Zoek.exe v5.0.0.0 Updated 19-07-2014 Tool run by E1-571G on di 22/07/2014 at 13:48:22,47. Microsoft Windows 8.1 6.3.9600 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\E1-571G\Downloads\zoek (2).exe [Scan all users] [Script inserted] [Checkboxes used] ==== Older Logs ====================== C:\zoek-results2013-01-01-174639.log 2860 bytes ==== Empty Folders Check ====================== C:\PROGRA~3\Oracle deleted successfully C:\Users\E1-571G\AppData\Roaming\Malwarebytes deleted successfully C:\Users\E1-571G\AppData\Roaming\Windows Live Writer deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-2658763709-3801376341-2561777823-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{69AB812A-8CE4-4BF3-B49B-3B60A9F31FB2} deleted successfully HKEY_USERS\S-1-5-21-2658763709-3801376341-2561777823-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{69AB812A-8CE4-4BF3-B49B-3B60A9F31FB2} deleted successfully HKEY_USERS\S-1-5-21-2658763709-3801376341-2561777823-1002\Software\Microsoft\Internet Explorer\SearchScopes\{8A6206B3-F6AE-44EE-8E88-5F3318D7C560} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{69AB812A-8CE4-4BF3-B49B-3B60A9F31FB2} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69AB812A-8CE4-4BF3-B49B-3B60A9F31FB2} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Registry Fix Code x64 ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69AB812A-8CE4-4BF3-B49B-3B60A9F31FB2}] ==== Deleting Files \ Folders ====================== C:\Program Files (x86)\DIALux deleted C:\ProgramData\3504f312baf63136 deleted C:\ProgramData\InstallMate deleted C:\PROGRA~2\GS Supporter deleted C:\PROGRA~3\Package Cache deleted C:\Users\E1-571G\AppData\Local\cache deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk deleted C:\Users\E1-571G\Searches deleted C:\windows\SysNative\tasks\Play Now Radio deleted C:\WINDOWS\SysNative\config\systemprofile\Searches deleted "C:\windows\Installer\250d7.msi" deleted "C:\Windows\Installer\60c08.msi" deleted ==== Files Recently Created / Modified ====================== ====== C:\WINDOWS ==== ====== C:\Users\E1-571G\AppData\Local\Temp ==== 2014-07-20 22:12:14 5634C601025C31032A0AF1590B4C0CA6 43008 ----a-w- C:\Users\E1-571G\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpm_x0vy.dll ====== Java Cache ===== ====== C:\WINDOWS\SysWOW64 ===== 2014-07-20 20:11:10 0DC5AF80D059DEC792B665ED598C6567 536576 ----a-w- C:\WINDOWS\SysWOW64\sqlite3.dll 2014-07-09 00:06:15 8A9CB0FE11800DBBDBA8FE4F54828892 779264 ----a-w- C:\WINDOWS\SysWOW64\osk.exe 2014-07-09 00:06:01 9EE0C96C5D9840DF3517C9B7D19ED590 318976 ----a-w- C:\WINDOWS\SysWOW64\certcli.dll 2014-07-09 00:06:01 7DB59908D49605F2CD0CFB0CF9940E86 735232 ----a-w- C:\WINDOWS\SysWOW64\adtschema.dll 2014-07-09 00:04:55 4F7DA26AC4BD319080B6FCB4F87936CE 225280 ----a-w- C:\WINDOWS\SysWOW64\iedkcs32.dll 2014-07-09 00:04:54 DFA59840BB1220AFD261FDAE83543959 17276416 ----a-w- C:\WINDOWS\SysWOW64\mshtml.dll 2014-07-09 00:04:43 98C7B1AFA0A99EE3BE99EAABEFB72CA0 4254720 ----a-w- C:\WINDOWS\SysWOW64\jscript9.dll 2014-07-09 00:04:42 FC733FD7721200D5136F6F8112E97B00 11742208 ----a-w- C:\WINDOWS\SysWOW64\ieframe.dll 2014-07-09 00:04:40 7C44C697BA6D0B698B91AC6516A731C3 1139200 ----a-w- C:\WINDOWS\SysWOW64\urlmon.dll 2014-07-09 00:04:39 E739AEDCA67F214F96C2520BA293B12B 526336 ----a-w- C:\WINDOWS\SysWOW64\msfeeds.dll 2014-07-09 00:04:39 CCC198257901BEEA2FBF8EB1E7678356 1791488 ----a-w- C:\WINDOWS\SysWOW64\wininet.dll 2014-07-09 00:04:39 9385D7C5DF2566D01B1FB150F381D50B 367616 ----a-w- C:\WINDOWS\SysWOW64\dxtmsft.dll 2014-07-09 00:04:39 67EA1BB7F6428A10C64D5A732976F871 69632 ----a-w- C:\WINDOWS\SysWOW64\mshtmled.dll 2014-07-09 00:04:39 573E522A27210701EB8A6C476D36FFF6 239616 ----a-w- C:\WINDOWS\SysWOW64\dxtrans.dll 2014-07-09 00:04:39 084FB28A790685F32A6D7D003777696D 2179072 ----a-w- C:\WINDOWS\SysWOW64\iertutil.dll 