Zoek.exe v5.0.0.0 Updated 07-March-2014 Tool run by leoroumans on zo 30-03-2014 at 8:36:52,42. Microsoft Windows 8 6.2.9200 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\leoroumans\Downloads\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== System Restore Info ====================== 30-3-2014 08:39:06 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~2\Fighters deleted successfully C:\PROGRA~2\VS Revo Group deleted successfully C:\PROGRA~2\Zylom Games deleted successfully C:\PROGRA~2\COMMON~1\Symantec Shared deleted successfully C:\Program Files\Babylon deleted successfully C:\PROGRA~3\Babylon deleted successfully C:\Users\leoroumans\AppData\Roaming\Nico Mak Computing deleted successfully C:\Users\leoroumans\AppData\Roaming\PerformerSoft deleted successfully C:\Users\leoroumans\AppData\Roaming\Vso deleted successfully C:\Users\leoroumans\AppData\Roaming\Windows Live Writer deleted successfully C:\Users\leoroumans\AppData\Local\HP Quick Start deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} deleted successfully HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} deleted successfully HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} deleted successfully HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} deleted successfully HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} deleted successfully HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully HKEY_CLASSES_ROOT\CLSID\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} deleted successfully HKEY_CLASSES_ROOT\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BackupStack deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Yontoo Desktop Updater deleted successfully ==== Registry Fix Code x64 ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0}] [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0}] [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}] [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Yontoo Desktop"=- [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] ""=- ==== Deleting Files \ Folders ====================== C:\Program Files (x86)\Yontoo deleted C:\Users\leoroumans\AppData\Roaming\DVDVideoSoft deleted C:\PROGRA~2\GUM1FD2.tmp deleted C:\PROGRA~2\Mozilla Firefox\user.js deleted C:\PROGRA~2\sweetpacks bundle uninstaller deleted C:\found.000 deleted C:\Users\leoroumans\AppData\Roaming\DigitalSites deleted C:\Users\leoroumans\AppData\Roaming\BabSolution deleted C:\Users\leoroumans\AppData\Roaming\Babylon deleted C:\Users\leoroumans\AppData\Roaming\File Scout deleted C:\Users\leoroumans\AppData\Roaming\Delta deleted C:\Users\leoroumans\AppData\Roaming\DSite deleted C:\Users\leoroumans\AppData\Roaming\Systweak deleted C:\Users\leoroumans\Qtrax deleted C:\Users\leoroumans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QTRAX deleted C:\Users\leoroumans\Music\Qtrax Media Library deleted C:\PROGRA~3\Systweak deleted C:\PROGRA~3\IBUpdaterService deleted C:\PROGRA~3\Tarma Installer deleted C:\Users\leoroumans\AppData\Local\IAC deleted C:\Users\leoroumans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup deleted C:\Users\leoroumans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk deleted C:\windows\SysNative\roboot64.exe deleted C:\windows\SysNative\sasnative64.exe deleted C:\windows\SysNative\Tasks\DSite deleted C:\Users\leoroumans\Downloads\iLividSetup-r428-n-bc (1).exe deleted C:\Users\leoroumans\Downloads\iLividSetup-r428-n-bc (2).exe deleted C:\Users\leoroumans\Downloads\iLividSetup-r428-n-bc (3).exe deleted C:\Users\leoroumans\Downloads\iLividSetup-r428-n-bc (4).exe deleted C:\Users\leoroumans\Downloads\iLividSetup-r428-n-bc.exe deleted C:\Users\leoroumans\Downloads\rcpsetupmapp_mapp1049999 (1).exe deleted C:\Users\leoroumans\Downloads\rcpsetupmapp_mapp1049999 (2).exe deleted C:\Users\leoroumans\Downloads\rcpsetupmapp_mapp1049999.exe deleted C:\Users\leoroumans\Downloads\rcpsetupmapp_mapp1161306.exe deleted C:\Users\leoroumans\Downloads\rcpsetupmarm1_marm10nl.exe deleted C:\Users\leoroumans\Downloads\SoftonicDownloader_voor_tomtom-home.exe deleted C:\Users\leoroumans\Downloads\SoftonicDownloader_voor_windows-live-messenger-2011 (1).exe deleted C:\Users\leoroumans\Downloads\SoftonicDownloader_voor_windows-live-messenger-2011.exe deleted C:\Users\leoroumans\AppData\LocalLow\IAC deleted C:\Users\leoroumans\AppData\LocalLow\Delta deleted C:\Users\leoroumans\AppData\LocalLow\Smartbar deleted C:\Users\leoroumans\AppData\LocalLow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com