Zoek.exe v5.0.0.0 Updated 12-July-2014 Tool run by Eigenaar on za 12-07-2014 at 11:36:26,89. Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Eigenaar\Desktop\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== System Restore Info ====================== 12-7-2014 11:40:09 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\Users\Eigenaar\AppData\Roaming\Advanced System Protector deleted successfully C:\Users\Eigenaar\AppData\Roaming\Open Download Manager deleted successfully C:\Users\Delicious Lars\AppData\Local\VirtualStore deleted successfully C:\Users\Delicious Lars\AppData\Local\{0EC3C3CC-3501-4B6D-9389-D064C0483C08} deleted successfully C:\Users\Delicious Lars\AppData\Local\{233A4D2C-D0AE-4B67-ABB7-F07D1F794FFC} deleted successfully C:\Users\Eigenaar\AppData\Local\VirtualStore deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-3713345104-3849095893-2197492959-1001\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8} deleted successfully HKEY_CLASSES_ROOT\CLSID\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} deleted successfully HKEY_CLASSES_ROOT\CLSID\{3004627E-F8E9-4E8B-909D-316753CBA923} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{3004627E-F8E9-4E8B-909D-316753CBA923} deleted successfully ==== Running Processes ====================== C:\Windows\System32\smss.exe C:\Windows\system32\csrss.exe C:\Windows\system32\wininit.exe C:\Windows\system32\csrss.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\nvvsvc.exe C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe C:\Windows\system32\AUDIODG.EXE C:\Windows\system32\SLsvc.exe C:\Program Files\Tablet\Pen\Pen_TouchService.exe C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe C:\Windows\system32\nvvsvc.exe C:\Windows\SYSTEM32\WISPTIS.EXE C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe C:\Windows\system32\WLANExt.exe C:\Windows\System32\spoolsv.exe C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Norton Internet Security\Engine\21.3.0.12\NIS.exe C:\Program Files\Sitecom\Common\RegistryWriter.exe C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe C:\Windows\system32\Tablet.exe C:\Program Files\Tablet\Pen\Pen_Tablet.exe C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe C:\Program Files\Mega Browse\updateMegaBrowse.exe C:\Program Files\Norton Internet Security\Engine\21.3.0.12\NIS.exe C:\Windows\system32\taskeng.exe C:\Windows\SYSTEM32\WISPTIS.EXE C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe C:\Windows\system32\taskeng.exe C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\WTablet\TabUserW.exe C:\Windows\system32\Tablet.exe C:\Program Files\Tablet\Pen\Pen_TabletUser.exe C:\Program Files\Tablet\Pen\Pen_TouchUser.exe C:\Program Files\Tablet\Pen\Pen_Tablet.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Windows\system32\SearchIndexer.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\System32\WUDFHost.exe C:\Program Files\NVIDIA Corporation\Display\nvtray.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\Bamboo Dock\BambooCore.exe C:\Program Files\EPSON Software\Event Manager\EEventManager.exe C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Real\RealPlayer\Update\realsched.exe C:\Program Files\Logitech\SetPointP\SetPoint.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe C:\Windows\ehome\ehtray.exe C:\Windows\System32\spool\drivers\w32x86\3\E_TATIHTE.EXE C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Sitecom\Common\WLANUtil.exe C:\Users\Eigenaar\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Windows\system32\DllHost.exe C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Windows\system32\conime.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\Eigenaar\Desktop\zoek.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k rpcss C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update Mega Browse deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Update Mega Browse deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Update Mega Browse deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Update Mega Browse deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util Mega Browse deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Util Mega Browse deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Util Mega Browse deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Util Mega Browse deleted successfully ==== FireFox Fix ====================== ProfilePath: C:\Users\DELICI~1\AppData\Roaming\Mozilla\Firefox\Profiles\ox04cadx.default ---- Lines mysearchdial removed from prefs.js ---- user_pref("browser.search.selectedEngine", "Mysearchdial"); user_pref("browser.startup.homepage", "http://start.mysearchdial.com/?f=1&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0Tzu0Sz ---- Lines mysearchdial removed