Zoek.exe v5.0.0.0 Updated 19-07-2014 Tool run by PATRICK on ma 21/07/2014 at 10:17:08,79. Microsoft Windows 8.1 6.3.9600 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\PATRICK\Downloads\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== System Restore Info ====================== 21/07/2014 10:18:23 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~2\VideoLAN deleted successfully C:\PROGRA~3\CanonEPP deleted successfully C:\PROGRA~3\CanonIJEPPEX2 deleted successfully C:\Users\PATRICK\AppData\Roaming\GrabPro deleted successfully C:\Users\PATRICK\AppData\Local\Canon Easy-PhotoPrint EX deleted successfully C:\Users\PATRICK\AppData\Local\Nikon deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-3281137686-3600045230-3634462768-1001\Software\Microsoft\Internet Explorer\SearchScopes\{FC019286-4AE2-46D2-A473-5B20F6BA0FAA} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== C:\PROGRA~2\globalUpdate deleted C:\PROGRA~3\SoundResearch deleted C:\PROGRA~3\Package Cache deleted C:\Users\PATRICK\AppData\Local\globalUpdate deleted C:\Users\PATRICK\Searches deleted C:\windows\SysNative\config\systemprofile\Searches deleted "C:\Users\PATRICK\AppData\Roaming\Soundtrack" deleted "C:\Users\PATRICK\AppData\Roaming\String Ensemble" deleted "C:\ProgramData\Sample Delay" deleted "C:\ProgramData\Sync Schema" deleted ==== Files Recently Created / Modified ====================== ====== C:\windows ==== ====== C:\Users\PATRICK\AppData\Local\Temp ==== 2014-07-20 10:42:07 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\PATRICK\AppData\Local\Temp\BackupSetup.exe ====== Java Cache ===== ====== C:\windows\SysWOW64 ===== 2014-07-10 07:30:20 8A9CB0FE11800DBBDBA8FE4F54828892 779264 ----a-w- C:\windows\SysWOW64\osk.exe 2014-07-10 07:30:18 4F7DA26AC4BD319080B6FCB4F87936CE 225280 ----a-w- C:\windows\SysWOW64\iedkcs32.dll 2014-07-10 07:30:17 DFA59840BB1220AFD261FDAE83543959 17276416 ----a-w- C:\windows\SysWOW64\mshtml.dll 2014-07-10 07:30:10 98C7B1AFA0A99EE3BE99EAABEFB72CA0 4254720 ----a-w- C:\windows\SysWOW64\jscript9.dll 2014-07-10 07:30:09 FC733FD7721200D5136F6F8112E97B00 11742208 ----a-w- C:\windows\SysWOW64\ieframe.dll 2014-07-10 07:30:09 7C44C697BA6D0B698B91AC6516A731C3 1139200 ----a-w- C:\windows\SysWOW64\urlmon.dll 2014-07-10 07:30:08 CCC198257901BEEA2FBF8EB1E7678356 1791488 ----a-w- C:\windows\SysWOW64\wininet.dll 2014-07-10 07:30:08 9385D7C5DF2566D01B1FB150F381D50B 367616 ----a-w- C:\windows\SysWOW64\dxtmsft.dll 2014-07-10 07:30:08 573E522A27210701EB8A6C476D36FFF6 239616 ----a-w- C:\windows\SysWOW64\dxtrans.dll 2014-07-10 07:30:07 E739AEDCA67F214F96C2520BA293B12B 526336 ----a-w- C:\windows\SysWOW64\msfeeds.dll 2014-07-10 07:30:07 67EA1BB7F6428A10C64D5A732976F871 69632 ----a-w- C:\windows\SysWOW64\mshtmled.dll 2014-07-10 07:30:07 084FB28A790685F32A6D7D003777696D 2179072 ----a-w- C:\windows\SysWOW64\iertutil.dll 2014-07-10 07:30:06 4B774E842F268D51DB942EF9637828B9 1964544 ----a-w- C:\windows\SysWOW64\inetcpl.cpl 2014-07-10 07:30:06 175A663547805367C10746FC416D4605 704512 ----a-w- C:\windows\SysWOW64\ieapfltr.dll 2014-07-10 07:30:02 7DB59908D49605F2CD0CFB0CF9940E86 735232 ----a-w- C:\windows\SysWOW64\adtschema.dll 2014-07-10 07:30:01 9EE0C96C5D9840DF3517C9B7D19ED590 318976 ----a-w- C:\windows\SysWOW64\certcli.dll 2014-07-10 07:29:06 0A9EB3956BCB7E5CDE15AF987BD81543 488960 ----a-w- C:\windows\SysWOW64\qedit.dll 