Zoek.exe v5.0.0.0 Updated 07-March-2014 Tool run by sharon on vr 11-04-2014 at 12:21:46,68. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\sharon\Desktop\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 11-4-2014 12:23:40 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~2\Aimersoft deleted successfully C:\PROGRA~2\AVS4YOU deleted successfully C:\PROGRA~2\BrowseToSave deleted successfully C:\PROGRA~2\Plex deleted successfully C:\PROGRA~2\WebSearch deleted successfully C:\PROGRA~3\Prowebi deleted successfully C:\Users\sharon\AppData\Roaming\Mozilla deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4D72D1F5-7D35-487D-AC0F-18C129F4F7C0} deleted successfully HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D72D1F5-7D35-487D-AC0F-18C129F4F7C0} deleted successfully HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} deleted successfully HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} deleted successfully HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Internet Explorer\SearchScopes\{F91A1450-627A-4363-AC66-015C48C428FF} deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4D72D1F5-7D35-487D-AC0F-18C129F4F7C0} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4D72D1F5-7D35-487D-AC0F-18C129F4F7C0} deleted successfully HKEY_CLASSES_ROOT\CLSID\{4D72D1F5-7D35-487D-AC0F-18C129F4F7C0} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{4D72D1F5-7D35-487D-AC0F-18C129F4F7C0} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D72D1F5-7D35-487D-AC0F-18C129F4F7C0} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D72D1F5-7D35-487D-AC0F-18C129F4F7C0} deleted successfully HKEY_CLASSES_ROOT\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{CD90BF73-20F6-44EF-993D-BB920303BD2E} deleted successfully ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== C:\ProgramData\RandomPrriCe deleted C:\PROGRA~3\icbmojhpjkdladmakaiiiijefjbolhne deleted C:\Users\sharon\AppData\LocalLow\{453C11F6-8CC3-72FD-DFD3-136B29726FA2} deleted C:\Users\sharon\AppData\LocalLow\{4D72D1F5-7D35-487D-AC0F-18C129F4F7C0} deleted C:\Users\sharon\AppData\LocalLow\{87EC0114-9D92-1206-099D-703BE1BE64C2} deleted C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\{453C11F6-8CC3-72FD-DFD3-136B29726FA2} deleted C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\{4D72D1F5-7D35-487D-AC0F-18C129F4F7C0} deleted C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\{FB2419E8-86F5-EA9E-23AE-EAD4FE7011F1} deleted C:\Users\sharon\AppData\Local\Packages\windows_ie_ac_001\AC\{87EC0114-9D92-1206-099D-703BE1BE64C2} deleted C:\Windows\SysNative\config\systemprofile\AppData\Local\Packages\windows_ie_ac_001\AC\{453C11F6-8CC3-72FD-DFD3-136B29726FA2} deleted C:\Windows\SysNative\config\systemprofile\AppData\Local\Packages\windows_ie_ac_001\AC\{4D72D1F5-7D35-487D-AC0F-18C129F4F7C0} deleted C:\Windows\SysNative\config\systemprofile\AppData\Local\Packages\windows_ie_ac_001\AC\{FB2419E8-86F5-EA9E-23AE-EAD4FE7011F1} deleted C:\PROGRA~3\Assistant deleted C:\PROGRA~3\890e8e87aae72779 deleted C:\PROGRA~3\NEToCoupona deleted C:\PROGRA~3\CooupiExtension deleted C:\PROGRA~3\TheBlockEErr deleted C:\PROGRA~2\Softonic deleted C:\PROGRA~2\DVDVideoSoftTB deleted C:\PROGRA~2\COMMON~1\DVDVideoSoft\bin deleted C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BearShare.lnk deleted C:\Users\sharon\AppData\Roaming\Softonic deleted C:\Users\sharon\AppData\Roaming\DVDVideoSoftIEHelpers deleted C:\Users\sharon\AppData\Roaming\NCdownloader deleted C:\Users\sharon\AppData\Roaming\OpenCandy deleted C:\PROGRA~3\boost_interprocess deleted C:\PROGRA~3\ailbglhcdekkjfokmhhniedldilnolig deleted C:\PROGRA~3\Barowse2sAvvee deleted C:\PROGRA~3\Searcch-NeewaTabb deleted C:\PROGRA~3\SoftSafe deleted C:\PROGRA~3\Uniblue\DriverScanner deleted C:\PROGRA~3\Uniblue deleted C:\PROGRA~3\InstallMate deleted C:\Users\sharon\AppData\Local\APN deleted C:\Users\sharon\AppData\Local\BearShare deleted C:\Users\sharon\AppData\LocalLow\DVDVideoSoftTB deleted C:\Users\sharon\AppData\LocalLow\Barowse2sAvvee deleted C:\Users\sharon\AppData\LocalLow\Searcch-NeewaTabb deleted C:\Users\sharon\AppData\LocalLow\Softonic deleted C:\Users\sharon\AppData\LocalLow\PriceGong deleted C:\Users\sharon\AppData\LocalLow\Conduit deleted C:\user.js deleted C:\END deleted C:\Users\sharon\FreeYouTubeDownload.exe deleted C:\Users\sharon\FreeYouTubeToMP3Converter.exe deleted C:\Users\sharon\Pictures\Setup.exe deleted ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Windows\CurrentVersion\Run] "Google Update"="C:\Users\sharon\AppData\Local\Google\Update\GoogleUpdate.exe /c" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" "msnmsgr"="C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe /background" "Spotify"="C:\Users\sharon\AppData\Roaming\Spotify\Spotify.exe /uri spotify:autostart" "Spotify Web Helper"="C:\Users\sharon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1003\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1003\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "GrooveMonitor"="C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" "snpstd3"="C:\Windows\vsnpstd3.exe" "tsnpstd3"="C:\Windows\tsnpstd3.exe" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "Aimersoft Helper