deleted C:\windows\SysNative\Tasks\Advanced System Protector_startup deleted C:\windows\SysNative\Tasks\EPUpdater deleted C:\windows\SysNative\tasks\Digital Sites deleted C:\windows\tasks\Digital Sites.job deleted C:\windows\SysWow64\searchplugins deleted C:\windows\SysWow64\Extensions deleted C:\Users\leoroumans\Desktop\rcpsetup_softonic_sd_new.exe deleted C:\Users\leoroumans\Desktop\MyPC Backup.lnk deleted "C:\PROGRA~3\3826\270171890.dat" deleted "C:\PROGRA~3\3826\270171890.dll" deleted "C:\PROGRA~3\3826\msee.dll" deleted "C:\PROGRA~3\3826\qnud.dat" deleted "C:\PROGRA~3\3826\rexx.dat" deleted "C:\PROGRA~3\3826\xes2.dat" deleted "C:\Program Files (x86)\MyPC Backup\AWSSDK.dll" deleted "C:\Program Files (x86)\MyPC Backup\BackupStack.exe" deleted "C:\Program Files (x86)\MyPC Backup\MPCBClient.dll" deleted "C:\Program Files (x86)\MyPC Backup\Shared Stack.dll" deleted "C:\PROGRA~2\Advanced System Protector\AdvancedSystemProtector.exe" deleted "C:\PROGRA~2\Advanced System Protector\aspsys.dll" deleted "C:\PROGRA~2\Advanced System Protector\Microsoft.Win32.TaskScheduler.DLL" deleted "C:\PROGRA~2\Advanced System Protector\System.Data.SQLite.dll" deleted "C:\PROGRA~2\Advanced System Protector\Xceed.Compression.dll" deleted "C:\PROGRA~2\Advanced System Protector\Xceed.FileSystem.dll" deleted "C:\PROGRA~2\Advanced System Protector\Xceed.Zip.dll" deleted "C:\PROGRA~2\MyPC Backup\AWSSDK.dll" deleted "C:\PROGRA~2\MyPC Backup\BackupStack.exe" deleted "C:\PROGRA~2\MyPC Backup\MPCBClient.dll" deleted "C:\PROGRA~2\MyPC Backup\Shared Stack.dll" deleted "C:\Users\leoroumans\AppData\Roaming\Yontoo\YontooDesktop.exe" deleted "C:\Program Files (x86)\MyPC Backup\x64\System.Data.SQLite.dll" deleted "C:\PROGRA~2\MyPC Backup\x64\System.Data.SQLite.dll" deleted "C:\Users\leoroumans\AppData\Roaming\Yontoo\dat\Desktop.OS.Plugin.dll" deleted "C:\PROGRA~3\3826" deleted "C:\Program Files (x86)\Delta" deleted "C:\Program Files (x86)\MyPC Backup" not deleted "C:\PROGRA~2\Delta" deleted "C:\PROGRA~2\Advanced System Protector" not deleted "C:\PROGRA~2\MyPC Backup" not deleted "C:\Users\leoroumans\AppData\Roaming\Yontoo" deleted "C:\Users\leoroumans\AppData\Local\Smartbar" deleted "C:\Program Files (x86)\MyPC Backup\x64" not deleted "C:\PROGRA~2\MyPC Backup\x64" not deleted "C:\Users\leoroumans\AppData\Roaming\Yontoo\dat" deleted ==== Files Recently Created / Modified ====================== ====== C:\windows ==== ====== C:\Users\LEOROU~1\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\windows\SysWOW64 ===== ====== C:\windows\SysWOW64\drivers ===== ====== C:\windows\Sysnative ===== 2014-03-28 22:49:33 5AEC00E3CB0E014C09B49A8CD60AD196 428912 ----a-w- C:\windows\Sysnative\FNTCACHE.DAT ====== C:\windows\Sysnative\drivers ===== 2014-03-13 08:24:24 CEBD9CDAADA11FAECCA82E4C06BCDD8E 248240 ----a-w- C:\windows\Sysnative\drivers\WdFilter.sys 2014-03-13 08:24:23 07D19A55CD27B330534D2DDEA60D5FC6 35856 ----a-w- C:\windows\Sysnative\drivers\WdBoot.sys ====== C:\windows\Tasks ====== 2014-03-24 15:12:06 88718C96A40A300FE67149218CEC1C53 360 ----a-w- C:\windows\Tasks\HPCeeScheduleForleoroumans.job 2014-03-24 15:12:06 831C842854E6FDD7D20B99ACD7346D1F 3184 ----a-w- C:\windows\Sysnative\Tasks\HPCeeScheduleForleoroumans ====== C:\windows\Temp ====== ======= C:\Program Files ===== 2014-03-29 19:14:14 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== ======= C: ===== ====== C:\Users\leoroumans\AppData\Roaming ====== 2014-03-09 19:05:01 -------- d-----w- C:\Users\leoroumans\AppData\Local\Skype ====== C:\Users\leoroumans ====== 2014-03-29 19:13:05 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\leoroumans\Downloads\RSITx64.exe 2014-03-29 18:54:23 565592D342E241EB6FCA351F9C810AE3 4787368 ----a-w- C:\Users\leoroumans\Downloads\ccsetup412.exe 2014-03-29 18:14:58 7FFE531FC3065DE780E683F4197B5F67 4892480 ----a-w- C:\Users\leoroumans\Documents\wzmp_8.exe ====== C: exe-files == 2014-03-29 19:14:14 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\leoroumans.exe 2014-03-29 19:13:05 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\leoroumans\Downloads\RSITx64.exe 2014-03-29 18:54:23 565592D342E241EB6FCA351F9C810AE3 4787368 ----a-w- C:\Users\leoroumans\Downloads\ccsetup412.exe 2014-03-29 18:14:58 7FFE531FC3065DE780E683F4197B5F67 4892480 ----a-w- C:\Users\leoroumans\Documents\wzmp_8.exe 2014-03-28 17:29:06 E093151047BBFFC0CD78D52F36490206 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleUpdateOnDemand.exe 2014-03-28 17:29:06 