative\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2826479152-1464123832-2615865384-1001" [C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\SysNative\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2826479152-1464123832-2615865384-1000" [C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\SysNative\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2826479152-1464123832-2615865384-1001" [C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe] "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] "C:\Windows\SysNative\tasks\Recovery Management\Burn Notification" [C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "{34712C68-7391-4c47-94F3-8F88D49AD632}"="C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext" [19/01/2013 19:23] ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions fheoggkfdfchfphceeifdbepaooicaho - No path found[] idhngdhcfkoamngbedgpaokgjbnpdiji - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx[29/11/2012 20:35] continuuetosave - Maxim\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmpbcipchplnfbapbdpfociblkdnhaaa SiteAdvisor - Maxim\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho savenasHHarie - Maxim\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmgfkglfdlkbebekobjfcniekfahpod RealDownloader - Maxim\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji safe save - Maxim\AppData\Local\Google\Chrome\User Data\Default\Extensions\jikapgmhlmipkiifgpjiaojgpljjbcjl Google Wallet - Maxim\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda SiteAdvisor - School\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho RealDownloader - School\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji Google Wallet - School\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Google Docs - Vrij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Vrij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Vrij\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - Vrij\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf SiteAdvisor - Vrij\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho RealDownloader - Vrij\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji Google Wallet - Vrij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - Vrij\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Chrome Fix ====================== C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage-journal deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho deleted successfully C:\Users\School\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho deleted successfully C:\Users\Vrij\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Extensions\jikapgmhlmipkiifgpjiaojgpljjbcjl deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jikapgmhlmipkiifgpjiaojgpljjbcjl_0.localstorage deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jikapgmhlmipkiifgpjiaojgpljjbcjl_0.localstorage-journal deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jikapgmhlmipkiifgpjiaojgpljjbcjl deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmpbcipchplnfbapbdpfociblkdnhaaa deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bmpbcipchplnfbapbdpfociblkdnhaaa_0.localstorage deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bmpbcipchplnfbapbdpfociblkdnhaaa_0.localstorage-journal deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bmpbcipchplnfbapbdpfociblkdnhaaa deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmgfkglfdlkbebekobjfcniekfahpod deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gcmgfkglfdlkbebekobjfcniekfahpod_0.localstorage deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gcmgfkglfdlkbebekobjfcniekfahpod_0.localstorage-journal deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcmgfkglfdlkbebekobjfcniekfahpod deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.be/" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.be/" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{67A2568C-7A0A-4EED-AECC-B5405DE63B64}" {22B5DDE2-66F5-47C6-995C-B3855F3B7CB9} Google Url="http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_nlBE516" {67A2568C-7A0A-4EED-AECC-B5405DE63B64} Bing Url="http://www.bing.com/search?FORM=UP09DF&PC=UP09&q={searchTerms}&src=IE-SearchBox" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{244B4E74-C9C8-4BE4-7195-3F495C236D16} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{491F1BCC-81D1-EAD2-BDC6-1DF5ECFCD94A} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8259C5C4-9798-0D06-150F-8802EE02FA64} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E276B001-1111-852B-11B0-47342DC98853} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E40E13E3-4D2B-D94D-5211-734B99F48CA7} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Maxim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Maxim\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\School\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\School\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\School\AppData\Local\temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Vrij\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Vrij\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Vrij\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Maxim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Users\Vrij\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\Users\School\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\Users\Vrij\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache is not empty, a reboot is needed ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=1646 folders=245 95382583 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\temp emptied successfully C:\Users\Default User\AppData\Local\temp emptied successfully C:\Users\Maxim\AppData\Local\Temp will be emptied at reboot C:\Users\Public\AppData\Local\temp emptied successfully C:\Users\School\AppData\Local\temp emptied successfully C:\Users\Vrij\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Maxim\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Maxim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found "C:\Users\Vrij\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Users\Vrij\AppData\Local\Temp\aipflib.log" not deleted "C:\Users\Vrij\AppData\Local\Temp\FXSAPIDebugLogFile.txt" not deleted "C:\Users\Vrij\AppData\Local\Temp\LManager.log" not deleted "C:\Users\Vrij\AppData\Local\Temp\LMworker.log" not deleted "C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found "C:\Users\Vrij\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8R968YJH\admin.brightcove.com" not found "C:\Users\Vrij\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8R968YJH\anyporn.com" not found "C:\Users\Vrij\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8R968YJH\d1wzz5kud44ps3.cloudfront.net" not found "C:\Users\Vrij\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8R968YJH\static.exposedwebcams.com" not found "C:\Users\Vrij\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8R968YJH\static.muzu.tv" not found "C:\Users\Vrij\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8R968YJH\zopim.com" not found ==== EOF on wo 05/03/2014 at 21:06:43,83 ======================