Zoek.exe v5.0.0.0 Updated 30-08-2014
Tool run by Jeroen on za 30-08-2014 at 17:49:13,69.
Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Jeroen\Desktop\zoek.exe [Scan all users] [Script inserted] [Checkboxes used]

==== System Restore Info ======================

30-8-2014 17:53:22 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\PROGRA~2\BearShare Applications deleted successfully
C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\PROGRA~2\Panda Security deleted successfully
C:\PROGRA~2\Sony Ericsson deleted successfully
C:\PROGRA~2\TomTom DesktopSuite deleted successfully
C:\PROGRA~2\Zylom Games deleted successfully
C:\PROGRA~2\COMMON~1\Symantec Shared deleted successfully
C:\Program Files\Google deleted successfully
C:\PROGRA~3\Browser Manager deleted successfully
C:\PROGRA~3\BrowserProtect deleted successfully
C:\PROGRA~3\Hitman Pro deleted successfully
C:\PROGRA~3\PC Drivers HeadQuarters deleted successfully
C:\PROGRA~3\Sony Ericsson deleted successfully
C:\Users\Jeroen\AppData\Roaming\Logitech deleted successfully
C:\Users\Jeroen\AppData\Roaming\Systweak deleted successfully
C:\Users\Jeroen\AppData\Roaming\TP deleted successfully
C:\Users\Jeroen\AppData\Local\Conduit deleted successfully
C:\Users\Jeroen\AppData\Local\ms-drivers deleted successfully
C:\Users\Jeroen\AppData\Local\PackageAware deleted successfully
C:\Users\Jeroen\AppData\Local\Samsung deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{87775fdb-6972-41f9-ae51-8326e38cb206} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435b-BC74-9C25C1C588A9} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435b-BC74-9C25C1C588A9} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d86a75b-cb6b-4764-885d-ca6336f04ba2} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ACC01A56-70E3-472E-9C4F-83B1DA817DD8} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{87775fdb-6972-41f9-ae51-8326e38cb206} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\{87775fdb-6972-41f9-ae51-8326e38cb206} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{3d86a75b-cb6b-4764-885d-ca6336f04ba2} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully

