Zoek.exe v5.0.0.0 Updated 14-April-2014 Tool run by Stan on di 13-05-2014 at 15:08:37,50. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Stan\Desktop\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== System Restore Info ====================== 13-5-2014 15:13:53 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~2\MSXML 4.0 deleted successfully C:\PROGRA~3\Freemake deleted successfully C:\PROGRA~3\Oracle deleted successfully C:\Users\Stan\AppData\Roaming\Publish Providers deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-1338642811-412060392-669450374-1000\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} deleted successfully HKEY_USERS\S-1-5-21-1338642811-412060392-669450374-1000\Software\Microsoft\Internet Explorer\SearchScopes\{4096E14C-0A76-4D03-A9BA-B22EA056FE24} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginService deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IePluginService deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\IePluginService deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\IePluginService deleted successfully ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command] @="C:\\Program Files\\Internet Explorer\\iexplore.exe" ==== Registry Fix Code x64 ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83206C8D-FD4C-24B0-8066-7AE292B00D22}] [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83206C8D-FD4C-24B0-8066-7AE292B00D22}] [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E87806B5-E908-45FD-AF5E-957D83E58E68}] ==== Deleting Files \ Folders ====================== C:\Program Files (x86)\greeatsaaveRa not found C:\Program Files (x86)\Softonic not found C:\Users\Stan\AppData\LocalLow\{83206C8D-FD4C-24B0-8066-7AE292B00D22} deleted C:\Users\Stan\AppData\LocalLow\{F3C0D7C5-B942-4259-0216-9D9E7CB3FAA5} deleted C:\Users\Stan\AppData\Local\Packages\windows_ie_ac_001\AC\{83206C8D-FD4C-24B0-8066-7AE292B00D22} deleted C:\Users\Stan\AppData\Local\Packages\windows_ie_ac_001\AC\{F3C0D7C5-B942-4259-0216-9D9E7CB3FAA5} deleted C:\PROGRA~3\greeatsaaveRa deleted C:\PROGRA~3\YoutubeAdblocker deleted C:\PROGRA~2\YoutubeAdblocker deleted C:\Users\Stan\AppData\Roaming\SupTab deleted C:\Users\Stan\AppData\Roaming\Softonic deleted C:\Users\Stan\AppData\Roaming\webssearches deleted C:\Users\Stan\AppData\Roaming\OpenCandy deleted C:\PROGRA~3\IePluginService deleted C:\PROGRA~3\WPM deleted C:\PROGRA~3\InstallMate deleted C:\Users\Stan\AppData\Local\PirritSuggestor deleted C:\Users\Stan\AppData\LocalLow\Softonic deleted C:\Windows\Syswow64\SearchProtect deleted "C:\PROGRA~3\381648d1e58c4e3b\{4820778D-AB0D-6D18-C316-52A6A0E1D507}" deleted "C:\PROGRA~3\381648d1e58c4e3b\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}" deleted "C:\PROGRA~3\381648d1e58c4e3b\{CA41BB14-E67B-1653-C57B-5CA99418A866}" deleted "C:\PROGRA~3\381648d1e58c4e3b\{CA41BB14-E67B-1653-C57B-5CA99418A866}.old" deleted "C:\PROGRA~3\381648d1e58c4e3b\{E32743D3-5789-6E4F-3998-06FB87C9214B}" deleted "C:\PROGRA~3\381648d1e58c4e3b" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Stan\AppData\Local\Temp ==== ====== Java Cache ===== 2014-04-25 10:39:20 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Stan\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-67358d06 ====== C:\Windows\SysWOW64 ===== 2014-05-07 00:51:52 91B4AAD4412BB223B466F3DFB43E86DA 452440 ----a-w- C:\Windows\SysWOW64\d3dx10_40.dll 2014-05-07 00:51:52 3384134EEB8F223178C2EB8323003EC0 2036576 ----a-w- C:\Windows\SysWOW64\D3DCompiler_40.dll 2014-05-03 11:15:24 5869FBC754578A59C8C8635B99DB79DE 17384448 ----a-w- C:\Windows\SysWOW64\mshtml.dll 2014-05-03 11:15:18 2518D1922371892ADEF1F07147DBD72A 2724864 ----a-w- C:\Windows\SysWOW64\mshtml.tlb ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2014-05-07 00:51:52 862586AD4B1355F7DCDE111EE0AAF350 519000 ----a-w- C:\Windows\Sysnative\d3dx10_40.dll 2014-05-07 00:51:52 37309B833480DC69FDE7DB68F9B8BC20 2605920 ----a-w- C:\Windows\Sysnative\D3DCompiler_40.dll 2014-05-07 00:51:49 29A79F0B607FAF5722D7BAF2485F632A 5631312 ----a-w- C:\Windows\Sysnative\D3DX9_40.dll 2014-05-06 03:20:08 84ED099009EF0DF82A37D4FEAE012655 465408 ----a-w- C:\Windows\Sysnative\aepdu.dll 2014-05-06 03:20:08 5513F4766C9987D6B0D49D51BB2E5EE4 424448 ----a-w- C:\Windows\Sysnative\aeinv.dll 2014-05-03 11:15:26 A98DA2EC1E56CF52C682D072F77D9874 23547904 ----a-w- C:\Windows\Sysnative\mshtml.dll 2014-05-03 11:15:23 DE5DE05946D6FC2DC494C55BC7BC4C6E 2724864 ----a-w- C:\Windows\Sysnative\mshtml.tlb ====== C:\Windows\Sysnative\drivers ===== 2014-04-29 11:37:27 D41D8CD98F00B204E9800998ECF8427E 0 ---ha-w- C:\Windows\Sysnative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== ======= C:\PROGRA~2 ===== ======= C: ===== ====== C:\Users\Stan\AppData\Roaming ====== 2014-05-13 13:02:15 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Locallow\Sun 2014-05-11 00:17:37 -------- d-sh--w- C:\Users\Stan\AppData\Locallow\EmieSiteList 2014-05-07 00:52:17 -------- d-----w- C:\Users\Stan\AppData\Local\EdgeOfReality ====== C:\Users\Stan ====== 2014-05-13 12:57:43 A76E951ED4F8335337FD157A574DA36F 921512 ----a-w- C:\Users\Stan\Desktop\chromeinstall-7u55.exe 2014-05-10 21:09:25 -------- d-----r- C:\Windows\SysNative\config\systemprofile\Searches 2014-05-04 18:01:06 1CC8C311792646C030A4D57C346E95B1 4918272 ----a-w- C:\Users\Stan\Downloads\Mind_Therapy_-1.0.0.1.exe ====== C: exe-files == 2014-05-13 12:57:43 A76E951ED4F8335337FD157A574DA36F 921512 ----a-w- C:\Users\Stan\Desktop\chromeinstall-7u55.exe 2014-05-12 16:50:58 65E2734F1EEFAF57DE9EDF34202FB739 110592 ----a-w- C:\ProgramData\MTA San Andreas All\1.3\upcache\_mtasa-1.3.5-rc-06367-0-000-files-all-cksummed.rar_tmp__bak_\server\MTA Server.exe 2014-05-12 16:50:57 60F42452538A8E4E3E2BF0F248B2D2AA 259888 ----a-w- C:\ProgramData\MTA San Andreas All\1.3\upcache\_mtasa-1.3.5-rc-06367-0-000-files-all-cksummed.rar_tmp__bak_\Multi Theft Auto.exe 2014-05-12 16:50:55 754C35444815491324CC3A07950D554B 110592 ----a-w- C:\ProgramData\MTA San Andreas All\1.3\upcache\_mtasa-1.3.5-rc-06367-0-000-files-all-cksummed.rar_tmp_\server\MTA Server.exe 2014-05-12 16:50:53 60F42452538A8E4E3E2BF0F248B2D2AA 259888 ----a-w- C:\ProgramData\MTA San Andreas All\1.3\upcache\_mtasa-1.3.5-rc-06367-0-000-files-all-cksummed.rar_tmp_\Multi Theft Auto.exe 2014-05-09 16:34:42 BE472797288F53AA9F56974B1A1FC18F 918672 ----a-w- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdateSetup.exe 2014-05-09 16:34:42 6FC454773ABF8DE9A33B35E03525140D 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdateOnDemand.exe 2014-05-09 16:34:42 49B70FBEEC01A69CA9AC115C109E9CDD 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdateBroker.exe 2014-05-09 16:34:36 D893431503D5112DC3B799DF963D2AC8 114568 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdateComRegisterShell64.exe 2014-05-09 16:34:36 D5A444B63637EC0932172C6719A10252 263048 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe 2014-05-09 16:34:36 720546B84ED5229E1584C8F3533A2F12 328072 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe 2014-05-09 16:34:36 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdate.exe 2014-05-09 16:34:27 BE472797288F53AA9F56974B1A1FC18F 918672 ----a-w- C:\Program Files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.24.7\GoogleUpdateSetup.exe === C: other files == ==== Startup Registry Enabled ====================== [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "TOSHIBA Online Product Information"="C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-1338642811-412060392-669450374-1000\Software\Microsoft\Windows\CurrentVersion\Run] "Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent" "Vbuzzer Messenger"="C:\Program Files (x86)\vbuzzer\VBuzzer.exe" "uTorrent"="C:\Users\Stan\AppData\Roaming\uTorrent\uTorrent.exe /MINIMIZED" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run] "TOSHIBA Online Product Information"="C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:http://go.microsoft.com/fwlink/?LinkID=122915 /build:7601" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:http://go.microsoft.com/fwlink/?LinkID=122915 /build:7601" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "NBAgent"="c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe /WinStart" "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun" "SVPWUTIL"="C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL" "HWSetup"="C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP" "KeNotify"="C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe LPCM" "ToshibaServiceStation"="C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60" "avast"="C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui" "Adobe Creative Cloud"="C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --showwindow=false --onOSstartup=true" "TWebCamera"=""C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent" "Vbuzzer Messenger"="C:\Program Files (x86)\vbuzzer\VBuzzer.exe" "uTorrent"="C:\Users\Stan\AppData\Roaming\uTorrent\uTorrent.exe /MINIMIZED" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Toshiba TEMPRO"="C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe" "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "RtHDVBg"="C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 " "TosVolRegulator"="C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" "Toshiba Registration"="C:\Program Files\Toshiba\Registration\ToshibaReminder.exe" "BCSSync"="C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices" "AdobeAAMUpdater-1.0"="C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" "TosNC"="%ProgramFiles%\Toshiba\BulletinBoard\TosNcCore.exe " "TosReelTimeMonitor"="%ProgramFiles%\TOSHIBA\ReelTime\TosReelTimeMonitor.exe " "TPwrMain"="%ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE" "SmoothView"="%ProgramFiles%\Toshiba\SmoothView\SmoothView.exe " "00TCrdMain"="%ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe " "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe " "SmartFaceVWatcher"="%ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe " "TosSENotify"="C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" ==== Startup Folders ====================== 2010-11-15 15:42:47 1254 ----a-w- C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk 2010-11-15 15:42:47 1254 ----a-w- C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [29-04-2014 11:32] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [15-06-2013 17:17] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [15-06-2013 17:17] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\AdobeAAMUpdater-1.0-Stan-TOSH-Stan" [C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe] "C:\Windows\SysNative\tasks\ConfigFree Startup Programs" [C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions bpegkgagfojjbcpkihigfmkojdmmimdf - No path found[] ehgldbbpchgpcfagfpfjgoomddhccfgh - No path found[] elchiiiejkobdbblfejjkbphbddgmljf - C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\Softonic.crx[] greatSAvEar - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh greatSAvEar - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh greatSAvEar - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh greatSAvEar - Administrator\AppData\Local\Torch\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - Administrator\AppData\Local\Torch\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - Administrator\AppData\Local\Torch\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - Administrator\AppData\Local\Torch\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh greatSAvEar - Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh greatSAvEar - Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh greatSAvEar - Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh greatSAvEar - Gast\AppData\Local\Torch\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - Gast\AppData\Local\Torch\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - Gast\AppData\Local\Torch\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - Gast\AppData\Local\Torch\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh greatSAvEar - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh greatSAvEar - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh greatSAvEar - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh greatSAvEar - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh greatSAvEar - Stan\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - Stan\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - Stan\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - Stan\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh Google Drive - Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf AdBlock - Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom YTBookMaark - Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn Google Wallet - Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia greatSAvEar - Stan\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - Stan\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - Stan\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - Stan\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh greatSAvEar - Stan\AppData\Local\Torch\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb YoutubeAdblocker - Stan\AppData\Local\Torch\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa YTBookMaark - Stan\AppData\Local\Torch\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn AutoPager Chrome - Stan\AppData\Local\Torch\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh ==== Chrome Fix ====================== C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\Gast\AppData\Local\Torch\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\Stan\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\Stan\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\Stan\AppData\Local\Torch\User Data\Default\Extensions\fallohpclgmbmoilfdnbfapiebeoinaa deleted successfully C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\Gast\AppData\Local\Torch\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\Stan\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\Stan\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\Stan\AppData\Local\Torch\User Data\Default\Extensions\eblhpdihablpeejhnpnfjkahfhknejfb deleted successfully C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\Gast\AppData\Local\Torch\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\Stan\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\Stan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\Stan\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\Stan\AppData\Local\Torch\User Data\Default\Extensions\hbpdflaaldadpkcojbenflgpcdmbehdn deleted successfully C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\Gast\AppData\Local\Torch\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\Stan\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\Stan\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully C:\Users\Stan\AppData\Local\Torch\User Data\Default\Extensions\mmgagnmbebdebebbcleklifnobamjonh deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://istart.webssearches.com/web/?type=ds&ts=1397164696&from=slbnew&uid=TOSHIBAXMQ01ABD050_43L5SCF3SXX43L5SCF3S&q={searchTerms}" "Search Page"="http://istart.webssearches.com/web/?type=ds&ts=1397164696&from=slbnew&uid=TOSHIBAXMQ01ABD050_43L5SCF3SXX43L5SCF3S&q={searchTerms}" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://istart.webssearches.com/web/?type=ds&ts=1397164696&from=slbnew&uid=TOSHIBAXMQ01ABD050_43L5SCF3SXX43L5SCF3S&q={searchTerms}" "Search Page"="http://istart.webssearches.com/web/?type=ds&ts=1397164696&from=slbnew&uid=TOSHIBAXMQ01ABD050_43L5SCF3SXX43L5SCF3S&q={searchTerms}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="http://search.softonic.com/MOY00621/tb_v1/?SearchSource=15&cc=&mi=a6e5535f0000000000007c4fb507cd4f" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs] "Tabs"="http://search.softonic.com/MOY00621/tb_v1/?SearchSource=15&cc=&mi=a6e5535f0000000000007c4fb507cd4f" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}] not found New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="res://ieframe.dll/tabswelcome.htm" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs] "Tabs"="res://ieframe.dll/tabswelcome.htm" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {06FBC310-5AF8-430A-BDA1-A04A4D13DFDE} Unknown Url="Not_Found" {2EB3F2BF-324C-4699-B5D8-050D6C248E74} Amazon Url="http://www.amazon.co.uk/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibauk-win7-ie-search-21&index=blended&linkCode=ur2" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" {A9F36C13-810D-4A29-84AF-E93042F807E1} Unknown Url="Not_Found" {C141FB64-9DC3-49AE-A5F6-1D4980037C43} eBay Url="http://rover.ebay.com/rover/1/1346-71494-26233-7/4?satitle={searchTerms}" ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-1338642811-412060392-669450374-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5018CFD2-804D-4C99-9F81-25EAEA2769DE} deleted successfully HKEY_USERS\S-1-5-21-1338642811-412060392-669450374-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5018CFD2-804D-4C99-9F81-25EAEA2769DE} deleted successfully HKEY_USERS\S-1-5-21-1338642811-412060392-669450374-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9} deleted successfully HKEY_USERS\S-1-5-21-1338642811-412060392-669450374-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435B-BC74-9C25C1C588A9} deleted successfully HKEY_USERS\S-1-5-21-1338642811-412060392-669450374-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E87806B5-E908-45FD-AF5E-957D83E58E68} deleted successfully HKEY_USERS\S-1-5-21-1338642811-412060392-669450374-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E87806B5-E908-45FD-AF5E-957D83E58E68} deleted successfully HKEY_USERS\S-1-5-21-1338642811-412060392-669450374-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3C0D7C5-B942-4259-0216-9D9E7CB3FAA5} deleted successfully HKEY_USERS\S-1-5-21-1338642811-412060392-669450374-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F3C0D7C5-B942-4259-0216-9D9E7CB3FAA5} deleted successfully HKEY_USERS\S-1-5-21-1338642811-412060392-669450374-1000\Software\Microsoft\Internet Explorer\SearchScopes\{06FBC310-5AF8-430A-BDA1-A04A4D13DFDE} deleted successfully HKEY_USERS\S-1-5-21-1338642811-412060392-669450374-1000\Software\Microsoft\Internet Explorer\SearchScopes\{A9F36C13-810D-4A29-84AF-E93042F807E1} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{5018CFD2-804D-4C99-9F81-25EAEA2769DE} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{DBC80044-A445-435B-BC74-9C25C1C588A9} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435B-BC74-9C25C1C588A9} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{E87806B5-E908-45FD-AF5E-957D83E58E68} deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F3C0D7C5-B942-4259-0216-9D9E7CB3FAA5} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F3C0D7C5-B942-4259-0216-9D9E7CB3FAA5} deleted successfully HKEY_CLASSES_ROOT\CLSID\{F3C0D7C5-B942-4259-0216-9D9E7CB3FAA5} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{F3C0D7C5-B942-4259-0216-9D9E7CB3FAA5} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3C0D7C5-B942-4259-0216-9D9E7CB3FAA5} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3C0D7C5-B942-4259-0216-9D9E7CB3FAA5} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{5018CFD2-804D-4C99-9F81-25EAEA2769DE} deleted successfully ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\elchiiiejkobdbblfejjkbphbddgmljf deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Stan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Stan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Cache found ==== Empty Chrome Cache ====================== C:\Users\Stan\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=372 folders=154 46808525 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Stan\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Stan\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on di 13-05-2014 at 15:40:22,75 ======================