Zoek.exe v5.0.0.0 Updated 14-April-2014 Tool run by Brecht1 on di 15-04-2014 at 18:09:42,79. Microsoft Windows 8 6.2.9200 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Brecht1\Downloads\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== Older Logs ====================== C:\zoek-results2014-02-06-142755.log 21101 bytes C:\zoek-results2014-02-06-163913.log 848 bytes C:\zoek-results2014-02-08-071002.log 12665 bytes C:\zoek-results2014-02-12-065011.log 5379 bytes C:\zoek-results2014-02-13-074815.log 687 bytes ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Running Processes ====================== C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe C:\Windows\SysWOW64\PnkBstrA.exe c:\postgreSQL\bin\pg_ctl.exe c:\postgreSQL\bin\postgres.exe c:\postgreSQL\bin\postgres.exe c:\postgreSQL\bin\postgres.exe c:\postgreSQL\bin\postgres.exe c:\postgreSQL\bin\postgres.exe C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe C:\Program Files (x86)\PHotkey\PHotkey.exe C:\Program Files (x86)\PHotkey\MsgTranAgt.exe C:\Program Files (x86)\PHotkey\HCSynApi.exe C:\Program Files (x86)\PHotkey\POSD.exe C:\Program Files (x86)\PHotkey\GPMTray.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Windows\SysWOW64\ctfmon.exe C:\Users\Brecht1\Downloads\zoek.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe ==== Deleting Services ====================== ==== System Specs ====================== Windows: Windows Version 6.2 (Build 9200) Memory (RAM): 3978 MB CPU Info: Intel(R) Core(TM) i3-3120M CPU @ 2.50GHz CPU Speed: 2561,0 MHz Sound Card: Speakers (Realtek High Definiti | Realtek Digital Output (Realtek | Display Adapters: Intel(R) HD Graphics 4000 | Intel(R) HD Graphics 4000 | Intel(R) HD Graphics 4000 | NVIDIA GeForce GT 635M Monitors: 1x; Generic PnP Monitor | Screen Resolution: 1366 X 768 - 32 bit Network: Network Present Network Adapters: Microsoft Wi-Fi Direct Virtual Adapter | Bluetooth Device (Personal Area Network) | Intel(R) Centrino(R) Wireless-N 2230 | Realtek PCIe GBE Family Controller CD / DVD Drives: 1x (E: | ) E: TSSTcorpCDDVDW SN-208BB Ports: COM Ports NOT Present. LPT Port NOT Present. Mouse: 8 Button Wheel Mouse Present Hard Disks: C: 869,8GB | D: 60,0GB Hard Disks - Free: C: 701,4GB | D: 41,5GB Manufacturer *: American Megatrends Inc. BIOS Info: AT/AT COMPATIBLE | | MEDION - 1 Time Zone: West-Europa (standaardtijd) Motherboard *: Medion Akoya P6638 Country: Nederland Language: NLD ==== System Specs (Software) ====================== Anti-Virus: Windows Defender On-access scanning disabled (Outdated) Anti-Virus: avast! Antivirus On-access scanning disabled (Outdated) Anti-Spyware: Windows Defender disabled (Outdated) Anti-Spyware: avast! Antivirus disabled (Outdated) Internet Explorer Version: 10.0.9200.16863 Google Chrome version: 34.0.1847.116 Adobe Reader version: 11.0.06.70 Sun Java version: 1.7.0_17 (32-bit) ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Brecht1\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== 2014-04-12 06:01:26 184272AA46BEAA9C990700051BE869A1 17561088 ----a-w- C:\Windows\SysWOW64\shell32.dll 2014-04-12 06:01:16 C9CA8652D3659A7B387BAB2C591CCAE1 485888 ----a-w- C:\Windows\SysWOW64\WSDApi.dll 2014-04-12 06:01:16 33B9E17F3B1E6EAD7F7CCEC6B8A37BF1 5092352 ----a-w- C:\Windows\SysWOW64\mstscax.dll 2014-04-12 06:01:15 4B27341B7B839E61503F0F99DC4D141B 365568 ----a-w- C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-04-12 06:01:14 F4DFD83775C51960CAEDCEC98704E695 564736 ----a-w- C:\Windows\SysWOW64\WSShared.dll 