==== Installed Programs ======================

æTorrent  
Aangifte inkomstenbelasting 2010  
Aangifte inkomstenbelasting 2011  
Aangifte inkomstenbelasting 2012  
Aangifte inkomstenbelasting 2013  
Acrobat.com  
Adobe AIR  
Adobe Flash Player 14 ActiveX  
Adobe Flash Player 14 Plugin  
Adobe Reader X (10.1.9) - Nederlands  
Adobe Shockwave Player 11.5  
Albelli Fotoboeken  
Apple Application Support  
Apple Mobile Device Support  
Apple Software Update  
Ask Toolbar  
AVG 2013  
AVG Security Toolbar  
AVS Screen Capture version 2.0.1  
AVS Video Editor 6  
AVS Video Recorder 2.4  
Broadcom 802.11 Wireless LAN Adapter  
CyberLink DVD Suite  
CyberLink PowerDVD 9  
CyberLink YouCam  
D3DX10  
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition  
Energy Star Digital Logo  
ESU for Microsoft Windows 7  
FLV Player  
Fotoservice  
Full Tilt Poker  
Google Chrome  
Google Earth  
Google Update Helper  
Hewlett-Packard ACLM.NET v1.2.2.3  
HiJackThis  
HP Advisor  
HP Customer Experience Enhancements  
HP Deskjet 2540 series Basic Device Software  
HP Documentation  
HP Power Manager  
HP Quick Launch  
HP Setup  
HP Software Framework  
HP Support Assistant  
HP Wireless Assistant  
iLivid  
inSSIDer Office  
Intel(R) Control Center  
Intel(R) Graphics Media Accelerator Driver  
Intel(R) Management Engine Components  
Intel(R) Rapid Storage Technology  
Junk Mail filter update  
jZip  
LightScribe System Software  
Logitech Harmony Remote Software  
Magic Desktop  
Mesh Runtime  
Messenger Companion  
Microsoft .NET Framework 4.5.1  
Microsoft .NET Framework 4.5.1 (Nederlands)  
Microsoft .NET Framework 4.5.1 (NLD)  
Microsoft Application Error Reporting  
Microsoft Default Manager  
Microsoft Office 2010  
Microsoft Office Access MUI (Dutch) 2010  
Microsoft Office Excel MUI (Dutch) 2010  
Microsoft Office Groove MUI (Dutch) 2010  
Microsoft Office InfoPath MUI (Dutch) 2010  
Microsoft Office Klik-en-Klaar 2010  
Microsoft Office Office 64-bit Components 2010  
Microsoft Office OneNote MUI (Dutch) 2010  
Microsoft Office Outlook Connector  
Microsoft Office Outlook MUI (Dutch) 2010  
Microsoft Office PowerPoint MUI (Dutch) 2010  
Microsoft Office Professional Plus 2010  
Microsoft Office Proof (Dutch) 2010  
Microsoft Office Proof (English) 2010  
Microsoft Office Proof (French) 2010  
Microsoft Office Proof (German) 2010  
Microsoft Office Proofing (Dutch) 2010  
Microsoft Office Publisher MUI (Dutch) 2010  
Microsoft Office Shared 64-bit MUI (Dutch) 2010  
Microsoft Office Shared MUI (Dutch) 2010  
Microsoft Office Starter 2010 - Nederlands  
Microsoft Office Word MUI (Dutch) 2010  
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit  
Microsoft Silverlight  
Microsoft SQL Server 2005 Compact Edition [ENU]  
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053  
Microsoft Visual C++ 2005 Redistributable  
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17  
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148  
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161  
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219  
Mozilla Firefox 6.0 (x86 nl)  
MSVCRT  
MSVCRT_amd64  
MSXML 4.0 SP2 (KB954430)  
MSXML 4.0 SP2 (KB973688)  
MyFreeCodec  
Nero BurnLite 10  
Nero Control Center 10  
Nero ControlCenter 10 Help (CHM)  
Nero Core Components 10  
Nero Update  
PC Auto Backup  
PDFCreator  
PhotoNow  
Pinnacle videodriver  
PokerStars  
Power2Go  
PowerDirector  
QuickTime 7  
Realtek Ethernet Controller Driver For Windows 7  
Realtek High Definition Audio Driver  
Realtek USB 2.0 Card Reader  
Recovery Manager  
RollerCoaster Tycoon 2  
RollerCoaster Tycoon 3  
RtVOsd  
Samsung Mobile phone USB driver Drive Software  
Samsung PC Studio 3  
Samsung PC Studio 3 USB Driver Installer  
Samsung RAW Converter 4  
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)  
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)  
Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)  
Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2760781) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2810073) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2880971) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2881071) 32-Bit Edition  
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition  
SkypeT 6.16  
supra IPCam  
Synaptics Pointing Device Driver  
TomTom HOME 2.8.2.2264  
TomTom HOME Visual Studio Merge Modules  
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition  
Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition  
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition  
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition  
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2494150)  
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition  
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition  
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition  
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition  
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition  
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition  
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition  
Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition  
Verzoek of wijziging voorlopige aanslag 2012  
Verzoek of wijziging voorlopige aanslag 2013  
Verzoek of wijziging voorlopige aanslag 2014  
Visual Studio 2010 x64 Redistributables  
VLC media player 1.0.1  
WD Quick View  
WD SmartWare  
WD SmartWare Installer  
Windows Live Communications Platform  
Windows Live Essentials  
Windows Live Family Safety  
Windows Live ID Sign-in Assistant  
Windows Live Installer  
Windows Live Language Selector  
Windows Live Mail  
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen  
Windows Live Mesh  
Windows Live Messenger  
Windows Live Messenger Companion Core  
Windows Live MIME IFilter  
Windows Live Movie Maker  
Windows Live Photo Common  
Windows Live Photo Gallery  
Windows Live PIMT Platform  
Windows Live Remote Client  
Windows Live Remote Client Resources  
Windows Live Remote Service  
Windows Live Remote Service Resources  
Windows Live SOXE  
Windows Live SOXE Definitions  
Windows Live Sync  
Windows Live UX Platform  
Windows Live UX Platform Language Pack  
Windows Live Writer  
Windows Live Writer Resources  

==== Running Processes ======================

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
C:\Windows\SysWOW64\ezSharedSvcHost.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe
C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
C:\Program Files (x86)\Samsung\PC Auto Backup\WiselinkPro.exe
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\loggingserver.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files (x86)\Samsung\PC Auto Backup\http_ss_win_pro.exe
C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Program Files (x86)\Nero\Update\NASvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Users\Jeroen\AppData\Local\iLivid\iLivid.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Jeroen\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files (x86)\PDFCreator\PDFCreator.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\AVG Secure Search\vprot.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
C:\Program Files (x86)\AVG\AVG2013\avgcfgex.exe
C:\Users\Jeroen\Desktop\zoek.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KMService deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\KMService deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater18.1.9 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater18.1.9 deleted successfully