2014-07-10 07:29:03 819E423A2914A67CD23D53997F7B4E8D 756224 ----a-w- C:\windows\SysWOW64\WSShared.dll 2014-07-10 07:29:02 CF7953FFEFED26AC657067CD2C259BCD 11792384 ----a-w- C:\windows\SysWOW64\twinui.dll 2014-07-10 07:29:02 77B0DF38B67C00EFB5B131D279FC12ED 666624 ----a-w- C:\windows\SysWOW64\wuapi.dll 2014-07-10 07:29:02 4B7FA0A3D7B9D316BC6B2A409701E47D 828928 ----a-w- C:\windows\SysWOW64\twinui.appcore.dll 2014-07-10 07:29:01 9E9182A652F5287DA05B3893A2E19FEC 80896 ----a-w- C:\windows\SysWOW64\wudriver.dll ====== C:\windows\SysWOW64\drivers ===== ====== C:\windows\Sysnative ===== 2014-07-10 07:39:34 3D748E5558FD9A9F03182CB2330698DC 1018880 ----a-w- C:\windows\Sysnative\termsrv.dll 2014-07-10 07:30:21 83E3C080E9B0E0677DBCDF9D7F434166 4190720 ----a-w- C:\windows\Sysnative\win32k.sys 2014-07-10 07:30:21 15750011454B89F4950D7E7E4A947EC1 834048 ----a-w- C:\windows\Sysnative\osk.exe 2014-07-10 07:30:18 FEC19C351EF1B2C998A85D1BFD765675 23464448 ----a-w- C:\windows\Sysnative\mshtml.dll 2014-07-10 07:30:18 3310F7A257F0EAABDD41E10E1F3FCCFE 250880 ----a-w- C:\windows\Sysnative\iedkcs32.dll 2014-07-10 07:30:13 4EC7738394D2BC7BCB5F7A3657F57252 5721088 ----a-w- C:\windows\Sysnative\jscript9.dll 2014-07-10 07:30:13 366FA6D38406DC8BED62825C196144D1 13527040 ----a-w- C:\windows\Sysnative\ieframe.dll 2014-07-10 07:30:09 73C7D1FCF6F58F3BF077FB42B0214BC0 1393664 ----a-w- C:\windows\Sysnative\urlmon.dll 2014-07-10 07:30:08 A21C6231459F4CAC212676A9367A1A68 2768384 ----a-w- C:\windows\Sysnative\iertutil.dll 2014-07-10 07:30:08 415DF2B045167D6D85223CFFF00FCFC7 292864 ----a-w- C:\windows\Sysnative\dxtrans.dll 2014-07-10 07:30:08 2EE102DF0EDD8A1EDD3D1E9B99A91BEC 2266112 ----a-w- C:\windows\Sysnative\wininet.dll 2014-07-10 07:30:08 2E40D5E11BCC597352EE0314AF629A0F 452608 ----a-w- C:\windows\Sysnative\dxtmsft.dll 2014-07-10 07:30:07 D8E6706AECD7AA50764E126CE3F36555 631808 ----a-w- C:\windows\Sysnative\msfeeds.dll 2014-07-10 07:30:07 1FD6C2F6AC489C271565730F6E9E1A05 85504 ----a-w- C:\windows\Sysnative\mshtmled.dll 2014-07-10 07:30:07 1685AA234852657C4A6D253CCBBE84E0 2040832 ----a-w- C:\windows\Sysnative\inetcpl.cpl 2014-07-10 07:30:06 CA67F68CEC788C0C69AD47C5125DDD8E 608768 ----a-w- C:\windows\Sysnative\ie4uinit.exe 2014-07-10 07:30:06 BDD4A74421B023C81DA63168BD10C01B 846336 ----a-w- C:\windows\Sysnative\ieapfltr.dll 2014-07-10 07:30:02 C3028569F244470F3D54026884E16E06 1417216 ----a-w- C:\windows\Sysnative\lsasrv.dll 2014-07-10 07:30:02 423D68307E57654A000AA484B009DD16 735232 ----a-w- C:\windows\Sysnative\adtschema.dll 2014-07-10 07:30:01 3B78D6DC57654CDD96E073724A2228AE 436224 ----a-w- C:\windows\Sysnative\certcli.dll 2014-07-10 07:29:06 78FC2B2BA0E5E1C9249E3157D4EE9BC7 586240 ----a-w- C:\windows\Sysnative\qedit.dll 2014-07-10 07:29:04 C43573182D614B94272115C7B641D24A 688128 ----a-w- C:\windows\Sysnative\aepdu.dll 2014-07-10 07:29:04 591B2C8C5C6B944AF538F182B7AF00A6 385536 ----a-w- C:\windows\Sysnative\devinv.dll 2014-07-10 07:29:03 E66AC3CA92FC471BFE69F61549193A64 3463680 ----a-w- C:\windows\Sysnative\wuaueng.dll 2014-07-10 07:29:03 C2F515FC027867E5EAF12AC9815B3ABD 923136 ----a-w- C:\windows\Sysnative\WSShared.dll 2014-07-10 07:29:03 49ECDFF7027737C9F62D6D96AACCBFB0 527360 ----a-w- C:\windows\Sysnative\aeinv.dll 2014-07-10 07:29:02 CCC6D7250D01DA7E5499B0722CF6CAE3 1054208 ----a-w- C:\windows\Sysnative\twinui.appcore.dll 2014-07-10 07:29:02 