from user.js ---- user_pref("extensions.mysearchdial.hmpg", true); user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0Tzu0SzztCyEtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDzz0Fzz0BtCtC0CtG0DtBtB0CtG0Ezz0DyDtG0DzztAyEtGtC0CtC0BtByEtC0AtDyB0F0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0A0FyCtDtD0AyDtGtBzz0AyBtGzy0FyEtAtGtByEtAtCtGyBzy0BtB0AtCzytAyDtD0D0A2Q&cr=27813064&ir="); user_pref("extensions.mysearchdial.dfltSrch", true); user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); user_pref("extensions.mysearchdial.dnsErr", true); user_pref("extensions.mysearchdial_i.newTab", false); user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearchdial.com/?f=2&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0Tzu0SzztCyEtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDzz0Fzz0BtCtC0CtG0DtBtB0CtG0Ezz0DyDtG0DzztAyEtGtC0CtC0BtByEtC0AtDyB0F0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0A0FyCtDtD0AyDtGtBzz0AyBtGzy0FyEtAtGtByEtAtCtGyBzy0BtB0AtCzytAyDtD0D0A2Q&cr=27813064&ir="); user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearchdial.com/?f=3&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0Tzu0SzztCyEtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDzz0Fzz0BtCtC0CtG0DtBtB0CtG0Ezz0DyDtG0DzztAyEtGtC0CtC0BtByEtC0AtDyB0F0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0A0FyCtDtD0AyDtGtBzz0AyBtGzy0FyEtAtGtByEtAtCtGyBzy0BtB0AtCzytAyDtD0D0A2Q&cr=27813064&ir=&q="); user_pref("extensions.mysearchdial.id", "8C89A553FADDAE2C"); user_pref("extensions.mysearchdial.instlDay", "16153"); user_pref("extensions.mysearchdial.vrsn", "1.8.29.0"); user_pref("extensions.mysearchdial.vrsni", "1.8.29.0"); user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.29.016:48:18"); user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); user_pref("extensions.mysearchdial.prdct", "mysearchdial"); user_pref("extensions.mysearchdial.aflt", "ir_14_13_ch"); user_pref("extensions.mysearchdial_i.smplGrp", "none"); user_pref("extensions.mysearchdial.tlbrId", "base"); user_pref("extensions.mysearchdial.instlRef", "140305_a"); user_pref("extensions.mysearchdial.dfltLng", ""); user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); user_pref("extensions.mysearchdial.excTlbr", false); user_pref("extensions.mysearchdial.cr", "27813064"); user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0Tzu0SzztCyEtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDzz0Fzz0BtCtC0CtG0DtBtB0CtG0Ezz0DyDtG0DzztAyEtGtC0CtC0BtByEtC0AtDyB0F0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0A0FyCtDtD0AyDtGtBzz0AyBtGzy0FyEtAtGtByEtAtCtGyBzy0BtB0AtCzytAyDtD0D0A2Q"); user_pref("extensions.mysearchdial.AL", 2); ---- FireFox user.js and prefs.js backups ---- user_12-07-2014_1151_.backup prefs_12-07-2014_1151_.backup ProfilePath: C:\Users\DELICI~1\AppData\Roaming\Thunderbird\Profiles\voil4q4f.default user.js not found ---- FireFox user.js and prefs.js backups ---- prefs_12-07-2014_1151_.backup ProfilePath: C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\rxue6f1p.default ---- Lines mysearchdial removed from prefs.js ---- user_pref("browser.search.defaultenginename", "Mysearchdial"); user_pref("browser.search.order.1", "Mysearchdial"); user_pref("browser.search.selectedEngine", "Mysearchdial"); user_pref("browser.startup.homepage", "http://start.mysearchdial.com/?f=1&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0Tzu0Sz user_pref("extensions.mysearchdial.AL", 2); user_pref("extensions.mysearchdial.aflt", "ir_14_13_ch"); user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0Tzu0SzztCyEtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1 user_pref("extensions.mysearchdial.cntry", "NL"); user_pref("extensions.mysearchdial.cr", "27813064"); user_pref("extensions.mysearchdial.dfltLng", ""); user_pref("extensions.mysearchdial.dfltSrch", true); user_pref("extensions.mysearchdial.dnsErr", true); user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,304628180 user_pref("extensions.mysearchdial.excTlbr", false); user_pref("extensions.mysearchdial.hdrMd5", "98843F3810B31B56536A1BB019332B0D"); user_pref("extensions.mysearchdial.hmpg", true); user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D user_pref("extensions.mysearchdial.id", "8C89A553FADDAE2C"); user_pref("extensions.mysearchdial.instlDay", "16153"); user_pref("extensions.mysearchdial.instlRef", "140305_a"); user_pref("extensions.mysearchdial.lastB", "http://start.mysearchdial.com/?f=1&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0T user_pref("extensions.mysearchdial.lastVrsnTs", "1.8.29.016:48:18"); user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearchdial.com/?f=2&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"96\",\"lastVrsn\":\"96\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"false\ user_pref("extensions.mysearchdial.prdct", "mysearchdial"); user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); user_pref("extensions.mysearchdial.sg", "none"); user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); user_pref("extensions.mysearchdial.tlbrId", "base"); user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearchdial.com/?f=3&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0C user_pref("extensions.mysearchdial.vrsn", "1.8.29.0"); user_pref("extensions.mysearchdial.vrsni", "1.8.29.0"); user_pref("extensions.mysearchdial_i.newTab", false); user_pref("extensions.mysearchdial_i.smplGrp", "none"); user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.29.016:48:18"); ---- Lines mysearchdial modified from prefs.js ---- user_pref("extensions.enabledAddons", "%7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.21,%7B20a82645-c095-46ed-80e3-08825760534b%7D:0.0.0,%7B1018e4d6- user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"descriptor\":\"c:\\\\ ---- Lines mysearchdial removed from user.js ---- user_pref("extensions.mysearchdial.hmpg", true); user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0Tzu0SzztCyEtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDzz0Fzz0BtCtC0CtG0DtBtB0CtG0Ezz0DyDtG0DzztAyEtGtC0CtC0BtByEtC0AtDyB0F0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0A0FyCtDtD0AyDtGtBzz0AyBtGzy0FyEtAtGtByEtAtCtGyBzy0BtB0AtCzytAyDtD0D0A2Q&cr=27813064&ir="); user_pref("extensions.mysearchdial.dfltSrch", true); user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); user_pref("extensions.mysearchdial.dnsErr", true); user_pref("extensions.mysearchdial_i.newTab", false); user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearchdial.com/?f=2&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0Tzu0SzztCyEtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDzz0Fzz0BtCtC0CtG0DtBtB0CtG0Ezz0DyDtG0DzztAyEtGtC0CtC0BtByEtC0AtDyB0F0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0A0FyCtDtD0AyDtGtBzz0AyBtGzy0FyEtAtGtByEtAtCtGyBzy0BtB0AtCzytAyDtD0D0A2Q&cr=27813064&ir="); user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearchdial.com/?f=3&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0Tzu0SzztCyEtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDzz0Fzz0BtCtC0CtG0DtBtB0CtG0Ezz0DyDtG0DzztAyEtGtC0CtC0BtByEtC0AtDyB0F0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0A0FyCtDtD0AyDtGtBzz0AyBtGzy0FyEtAtGtByEtAtCtGyBzy0BtB0AtCzytAyDtD0D0A2Q&cr=27813064&ir=&q="); user_pref("extensions.mysearchdial.id", "8C89A553FADDAE2C"); user_pref("extensions.mysearchdial.instlDay", "16153"); user_pref("extensions.mysearchdial.vrsn", "1.8.29.0"); user_pref("extensions.mysearchdial.vrsni", "1.8.29.0"); user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.29.016:48:18"); user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); user_pref("extensions.mysearchdial.prdct", "mysearchdial"); user_pref("extensions.mysearchdial.aflt", "ir_14_13_ch"); user_pref("extensions.mysearchdial_i.smplGrp", "none"); user_pref("extensions.mysearchdial.tlbrId", "base"); user_pref("extensions.mysearchdial.instlRef", "140305_a"); user_pref("extensions.mysearchdial.dfltLng", ""); user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); user_pref("extensions.mysearchdial.excTlbr", false); user_pref("extensions.mysearchdial.cr", "27813064"); user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0Tzu0SzztCyEtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDzz0Fzz0BtCtC0CtG0DtBtB0CtG0Ezz0DyDtG0DzztAyEtGtC0CtC0BtByEtC0AtDyB0F0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0A0FyCtDtD0AyDtGtBzz0AyBtGzy0FyEtAtGtByEtAtCtGyBzy0BtB0AtCzytAyDtD0D0A2Q"); user_pref("extensions.mysearchdial.AL", 2); ---- FireFox user.js and prefs.js backups ---- user_12-07-2014_1151_.backup prefs_12-07-2014_1151_.backup ProfilePath: C:\Users\Eigenaar\AppData\Roaming\Thunderbird\Profiles\gwen8h4v.default user.js not found ---- FireFox user.js and prefs.js backups ---- prefs_12-07-2014_1151_.backup ProfilePath: C:\Users\Eigenaar\AppData\Roaming\TomTom\HOME\Profiles\3li5iqra.default user.js not found ---- FireFox user.js and prefs.js backups ---- prefs_12-07-2014_1151_.backup ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}] ==== Deleting Files \ Folders ====================== C:\Program Files\Mysearchdial deleted C:\Program Files\RegClean Pro deleted C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\rxue6f1p.default\extensions\ffxtlbr@mysearchdial.com deleted C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\rxue6f1p.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} deleted C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\rxue6f1p.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} deleted C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\rxue6f1p.