==== FireFox Fix ======================

ProfilePath: C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default

---- Lines mysearchdial removed from prefs.js ----
user_pref("browser.startup.homepage", "http://start.mysearchdial.com/?f=1&a=dsites0103&cd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzyyB0A0FtBtBzz0B0BtAtDtN0D0Tzu0CyB
user_pref("extensions.mysearchdial.AL", 2);
user_pref("extensions.mysearchdial.aflt", "dsites0103");
user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1Qzu0CyEyEyCtCzyyB0A0FtBtBzz0B0BtAtDtN0D0Tzu0CyByCtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDt
user_pref("extensions.mysearchdial.cr", "963432192");
user_pref("extensions.mysearchdial.dfltLng", "");
user_pref("extensions.mysearchdial.dfltSrch", true);
user_pref("extensions.mysearchdial.dnsErr", true);
user_pref("extensions.mysearchdial.excTlbr", false);
user_pref("extensions.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&a=dsites0103&cd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzyyB0A0FtBtBzz0B0BtAtDtN0D0
user_pref("extensions.mysearchdial.id", "C446197AF228BB30");
user_pref("extensions.mysearchdial.instlDay", "16102");
user_pref("extensions.mysearchdial.instlRef", "");
user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearchdial.com/?f=2&a=dsites0103&cd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzyyB0A0FtBtBzz0B0BtAtDtN0
user_pref("extensions.mysearchdial.prdct", "mysearchdial");
user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
user_pref("extensions.mysearchdial.tlbrId", "base");
user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearchdial.com/?f=3&a=dsites0103&cd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzyyB0A0FtBtBzz0B0BtAtDt
user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");
user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");
user_pref("extensions.mysearchdial_i.hmpg", true);
user_pref("extensions.mysearchdial_i.newTab", false);
user_pref("extensions.mysearchdial_i.smplGrp", "none");
user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.021:37:21");
---- Lines mysearchdial removed from user.js ----

user_pref("extensions.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&a=dsites0103&cd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzyyB0A0FtBtBzz0B0BtAtDtN0D0Tzu0CyByCtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=963432192&ir=");
user_pref("extensions.mysearchdial.dfltSrch", true);
user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
user_pref("extensions.mysearchdial.dnsErr", true);
user_pref("extensions.mysearchdial_i.newTab", false);
user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearchdial.com/?f=2&a=dsites0103&cd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzyyB0A0FtBtBzz0B0BtAtDtN0D0Tzu0CyByCtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=963432192&ir=");
user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearchdial.com/?f=3&a=dsites0103&cd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzyyB0A0FtBtBzz0B0BtAtDtN0D0Tzu0CyByCtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=963432192&ir=&q=");
user_pref("extensions.mysearchdial.id", "C446197AF228BB30");
user_pref("extensions.mysearchdial.instlDay", "16102");
user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");
user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");
user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.021:37:21");
user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
user_pref("extensions.mysearchdial.prdct", "mysearchdial");
user_pref("extensions.mysearchdial.aflt", "dsites0103");
user_pref("extensions.mysearchdial_i.smplGrp", "none");
user_pref("extensions.mysearchdial.tlbrId", "base");
user_pref("extensions.mysearchdial.instlRef", "");
user_pref("extensions.mysearchdial.dfltLng", "");
user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
user_pref("extensions.mysearchdial.excTlbr", false);
user_pref("extensions.mysearchdial_i.hmpg", true);
user_pref("extensions.mysearchdial.cr", "963432192");
user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1Qzu0CyEyEyCtCzyyB0A0FtBtBzz0B0BtAtDtN0D0Tzu0CyByCtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R");
user_pref("extensions.mysearchdial.AL", 2);