Compact.exe"="C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe" "QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime" "iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Google Update"="C:\Users\sharon\AppData\Local\Google\Update\GoogleUpdate.exe /c" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" "msnmsgr"="C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe /background" "Spotify"="C:\Users\sharon\AppData\Roaming\Spotify\Spotify.exe /uri spotify:autostart" "Spotify Web Helper"="C:\Users\sharon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="c:\\progra~3\\assist~1\\assist~1.dll" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "snpstd3"="C:\Windows\vsnpstd3.exe" "MSC"="C:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey" "NVHotkey"="rundll32.exe C:\Windows\system32\nvHotkey.dll,Start" "SysTrayApp"="C:\Program Files\IDT\WDM\sttray64.exe" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=" C:\\PROGRA~3\\ASSIST~1\\ASSIST~2.DLL" ==== Startup Folders ====================== 2011-12-25 14:03:42 2438 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\3Com OfficeConnect Wireless 11g USB Adapter Utility.lnk 2012-11-08 20:31:48 1318 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [25-04-2013 21:40] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [25-04-2013 21:40] C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4118222471-3963132169-3845639327-1000Core.job --a------ C:\Users\sharon\AppData\Local\Google\Update\GoogleUpdate.exe [19-01-2012 18:43] C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4118222471-3963132169-3845639327-1000UA.job --a------ C:\Users\sharon\AppData\Local\Google\Update\GoogleUpdate.exe [19-01-2012 18:43] C:\Windows\tasks\Upd Inst-S-611070403.job --ah----- C:\programdata\greenapp\upd inst\Upd Inst.exe [02-04-2013 20:19] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-4118222471-3963132169-3845639327-1000Core" [C:\Users\sharon\AppData\Local\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-4118222471-3963132169-3845639327-1000UA" [C:\Users\sharon\AppData\Local\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\RunAsStdUser Task for VeohWebPlayer" [C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe] "C:\Windows\SysNative\tasks\TuneUpUtilities_Task_BkGndMaintenance2013" [C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe] "C:\Windows\SysNative\tasks\Upd Inst-S-611070403" [c:\programdata\greenapp\upd inst\Upd Inst.exe] "C:\Windows\SysNative\tasks\{216D8ED8-1B37-46F8-B721-0D85959650EC}" [C:\Program Files (x86)\IBM\SPSS\Statistics\19\stats.exe] "C:\Windows\SysNative\tasks\{A12B2272-C8B8-472A-8F87-B85AEAA17DE9}" [C:\Program Files (x86)\IBM\SPSS\Statistics\19\stats.exe] "C:\Windows\SysNative\tasks\{CB76311A-F0B6-4D32-8479-7A48F6246675}" [C:\Program Files (x86)\IBM\SPSS\Statistics\19\stats.exe] "C:\Windows\SysNative\tasks\{D84C2842-8D6F-4F96-9F32-7D270FA52842}" [C:\Program Files (x86)\IBM\SPSS\Statistics\19\stats.exe] "C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe] ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions elchiiiejkobdbblfejjkbphbddgmljf - C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\Softonic.crx[] lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[17-01-2012 11:45] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions nikpibnbobmbdbheedjfogjlikpgpnhp - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx[30-12-2013 14:51] TheBlockEErr - sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\ailbglhcdekkjfokmhhniedldilnolig Google Wallet - sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda TheBlockEErr - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\ailbglhcdekkjfokmhhniedldilnolig Google Docs - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Softonic Chrome Toolbar - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf Skype Click to Call - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl Google Wallet - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Chrome Fix ====================== C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf deleted successfully C:\Users\sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\ailbglhcdekkjfokmhhniedldilnolig deleted successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\ailbglhcdekkjfokmhhniedldilnolig deleted successfully C:\Users\sharon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ailbglhcdekkjfokmhhniedldilnolig_0.localstorage deleted successfully C:\Users\sharon\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ailbglhcdekkjfokmhhniedldilnolig_0.localstorage-journal deleted successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ailbglhcdekkjfokmhhniedldilnolig_0.localstorage deleted successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ailbglhcdekkjfokmhhniedldilnolig_0.localstorage-journal deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://searchy.easylifeapp.com/" "Search Page"="http://feed.helperbar.com/?publisher=OC&dpid=OC&co=NL&userid=301aeb2f-12b5-4818-a174-ac53800393f1&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}&installDate={installDate}" "Search Bar"="http://feed.helperbar.com/?publisher=OC&dpid=OC&co=NL&userid=301aeb2f-12b5-4818-a174-ac53800393f1&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}&installDate={installDate}" "Default_Search_URL"="http://www.google.com/ie" "Use Search