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} deleted C:\Users\Eigenaar\AppData\Roaming\Mysearchdial deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro deleted C:\Users\Delicious Lars\AppData\Roaming\Open Download Manager deleted C:\Users\Delicious Lars\AppData\Roaming\Systweak deleted C:\Users\Eigenaar\AppData\Roaming\systweak deleted C:\PROGRA~2\Systweak deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector deleted C:\Windows\System32\Tasks\MySearchDial deleted C:\Windows\Tasks\MySearchDial.job deleted C:\Users\Eigenaar\Searches deleted C:\Windows\wininit.ini deleted C:\Windows\system32\Tasks\Advanced System Protector_startup deleted C:\Windows\system32\tasks\RegClean Pro_DEFAULT deleted C:\Windows\system32\tasks\RegClean Pro_UPDATES deleted C:\Windows\tasks\RegClean Pro_DEFAULT.job deleted C:\Windows\tasks\RegClean Pro_UPDATES.job deleted C:\Windows\system32\sasnative32.exe deleted C:\Windows\system32\roboot.exe deleted C:\Users\DELICI~1\AppData\Roaming\Mozilla\Firefox\Profiles\ox04cadx.default\searchplugins\Mysearchdial.xml deleted C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\rxue6f1p.default\searchplugins\Mysearchdial.xml deleted C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\rxue6f1p.default\extensions\staged deleted C:\Users\Eigenaar\Desktop\Schoon uw register gratis op!.lnk deleted "C:\Windows\Installer\115e4b.msi" deleted "C:\Program Files\Mega Browse\updateMegaBrowse.exe" deleted "C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe" deleted "C:\Program Files\Advanced System Protector\aspsys.dll" deleted "C:\Program Files\Advanced System Protector\Microsoft.Win32.TaskScheduler.DLL" deleted "C:\Program Files\Advanced System Protector\System.Data.SQLite.dll" deleted "C:\Program Files\Advanced System Protector\unrar.dll" deleted "C:\Program Files\Advanced System Protector\Xceed.Compression.dll" deleted "C:\Program Files\Advanced System Protector\Xceed.FileSystem.dll" deleted "C:\Program Files\Advanced System Protector\Xceed.Zip.dll" deleted "C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe" deleted "C:\Program Files\Advanced System Protector\aspsys.dll" deleted "C:\Program Files\Advanced System Protector\Microsoft.Win32.TaskScheduler.DLL" deleted "C:\Program Files\Advanced System Protector\System.Data.SQLite.dll" deleted "C:\Program Files\Advanced System Protector\unrar.dll" deleted "C:\Program Files\Advanced System Protector\Xceed.Compression.dll" deleted "C:\Program Files\Advanced System Protector\Xceed.FileSystem.dll" deleted "C:\Program Files\Advanced System Protector\Xceed.Zip.dll" deleted "C:\Program Files\Mega Browse\updateMegaBrowse.exe" deleted "C:\Program Files\Mega Browse" not deleted "C:\Program Files\Advanced System Protector" not deleted "C:\Program Files\Advanced System Protector" not deleted "C:\Program Files\Mega Browse" not deleted ==== System Specs ====================== Windows: Windows Vista Home Premium Edition Service Pack 2 (Build 6002) Memory (RAM): 3327 MB CPU Info: Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz CPU Speed: 2664,2 MHz Sound Card: Luidsprekers (VIA High Definiti | SPDIF Interface (TX0) (VIA High | Display Adapters: NVIDIA GeForce 9800 GT | NVIDIA GeForce 9800 GT | RDPDD Chained DD | RDP Encoder Mirror Driver Monitors: 1x; Algemeen PnP-beeldscherm | Screen Resolution: 1280 X 1024 - 32 bit Network: Network Present Network Adapters: Sitecom Wireless Micro USB Adapter 300N X3 WL-364 | Atheros AR8132 PCI-E Fast Ethernet Controller CD / DVD Drives: 1x (D: | ) D: Optiarc DVD RW AD-7201S Ports: COM1 LPT1 Mouse: 8 Button Wheel Mouse Present Hard Disks: C: 912,0GB Hard Disks - Free: C: 651,4GB Manufacturer *: American Megatrends Inc. BIOS Info: AT/AT COMPATIBLE | 08/16/32 | PRDGT - 20100728 Time Zone: West-Europa (standaardtijd) Motherboard *: MSI MS-7592 Country: Nederland Language: NLD ==== System Specs (Software) ====================== Anti-Virus: Norton Internet Security On-access scanning disabled (Outdated) Anti-Spyware: Norton Internet Security disabled (Outdated) Anti-Spyware: Windows Defender disabled (Outdated) Firewall: Norton Internet Security disabled Default Browser: Google Chrome 35.0.1916.153 Internet Explorer Version: 9.0.8112.16421 Mozilla Firefox version: 9.0.1 (x86 nl) Google Chrome version: 35.0.1916.153 Adobe Reader version: 10.1.9.22 Sun Java version: 1.7.0_21 (32-bit) Flash Player version: 14.0.0.145 Shockwave Player version: 11.6.8r638 ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Eigenaar\AppData\Local\Temp ==== 2014-07-12 09:23:29 5634C601025C31032A0AF1590B4C0CA6 43008 ----a-w- C:\Users\Eigenaar\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpglhmuq.dll ====== Java Cache ===== ====== C:\Windows\system32 ===== 2014-07-08 20:54:23 130AD89BC58016AF6C8DCD884946D71B 2051072 ----a-w- C:\Windows\System32\win32k.sys 2014-07-08 20:54:22 69407A3E716210A27CD1DAC2DBC8D658 506880 ----a-w- C:\Windows\System32\qedit.dll 2014-07-08 20:54:18 A4636CC74620EC3EE05131655E36FBFB 717824 ----a-w- C:\Windows\System32\jscript.dll 2014-07-08 20:54:18 87061403346685B82D9E1300EBD0D84C 73728 ----a-w- C:\Windows\System32\mshtmled.dll 2014-07-08 20:54:18 7C5308EF989ED1D58FF104D6685EC19F 421376 ----a-w- C:\Windows\System32\vbscript.dll 2014-07-08 20:54:18 6D85994A1B5B811E19CF761AF42B3453 176640 ----a-w- C:\Windows\System32\ieui.dll 2014-07-08 20:54:18 61D9AD9E55D7A1E10C0EF701ADE1C486 1129472 ----a-w- C:\Windows\System32\wininet.dll 2014-07-08 20:54:18 47297C4CA64236DA125951A8879D512B 223232 ----a-w- C:\Windows\System32\dxtrans.dll 2014-07-08 20:54:18 3529CC014F68A6807599B0B4E4D79879 353792 ----a-w- C:\Windows\System32\dxtmsft.dll 2014-07-08 20:54:17 07AA09C276D0A9AAF215C5831FC5A068 1810432 ----a-w- C:\Windows\System32\jscript9.dll 2014-07-08 20:54:16 BEFE2A3B0FD950E895A623DF4238247E 12353024 ----a-w- C:\Windows\System32\mshtml.dll 2014-07-08 20:54:14 CF17BB569F00CBFB31ADD37E6D0CE49F 231936 ----a-w- C:\Windows\System32\url.dll 2014-07-08 20:54:14 6B65935D3CC6067A21CF2A546FF0E860 10752 ----a-w- C:\Windows\System32\msfeedssync.exe 2014-07-08 20:54:14 1194A8254BCB718632C9FD59B536E59D 607744 ----a-w- C:\Windows\System32\msfeeds.dll 2014-07-08 20:54:14 0510617D8970EFFEAF0925CC578E8A6C 65024 ----a-w- C:\Windows\System32\jsproxy.dll 2014-07-08 20:54:14 01DF51C566DBD1FD2EB71FC1F7ED0163 41472 ----a-w- C:\Windows\System32\msfeedsbs.dll 2014-07-08 20:54:13 9CE5BD4C26F8DE6FB34AF91F9A5EF30F 142848 ----a-w- C:\Windows\System32\ieUnatt.exe 2014-07-08 20:54:13 50A9D2A6D74339C927B73F1DEA396380 2382848 ----a-w- C:\Windows\System32\mshtml.tlb 2014-07-08 20:54:12 ACFC12807A5EA0771EE5A602CCDE7E64 1106432 ----a-w- C:\Windows\System32\urlmon.dll 2014-07-08 20:54:12 83048D7A0993EF8D45D1CACA205F8C5E 1796096 ----a-w- C:\Windows\System32\iertutil.dll 2014-07-08 20:54:12 520F221209823156E53F5022C7106BC9 11776 ----a-w- C:\Windows\System32\mshta.exe 2014-07-08 20:54:12 2A88BA359F10E9957EE08BC01C1DD764 9711616 ----a-w- C:\Windows\System32\ieframe.dll 2014-07-08 20:54:12 1FC96DDA638BD3BEFD8065515F2AF4C4 1427968 ----a-w- C:\Windows\System32\inetcpl.cpl ====== C:\Windows\system32\drivers ===== 2014-07-08 20:54:21 F5272A105F59A7B3B345D9D6D87DA7AD 273408 ----a-w- C:\Windows\System32\drivers\afd.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== ======= C: ===== ====== C:\Users\Eigenaar\AppData\Roaming ====== 2014-06-22 10:27:28 -------- d-----w- C:\Users\Eigenaar\AppData\Roaming\DropboxMaster ====== C:\Users\Eigenaar ====== 2014-07-08 18:34:37 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\Users\Eigenaar\Downloads\RSIT (2).exe 2014-07-08 18:30:23 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\Users\Eigenaar\Downloads\RSIT (1).exe ====== C: exe-files == 2014-07-08 20:54:14 F1D33F2C0AEDE67F85D9578BA49010DA 223232 ----a-w- C:\Program Files\Internet Explorer\ielowutil.exe 2014-07-08 20:54:14 AA9B90593C22088BF7B5F729031A1C26 469504 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe 2014-07-08 20:54:14 8319DBE0C358D9330DB92AD41CD2C469 22528 ----a-w- C:\Program Files\Internet Explorer\ExtExport.exe 2014-07-08 20:54:14 6B65935D3CC6067A21CF2A546FF0E860 10752 ----a-w- C:\Windows\System32\msfeedssync.exe 2014-07-08 20:54:13 9CE5BD4C26F8DE6FB34AF91F9A5EF30F 142848 ----a-w- C:\Windows\System32\ieUnatt.exe 2014-07-08 20:54:12 520F221209823156E53F5022C7106BC9 11776 ----a-w- C:\Windows\System32\mshta.exe 2014-07-08 20:54:12 08ED70F000508724BAF881AA07C21BE1 758000 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe 2014-07-08 18:34:37 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\Users\Eigenaar\Downloads\RSIT (2).exe 2014-07-08 18:30:23 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\Users\Eigenaar\Downloads\RSIT (1).exe === C: other files == 2014-07-08 20:54:23 130AD89BC58016AF6C8DCD884946D71B 2051072 ----a-w- C:\Windows\System32\win32k.sys 2014-07-08 20:54:21 F5272A105F59A7B3B345D9D6D87DA7AD 273408 ----a-w- C:\Windows\System32\drivers\afd.