---- Lines CT2865317 removed from prefs.js ----
user_pref("CT2865317.1000234.TWC_location", "Amsterdam, Netherlands");
user_pref("CT2865317.1000234.TWC_locId", "NLXX0002");
user_pref("CT2865317.1000234.TWC_region", "OT");
user_pref("CT2865317.1000234.TWC_temp_dis", "c");
user_pref("CT2865317.1000234.TWC_TMP_city", "AMSTERDAM");
user_pref("CT2865317.1000234.TWC_TMP_country", "NL");
user_pref("CT2865317.1000234.TWC_wind_dis", "kmh");
user_pref("CT2865317.1000234.weatherData", "{\"icon\":\"20.png\",\"temperature\":\"3°C\",\"temperatureClear\":\"3°C\",\"highTemperature\":\"3°C\",\
user_pref("CT2865317.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2865317.autoDisableScopes", -1);
user_pref("CT2865317.browser.search.defaultthis.engineName", true);
user_pref("CT2865317.cbcountry_001", "NL");
user_pref("CT2865317.cbfirsttime", "Fri Nov 16 2012 22:31:38 GMT+0100");
user_pref("CT2865317.CBOpenMAMSettings", "0");
user_pref("CT2865317.countryCode", "NL");
user_pref("CT2865317.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2865317.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2865317.enableAlerts", "always");
user_pref("CT2865317.enableFix404ByUser", "FALSE");
user_pref("CT2865317.enableSearchFromAddressBar", "true");
user_pref("CT2865317.FirstTime", "true");
user_pref("CT2865317.firstTimeDialogOpened", "true");
user_pref("CT2865317.FirstTimeFF3", "true");
user_pref("CT2865317.fixPageNotFoundError", "true");
user_pref("CT2865317.fixPageNotFoundErrorByUser", "true");
user_pref("CT2865317.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2865317.fixUrls", true);
user_pref("CT2865317.fullUserID", "UN80469048246814980.UP.20140130202304");
user_pref("CT2865317.homepageuserchanged", true);
user_pref("CT2865317.installId", "fft4E2.tmp.exe");
user_pref("CT2865317.installType", "XPE");
user_pref("CT2865317.isCheckedStartAsHidden", true);
user_pref("CT2865317.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2865317.isFirstTimeToolbarLoading", "false");
user_pref("CT2865317.isNewTabEnabled", true);
user_pref("CT2865317.isPerformedSmartBarTransition", "true");
user_pref("CT2865317.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2865317.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2865317.keyword", true);
user_pref("CT2865317.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"http://search.conduit.com/?gd=&ctid=CT2865317&octid=CT2865317&ISID=ISID
user_pref("CT2865317.lastVersion", "10.23.0.822");
user_pref("CT2865317.migrateAppsAndComponents", true);
user_pref("CT2865317.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"https%3A%2F%2Fwww.samsung.com%2Fnl%2Fpromotions%2F%2Fpromotiondetails.html%3Fid
user_pref("CT2865317.openThankYouPage", "true");
user_pref("CT2865317.openUninstallPage", "FALSE");
user_pref("CT2865317.originalSearchAddressUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2865317&SearchSource=2&CUI=UN80469048246814980&UM=&q
user_pref("CT2865317.scriptSource", "http://127.0.0.1:10000/gui/");
user_pref("CT2865317.search.searchAppId", "129363015615338104");
user_pref("CT2865317.search.searchCount", "0");
user_pref("CT2865317.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2865317&SearchSource=2&q=");
user_pref("CT2865317.searchInNewTabEnabledByUser", "true");
user_pref("CT2865317.searchInNewTabEnabledInHidden", "true");
user_pref("CT2865317.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2865317.searchSuggestEnabledByUser", "true");
user_pref("CT2865317.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2865317.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2865317.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2865317.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2865317\"}");
user_pref("CT2865317.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"http://uTorrentBarNL.OurToolbar.com
user_pref("CT2865317.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentBar_NL \"}");
user_pref("CT2865317.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2865317.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT2865317.serviceLayer_services_appsMetadata_lastUpdate", "1353101495176");
user_pref("CT2865317.serviceLayer_services_appTracking_lastUpdate", "1353101497357");
user_pref("CT2865317.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1353101495360");
user_pref("CT2865317.serviceLayer_services_Configuration_lastUpdate", "1405544797747");