C5FA4562E9ACB7323B3FB333E6C021CF 13287936 ----a-w- C:\windows\Sysnative\twinui.dll 2014-07-10 07:29:02 9FA466A42109F408AC6C2848E851C38A 555736 ----a-w- C:\windows\Sysnative\twinapi.appcore.dll 2014-07-10 07:29:02 53BEF9A65EA686018B9EDF9665F5EBDE 827392 ----a-w- C:\windows\Sysnative\wuapi.dll 2014-07-10 07:29:02 4A12C727502A07C4B89B663B942DF289 54776 ----a-w- C:\windows\Sysnative\wuauclt.exe 2014-07-10 07:29:02 2C28079658CCA1E8C3810E185CCC2234 93696 ----a-w- C:\windows\Sysnative\wudriver.dll 2014-07-10 07:22:37 FD3638782572A8281BCF12520F6579F4 79872 ----a-w- C:\windows\Sysnative\WSReset.exe ====== C:\windows\Sysnative\drivers ===== 2014-07-10 07:30:04 374E27295F0A9DCAA8FC96370F9BEEA5 563200 ----a-w- C:\windows\Sysnative\drivers\afd.sys 2014-07-10 07:30:02 1CD3A907D64D08F49208DA00B69BF35E 565576 ----a-w- C:\windows\Sysnative\drivers\cng.sys ====== C:\windows\Tasks ====== 2014-06-24 09:03:32 BC17552F967FE7061430AB68185C9548 940 ----a-w- C:\windows\Tasks\Adobe Flash Player Updater.job 2014-06-24 09:03:32 53910B60E7B4871109FCD7AB52553DC1 3828 ----a-w- C:\windows\Sysnative\Tasks\Adobe Flash Player Updater ====== C:\windows\Temp ====== ======= C:\Program Files ===== 2014-07-21 07:02:44 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== 2014-06-24 08:25:46 -------- d-----w- C:\PROGRA~2\Mozilla Maintenance Service ======= C: ===== 2014-06-24 15:01:54 A6799D0F42122C0D1E28655C10DB2707 30 ----a-w- C:\AVScanner.ini ====== C:\Users\PATRICK\AppData\Roaming ====== 2014-07-20 10:32:45 -------- d-----w- C:\Users\PATRICK\AppData\Local\Movavi 2014-07-05 08:18:26 -------- d-----w- C:\Users\PATRICK\AppData\Local\Adobe 2014-06-26 15:10:08 -------- d-----w- C:\Users\PATRICK\AppData\Roaming\IDT 2014-06-26 09:19:23 -------- d-----w- C:\Users\PATRICK\AppData\Roaming\ProgSense 2014-06-26 09:15:49 -------- d-----w- C:\Users\PATRICK\AppData\Roaming\Orbit 2014-06-24 08:25:56 -------- d-----w- C:\Users\PATRICK\AppData\Roaming\Mozilla 2014-06-24 08:25:56 -------- d-----w- C:\Users\PATRICK\AppData\Local\Mozilla ====== C:\Users\PATRICK ====== 2014-07-21 07:01:22 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\PATRICK\Downloads\RSITx64.exe 2014-07-20 10:32:03 -------- d-----w- C:\ProgramData\Movavi 2014-06-24 08:25:47 -------- d-----w- C:\ProgramData\Mozilla ====== C: exe-files == 2014-07-21 07:02:45 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\PATRICK.exe 2014-07-21 07:01:22 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\PATRICK\Downloads\RSITx64.exe 2014-07-20 10:42:07 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\PATRICK\AppData\Local\Temp\BackupSetup.exe === C: other files == 2014-07-20 10:41:22 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\PATRICK\AppData\Local\Temp\845039859\845039859.zip ==== Startup Registry Enabled ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe MSRun" "BCSSync"="C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe /DelayServices" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SimplePass"="C:\Program Files\Hewlett-Packard\SimplePass\HPSmplPass.exe /hideui" "OPBHOBroker"="C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe" "OPBHOBrokerDesktop"="C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe" "BeatsOSDApp"="C:\Program Files\IDT\WDM\beats64.exe" "SysTrayApp"="C:\Program Files\IDT\WDM\sttray64.exe" ==== Task Scheduler Jobs ====================== C:\windows\tasks\Adobe