2014-04-12 06:01:13 319959AB944F14C9D0AB38A7112F0E89 143872 ----a-w- C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll 2014-04-12 06:01:03 FA15B8EC5D74FCBEAD5D400D95DD67B3 44032 ----a-w- C:\Windows\SysWOW64\UXInit.dll 2014-04-12 06:01:03 BFDD0C5F3E435596F197F003609989C4 61440 ----a-w- C:\Windows\SysWOW64\iesetup.dll 2014-04-12 06:01:03 87B775A458A73BB7381E5B67B5652496 39424 ----a-w- C:\Windows\SysWOW64\jsproxy.dll 2014-04-12 06:01:03 717DBE5465A62674DCB3FD3706D2B3E6 1140736 ----a-w- C:\Windows\SysWOW64\urlmon.dll 2014-04-12 06:01:03 2CD665EF1353721341B789B78E25B3AC 534528 ----a-w- C:\Windows\SysWOW64\uxtheme.dll 2014-04-12 06:01:02 CC0063D95273352BD705EC5C80025051 163840 ----a-w- C:\Windows\SysWOW64\msrating.dll 2014-04-12 06:01:02 89986727E56709064C219C8B47A20F82 1766400 ----a-w- C:\Windows\SysWOW64\wininet.dll 2014-04-12 06:01:02 517011B4E624200765091E10DE1E3056 493056 ----a-w- C:\Windows\SysWOW64\msfeeds.dll 2014-04-12 06:01:02 3FA7F736B877B46EDF1EE6BE6051848D 33280 ----a-w- C:\Windows\SysWOW64\iernonce.dll 2014-04-12 06:01:01 D48A2A3D69423F0B80375783F971F235 13760512 ----a-w- C:\Windows\SysWOW64\ieframe.dll 2014-04-12 06:01:00 A7CFDA703AF9AD409DAA521487E0CB53 109056 ----a-w- C:\Windows\SysWOW64\iesysprep.dll 2014-04-12 06:00:59 ADE7AE4478D5B2095FDE6FAB86B300E6 2706432 ----a-w- C:\Windows\SysWOW64\mshtml.tlb 2014-04-12 06:00:40 4F8C8721C6B80B4921C5F0514D2AC5C4 2049536 ----a-w- C:\Windows\SysWOW64\iertutil.dll 2014-04-12 06:00:39 831ABFFC06225911BD847E08335D9F9D 2877952 ----a-w- C:\Windows\SysWOW64\jscript9.dll 2014-04-12 06:00:39 07DC124F157B4C07B4E693EB63ED1050 690688 ----a-w- C:\Windows\SysWOW64\jscript.dll 2014-04-12 06:00:33 DA90FBE37A73383BD12B472452C543EE 14357504 ----a-w- C:\Windows\SysWOW64\mshtml.dll 2014-04-09 20:13:21 BCD38BCC68BAE9585576C5223421229B 974848 ----a-w- C:\Windows\SysWOW64\kernel32.dll 2014-04-09 20:13:21 2789B16FFB127BF3394093E2A1610BE9 666112 ----a-w- C:\Windows\SysWOW64\KernelBase.dll ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2014-04-12 06:01:28 B4C5E797CE7E6F815D2020F739DD71F6 19752448 ----a-w- C:\Windows\Sysnative\shell32.dll 2014-04-12 06:01:17 4A145BF2F46167C894F933E0CB9A9D9B 5979648 ----a-w- C:\Windows\Sysnative\mstscax.dll 2014-04-12 06:01:16 A892732A2216DC3B101E2B61F1F465FF 599040 ----a-w- C:\Windows\Sysnative\WSDApi.dll 2014-04-12 06:01:16 A8705398E9A28627FC6EA239DAF3CB08 523264 ----a-w- C:\Windows\Sysnative\XpsGdiConverter.dll 2014-04-12 06:01:14 7B5F21E78EC2B7739A9E29FDCED6BCED 209712 ----a-w- C:\Windows\Sysnative\NotificationUI.exe 2014-04-12 06:01:14 282CF0FBFE300345945D63F81446B399 690688 ----a-w- C:\Windows\Sysnative\WSShared.dll 2014-04-12 06:01:12 110BE5198A63D3FF3CE9C30F1DC12EC3 386722 ----a-w- C:\Windows\Sysnative\ApnDatabase.xml 2014-04-12 06:01:02 F827BD7A09F9FCDF76AB2C3E27650E71 2706432 ----a-w- C:\Windows\Sysnative\mshtml.tlb 2014-04-12 06:01:02 CF1B571D1395369CE94D4D5D3B679E26 1365504 ----a-w- C:\Windows\Sysnative\urlmon.dll 2014-04-12 06:01:02 AD00E5D3B748150CF1A53A1ABB52E320 53760 ----a-w- C:\Windows\Sysnative\UXInit.dll 2014-04-12 06:01:02 0670CF740B9D387451C938EFA6E8DC81 197120 ----a-w- C:\Windows\Sysnative\msrating.dll 2014-04-12 06:01:01 E80F66239BCA6CDECC360CA78CECAE61 67072 ----a-w- C:\Windows\Sysnative\iesetup.dll 2014-04-12 06:01:01 8DDC529CA9B78432A2B98C062E6646D9 603136 ----a-w- C:\Windows\Sysnative\msfeeds.dll 2014-04-12 06:01:00 547FFE0E4C267FAB1299F2334C728F59 39936 ----a-w- C:\Windows\Sysnative\iernonce.dll 2014-04-12 06:01:00 3A417F81D4E4428B9A8B5AA6D07A8244 51712 ----a-w- C:\Windows\Sysnative\ie4uinit.exe 2014-04-12 06:00:59 A8F212959F505216737EC281509B8A4A 915968 ----a-w- C:\Windows\Sysnative\uxtheme.dll 2014-04-12 06:00:59 2B7920C7885AC45FD0E27DD860F095A1 2240000 ----a-w- C:\Windows\Sysnative\wininet.dll 2014-04-12 06:00:58 9BFFDF83AC4AC6B6B60F01884219BB50 15404544 ----a-w- C:\Windows\Sysnative\ieframe.dll 2014-04-12 06:00:56 38BEBBC4CF9FE6566262F0037DF843BF 136704 ----a-w- C:\Windows\Sysnative\iesysprep.dll 2014-04-12 06:00:56 194125E7839D4902F2490A70049E8F78 53248 ----a-w- C:\Windows\Sysnative\jsproxy.dll 2014-04-12 06:00:56 0DD10F3E989E68FD23930D04965ED0E8 855552 ----a-w- C:\Windows\Sysnative\jscript.dll 2014-04-12 06:00:53 4BCADB6D3A03A690EC7F6B8AA7D3C5E4 19273216 ----a-w- C:\Windows\Sysnative\mshtml.dll 2014-04-12 06:00:42 06AD334AE44F5566ADF7AB4673F72D16 2648576 ----a-w- C:\Windows\Sysnative\iertutil.dll 2014-04-12 06:00:39 AD5DA3B81E7E1BFCBEC52C99504736B8 3959808 ----a-w- C:\Windows\Sysnative\jscript9.dll 2014-04-09 20:13:21 8E6F76FC4937DA47F905107757616E1B 1257984 ----a-w- C:\Windows\Sysnative\kernel32.dll 2014-04-09 20:13:21 2B89267ACA222B5BE89F7B0C013B587B 978432 ----a-w- C:\Windows\Sysnative\KernelBase.dll ====== C:\Windows\Sysnative\drivers ===== 2014-04-12 06:01:28 B23882881EFD9404B62993906BC38709 2232664 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys 2014-04-12 06:01:23 7BE3EDFFA3216F989A6BDCB14795DD08 1939288 ----a-w- C:\Windows\Sysnative\drivers\ntfs.sys 2014-04-12 06:01:14 E6530FD4F61B40F338BF4355A21B9A09 278872 ----a-w- C:\Windows\Sysnative\drivers\msiscsi.sys 2014-04-12 06:01:13 431141C6859990824D17F71C30A78728 118784 ----a-w- C:\Windows\Sysnative\drivers\dfsc.sys 2014-04-12 06:01:13 0EF7ABB612F7270DD5ABB7C66F1774AA 332632 ----a-w- C:\Windows\Sysnative\drivers\storport.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== ======= C:\PROGRA~2 ===== 2014-04-14 08:07:29 -------- d-----w- C:\PROGRA~2\COMMON~1\IBM 2014-04-14 08:06:40 -------- d-----w- C:\PROGRA~2\IBM ======= C: ===== ====== C:\Users\Brecht1\AppData\Roaming ====== 2014-04-14 08:09:33 -------- d-----w- C:\Users\Brecht1\AppData\Local\IBM 2014-04-14 08:09:31 -------- d-----w- C:\Users\Brecht1\AppData\Local\javasharedresources 2014-04-07 18:26:06 -------- d-----w- C:\Users\Brecht1\AppData\Roaming\dvdcss ====== C:\Users\Brecht1 ====== 2014-04-14 08:09:41 -------- d-----w- C:\Users\Brecht1\.spss 2014-04-14 08:08:55 -------- d-----w- C:\ProgramData\SafeNet Sentinel 2014-04-14 08:08:46 -------- d-----w- C:\ProgramData\SPSS 2014-04-14 08:08:39 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IBM SPSS Statistics ====== C: exe-files == 2014-04-15 14:50:58 1BF55AC5E1750706577BDD93E1F07309 378016 ----a-w- C:\ProgramData\NVIDIA\Updatus\Packages\00005a05\updatus.18253945_RUNASUSER.exe 2014-04-14 07:57:21 0B05130386E8FC071B484BF75D5BA5AD 2583936 ----a-r- C:\Users\Brecht1\Downloads\SPSS v20 - 32bit\Setup\WindowsInstaller-KB893803-x86.exe 2014-04-14 07:56:17 07F108CD19E0A34A39E5CBBDCB4DC1A8 934896 ----a-r- C:\Users\Brecht1\Downloads\SPSS v20 - 32bit\Setup\setup.exe 2014-04-12 06:01:02 E4F6125ED5185F8FA37CC4F449B85526 770608 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe 2014-04-12 06:01:02 407A04BA1AC87A2F40F592191B62F3D0 469504 ----a-w- C:\Program Files (x86)\Internet Explorer\ieinstal.exe 2014-04-12 06:01:00 A48AA87D52D2CC1D5E017A08D2409386 484352 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe 2014-04-12 06:00:59 6554208814632C25C77EE02355EB8E95 775216 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe 2014-04-11 05:08:51 