Zoek.exe v5.0.0.0 Updated 14-April-2014 Tool run by Jan-Paul on do 15-05-2014 at 8:26:31,45. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Jan-Paul\Downloads\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== System Restore Info ====================== 15-5-2014 8:28:20 Zoek.exe System Restore Point Created Succesfully. ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-2150365848-409445085-48682015-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully HKEY_USERS\S-1-5-21-2150365848-409445085-48682015-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-2150365848-409445085-48682015-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully HKEY_USERS\S-1-5-21-2150365848-409445085-48682015-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully ==== Deleting Services ====================== ==== Registry Fix Code x64 ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}] ==== Deleting Files \ Folders ====================== C:\Users\Jan-Paul\AppData\LocalLow\Vuze_Remote deleted C:\Whatthefuckone deleted C:\Users\Jan-Paul\AppData\LocalLow\PriceGong deleted C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Vuze_Remote deleted C:\END deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== 2014-05-04 12:14:39 118E4FA36BC8464F322BA9FAD83D48D0 72 ----a-w- C:\Windows\licswk.dll 2014-05-04 12:13:38 CC594D2D117EBDA6A30F6FEF756FEA13 550 ----a-w- C:\Windows\SWISV3.INI 2014-05-04 12:13:38 C3A5B3CBCCFEE7AA670EF12C8FFCE358 332 ----a-w- C:\Windows\SKNIFE.INI 2014-05-04 12:13:38 A00C3095946B9254788437010ED7B358 214 ----a-w- C:\Windows\DYNASN.INF 2014-05-04 12:12:25 F11167C2CA83F560FD101BBCCE38EB58 2944 ----a-w- C:\Windows\SKLANG.INI 2014-05-04 12:12:24 515E4684008E955DE0C81E6A7AEA1C2A 306688 ----a-w- C:\Windows\IsUninst.exe 2014-04-23 07:25:50 0B5A0005C0BDF4A05174576AF80DEA04 43152 ----a-w- C:\Windows\avastSS.scr ====== C:\Users\Jan-Paul\AppData\Local\Temp ==== ====== Java Cache ===== 2014-04-17 05:50:04 C1BBA7F1278F193AB584FFF460DB5E2A 17878 ----a-w- C:\Users\Jan-Paul\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\eef218c-38bcf9a8 2014-04-17 05:49:55 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Users\Jan-Paul\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\49a00451-6aa98326 2014-04-17 05:49:55 B9F5FD1D10C6B8628DA7683805612D41 425 ----a-w- C:\Users\Jan-Paul\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\49a00451-aa56bb018d5de3a531ee91cc4857f0f479656e5370ebf87789e721aaaf530ebc-6.0.lap 2014-04-17 05:49:54 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Users\Jan-Paul\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\3cb32f52-72819bca 2014-04-17 05:49:56 34FA8033B50A3F99D3AB8209C72C0ABA 6860 ----a-w- C:\Users\Jan-Paul\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\1ca2666b-61659564 2014-04-16 18:53:21 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Jan-Paul\AppData\LocalLow\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-63e0d142 ====== C:\Windows\SysWOW64 ===== 2014-05-14 21:41:18 FBCF3F01177953EBF1E735643621CCF5 69632 ----a-w- C:\Windows\SysWOW64\mshtmled.dll 2014-05-14 21:41:17 EB5347F6149D3FF25F4D609A21A3BD67 17382912 ----a-w- C:\Windows\SysWOW64\mshtml.dll 2014-05-14 21:41:17 10D531ADC7B8FB36C7361D44AF6E8AB6 2724864 ----a-w- C:\Windows\SysWOW64\mshtml.tlb 2014-05-14 14:22:49 76E7383ABED6D75B3111D770E272E59E 17938608 ----a-w- C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-05-14 12:46:27 E9D88493FBDB36D4B65C6F2F7F122C95 12874240 ----a-w- C:\Windows\SysWOW64\shell32.dll 2014-05-14 12:46:10 ED195AC76E10F17F6DD60C49666F2A83 259584 ----a-w- C:\Windows\SysWOW64\msv1_0.dll 2014-05-14 12:46:10 9DE19EA21DF99AF15BA5A947E5317F9E 550912 ----a-w- C:\Windows\SysWOW64\kerberos.dll 2014-05-14 12:46:10 4D59F470985D08139E42D15842816C47 3969984 ----a-w- C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-14 12:46:10 31FA2485DFC773F1E718A4D19F443FA9 3914176 ----a-w- C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-14 12:46:09 995B39A08421C7725D1DF8DACEBBFC89 538112 ----a-w- C:\Windows\SysWOW64\objsel.dll 2014-05-14 12:46:08 FBC78B5D12A4F5A62D9C91E0E0E46D46 49664 ----a-w- C:\Windows\SysWOW64\adprovider.dll 2014-05-14 12:46:08 834A859BB331B0B2CCAE25BB1986F80D 47616 ----a-w- C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-14 12:46:08 828185688FDAAE6C7959B884ABED1766 247808 ----a-w- C:\Windows\SysWOW64\schannel.dll 2014-05-14 12:46:08 62C0798CC68EBF42F29C92E6CD6DC3D6 36864 ----a-w- C:\Windows\SysWOW64\dimsroam.dll 2014-05-14 12:46:08 5E11C55CC4D9330E55CCB22B1F20BB33 35328 ----a-w- C:\Windows\SysWOW64\wincredprovider.dll 2014-05-14 12:46:08 541BB9B4C899ADCC5D3DB89208C1F409 65536 ----a-w- C:\Windows\SysWOW64\TSpkg.dll 2014-05-14 12:46:08 461B713DE7F353C6447B744F1A049930 274944 ----a-w- C:\Windows\SysWOW64\KernelBase.dll 2014-05-14 12:46:08 3A1ABE045A3E30799576E83A2D012B43 172032 ----a-w- C:\Windows\SysWOW64\wdigest.dll 2014-05-14 12:46:08 38A30B8E4216BE24D30F766EF3BAC2C7 48128 ----a-w- C:\Windows\SysWOW64\capiprovider.dll 2014-05-14 12:46:08 335FA669FC952BC4888CEDBDB42607E2 51200 ----a-w- C:\Windows\SysWOW64\cngprovider.dll 2014-05-14 12:46:08 2A86C18CE6869C77FCEB62F3B47D4D5B 17408 ----a-w- C:\Windows\SysWOW64\credssp.dll 2014-05-14 12:46:07 C94CE65AE7701E9FDBA889045543E27C 22016 ----a-w- C:\Windows\SysWOW64\secur32.dll 2014-05-14 12:46:07 75878492F2B33405EEF900F8C16C6D08 96768 ----a-w- C:\Windows\SysWOW64\sspicli.dll 2014-05-04 12:13:39 DD6FA14D0E2C99EC5EBA2498D64AEA6D 13312 ----a-w- C:\Windows\SysWOW64\DEVLOAD.EXE ====== C:\Windows\SysWOW64\drivers ===== 2014-05-04 12:13:39 729248B54AFF21E740054ACEBFDBCB1C 14976 ----a-w- C:\Windows\SysWOW64\drivers\SBKUPNT.SYS ====== C:\Windows\Sysnative ===== 2014-05-14 21:41:18 A920E1336F9FEA95477763E2CC15891B 84992 ----a-w- C:\Windows\Sysnative\mshtmled.dll 2014-05-14 21:41:18 797E2E5C309AFF76990D5B7AF457EACA 23544320 ----a-w- C:\Windows\Sysnative\mshtml.dll 2014-05-14 21:41:17 A45BFDCFD5864F658289A165E6E0227F 2724864 ----a-w- C:\Windows\Sysnative\mshtml.tlb 2014-05-14 12:46:30 427015D56DF17241F634611557146C57 14175744 ----a-w- C:\Windows\Sysnative\shell32.dll 2014-05-14 12:46:24 4A795989DF0043973711B666D36D2678 477184 ----a-w- C:\Windows\Sysnative\aepdu.dll 2014-05-14 12:46:24 485FB1F3792FF7B5D5EBB99AB870E588 424448 ----a-w- C:\Windows\Sysnative\aeinv.dll 2014-05-14 12:46:12 9358149234A4F3FE00CF5C2096DC1652 1460736 ----a-w- C:\Windows\Sysnative\lsasrv.dll 2014-05-14 12:46:11 B19C8390A1D641B9AC4490D4828A7B5E 728064 ----a-w- C:\Windows\Sysnative\kerberos.dll 2014-05-14 12:46:10 E2A483E796D5FC7E447725FD01D98FA0 314880 ----a-w- C:\Windows\Sysnative\msv1_0.dll 2014-05-14 12:46:10 89EF1CE0CE43AB8F55247D746739A321 722944 ----a-w- C:\Windows\Sysnative\objsel.dll 2014-05-14 12:46:10 6B47CF5C27865DDF6680E4D834FBE34F 5550016 ----a-w- C:\Windows\Sysnative\ntoskrnl.exe 2014-05-14 12:46:09 B6D8C1202DACA028AD94BDA2795CBBE9 86528 ----a-w- C:\Windows\Sysnative\TSpkg.dll 2014-05-14 12:46:09 851BB346CD59D9B3BC8854384C7DD5C3 