Asst"="yes" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://searchy.easylifeapp.com/" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Start Page"="http://searchy.easylifeapp.com/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl] "Default"="http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDY&co=NL&userid=301aeb2f-12b5-4818-a174-ac53800393f1&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl] "Default"="http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDY&co=NL&userid=301aeb2f-12b5-4818-a174-ac53800393f1&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] @="http://www.google.com/search?q=%s" "Default"="http://feed.helperbar.com/?publisher=OC&dpid=OC&co=NL&userid=301aeb2f-12b5-4818-a174-ac53800393f1&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}&installDate={installDate}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="http://search.softonic.com/MOY00621/tb_v1/?SearchSource=15&cc=&mi=02414546000000000000000cf6ff7966" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs] "Tabs"="http://search.softonic.com/MOY00621/tb_v1/?SearchSource=15&cc=&mi=02414546000000000000000cf6ff7966" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search] "SearchAssistant"="http://feed.helperbar.com/?publisher=OC&dpid=OC&co=NL&userid=301aeb2f-12b5-4818-a174-ac53800393f1&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}&installDate={installDate}" "Default_Search_URL"="http://feed.helperbar.com/?publisher=OC&dpid=OC&co=NL&userid=301aeb2f-12b5-4818-a174-ac53800393f1&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}&installDate={installDate}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{F91A1450-627A-4363-AC66-015C48C428FF}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F91A1450-627A-4363-AC66-015C48C428FF}] not found New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://www.google.com" "Use Search Asst"="no" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.msn.com/results.asp?q=%s" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.msn.com/results.asp?q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.msn.com/results.asp?q=%s" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="res://ieframe.dll/tabswelcome.htm" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs] "Tabs"="res://ieframe.dll/tabswelcome.htm" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search] "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5} deleted successfully HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{872B5B88-9DB5-4310-BDD0-AC189557E5F5} deleted successfully HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{453C11F6-8CC3-72FD-DFD3-136B29726FA2} deleted successfully HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{453C11F6-8CC3-72FD-DFD3-136B29726FA2} deleted successfully HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{872B5B88-9DB5-4310-BDD0-AC189557E5F5} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{5018CFD2-804D-4C99-9F81-25EAEA2769DE} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{E87806B5-E908-45FD-AF5E-957D83E58E68} deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{453C11F6-8CC3-72FD-DFD3-136B29726FA2} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{453C11F6-8CC3-72FD-DFD3-136B29726FA2} deleted successfully HKEY_CLASSES_ROOT\CLSID\{453C11F6-8CC3-72FD-DFD3-136B29726FA2} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{453C11F6-8CC3-72FD-DFD3-136B29726FA2} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{453C11F6-8CC3-72FD-DFD3-136B29726FA2} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{453C11F6-8CC3-72FD-DFD3-136B29726FA2} deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{87EC0114-9D92-1206-099D-703BE1BE64C2} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{87EC0114-9D92-1206-099D-703BE1BE64C2} deleted successfully HKEY_CLASSES_ROOT\CLSID\{87EC0114-9D92-1206-099D-703BE1BE64C2} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{87EC0114-9D92-1206-099D-703BE1BE64C2} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{87EC0114-9D92-1206-099D-703BE1BE64C2} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{87EC0114-9D92-1206-099D-703BE1BE64C2} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully HKEY_CLASSES_ROOT\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FB2419E8-86F5-EA9E-23AE-EAD4FE7011F1} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FB2419E8-86F5-EA9E-23AE-EAD4FE7011F1} deleted successfully HKEY_CLASSES_ROOT\CLSID\{FB2419E8-86F5-EA9E-23AE-EAD4FE7011F1} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{FB2419E8-86F5-EA9E-23AE-EAD4FE7011F1} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FB2419E8-86F5-EA9E-23AE-EAD4FE7011F1} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FB2419E8-86F5-EA9E-23AE-EAD4FE7011F1} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-4118222471-3963132169-3845639327-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{872B5B88-9DB5-4310-BDD0-AC189557E5F5} deleted successfully ==== shortcuts on Users Desktops ====================== C:\Users\sharon\Desktop\BearShare.lnk - C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe C:\Users\sharon\Desktop\De Sims™ 3.lnk - C:\Users\sharon\Desktop\DVDVideoSoft Free Studio.lnk - C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe C:\Users\sharon\Desktop\Free Video Converter.lnk - C:\Program Files (x86)\Free