8FAE9109245E4B4FF42704ECFB86F1B6 8704216 ----a-w- C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\34.0.1847.116\34.0.1847.116_33.0.1750.154_chrome_updater.exe 2014-04-10 20:16:33 419DFE8F3BEB92B8EAA9A270B3264990 377176 ----a-w- C:\ProgramData\NVIDIA\Updatus\Packages\000059eb\updatus.18240085_RUNASUSER.exe === C: other files == 2014-04-14 08:26:46 B217727DADC09FFF19A719488F7A7453 36894 ----a-w- C:\Users\Brecht1\Downloads\Ondertitel.com-658-The.Hunger.Games.Catching.Fire.2013.720p.BluRay.x264.YIFY.zip 2014-04-12 06:01:28 B23882881EFD9404B62993906BC38709 2232664 ----a-w- C:\Windows\System32\Drivers\tcpip.sys 2014-04-12 06:01:23 7BE3EDFFA3216F989A6BDCB14795DD08 1939288 ----a-w- C:\Windows\System32\Drivers\ntfs.sys 2014-04-12 06:01:14 E6530FD4F61B40F338BF4355A21B9A09 278872 ----a-w- C:\Windows\System32\Drivers\msiscsi.sys 2014-04-12 06:01:13 431141C6859990824D17F71C30A78728 118784 ----a-w- C:\Windows\System32\Drivers\dfsc.sys 2014-04-12 06:01:13 0EF7ABB612F7270DD5ABB7C66F1774AA 332632 ----a-w- C:\Windows\System32\Drivers\storport.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-2444422138-2622892493-4117670433-1002\Software\Microsoft\Windows\CurrentVersion\Run] "Facebook Update"="C:\Users\Brecht1\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CLMLServer_For_P2G8"="C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" "CLVirtualDrive"="C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe /R" "RemoteControl10"="C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" "YouCam Service"="C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe /s" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "BrMfcWnd"="C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN" "ControlCenter3"="C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun" "QuickTime Task"="C:\Program Files (x86)\QuickTime\qttask.exe -atboottime" "AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Facebook Update"="C:\Users\Brecht1\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="c:\\progra~2\\gssupp~1\\browsafe.dll" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="C:\Windows\system32\igfxtray.exe" "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" "Persistence"="C:\Windows\system32\igfxpers.exe" "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "RtHDVBg_Dolby"="C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4 " "BTMTrayAgent"="rundll32.exe C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll,TrayApp" "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe " ==== Task Scheduler Jobs ====================== C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2444422138-2622892493-4117670433-1002Core.job --a-------- C:\Users\Brecht1\AppData\Local\Facebook\Update\FacebookUpdate.exe [23-11-2013 17:35] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2444422138-2622892493-4117670433-1002UA.job --a-------- C:\Users\Brecht1\AppData\Local\Facebook\Update\FacebookUpdate.exe [23-11-2013 17:35] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [23-03-2013 12:19] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [23-03-2013 12:19] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\BrowserChoice\browserchoice.exe] "C:\Windows\SysNative\tasks\Dolby Selector" [C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-2444422138-2622892493-4117670433-1002Core" [C:\Users\Brecht1\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-2444422138-2622892493-4117670433-1002UA" [C:\Users\Brecht1\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\Synaptics TouchPad