2014-07-09 00:04:38 4B774E842F268D51DB942EF9637828B9 1964544 ----a-w- C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-07-09 00:04:38 175A663547805367C10746FC416D4605 704512 ----a-w- C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-07-09 00:04:11 0A9EB3956BCB7E5CDE15AF987BD81543 488960 ----a-w- C:\WINDOWS\SysWOW64\qedit.dll 2014-07-09 00:03:59 819E423A2914A67CD23D53997F7B4E8D 756224 ----a-w- C:\WINDOWS\SysWOW64\WSShared.dll 2014-07-09 00:03:56 CF7953FFEFED26AC657067CD2C259BCD 11792384 ----a-w- C:\WINDOWS\SysWOW64\twinui.dll 2014-07-09 00:03:55 4B7FA0A3D7B9D316BC6B2A409701E47D 828928 ----a-w- C:\WINDOWS\SysWOW64\twinui.appcore.dll 2014-07-09 00:03:54 9E9182A652F5287DA05B3893A2E19FEC 80896 ----a-w- C:\WINDOWS\SysWOW64\wudriver.dll 2014-07-09 00:03:54 77B0DF38B67C00EFB5B131D279FC12ED 666624 ----a-w- C:\WINDOWS\SysWOW64\wuapi.dll ====== C:\WINDOWS\SysWOW64\drivers ===== ====== C:\WINDOWS\Sysnative ===== 2014-07-09 04:57:24 3D748E5558FD9A9F03182CB2330698DC 1018880 ----a-w- C:\WINDOWS\Sysnative\termsrv.dll 2014-07-09 00:06:16 83E3C080E9B0E0677DBCDF9D7F434166 4190720 ----a-w- C:\WINDOWS\Sysnative\win32k.sys 2014-07-09 00:06:15 15750011454B89F4950D7E7E4A947EC1 834048 ----a-w- C:\WINDOWS\Sysnative\osk.exe 2014-07-09 00:06:02 C3028569F244470F3D54026884E16E06 1417216 ----a-w- C:\WINDOWS\Sysnative\lsasrv.dll 2014-07-09 00:06:02 423D68307E57654A000AA484B009DD16 735232 ----a-w- C:\WINDOWS\Sysnative\adtschema.dll 2014-07-09 00:06:02 3B78D6DC57654CDD96E073724A2228AE 436224 ----a-w- C:\WINDOWS\Sysnative\certcli.dll 2014-07-09 00:04:55 FEC19C351EF1B2C998A85D1BFD765675 23464448 ----a-w- C:\WINDOWS\Sysnative\mshtml.dll 2014-07-09 00:04:55 3310F7A257F0EAABDD41E10E1F3FCCFE 250880 ----a-w- C:\WINDOWS\Sysnative\iedkcs32.dll 2014-07-09 00:04:46 4EC7738394D2BC7BCB5F7A3657F57252 5721088 ----a-w- C:\WINDOWS\Sysnative\jscript9.dll 2014-07-09 00:04:44 366FA6D38406DC8BED62825C196144D1 13527040 ----a-w- C:\WINDOWS\Sysnative\ieframe.dll 2014-07-09 00:04:40 A21C6231459F4CAC212676A9367A1A68 2768384 ----a-w- C:\WINDOWS\Sysnative\iertutil.dll 2014-07-09 00:04:40 73C7D1FCF6F58F3BF077FB42B0214BC0 1393664 ----a-w- C:\WINDOWS\Sysnative\urlmon.dll 2014-07-09 00:04:40 2EE102DF0EDD8A1EDD3D1E9B99A91BEC 2266112 ----a-w- C:\WINDOWS\Sysnative\wininet.dll 2014-07-09 00:04:39 D8E6706AECD7AA50764E126CE3F36555 631808 ----a-w- C:\WINDOWS\Sysnative\msfeeds.dll 2014-07-09 00:04:39 415DF2B045167D6D85223CFFF00FCFC7 292864 ----a-w- C:\WINDOWS\Sysnative\dxtrans.dll 2014-07-09 00:04:39 2E40D5E11BCC597352EE0314AF629A0F 452608 ----a-w- C:\WINDOWS\Sysnative\dxtmsft.dll 2014-07-09 00:04:39 1FD6C2F6AC489C271565730F6E9E1A05 85504 ----a-w- C:\WINDOWS\Sysnative\mshtmled.dll 2014-07-09 00:04:39 1685AA234852657C4A6D253CCBBE84E0 2040832 ----a-w- C:\WINDOWS\Sysnative\inetcpl.cpl 2014-07-09 00:04:38 CA67F68CEC788C0C69AD47C5125DDD8E 608768 ----a-w- C:\WINDOWS\Sysnative\ie4uinit.exe 2014-07-09 00:04:38 BDD4A74421B023C81DA63168BD10C01B 846336 ----a-w- C:\WINDOWS\Sysnative\ieapfltr.dll 2014-07-09 00:04:11 78FC2B2BA0E5E1C9249E3157D4EE9BC7 586240 ----a-w- C:\WINDOWS\Sysnative\qedit.dll 2014-07-09 00:04:10 C43573182D614B94272115C7B641D24A 688128 ----a-w- C:\WINDOWS\Sysnative\aepdu.dll 2014-07-09 00:04:10 591B2C8C5C6B944AF538F182B7AF00A6 385536 ----a-w- C:\WINDOWS\Sysnative\devinv.dll 2014-07-09 00:04:09 49ECDFF7027737C9F62D6D96AACCBFB0 527360 ----a-w- C:\WINDOWS\Sysnative\aeinv.dll 2014-07-09 00:03:58 C2F515FC027867E5EAF12AC9815B3ABD 923136 ----a-w- C:\WINDOWS\Sysnative\WSShared.dll 2014-07-09 00:03:57 E66AC3CA92FC471BFE69F61549193A64 3463680 ----a-w- C:\WINDOWS\Sysnative\wuaueng.dll 2014-07-09 00:03:57 C5FA4562E9ACB7323B3FB333E6C021CF 13287936 ----a-w- C:\WINDOWS\Sysnative\twinui.dll 2014-07-09 00:03:55 CCC6D7250D01DA7E5499B0722CF6CAE3 1054208 ----a-w- C:\WINDOWS\Sysnative\twinui.appcore.dll 2014-07-09 00:03:55 9FA466A42109F408AC6C2848E851C38A 