Flash Player Updater.job --a-------- C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [10/07/2014 10:19] ==== Other Scheduled Tasks ====================== "C:\windows\SysNative\tasks\Adobe Flash Player Updater" [C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\windows\SysNative\tasks\CLMLSvc_P2G8" [c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe] "C:\windows\SysNative\tasks\CLVDLauncher" [c:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe] "C:\windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\BrowserChoice\browserchoice.exe] "C:\windows\SysNative\tasks\User_Feed_Synchronization-{E6FB1735-DA8A-431B-9428-C11287962EB6}" [C:\windows\system32\msfeedssync.exe] "C:\windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe] "C:\windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe] "C:\windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\Update Check" [C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe] "C:\windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe] "C:\windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe] "C:\windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Extensions ====================== AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\PATRICK\AppData\Roaming\Mozilla\Firefox\Profiles\n5db0g9x.default-1405878230274 4390CCD3790F8D9C427C0C29590C62D7 - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll - Shockwave Flash 9C06DBC403F91D518ED117E460F03F85 - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL - CANON iMAGE GATEWAY Album Plugin Utility for IJ ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="https://www.google.be/?gws_rd=ssl" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="https://www.google.be/?gws_rd=ssl" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS" {D944BB61-2E34-4DBF-A683-47E505C587DC} eBay Url="http://rover.ebay.com/rover/1/1553-29906-12136-18/4" ==== shortcuts on Users Desktops ====================== C:\Users\PATRICK\Desktop\BitTorrent.lnk - C:\Users\PATRICK\AppData\Roaming\BitTorrent\BitTorrent.exe C:\Users\PATRICK\Desktop\File Explorer.lnk - C:\Users\PATRICK\Desktop\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe http://isearch.omiga-plus.com/?type=sc&ts=1405852907&from=ild&uid=ST1000DM003-1CH162_Z1DANGWH C:\Users\PATRICK\Desktop\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe C:\Users\PATRICK\Desktop\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe C:\Users\PATRICK\Desktop\Windows.Defender.lnk - ==== shortcuts on All Users Desktop ====================== C:\Users\Public\Desktop\Adobe Reader XI.lnk - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe C:\Users\Public\Desktop\Ashampoo Burning Studio 14.lnk - C:\Program Files (x86)\Ashampoo\Ashampoo Burning Studio 14\burningstudio14.exe C:\Users\Public\Desktop\Canon Easy-PhotoPrint EX.lnk - C:\Program Files\Canon\Easy-PhotoPrint EX\CNEZMAIN.EXE C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe C:\Users\Public\Desktop\MailWasherPro.lnk - C:\Program Files (x86)\Firetrust\MailWasher\MailWasherPro.exe C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://isearch.omiga-plus.com/?type=sc&ts=1405852907&from=ild&uid=ST1000DM003-1CH162_Z1DANGWH C:\Users\Public\Desktop\MP Navigator EX 2.0.lnk - C:\Program Files (x86)\Canon\MP Navigator EX 2.0\mpnex20.exe C:\Users\Public\Desktop\Photo Slideshow