Enhancements" [\Program Files\Synaptics\SynTP\SynTPEnh.exe] ==== Firefox Extensions ====================== ==== Firefox Plugins ====================== ==== Chrome Look ====================== Bumblebee Transformers - Brecht1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ablploimnfndjhngijoeekcoillceikj Google Docs - Brecht1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Brecht1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Brecht1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo FoxTrick - Brecht1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpfbbngccefbbndginomofgpagkjckik Google Search - Brecht1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf AdBlock - Brecht1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom Google Wallet - Brecht1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR" {10DF6FDB-1610-4B14-A3F2-6ADC8C483C7A} Bing Url="http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== shortcuts on Users Desktops ====================== C:\Users\Brecht1\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\Brecht1\Desktop\School\Master\semester 1\Logger Pro 3.5.0.lnk - C:\Program Files (x86)\Vernier Software\Logger Pro 3\LoggerPro.exe C:\Users\Brecht1\Desktop\School\Master\semester 1\Logger Pro 3.8.6.1 Demo.lnk - C:\Program Files (x86)\Vernier Software\Logger Pro 3 Demo\LoggerPro.exe C:\Users\Brecht1\Desktop\Thesis\Nova 1.10.lnk - C:\Program Files (x86)\Metrohm Autolab\Nova 1.10\Nova.exe C:\Users\Default\Desktop\ALDI Foto Service.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Default\Desktop\ALDI Talk.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Default\Desktop\Hartelijk welkom bij ALDI.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Default\Desktop\LIFESTORE.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Default\Desktop\Welkom bij MEDION.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Default\Desktop\Windows 8 Info.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Default User\Desktop\ALDI Foto Service.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Default User\Desktop\ALDI Talk.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Default User\Desktop\Hartelijk welkom bij ALDI.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Default User\Desktop\LIFESTORE.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Default User\Desktop\Welkom bij MEDION.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Default User\Desktop\Windows 8 Info.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\postgres\Desktop\ALDI Foto Service.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\postgres\Desktop\ALDI Talk.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\postgres\Desktop\Hartelijk welkom bij ALDI.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\postgres\Desktop\LIFESTORE.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\postgres\Desktop\Welkom bij MEDION.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\postgres\Desktop\Windows 8 Info.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe ==== shortcuts on All Users Desktop ====================== C:\Users\Public\Desktop\avast Free Antivirus.lnk - ==== shortcuts in All Users Start Menu ====================== C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IBM SPSS Statistics\IBM SPSS Statistics 20 License Authorization Wizard.lnk - C:\Program Files (x86)\IBM\SPSS\Statistics\20\law.exe -is:javahome "C:\Program Files (x86)\IBM\SPSS\Statistics\20\JRE" -s:silent C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IBM