555736 ----a-w- C:\WINDOWS\Sysnative\twinapi.appcore.dll 2014-07-09 00:03:55 53BEF9A65EA686018B9EDF9665F5EBDE 827392 ----a-w- C:\WINDOWS\Sysnative\wuapi.dll 2014-07-09 00:03:55 4A12C727502A07C4B89B663B942DF289 54776 ----a-w- C:\WINDOWS\Sysnative\wuauclt.exe 2014-07-09 00:03:54 2C28079658CCA1E8C3810E185CCC2234 93696 ----a-w- C:\WINDOWS\Sysnative\wudriver.dll 2014-07-09 00:01:33 FD3638782572A8281BCF12520F6579F4 79872 ----a-w- C:\WINDOWS\Sysnative\WSReset.exe ====== C:\WINDOWS\Sysnative\drivers ===== 2014-07-09 00:06:10 374E27295F0A9DCAA8FC96370F9BEEA5 563200 ----a-w- C:\WINDOWS\Sysnative\drivers\afd.sys 2014-07-09 00:06:02 1CD3A907D64D08F49208DA00B69BF35E 565576 ----a-w- C:\WINDOWS\Sysnative\drivers\cng.sys 2014-07-03 20:55:43 8A50D5304E6AE48664CF5838EC32F647 122584 ----a-w- C:\WINDOWS\Sysnative\drivers\MBAMSwissArmy.sys 2014-07-03 20:54:47 9D9ED48F841EA37AA5310D54B9E5D3C7 91352 ----a-w- C:\WINDOWS\Sysnative\drivers\mbamchameleon.sys 2014-07-03 20:54:47 0664F6335F108F38FE08C3CA747311EE 64216 ----a-w- C:\WINDOWS\Sysnative\drivers\mwac.sys ====== C:\WINDOWS\Tasks ====== ====== C:\WINDOWS\Temp ====== ======= C:\Program Files ===== 2014-07-21 22:22:16 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== 2014-07-04 22:34:08 -------- d-----w- C:\PROGRA~2\IrfanView ======= C: ===== ====== C:\Users\E1-571G\AppData\Roaming ====== 2014-07-04 22:34:09 -------- d-----w- C:\Users\E1-571G\AppData\Roaming\IrfanView 2014-07-02 20:27:54 -------- d-----w- C:\Users\UpdatusUser\AppData\Local\Google 2014-07-02 20:27:54 -------- d-----w- C:\Users\UpdatusUser\AppData\Local\Comodo 2014-07-02 20:27:54 -------- d-----w- C:\Users\HomeGroupUser$\AppData\Local\Google 2014-07-02 20:27:54 -------- d-----w- C:\Users\HomeGroupUser$\AppData\Local\Comodo 2014-07-02 20:27:54 -------- d-----w- C:\Users\Gast\AppData\Local\Google 2014-07-02 20:27:54 -------- d-----w- C:\Users\Gast\AppData\Local\Comodo 2014-07-02 20:27:54 -------- d-----w- C:\Users\E1-571G\AppData\Local\Comodo 2014-07-02 20:27:54 -------- d-----w- C:\Users\Administrator\AppData\Local\Google 2014-07-02 20:27:54 -------- d-----w- C:\Users\Administrator\AppData\Local\Comodo ====== C:\Users\E1-571G ====== 2014-07-21 22:21:44 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\E1-571G\Downloads\RSITx64.exe 2014-07-20 20:38:26 77B731B9E1C624E4D7C93FAB600FAB4B 2090496 ----a-w- C:\Users\E1-571G\Downloads\FRST64.exe 2014-07-20 20:07:46 B653DD91D5D6E519D3357A80A15A5DFB 1354223 ----a-w- C:\Users\E1-571G\Downloads\AdwCleaner.exe 2014-07-02 20:28:25 -------- d-----w- C:\ProgramData\Wideblue installer 2014-07-02 20:27:56 02C1EE40968BAA67C3A785CDA9807125 262 --sha-r- C:\ProgramData\ntuser.pol 2014-07-02 20:27:54 -------- d-----w- C:\Users\HomeGroupUser$\AppData 2014-07-02 20:27:54 -------- d-----w- C:\Users\Gast\AppData 2014-07-02 20:27:54 -------- d-----w- C:\Users\Administrator\AppData ====== C: exe-files == 2014-07-21 22:22:17 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\E1-571G.exe === C: other files == ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-2658763709-3801376341-2561777823-1002\Software\Microsoft\Windows\CurrentVersion\Run] "Akamai NetSession Interface"="C:\Users\E1-571G\AppData\Local\Akamai\netsession_win.exe" "Spotify Web Helper"="C:\Users\E1-571G\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "Facebook Update"="C:\Users\E1-571G\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" "Pando Media Booster"="C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe" "Spotify"="C:\Users\E1-571G\AppData\Roaming\Spotify\Spotify.exe /uri spotify:autostart" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BakupManagerTray"="C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe -k -h" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "SwitchBoard"="C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" "AdobeCS6ServiceManager"="C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe -launchedbylogin" "Adobe Creative Cloud"="C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --showwindow=false --onOSstartup=true" "LogMeIn Hamachi Ui"="C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Akamai NetSession Interface"="C:\Users\E1-571G\AppData\Local\Akamai\netsession_win.exe" "Spotify Web Helper"="C:\Users\E1-571G\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "Facebook Update"="C:\Users\E1-571G\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" "Pando Media Booster"="C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe" "Spotify"="C:\Users\E1-571G\AppData\Roaming\Spotify\Spotify.exe /uri spotify:autostart" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" "HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" "Persistence"="C:\WINDOWS\system32\igfxpers.exe" "RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "Autodesk Sync"="C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe" "AdobeAAMUpdater-1.0"="C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" "ETDCtrl"="%ProgramFiles%\Elantech\ETDCtrl.exe " [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=" C:\\Windows\\system32\\nvinitx.dll " ==== Startup Folders ====================== 2012-12-04 00:18:46 1101 ----a-w- C:\Users\E1-571G\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ==== Task Scheduler Jobs ====================== C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-2658763709-3801376341-2561777823-1002Core.job --a-------- C:\Users\E1-571G\AppData\Local\Facebook\Update\FacebookUpdate.exe [16/10/2013 13:40] C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-2658763709-3801376341-2561777823-1002UA.job --a-------- C:\Users\E1-571G\AppData\Local\Facebook\Update\FacebookUpdate.exe [16/10/2013 13:40] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [] ==== Other Scheduled Tasks ====================== "C:\WINDOWS\SysNative\tasks\AdobeAAMUpdater-1.0-571G-E1-571G" [C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe] "C:\WINDOWS\SysNative\tasks\ALU" [C:\Program Files (x86)\Acer\Live Updater\updater.exe] "C:\WINDOWS\SysNative\tasks\ALUAgent" [C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe] "C:\WINDOWS\SysNative\tasks\DeviceDetector" [C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe] "C:\WINDOWS\SysNative\tasks\EgisUpdate" ["C:\Program Files\EgisTec IPS\EgisUpdate.exe"] "C:\WINDOWS\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-2658763709-3801376341-2561777823-1002Core" [C:\Users\E1-571G\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\WINDOWS\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-2658763709-3801376341-2561777823-1002UA" [C:\Users\E1-571G\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\PMMUpdate" ["C:\Program Files\EgisTec IPS\PMMUpdate.exe"] "C:\WINDOWS\SysNative\tasks\Power Management" ["C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"] "C:\WINDOWS\SysNative\tasks\User_Feed_Synchronization-{DCD92133-137F-4B92-8ABC-23B82D2D99F7}" [C:\WINDOWS\system32\msfeedssync.exe] "C:\WINDOWS\SysNative\tasks\Recovery Management\Notification" [C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe] ==== Firefox Extensions ====================== ==== Firefox Plugins ====================== ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[11/04/2014 19:46] Sauve. On - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Sauve. On - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Sauve. On - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Sauve. On - E1-571G\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Google Drive - E1-571G\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - E1-571G\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Sauve. On - E1-571G\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Google