Creator.lnk - C:\Program Files (x86)\Photo Slideshow Creator\PhotoShow.exe C:\Users\Public\Desktop\Picasa 3.lnk - C:\Program Files (x86)\Google\Picasa3\Picasa3.exe ==== shortcuts in Users Start Menu ====================== C:\Users\PATRICK\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk - C:\Users\PATRICK\AppData\Roaming\BitTorrent\BitTorrent.exe C:\Users\PATRICK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe http://isearch.omiga-plus.com/?type=sc&ts=1405852907&from=ild&uid=ST1000DM003-1CH162_Z1DANGWH C:\Users\PATRICK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk - C:\Program Files (x86)\WinRAR\Rar.txt C:\Users\PATRICK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\What is new in the latest version.lnk - C:\Program Files (x86)\WinRAR\WhatsNew.txt C:\Users\PATRICK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR help.lnk - C:\Program Files (x86)\WinRAR\WinRAR.chm C:\Users\PATRICK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.exe ==== shortcuts in All Users Start Menu ====================== C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://isearch.omiga-plus.com/?type=sc&ts=1405852907&from=ild&uid=ST1000DM003-1CH162_Z1DANGWH ==== shortcuts in Quick Launch ====================== C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\PATRICK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BitTorrent.lnk - C:\Users\PATRICK\AppData\Roaming\BitTorrent\BitTorrent.exe C:\Users\PATRICK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe http://isearch.omiga-plus.com/?type=sc&ts=1405852907&from=ild&uid=ST1000DM003-1CH162_Z1DANGWH C:\Users\PATRICK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk - C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE /recycle C:\Users\PATRICK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\PATRICK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\PATRICK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk - C:\Users\PATRICK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://isearch.omiga-plus.com/?type=sc&ts=1405852907&from=ild&uid=ST1000DM003-1CH162_Z1DANGWH ==== shortcuts After Repair ====================== C:\Users\PATRICK\Desktop\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Users\PATRICK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Users\PATRICK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe C:\Users\PATRICK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Your Software Deals_is1 deleted successfully ==== Empty IE Cache ====================== C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\PATRICK\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\PATRICK\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== C:\Users\PATRICK\AppData\Local\Mozilla\Firefox\Profiles\n5db0g9x.default-1405878230274\Cache emptied successfully ==== Empty Chrome Cache ====================== No Chrome User Data found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== No Java Cache Found ==== C:\zoek_backup content ====================== C:\zoek_backup (files=41 folders=38 28200396 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\PATRICK\AppData\Local\Temp will be emptied at reboot C:\windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\windows\Temp successfully emptied C:\Users\PATRICK\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on ma 21/07/2014 at 10:36:24,15 ======================