user_pref("CT2865317.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1353101496783");
user_pref("CT2865317.serviceLayer_services_location_lastUpdate", "1367420868481");
user_pref("CT2865317.serviceLayer_services_login_10.10.27.6_lastUpdate", "1364641285149");
user_pref("CT2865317.serviceLayer_services_login_10.15.0.562_lastUpdate", "1367420989694");
user_pref("CT2865317.serviceLayer_services_login_10.23.0.822_lastUpdate", "1391110628006");
user_pref("CT2865317.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1353101495847");
user_pref("CT2865317.serviceLayer_services_searchAPI_lastUpdate", "1405544797751");
user_pref("CT2865317.serviceLayer_services_serviceMap_lastUpdate", "1405544797691");
user_pref("CT2865317.serviceLayer_services_toolbarContextMenu_lastUpdate", "1353101495808");
user_pref("CT2865317.serviceLayer_services_toolbarSettings_lastUpdate", "1405544797608");
user_pref("CT2865317.serviceLayer_services_translation_lastUpdate", "1405544797362");
user_pref("CT2865317.settingsINI", true);
user_pref("CT2865317.shouldFirstTimeDialog", "false");
user_pref("CT2865317.showToolbarPermission", "false");
user_pref("CT2865317.smartbar.CTID", "CT2865317");
user_pref("CT2865317.smartbar.homepage", true);
user_pref("CT2865317.smartbar.isHidden", true);
user_pref("CT2865317.smartbar.toolbarName", "uTorrentBar_NL ");
user_pref("CT2865317.smartbar.Uninstall", "0");
user_pref("CT2865317.startPage", "userChanged");
user_pref("CT2865317.toolbarBornServerTime", "17-11-2012");
user_pref("CT2865317.toolbarCurrentServerTime", "30-1-2014");
user_pref("CT2865317.toolbarLoginClientTime", "Wed May 01 2013 17:07:47 GMT+0200");
user_pref("CT2865317.upgradeFromClearSBVersion", true);
user_pref("CT2865317.UserID", "UN80469048246814980");
user_pref("CT2865317_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1405544791650,\"isWithState\":\"\",\"timeFromStar
user_pref("keyword.URL", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2865317&SearchSource=2&CUI=UN80469048246814980&UM=&q=");
user_pref("smartbar.addressBarOwnerCTID", "CT2865317");
user_pref("smartbar.conduitSearchAddressUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2865317&SearchSource=2&CUI=UN80469048246814980&UM=
user_pref("Smartbar.keywordURLSelectedCTID", "CT2865317");
user_pref("smartbar.originalSearchAddressUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2865317&SearchSource=2&q=");
---- Lines conduit removed from prefs.js ----
user_pref("plugin.state.npconduitfirefoxplugin", 2);
user_pref("Smartbar.ConduitHomepagesList", "");
user_pref("Smartbar.ConduitSearchEngineList", "");
user_pref("Smartbar.ConduitSearchUrlList", "");
---- Lines Search  removed from prefs.js ----
user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"http://*google.*\" param=\"q=\" /><EXTERNAL_SE
---- Lines Search  modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}\":{\"descriptor\":\"C:\\\\
---- Lines valueApps removed from prefs.js ----
user_pref("valueApps.storage.mam_gk_userId", "33366232643134622D666663352D343366352D626139302D323465393836373462313663");
---- Lines isearch removed from prefs.js ----
user_pref("avg.install.userHPSettings", "http://isearch.avg.com/?cid={8D86EEB2-73C5-4272-A1E8-BE59DB2493F3}&mid=562fe9a4d47347d08f70256baa336946-66265
user_pref("avg.userPreferences.URLBarFocus.whiteList", "bing\\.com|google\\.\\w+|yahoo\\.\\w+|gmail\\.\\w+|hotmail\\.\\w+|live\\.\\w+|isearch\\.avg\\.
user_pref("Smartbar.SearchFromAddressBarSavedUrl", "http://isearch.avg.com/search?cid={6E22A8CD-2D99-46E9-813D-5A168E26ABAA}&mid=562fe9a4d47347d08f702
---- Lines ask.com removed from prefs.js ----
user_pref("browser.search.order.1", "Ask.com");
user_pref("sweetim.toolbar.scripts.2.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..*|.*.yahoo..*|.*.youtube.com.*|.*ask.com.*|.*.swee
---- Lines Web Search removed from prefs.js ----
user_pref("browser.search.defaultenginename", "uTorrentBar_NL Customized Web Search");
---- Lines EEE6C361-6118-11DC-9C72-001320C79847 modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}\":{\"descriptor\":\"C:\\\\
---- Lines Sweet removed from prefs.js ----
user_pref("sweetim.toolbar.cda.DisableOveride.enable", "true");
user_pref("sweetim.toolbar.cda.HideOveride.enable", "true");
user_pref("sweetim.toolbar.cda.RemoveOveride.enable", "true");
user_pref("sweetim.toolbar.cda.returnValue", "disable");