424960 ----a-w- C:\Windows\Sysnative\KernelBase.dll 2014-05-14 12:46:09 26AF184300C0868D854D5A3092234E24 210944 ----a-w- C:\Windows\Sysnative\wdigest.dll 2014-05-14 12:46:08 CF13522172342AD8196B329C15D68E23 44544 ----a-w- C:\Windows\Sysnative\dimsroam.dll 2014-05-14 12:46:08 C072064F95579C0D6D86AF5B3DC53192 136192 ----a-w- C:\Windows\Sysnative\sspicli.dll 2014-05-14 12:46:08 BDA8B14AFE99A0C52BFEA64C5AC62171 52736 ----a-w- C:\Windows\Sysnative\dpapiprovider.dll 2014-05-14 12:46:08 9D942180B5B6CE1C882B9CC54EA1F275 57344 ----a-w- C:\Windows\Sysnative\cngprovider.dll 2014-05-14 12:46:08 9A3C6D8593F29A9F66744A3D4E6309B2 39936 ----a-w- C:\Windows\Sysnative\wincredprovider.dll 2014-05-14 12:46:08 82A72E99AA1CF0B04D3B9843CBA3AEC1 22016 ----a-w- C:\Windows\Sysnative\credssp.dll 2014-05-14 12:46:08 8098627D0AA1706D69C5AF3F74332ABB 29184 ----a-w- C:\Windows\Sysnative\sspisrv.dll 2014-05-14 12:46:08 692E9886B2A475684F7E3294BF66E97D 56832 ----a-w- C:\Windows\Sysnative\adprovider.dll 2014-05-14 12:46:08 4959DE74643CBC4B83E5BC99486A4FC9 53760 ----a-w- C:\Windows\Sysnative\capiprovider.dll 2014-05-14 12:46:08 481F70241D4EA038BB02590A30F15A23 340992 ----a-w- C:\Windows\Sysnative\schannel.dll 2014-05-14 12:46:08 39312B37C5FE5138F99680A49ACD3AEA 28160 ----a-w- C:\Windows\Sysnative\secur32.dll 2014-05-14 12:46:08 204F3F58212B3E422C90BD9691A2DF28 31232 ----a-w- C:\Windows\Sysnative\lsass.exe ====== C:\Windows\Sysnative\drivers ===== 2014-05-14 12:46:08 353009DEDF918B2A51414F330CF72DEC 95680 ----a-w- C:\Windows\Sysnative\drivers\ksecdd.sys 2014-05-14 12:46:08 1C2D8E18AA8FD50CD04C15CC27F7F5AB 155072 ----a-w- C:\Windows\Sysnative\drivers\ksecpkg.sys 2014-04-23 07:25:56 340B0467E98A8C92697D73034DB4BCB7 29208 ----a-w- C:\Windows\Sysnative\drivers\aswHwid.sys 2014-04-23 07:25:34 5209F2D0CC85FBCF7D00C2865B719EC3 447888 ----a-w- C:\Windows\Sysnative\drivers\aswNdisFlt.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== ======= C:\PROGRA~2 ===== 2014-05-08 17:21:39 -------- d-----w- C:\PROGRA~2\IsoTools 2014-05-04 12:13:38 -------- d-----w- C:\PROGRA~2\SWISSKNIFE 2014-04-29 06:17:53 -------- d-----w- C:\PROGRA~2\Mozilla Maintenance Service ======= C: ===== 2014-05-12 11:45:44 1050F0A1E5532B7440B9B8A46EA3A80B 364929024 ----a-w- C:\Ment0619.avi 2014-05-12 11:43:40 4D7046C1F6CA6E7088B70B8DB22B4452 365918208 ----a-w- C:\Ment0618.avi ====== C:\Users\Jan-Paul\AppData\Roaming ====== 2014-05-08 17:22:22 -------- d-----w- C:\Users\Jan-Paul\AppData\Local\3K3Y_Team 2014-04-29 06:18:01 -------- d-----w- C:\Users\Jan-Paul\AppData\Roaming\Mozilla 2014-04-29 06:18:01 -------- d-----w- C:\Users\Jan-Paul\AppData\Local\Mozilla 2014-04-15 16:29:16 -------- d-sh--w- C:\Users\Jan-Paul\AppData\Locallow\EmieUserList 2014-04-15 16:29:16 -------- d-sh--w- C:\Users\Jan-Paul\AppData\Local\EmieUserList 2014-04-15 16:29:16 -------- d-sh--w- C:\Users\Jan-Paul\AppData\Local\EmieSiteList 2014-04-15 15:53:08 -------- d-sh--w- C:\Users\Jan-Paul\AppData\Locallow\EmieSiteList ====== C:\Users\Jan-Paul ====== 2014-05-14 12:43:51 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\Jan-Paul\Downloads\RSITx64.exe 2014-05-08 17:21:43 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IsoTools 2014-05-04 12:13:40 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CompuApps SwissKnife V3 2014-04-29 06:17:53 -------- d-----w- C:\ProgramData\Mozilla 2014-04-22 11:27:33 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn 2014-04-17 05:49:15 -------- d-----w- C:\ProgramData\Oracle 2014-04-17 05:48:42 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java ====== C: exe-files == 2014-05-14 14:22:49 76E7383ABED6D75B3111D770E272E59E 17938608 ----a-w- C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-05-14 12:46:24 94566D109585C5867B01B761276C2D1F 155136 ----a-w- C:\Windows\System32\CompatTel\QueryAppBlock.exe 2014-05-14 12:46:24 6FF6FF2DD6B7CDD07049DCA1F7A18319 31232 ----a-w- C:\Windows\System32\CompatTel\wicainventory.exe 2014-05-14 12:46:10 6B47CF5C27865DDF6680E4D834FBE34F 5550016 ----a-w- C:\Windows\System32\ntoskrnl.exe 2014-05-14 12:46:10 4D59F470985D08139E42D15842816C47 3969984 ----a-w- C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-14 12:46:10 31FA2485DFC773F1E718A4D19F443FA9 3914176 ----a-w- C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-14 12:46:08 204F3F58212B3E422C90BD9691A2DF28 31232 ----a-w- C:\Windows\System32\lsass.exe 2014-05-14 12:43:51 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\Jan-Paul\Downloads\RSITx64.exe 2014-05-11 13:10:06 EB843B48598B10D605E7FDCE36D9B18D 122804 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\sceverify.exe 2014-05-11 13:10:06 EB843B48598B10D605E7FDCE36D9B18D 122804 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3tools_bin_win32_20110106\sceverify.exe 2014-05-11 13:10:06 D23FC3EADCB9522CA97358F8BED6DD49 19447 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3utils_win32_20110106\find_syscall.exe 2014-05-11 13:10:06 C28D34D9A6E28E150833E87AAB3DBF5B 128034 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3tools_bin_win32_20110106\pkg.exe 2014-05-11 13:10:06 C28D34D9A6E28E150833E87AAB3DBF5B 128034 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\pkg.exe 2014-05-11 13:10:06 AFA306E5B371B808A3AC0DD627A5D77D 116112 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3tools_bin_win32_20110106\norunpack.exe 2014-05-11 13:10:06 91AB6AB2C32721325A2A4405D921A1DE 134461 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3tools_bin_win32_20110106\makeself.exe 2014-05-11 13:10:06 89C67DE052357EBCA19AFF58DB1EF30B 43361 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\pup.exe 2014-05-11 13:10:06 89C67DE052357EBCA19AFF58DB1EF30B 43361 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3utils_win32_20110106\pup.exe 2014-05-11 13:10:06 8356A24E44A8BAB90C4D20D1FAB065E5 20896 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3utils_win32_20110106\fix_tar.exe 2014-05-11 13:10:06 821FDBB22BD5CD4C5BC76BC47887BF5A 122544 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\puppack.exe 2014-05-11 13:10:06 821FDBB22BD5CD4C5BC76BC47887BF5A 122544 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3tools_bin_win32_20110106\puppack.exe 2014-05-11 13:10:06 76DE7C8B0011B934DE00971DE274C7B0 119436 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\pupunpack.exe 2014-05-11 13:10:06 76DE7C8B0011B934DE00971DE274C7B0 119436 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3tools_bin_win32_20110106\pupunpack.exe 2014-05-11 13:10:06 688A6CDCA569A26A279F118A883CF466 121486 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3tools_bin_win32_20110106\cospkg.exe 2014-05-11 13:10:06 5BF781791DDB8C45BF25973DE6F126DC 114699 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3tools_bin_win32_20110106\cosunpkg.exe 2014-05-11 13:10:06 4BD310B88488CAEC8B7A9F4A40AAD94F 316594 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\scesekrit.exe 2014-05-11 13:10:06 