SPSS Statistics\IBM SPSS Statistics 20.lnk - C:\Program Files (x86)\IBM\SPSS\Statistics\20\stats.exe ==== shortcuts in Quick Launch ====================== C:\Users\Brecht1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\Brecht1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Brecht1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QuickTime Player.lnk - C:\Windows\Installer\{5E863175-E85D-44A6-8968-82507D34AE7F}\QTPlayer.ico C:\Users\Brecht1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Brecht1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Brecht1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b1695d4f5a951d9d\PokerStars.BE.lnk - C:\Program Files (x86)\PokerStars.BE\PokerStarsUpdate.exe C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\postgres\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\postgres\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - ==== HijackThis Entries ====================== F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe" O4 - HKLM\..\Run: [CLVirtualDrive] "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" O4 - HKLM\..\Run: [YouCam Service] "C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe" /s O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Brecht1\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Verzenden naar Bluetooth - C:\Program Files (x86)\Intel\Bluetooth\btSendToObject.htm O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Verzenden naar Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (HKCU) O9 - Extra 'Tools' menuitem: Verzenden naar Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (HKCU) O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O20 - AppInit_DLLs: c:\progra~2\gssupp~1\browsafe.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe O23 - Service: CyberLink PowerDVD 10 MS Monitor Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe O23 - Service: CyberLink PowerDVD 10 MS Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: GFNEX Service (GFNEXSrv) - Unknown owner - C:\Program Files (x86)\PHotkey\GFNEXSrv.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: postgresql-8.4 - PostgreSQL Server 8.4 (postgresql-8.4) - PostgreSQL Global Development Group - c:/postgreSQL/bin/pg_ctl.exe O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Brecht1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Brecht1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\566PVW8E will be deleted at reboot C:\Users\Brecht1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G7KJ6D1G will be deleted at reboot C:\Users\Brecht1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M9L3RDV8 will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Cache found ==== Empty Chrome Cache ====================== C:\Users\Brecht1\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=480 folders=111 64396664 bytes) ==== Empty Temp Folders ====================== C:\Users\Brecht1\AppData\Local\Temp will be emptied at reboot C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\postgres\AppData\Local\Temp emptied successfully C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Brecht1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Brecht1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\566PVW8E" not found "C:\Users\Brecht1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G7KJ6D1G" not found "C:\Users\Brecht1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M9L3RDV8" not found ==== EOF on di 15-04-2014 at 19:17:24,12 ======================