398F40FAE5ADA9521544393F1F67A17E 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleUpdateBroker.exe 2014-03-28 17:29:05 039DE3F65C7992994F788EAC8E79BF4F 884504 ----a-w- C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleUpdateSetup.exe 2014-03-28 17:29:04 7E6B107120108B3A15BFECE0DE3201DB 228744 ----atw- C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe 2014-03-28 17:29:04 6EFC5F64258FE0D9DA3CCFA7FF4D84BD 114568 ----atw- C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleUpdateComRegisterShell64.exe 2014-03-28 17:29:04 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleUpdate.exe 2014-03-28 17:29:04 0D5CE0E5AEC3ACC7930AB955334B8533 281480 ----atw- C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe 2014-03-28 17:29:02 039DE3F65C7992994F788EAC8E79BF4F 884504 ----a-w- C:\Program Files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.23.9\GoogleUpdateSetup.exe === C: other files == ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Windows\CurrentVersion\Run] "TomTomHOME.exe"="C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" "Driver Restore"="C:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe /applicationMode:systemTray /showWelcome:false" "EPLTarget\P0000000000000000"="C:\windows\system32\spool\DRIVERS\x64\3\E_IATIILE.EXE /EPT EPLTarget\P0000000000000000 /M XP-205 207 Series" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CLMLServer_For_P2G8"="c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" "CLVirtualDrive"="c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe /R" "HP Software Update"="C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "TomTomHOME.exe"="C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" "Driver Restore"="C:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe /applicationMode:systemTray /showWelcome:false" "EPLTarget\P0000000000000000"="C:\windows\system32\spool\DRIVERS\x64\3\E_IATIILE.EXE /EPT EPLTarget\P0000000000000000 /M XP-205 207 Series" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="C:\windows\system32\igfxtray.exe" "Persistence"="C:\windows\system32\igfxpers.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "NCPluginUpdater"="C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe Update" ==== Startup Folders ====================== 2013-01-17 13:02:19 1298 ----a-w- C:\Users\leoroumans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Schermopname en Snel starten.lnk 2012-11-27 18:23:06 2101 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk 2013-07-23 15:03:57 2048 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk ==== Task Scheduler Jobs ====================== C:\windows\tasks\GoogleUpdateTaskMachineCore.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [15-01-2013 15:28] C:\windows\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [15-01-2013 15:28] C:\windows\tasks\HPCeeScheduleForleoroumans.job --a-------- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [13-09-2010 23:15] ==== Other Scheduled Tasks ====================== "C:\windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\BrowserChoice\browserchoice.exe] "C:\windows\SysNative\tasks\Driver Restore-RTMRules" [C:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe] "C:\windows\SysNative\tasks\Driver Restore-RTMScan" [C:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe] "C:\windows\SysNative\tasks\Driver Restore-RTMUpdater" [C:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe] "C:\windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\windows\SysNative\tasks\HPCeeScheduleForleoroumans" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe] "C:\windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe] "C:\windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe] "C:\windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\Update Check" [C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater\HPSFUpdater.exe] "C:\windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "e-webprint@epson.com"="C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on" [12-11-2013 16:02] ==== Firefox Extensions ====================== ProfilePath: C:\Users\LEOROU~1\AppData\Roaming\TomTom\HOME\Profiles\sd78tyfa.default - Map status indicator - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com - TomTom HOME default theme - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com ==== Firefox Plugins ====================== ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions eooncjejnppfjjklapaamhcdmjbilmde - C:\Users\leoroumans\AppData\Roaming\BabSolution\CR\delta1.crx[] niapdbllcanepiiimjjndipklodoedlc - C:\Program Files (x86)\Yontoo\YontooLayers.crx[] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions amfclgbdpgndipgoegfpkkgobahigbcl - C:\Users\leoroumans\AppData\Local\Smartbar/Application\1Extension.crx[] Delta Toolbar - leoroumans\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde Google Wallet - leoroumans\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda ==== Chrome Fix ====================== C:\Users\leoroumans\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde deleted successfully C:\Users\leoroumans\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://reischecker.nl/" "Search Page"="http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=8a622ca9-f291-4337-b91b-b84cacdb210c&searchtype=ds&q={searchTerms}&installDate=03/05/2013" "Search Bar"="http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=8a622ca9-f291-4337-b91b-b84cacdb210c&searchtype=ds&q={searchTerms}&installDate=03/05/2013" "Use Search Asst"="yes" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://home.sweetim.com/?crg=3.1010000.10010&barid={95EE8243-64BE-11E2-BE78-4C72B98A36B4}" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Start Page"="http://home.sweetim.com/?crg=3.1010000.10010&barid={95EE8243-64BE-11E2-BE78-4C72B98A36B4}" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl] "Default"="http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=8a622ca9-f291-4337-b91b-b84cacdb210c&searchtype=ds&q={searchTerms}&installDate=03/05/2013" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl] "Default"="http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=8a622ca9-f291-4337-b91b-b84cacdb210c&searchtype=ds&q={searchTerms}&installDate=03/05/2013" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] "Default"="http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=8a622ca9-f291-4337-b91b-b84cacdb210c&searchtype=ds&q={searchTerms}&installDate=03/05/2013" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search] "Default_Search_URL"="http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=8a622ca9-f291-4337-b91b-b84cacdb210c&searchtype=ds&q={searchTerms}&installDate=03/05/2013" "SearchAssistant"="http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=8a622ca9-f291-4337-b91b-b84cacdb210c&searchtype=ds&q={searchTerms}&installDate=03/05/2013" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{006ee092-9658-4fd6-bd8e-a21a348e59f5}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}] not found New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://reischecker.nl/" "Use Search Asst"="no" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.msn.com/results.asp?q=%s" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.msn.com/results.asp?q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.msn.com/results.asp?q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search] "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CPDTDFJS" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" {D944BB61-2E34-4DBF-A683-47E505C587DC} Unknown Url="Not_Found" ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-2640948650-3554147299-374822674-1001\Software\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\ocr@babylon.com deleted successfully ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc deleted successfully HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5225ED5E-3F01-4EFB-846C-063C45159E37} deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B} deleted successfully HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\E5DE522510F3BFE448C660C35451E973 deleted successfully ==== Empty IE Cache ====================== C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\leoroumans\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\leoroumans\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\leoroumans\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=918 folders=92 747500037 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\leoroumans\AppData\Local\Temp will be emptied at reboot C:\windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\windows\Temp successfully emptied C:\Users\LEOROU~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\windows\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found "C:\Program Files (x86)\MyPC Backup" not found "C:\PROGRA~2\Advanced System Protector" not found "C:\PROGRA~2\MyPC Backup" not found ==== EOF on zo 30-03-2014 at 8:54:39,01 ======================