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-3713345104-3849095893-2197492959-1001\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" "EPLTarget\P0000000000000000"="C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TATIHTE.EXE /EPT EPLTarget\P0000000000000000 /M Epson Stylus SX535WD" "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun" "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AdobeAAMUpdater-1.0"="C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" "AdobeCS5.5ServiceManager"="C:\Program Files\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe -launchedbylogin" "SwitchBoard"="C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" "AdobeCS5ServiceManager"="C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe -launchedbylogin" "BambooCore"="C:\Program Files\Bamboo Dock\BambooCore.exe" "APSDaemon"="C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" "EEventManager"="C:\Program Files\Epson Software\Event Manager\EEventManager.exe" "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe" "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe -atboottime" "TkBellExe"="C:\Program Files\Real\RealPlayer\Update\realsched.exe -osboot" "EvtMgr6"="C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming" "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "Launcher"="C:\Program Files\SMINST\Launcher.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" "EPLTarget\P0000000000000000"="C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TATIHTE.EXE /EPT EPLTarget\P0000000000000000 /M Epson Stylus SX535WD" "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun" "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" ==== Startup Folders ====================== 2014-02-15 21:28:10 1125 ----a-w- C:\Users\Delicious Lars\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Schermopname en Snel starten.lnk 2013-06-07 10:17:58 1010 ----a-w- C:\Users\Eigenaar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk 2013-08-13 15:33:47 1818 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sitecom Wireless Utility.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [19-09-2011 23:33] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [19-09-2011 23:33] ==== Other Scheduled Tasks ====================== "C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\system32\tasks\AdobeAAMUpdater-1.0-PC_van_Eigenaar-Eigenaar" [C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe] "C:\Windows\system32\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files\Google\Update\GoogleUpdate.exe] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe] "C:\Windows\system32\tasks\Norton WSC Integration" ["C:\Program Files\Norton Internet Security\Engine\21.3.0.12\WSCStub.exe"] "C:\Windows\system32\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3713345104-3849095893-2197492959-1001" [C:\Program Files\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\system32\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3713345104-3849095893-2197492959-1002" [C:\Program Files\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\system32\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3713345104-3849095893-2197492959-1001" [C:\Program Files\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\system32\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3713345104-3849095893-2197492959-1002" [C:\Program Files\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\system32\tasks\User_Feed_Synchronization-{5A6ECBCC-2F07-4B73-92C3-5817B751FF33}" [C:\Windows\system32\msfeedssync.exe] "C:\Windows\system32\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files\Apple Software Update\SoftwareUpdate.exe] "C:\Windows\system32\tasks\Norton Internet Security\Norton Error Analyzer" [C:\Program Files\Norton Internet Security\Engine\21.3.0.12\SymErr.exe] "C:\Windows\system32\tasks\Norton Internet Security\Norton Error Processor" [C:\Program Files\Norton Internet Security\Engine\21.3.0.12\SymErr.exe] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "{BBDA0591-3099-440a-AA10-41764D9DB4DB}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.2.0.38\IPSFF" [28-05-2014 18:58] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\rxue6f1p.default - Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension - Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.2.0.38\IPSFF - Mega Browse - %ProfilePath%\extensions\{29b136c9-938d-4d3d-8df8-d649d9b74d02}.xpi ProfilePath: C:\Users\Eigenaar\AppData\Roaming\TomTom\HOME\Profiles\3li5iqra.default - Map status indicator - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com - TomTom HOME default theme - C:\Program Files\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com - Emulator - %ProfilePath%\extensions\Navcore.8.010.9369@tomtom.com - Tyre - %ProfilePath%\extensions\tyre@tyre.tk AppDir: C:\Program Files\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\rxue6f1p.default 4390CCD3790F8D9C427C0C29590C62D7 - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll - Shockwave Flash FB5621842FDABF9F8359775573498FBC - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll - Google Update 01D93217A9EE48DD37072B671378CC9C - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll - Silverlight Plug-In 3220B1254AEF7A191187EC03F51B3D61 - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat B2576571746839180833E048AC2CCA5C - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat 5B92CB0A3EEE50F6B9AE036B4F9B0F0C - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin D71FD9D50DEE32075F0D4F93CE2051ED - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll - iTunes Application Detector 01E4DA82C518853EF3B16209C038D7B9 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll - RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) 60F23A6CE8B9F9BE995EAACFF0022DFC - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll - RealPlayer Download Plugin 3DDC42A613D887826BC552623D4DFC60 - C:\Users\Eigenaar\AppData\Local\Roblox\Versions\version-27973050fb3b494f\NPRobloxProxy.dll - Roblox Launcher Plugin 86FD0445C7A92516FC0BA201C79B8E9E - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.4 9FDABAD05A9623988750CCC10223BDB0 - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.4 5E1D0432C765884434A7CCD4DBDC80AA - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.4 3B293C235A80E7A5369E6AA28FEA50B1 - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.4 A80BCBED52F7DD5FDBF346A985A4E4D5 - C:\Program Files\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.7.4 4AE054AAF74F93566720766CBC9A0E64 - C:\Users\Eigenaar\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player A64F2C388DC26BE3E469EDC3657B14F4 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll - RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) C45F7E59F2A0A6D3C4E90117F4752414 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll - RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) F7AEAD4303A056F2D1685B43024776CA - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll - RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) FA0A3008589567CB7196620B05C9F28D - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll - RealDownloader Plugin 8F24103AB984847AA2939F58F19CCC98 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java(TM) Platform SE 7 U21 D7EFF0B98C370E03D7E2593399D9B669 - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll - NVIDIA 3D Vision 75A1232EAC640B782CDD2132B5271AA8 - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll - NVIDIA 3D VISION 6846D2CA7E1D5937AEE3F99BB7F5464B - C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll - Shockwave for Director / Shockwave for Director 8FE7BA502945BE735D09D5703BD76FDA - C:\Windows\system32\Adobe\Director\np32dsw_1165635.dll - Shockwave for Director / Shockwave for Director 2134E14DFB56952F548487898AE63A89 - C:\Windows\system32\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director A3A97705AAB03225F48006D564A32387 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll - WacomTabletPlugin FADBAA4892BD10FDE52D8546AE03AE2B - C:\Program Files\TabletPlugins\npwacom.dll - Wacom Dynamic Link Library AC421A44DE902F2627F1E63793ED89CD - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live? Photo Gallery AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation 28986F0A2342A033345EF9E70D395E4F - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrlui.dll - Microsoft® Silverlight ==== Deleted Firefox Extensions ====================== C:\Users\Eigenaar\AppData\Roaming\Mozilla\Firefox\Profiles\rxue6f1p.default\extensions\{29b136c9-938d-4d3d-8df8-d649d9b74d02}.xpi deleted ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions idhngdhcfkoamngbedgpaokgjbnpdiji - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx[16-04-2013 03:11] mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\Exts\Chrome.crx[28-04-2014 14:52] Angry Birds - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj Google Docs - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Volcano Eruption - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbpkhcaenkfikfkgmnikelennniplaio Super Mario Wii Kart Games - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghaojllghlcmeopepnbgnkdhnmahkmkj RealDownloader - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji Super Mario Bros - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjmgdioakghmaepmkjjadbaomkgcjdeh Norton Identity Protection - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk Google Wallet - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Flow Colors - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbnmelddedlommnmllmfhoephaidddmk Best Classic Games Collection - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfaogkfljpdfmodbmbogiiblppijleen Gmail - Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia RealDownloader - Eigenaar\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji Norton Identity Protection - Eigenaar\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk Google Wallet - Eigenaar\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://start.mysearchdial.com/?f=1&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0Tzu0SzztCyEtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDzz0Fzz0BtCtC0CtG0DtBtB0CtG0Ezz0DyDtG0DzztAyEtGtC0CtC0BtByEtC0AtDyB0F0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0A0FyCtDtD0AyDtGtBzz0AyBtGzy0FyEtAtGtByEtAtCtGyBzy0BtB0AtCzytAyDtD0D0A2Q&cr=27813064&ir=" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://start.mysearchdial.com/?f=1&a=ir_14_13_ch&cd=2XzuyEtN2Y1L1Qzuzz0Czzzy0AyDyDtA0F0A0D0D0A0EtB0CtN0D0Tzu0SzztCyEtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDzz0Fzz0BtCtC0CtG0DtBtB0CtG0Ezz0DyDtG0DzztAyEtGtC0CtC0BtByEtC0AtDyB0F0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0A0FyCtDtD0AyDtGtBzz0AyBtGzy0FyEtAtGtByEtAtCtGyBzy0BtB0AtCzytAyDtD0D0A2Q&cr=27813064&ir=" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{77AA745B-F4F8-45DA-9B14-61D2D95054C8}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}] not found New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F60730A4A66673047777F5728467D401 deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1 deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\RegClean Pro_is1 deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10} deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\mysearchdial deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F60730A4A66673047777F5728467D401 deleted successfully ==== HijackThis Entries ====================== O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" O4 - HKLM\..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [BambooCore] C:\Program Files\Bamboo Dock\BambooCore.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [EEventManager] "C:\Program Files\Epson Software\Event Manager\EEventManager.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\Update\realsched.exe" -osboot O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\RunOnce: [Launcher] C:\Program Files\SMINST\Launcher.exe O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TATIHTE.EXE /EPT "EPLTarget\P0000000000000000" /M "Epson Stylus SX535WD" O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - Startup: Dropbox.lnk = Eigenaar\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Global Startup: Sitecom Wireless Utility.lnk = C:\Program Files\Sitecom\Common\WLANUtil.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) - ABBYY - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\NIS.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files\Sitecom\Common\RegistryWriter.exe O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: TabletService - Wacom Technology, Corp. - C:\Windows\system32\Tablet.exe O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_Tablet.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: Wacom Consumer Touch Service (TouchServicePen) - Wacom Technology, Corp. - C:\Program Files\Tablet\Pen\Pen_TouchService.exe ==== Empty IE Cache ====================== C:\Users\Delicious Lars\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Delicious Lars\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Delicious Lars\AppData\Local\temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Delicious Lars\AppData\Local\temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Eigenaar\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Eigenaar\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Eigenaar\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Eigenaar\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I7IQLNHM will be deleted at reboot C:\Users\Eigenaar\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\Delicious Lars\AppData\Local\Mozilla\Firefox\Profiles\ox04cadx.default\Cache emptied successfully C:\Users\Eigenaar\AppData\Local\Mozilla\Firefox\Profiles\rxue6f1p.default\Cache emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Delicious Lars\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\Users\Eigenaar\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=562 folders=92 211204452 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\temp emptied successfully C:\Users\Delicious Lars\AppData\Local\temp emptied successfully C:\Users\Eigenaar\AppData\Local\Temp will be emptied at reboot C:\Users\Public\AppData\Local\temp emptied successfully C:\Users\UpdatusUser\AppData\Local\temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Eigenaar\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Eigenaar\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Program Files\Mega Browse" not found "C:\Program Files\Advanced System Protector" not found "C:\Program Files\Advanced System Protector" not found "C:\Program Files\Mega Browse" not found "C:\Users\Eigenaar\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I7IQLNHM" not found ==== EOF on za 12-07-2014 at 13:09:00,03 ======================