user_pref("sweetim.toolbar.dialogs.0.enable", "true");
user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-handler.js");
user_pref("sweetim.toolbar.dialogs.0.height", "335");
user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog");
user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;");
user_pref("sweetim.toolbar.dialogs.0.url", "http://www.sweetim.com/simffbar/options_remote_ff.asp?lang=$locale_id;&toolbar_version=$ITEM_VERSION;&crg=
user_pref("sweetim.toolbar.dialogs.0.width", "761");
user_pref("sweetim.toolbar.dialogs.1.enable", "true");
user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-handler.js");
user_pref("sweetim.toolbar.dialogs.1.height", "300");
user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog");
user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog");
user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html");
user_pref("sweetim.toolbar.dialogs.1.width", "500");
user_pref("sweetim.toolbar.dialogs.2.enable", "true");
user_pref("sweetim.toolbar.dialogs.2.handler", "chrome://sim_toolbar_package/content/cdadialog-handler.js");
user_pref("sweetim.toolbar.dialogs.2.height", "150");
user_pref("sweetim.toolbar.dialogs.2.id", "id_dialog_hide_disable_remove");
user_pref("sweetim.toolbar.dialogs.2.title", "Option Dialog");
user_pref("sweetim.toolbar.dialogs.2.url", "http://www.sweetim.com/simffbar/simcdadialog.asp");
user_pref("sweetim.toolbar.dialogs.2.width", "530");
user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.google.com/.*|.*.google.co.in/.*|.*.google.com.br/.*|.
user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
user_pref("sweetim.toolbar.keywordUrlGuard.enable", "false");
user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
user_pref("sweetim.toolbar.mode.debug", "false");
user_pref("sweetim.toolbar.newtab.created", "false");
user_pref("sweetim.toolbar.newtab.enable", "true");
user_pref("sweetim.toolbar.previous.keyword.URL", "");
user_pref("sweetim.toolbar.rc.url", "http://www.sweetim.com/simffbar/rc.html?toolbar_version=$ITEM_VERSION;&crg=$cargo;");
user_pref("sweetim.toolbar.RevertDialog.enable", "false");
user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true");
user_pref("sweetim.toolbar.scripts.0.callback", "simVerification");
user_pref("sweetim.toolbar.scripts.0.domain-blacklist", "");
user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "http://(www.|apps.)?facebook\\.com.*");
user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb");
user_pref("sweetim.toolbar.scripts.0.enable", "false");
user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb");
user_pref("sweetim.toolbar.scripts.0.url", "http://sc.sweetim.com/apps/in/fb/infb.js");
user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "true");
user_pref("sweetim.toolbar.scripts.1.callback", "simVerification");
user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "https://(www.|apps.)?facebook\\.com.*");
user_pref("sweetim.toolbar.scripts.1.elementid", "id_script_sim_fb");
user_pref("sweetim.toolbar.scripts.1.enable", "false");
user_pref("sweetim.toolbar.scripts.1.id", "id_script_fb_httpS");
user_pref("sweetim.toolbar.scripts.1.url", "https://sc.sweetim.com/apps/in/fb/infb.js");
user_pref("sweetim.toolbar.scripts.2.addcontextdiv", "false");
user_pref("sweetim.toolbar.scripts.2.callback", "");
user_pref("sweetim.toolbar.scripts.2.domain-whitelist", "");
user_pref("sweetim.toolbar.scripts.2.elementid", "id_predict_include_script");
user_pref("sweetim.toolbar.scripts.2.enable", "false");
user_pref("sweetim.toolbar.scripts.2.id", "id_script_prad");
user_pref("sweetim.toolbar.scripts.2.url", "http://cdn1.certified-apps.com/scripts/shared/enable.js?si=3104&tid=chff1");
user_pref("sweetim.toolbar.search.history", "RTL%20GEMIST");
user_pref("sweetim.toolbar.search.history.capacity", "10");
user_pref("sweetim.toolbar.searchguard.enable", "false");
user_pref("sweetim.toolbar.searchguard.initialized_by_rc", "true");
user_pref("sweetim.toolbar.simapp_id", "{27123210-EF9F-4012-A259-A9612B383781}");
user_pref("sweetim.toolbar.UserSelectedSaveSettings", "true");
user_pref("sweetim.toolbar.version", "1.9.0.0");
user_pref("sweetim.toolbar.Visibility.enable", "true");
user_pref("sweetim.toolbar.Visibility.intervaldays", "7");
user_pref("sweetim.toolbar.Visibility.VisibilityGuardLastUnHide", "0");
---- Lines 87775fdb-6972-41f9-ae51-8326e38cb206 modified from prefs.js ----