Video Converter\FreeVideoConverter.exe C:\Users\sharon\Desktop\Free YouTube Download.lnk - C:\Program Files (x86)\DVDVideoSoft\Free YouTube Download\FreeYTVDownloader.exe C:\Users\sharon\Desktop\Google Chrome.lnk - C:\Users\sharon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\sharon\Desktop\Microsoft Office Word 2007.lnk - C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe C:\Users\sharon\Desktop\SABnzbd.lnk - C:\Program Files (x86)\SABnzbd\SABnzbd.exe C:\Users\sharon\Desktop\Shows Desktop.lnk - C:\Users\sharon\Desktop\Spotify.lnk - C:\Users\sharon\AppData\Roaming\Spotify\spotify.exe ==== shortcuts on All Users Desktop ====================== C:\Users\Public\Desktop\Adobe Digital Editions 2.0.lnk - C:\Program Files (x86)\Adobe\Adobe Digital Editions 2.0\DigitalEditions.exe C:\Users\Public\Desktop\Adobe Reader X .lnk - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk - C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe C:\Users\Public\Desktop\Free DVD Video Burner.lnk - C:\Program Files (x86)\DVDVideoSoft\Free DVD Video Burner\FreeDVDVideoBurner.exe C:\Users\Public\Desktop\Free YouTube Download.lnk - C:\Program Files (x86)\DVDVideoSoft\Free YouTube Download\FreeYTVDownloader.exe C:\Users\Public\Desktop\Free YouTube to DVD Converter.lnk - C:\Program Files (x86)\DVDVideoSoft\Free YouTube to DVD Converter\FreeYouTubeToDVDConverter.exe C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk - C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe C:\Users\Public\Desktop\Freemake Video Converter.lnk - C:\Program Files (x86)\Freemake\Freemake Video Converter\FreemakeVideoConverter.exe C:\Users\Public\Desktop\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe C:\Users\Public\Desktop\Kobo.lnk - C:\Program Files (x86)\Kobo\Kobo.exe --affiliate Kobo C:\Users\Public\Desktop\NZBEE.lnk - C:\Program Files (x86)\NZBEE\NZBEE.exe C:\Users\Public\Desktop\Picasa 3.lnk - C:\Program Files (x86)\Google\Picasa3\Picasa3.exe C:\Users\Public\Desktop\QuickTime Player.lnk - C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe C:\Users\Public\Desktop\Skype.lnk - C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe C:\Users\Public\Desktop\TeamViewer 6.lnk - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe C:\Users\Public\Desktop\VLC media player.lnk - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe C:\Users\Public\Desktop\WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.exe C:\Users\Public\Desktop\µTorrent.lnk - ==== shortcuts in All Users Start Menu ====================== C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk - C:\Program Files (x86)\Microsoft Security Client\msseces.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\Silverlight.Configuration.exe ==== shortcuts in Quick Launch ====================== C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Free Video Converter.lnk - C:\Program Files (x86)\Free Video Converter\FreeVideoConverter.exe C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Calculator.lnk - C:\Windows\system32\calc.exe C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\DVDVideoSoft Free Studio.lnk - C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk - C:\Users\sharon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\SABnzbd.lnk - C:\Program Files (x86)\SABnzbd\SABnzbd.exe C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Sticky Notes.lnk - C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Users\sharon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\sharon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\48849971-da09-456a-b35f-433cbde9a193 deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D57DBD39-F81E-1039-8E80-77BE0639F84F} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\elchiiiejkobdbblfejjkbphbddgmljf deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{317D8BB4-16C3-CFBD-3777-AED69667DA46} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8E8C2E2D-7F21-2CF5-0ADB-64935121ECF0} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6933C2BA-C67D-42C7-8C77-1FF4B364AF54} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A5A8BEFB-ACE9-1A21-C178-51D86182FB16} deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{CE52672C-A0E9-4450-8875-88A221D5CD50} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{699fd52f} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Softonic deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\C27625EC9E0A05448857882A125DDC05 deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\sharon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\sharon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\sharon\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\sharon\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\sharon\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache is not empty, a reboot is needed ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=689 folders=150 335049156 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\sharon\AppData\Local\Temp will be emptied at reboot C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\sharon\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\sharon\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\45V4CSA3\www.videoweed.es" not found ==== EOF on vr 11-04-2014 at 12:42:38,65 ======================