4BD310B88488CAEC8B7A9F4A40AAD94F 316594 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3tools_bin_win32_20110106\scesekrit.exe 2014-05-11 13:10:06 44BA09DF1EBA2ABC2E56E53C9DE41873 118821 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\unpkg.exe 2014-05-11 13:10:06 44BA09DF1EBA2ABC2E56E53C9DE41873 118821 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3tools_bin_win32_20110106\unpkg.exe 2014-05-11 13:10:06 4409B814D792CBDEC1AC6F7EB930B8E6 133558 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\unself.exe 2014-05-11 13:10:06 4409B814D792CBDEC1AC6F7EB930B8E6 133558 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3tools_bin_win32_20110106\unself.exe 2014-05-11 13:10:06 326AE676449C33B09CF022CF22FE963C 136227 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\readself.exe 2014-05-11 13:10:06 326AE676449C33B09CF022CF22FE963C 136227 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3tools_bin_win32_20110106\readself.exe 2014-05-11 13:10:06 1158BFDFEC0DB7D8C590966A50F331CE 133233 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3tools_bin_win32_20110106\makepkg.exe 2014-05-11 13:10:06 0D28B8E9FD5B62F46E33ADBAA5B2677E 23291 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\ps3utils_win32_20110106\pdb_gen.exe 2014-05-11 13:10:05 F4E08005461B9C6F8635EB346E88EA06 75551 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\fwtool-e396776-win32\fwpkg.exe 2014-05-11 13:10:05 F4E08005461B9C6F8635EB346E88EA06 75551 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\fwpkg.exe 2014-05-11 13:10:05 D23FC3EADCB9522CA97358F8BED6DD49 19447 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\find_syscall.exe 2014-05-11 13:10:05 AFA306E5B371B808A3AC0DD627A5D77D 116112 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\norunpack.exe 2014-05-11 13:10:05 91AB6AB2C32721325A2A4405D921A1DE 134461 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\makeself.exe 2014-05-11 13:10:05 8356A24E44A8BAB90C4D20D1FAB065E5 20896 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\fix_tar.exe 2014-05-11 13:10:05 688A6CDCA569A26A279F118A883CF466 121486 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\cospkg.exe 2014-05-11 13:10:05 5BF781791DDB8C45BF25973DE6F126DC 114699 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\cosunpkg.exe 2014-05-11 13:10:05 315AD122E1C59315DFB101C211D6C2C0 35105 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\fwtool-e396776-win32\coreos_tool.exe 2014-05-11 13:10:05 315AD122E1C59315DFB101C211D6C2C0 35105 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\coreos_tool.exe 2014-05-11 13:10:05 1158BFDFEC0DB7D8C590966A50F331CE 133233 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\makepkg.exe 2014-05-11 13:10:05 0D28B8E9FD5B62F46E33ADBAA5B2677E 23291 ----a-w- C:\Users\Jan-Paul\Downloads\PS3-BDB-Package\PS3\pdb_gen.exe === C: other files == 2014-05-14 12:46:08 353009DEDF918B2A51414F330CF72DEC 95680 ----a-w- C:\Windows\System32\drivers\ksecdd.sys 2014-05-14 12:46:08 1C2D8E18AA8FD50CD04C15CC27F7F5AB 155072 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-2150365848-409445085-48682015-1000\Software\Microsoft\Windows\CurrentVersion\Run] [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NUSB3MON"="C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Network Configuration"="C:\Program Files (x86)\Okidata\ActKey\Network Configuration.exe /RunWithOS" ==== Startup Registry Disabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CTSyncService] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="CTSyncService" "hkey"="HKLM" "command"="C:\\Program Files (x86)\\InstallShield Installation Information\\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\\AMBSPISyncService.exe /StartRunKey" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RtHDVCpl] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="RtHDVCpl" "hkey"="HKLM" "command"="C:\\Program Files\\Realtek\\Audio\\HDA\\RAVCpl64.exe -s" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RunDLLEntry] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="RunDLLEntry" "hkey"="HKLM" "command"="C:\\Windows\\system32\\RunDLL32.exe C:\\Windows\\system32\\AmbRunE.dll,RunDLLEntry" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\StartCCC] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="StartCCC" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\ATI Technologies\\ATI.ACE\\Core-Static\\CLIStart.exe\" MSRun" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\UpdReg] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="UpdReg" "hkey"="HKLM" "command"="C:\\Windows\\UpdReg.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\VolPanel] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="VolPanel" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Creative\\SB X-Fi MB\\Volume Panel\\VolPanlu.exe\" /r" ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [14-05-2014 16:23] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [01-05-2013 13:32] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [01-05-2013 13:32] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\0" [c:\program files\internet explorer\iexplore.exe] "C:\Windows\SysNative\tasks\4909" [wscript.exe C:\Users\Jan-Paul\AppData\Local\Temp\launchie.vbs //B] "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\User_Feed_Synchronization-{50E5875B-5036-42DC-91D0-71B258C441D0}" [C:\Windows\system32\msfeedssync.exe] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [23-04-2014 09:25] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Jan-Paul\AppData\Roaming\Mozilla\Firefox\Profiles\vh5hqydk.default - avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Jan-Paul\AppData\Roaming\Mozilla\Firefox\Profiles\vh5hqydk.default A58DE0A570148AF5FF3512B2A340D09F - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll - Shockwave Flash ==== Chrome Look ====================== Google Docs - Jan-Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Jan-Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Jan-Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - Jan-Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Card number - Jan-Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - Jan-Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://msn.nl/" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://msn.nl/" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Jan-Paul\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Jan-Paul\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== C:\Users\Jan-Paul\AppData\Local\Mozilla\Firefox\Profiles\vh5hqydk.default\Cache emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Jan-Paul\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=243 folders=59 4683181381 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Jan-Paul\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Jan-Paul\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on do 15-05-2014 at 8:46:05,23 ======================