user_pref("extensions.enabledAddons", "{87775fdb-6972-41f9-ae51-8326e38cb206}:10.23.0.822,{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}:9.5.3,avg@toolbar:18.
user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}\":{\"descriptor\":\"C:\\\\
---- Lines smartbar removed from prefs.js ----
user_pref("smartbar.machineId", "K+P1WJTZH1QXEDPBEAZ5HPQMJ53VGXCE17JW1I/2DFYFSUS10AVG5A+VP3SO6DTYSBYHVOCBRQKNRAWVWIU1/A");
---- Lines {CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA} modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}\":{\"descriptor\":\"C:\\\\
---- FireFox user.js and prefs.js backups ---- 

user_30-08-2014_1805_.backup
prefs_30-08-2014_1805_.backup

ProfilePath: C:\Users\Jeroen\AppData\Roaming\TomTom\HOME\Profiles\w3yqzvj2.default

user.js not found
---- FireFox user.js and prefs.js backups ---- 

prefs_30-08-2014_1805_.backup

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe] 

==== Registry Fix Code x64 ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d86a75b-cb6b-4764-885d-ca6336f04ba2}] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ACC01A56-70E3-472E-9C4F-83B1DA817DD8}] 
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] 
"vProt"=- 

==== Deleting Files \ Folders ======================

"C:\windows\SysNative\srvany.exe" not found
"C:\Windows\TEMP\{02BCFCD2-886E-4BD2-B433-B473953E0B34}.exe" not found
C:\PROGRA~2\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml deleted
C:\PROGRA~2\Mozilla Firefox\searchplugins\avg-secure-search.xml deleted
C:\PROGRA~2\Mozilla Firefox\searchplugins\Search_Results.xml deleted
C:\PROGRA~2\MyFree Codec deleted
C:\PROGRA~2\Conduit deleted
C:\extensions deleted
C:\Users\Jeroen\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\iLivid.lnk deleted
C:\Users\Jeroen\AppData\Roaming\Smiley.ico deleted
C:\Users\Jeroen\AppData\Roaming\DigitalSites deleted
C:\PROGRA~3\FreeRIP deleted
C:\PROGRA~3\boost_interprocess deleted
C:\PROGRA~3\AVG Secure Search deleted
C:\Users\Jeroen\AppData\Local\mysearchdial-speeddial.crx deleted
C:\Users\Jeroen\AppData\Local\CRE deleted
C:\Users\Jeroen\AppData\Local\AVG Secure Search deleted
C:\Users\Jeroen\AppData\Local\jZip deleted
C:\Users\Jeroen\AppData\Local\cache deleted
C:\Users\Jeroen\AppData\Local\AskToolbar deleted
C:\Users\Jeroen\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847} deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec deleted
C:\Users\Jeroen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk deleted
C:\Windows\SysNative\roboot64.exe deleted
C:\Users\Jeroen\Downloads\SoftonicDownloader_voor_hitman.exe deleted
C:\Users\Jeroen\AppData\LocalLow\AVG Secure Search deleted
C:\Users\Jeroen\AppData\LocalLow\wincorebsband deleted
C:\Users\Jeroen\AppData\LocalLow\searchquband deleted
C:\Users\Jeroen\AppData\LocalLow\AskToolbar deleted
C:\Users\Jeroen\AppData\LocalLow\DataMngr deleted
C:\Users\Jeroen\AppData\LocalLow\PriceGong deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Application Updater deleted
C:\windows\SysNative\TASKS\Scheduled Update for Ask Toolbar deleted
C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job deleted
C:\Windows\tasks\ROC_JAN2013_TB_rmv.job deleted
C:\windows\SysNative\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv deleted
C:\windows\SysNative\tasks\ROC_JAN2013_TB_rmv deleted
C:\windows\SysNative\tasks\Digital Sites deleted
C:\Windows\tasks\Digital Sites.job deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Windows\Syswow64\ConduitEngine.tmp deleted
C:\Windows\Syswow64\shoA5E7.tmp deleted
C:\Windows\Syswow64\shoAF59.tmp deleted
C:\Windows\Syswow64\shoE9F3.tmp deleted
C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\searchplugins\Ask.xml deleted
C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\searchplugins\Mysearchdial.xml deleted
C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\searchplugins\searchbrowsing.xml deleted
C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\searchplugins\Search_Results.xml deleted
C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\valueApps deleted
C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\ilividmoviestoolbarha deleted
C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\SweetPacksToolbarData deleted
C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\CT2865317 deleted
C:\Users\Public\Desktop\Get The Best Facebook Chat Messenger.lnk deleted
C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE} deleted
C:\Users\Jeroen\Desktop\iLivid.lnk deleted
C:\PROGRA~2\Mozilla Firefox\searchplugins\Ask.xml deleted
C:\PROGRA~2\Mozilla Firefox\browser\searchplugins\Ask.xml deleted
C:\Users\Jeroen\AppData\Roaming\SUPRAUpdatePaket.exe deleted
C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206} deleted
C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\smartbar deleted
C:\PROGRA~2\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA} deleted
"C:\Windows\syswow64\srvany.exe" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\searchplugins\conduit.xml" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\searchplugins\sweetim.xml" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\searchplugins\conduit.xml" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\searchplugins\sweetim.xml" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\chrome.manifest" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\install.rdf" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\.DS_Store" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser\.background.jsm.swp" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser\background.jsm" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser\bg.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser\browser.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser\browser.xul" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser\timer.jsm" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_de.json" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_en-gb.json" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_en_us.json" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_fr.json" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_he.json" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_it.json" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_pt-br.json" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_ru.json" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data\favorites_tr.json" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\crypto-js.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\jquery-2.0.2.min.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\jquery.autocomplete.min.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\jquery.balloon.min.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\jquery.fittext.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\jquery.Jcrop.min.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\jquery.simplecolorpicker.min.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\mustache.min.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\string.min.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external\underscore-min.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab\gallery.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab\gallery.min.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab\newtab.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab\newtab.min.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab\search.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab\search.min.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\defaults\preferences\prefs-sys.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\defaults\preferences\prefs.js" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\foundation.min.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\indicator.gif" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\Jcrop.gif" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\jquery.autocomplete.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\jquery.Jcrop.min.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\jquery.simplecolorpicker.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external\normalize.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\arrow-gallery-cat-selected.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\arrow.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\emptyArea.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\gallery.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\gallery_templates.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\icon-gallery-search.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\not_available_32.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\plus.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\Thumbs.db" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\X.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons\128.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons\16.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons\48.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons\Thumbs.db" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\buttons.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\footer.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\header.