Search - E1-571G\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Kotnet Login - E1-571G\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffdmhfbpjgldhcjpndjohjoiailndlog AdBlock - E1-571G\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom Skype Click to Call - E1-571G\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl Google Wallet - E1-571G\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - E1-571G\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia Sauve. On - E1-571G\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Sauve. On - Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Sauve. On - Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Sauve. On - Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Sauve. On - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Sauve. On - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Sauve. On - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Sauve. On - UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Sauve. On - UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn Sauve. On - UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn ==== Chrome Fix ====================== C:\Users\E1-571G\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully C:\Users\E1-571G\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully C:\Users\E1-571G\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage deleted successfully C:\Users\E1-571G\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal deleted successfully C:\Users\E1-571G\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pixresizer.nl.softonic.com_0.localstorage deleted successfully C:\Users\E1-571G\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pixresizer.nl.softonic.com_0.localstorage-journal deleted successfully C:\Users\E1-571G\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage deleted successfully C:\Users\E1-571G\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage-journal deleted successfully C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\E1-571G\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\E1-571G\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\E1-571G\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpbmkhhaoafccoeibfaaenedilghemnn deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] No DefaultScope Set For HKCU New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR" ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\203E62EEA6789D84098513925E9B9999 deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F60730A4A66673047777F5728467D401 deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\7c4d2382-d112-45fb-8169-efcafb1224b5 deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{84F050F3-1055-E9CC-59C2-DEEF8CE4C35E} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EE26E302-876A-48D9-9058-3129E5B99999} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\203E62EEA6789D84098513925E9B9999 deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F60730A4A66673047777F5728467D401 deleted successfully ==== Empty IE Cache ====================== C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\E1-571G\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\E1-571G\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Cache found ==== Empty Chrome Cache ====================== C:\Users\E1-571G\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=903 folders=61 459439439 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\E1-571G\AppData\Local\Temp will be emptied at reboot C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\WINDOWS\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\WINDOWS\Temp successfully emptied C:\Users\E1-571G\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted ==== EOF on di 22/07/2014 at 15:02:56,52 ======================