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\list.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\newtab.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\search.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css\themes.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\ajax-loader-2.gif" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\ajax-loader-bar.gif" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\ajax-loader-medium.gif" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\ajax-loader-small.gif" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\ajax-loader.gif" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\arrow-footer.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\arrow-header.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\attachment.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\close.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\edit-button.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\icon-chrome.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\icon-edit.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\icon-layout.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\icon-plus.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\icon-theme.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\menu_v.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\provider.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\Thumbs.db" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\x-button.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\resources\list.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\resources\menu.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\arab_tile.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\batthern_@2X.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\bo_play_pattern_@2X.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\dark_wood_@2X.jpg" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\diagonal_striped_brick.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\escheresque_ste_@2X.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\gold_scale.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\purty_wood_@2X.jpg" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\readme.txt" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\starring_@2X.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\tileable_wood_texture_@2X.jpg" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\weave_@2X.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\wild_oliva_@2X.jpg" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns\woven.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\activetabs.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\favorites.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\layout.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\modal-fav-add.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\modal-fav-edit.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\modal-fav-group.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\recentlyclosed.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css\theme.css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\activetabs.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\favorites.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\layout.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\modal-fav-add.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\modal-fav-edit.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\modal-fav-group.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\recentlyclosed.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources\theme.html" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\bookmarks.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\download.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\downloads.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\downloas.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\extensions.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\history.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\settings.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome\trash.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\favorites\empty.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\favorites\error.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\favorites\shadow.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\info\contactus.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\info\facebook.ico" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\info\rateus.png" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\info\twitter.ico" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\_locales\en-US\translations.dtd" deleted
"C:\Program Files (x86)\AVG Secure Search\vprot.exe" deleted
"C:\PROGRA~2\jZip\jZipShell64x.dll" deleted
"C:\PROGRA~2\AVG Secure Search\vprot.exe" deleted
"C:\PROGRA~2\AVG Secure Search\vprot.exe" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\iLivid.exe" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\libeay32.dll" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\msvcp100.dll" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\msvcr100.dll" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\QtCore4.dll" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\QtGui4.dll" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\QtNetwork4.dll" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\QtWebKit4.dll" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\QtXml4.dll" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\ssleay32.dll" deleted
"C:\Program Files (x86)\Common Files\AVG Secure Search\DNTInstaller\18.1.9\avgdttbx.dll" deleted
"C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\SiteSafety.dll" deleted
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\log4cplusU.dll" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\18.1.9\avgdttbx.dll" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller\18.1.9\SiteSafety.dll" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\18.1.9\log4cplusU.dll" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\imageformats\qgif4.dll" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\imageformats\qico4.dll" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\imageformats\qjpeg4.dll" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\defaults" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\_locales" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\browser" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\data" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\external" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\content\newtab" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\defaults\preferences" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\external" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\resources" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\patterns" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\css" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\resources" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\chrome" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\favorites" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\plugins\images\info" deleted
"C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\_locales\en-US" deleted
"C:\Program Files (x86)\AVG Secure Search" deleted
"C:\Program Files (x86)\Common Files\AVG Secure Search" deleted
"C:\PROGRA~2\jZip" not deleted
"C:\PROGRA~2\AVG Secure Search" deleted
"C:\PROGRA~2\AVG Secure Search" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search" deleted
"C:\PROGRA~3\Package Cache" deleted
"C:\Users\Jeroen\AppData\Local\iLivid" deleted
"C:\Users\Jeroen\AppData\LocalLow\Conduit" deleted
"C:\Program Files (x86)\Common Files\AVG Secure Search\DNTInstaller" deleted
"C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller" deleted
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater" deleted
"C:\Program Files (x86)\Common Files\AVG Secure Search\DNTInstaller\18.1.9" deleted
"C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9" deleted
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\18.1.9" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller\18.1.9" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\18.1.9" deleted
"C:\Users\Jeroen\AppData\Local\iLivid\imageformats" deleted

==== System Specs ======================

Windows: Windows 7 Home Premium Edition (64-bit) Service Pack 1 (Build 7601)
Memory (RAM): 3894 MB
CPU Info: Intel(R) Core(TM) i5 CPU       M 460  @ 2.53GHz
CPU Speed: 2516,3 MHz
Sound Card: Luidsprekers (Realtek High Defi | 
Display Adapters: Intel(R) HD Graphics | Intel(R) HD Graphics | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver
Monitors: 1x; Algemeen PnP-beeldscherm | 
Screen Resolution: 1366 X 768 - 32 bit
Network: Network Present
Network Adapters: Broadcom 4313 (802.11b/g/n)
CD / DVD Drives: 1x (E: | ) E: hp      CDDVDW TS-L633N
Ports: COM Ports NOT Present. LPT Port NOT Present. 
Mouse: 5 Button Wheel Mouse Present
Hard Disks: C:  449,5GB | D:  16,0GB | Q:  0,0MB
Hard Disks - Free: C:  305,8GB | D:  2,3GB | Q:  0,0MB
Manufacturer *: Hewlett-Packard
BIOS Info: AT/AT COMPATIBLE | 11/09/11 | HPQOEM - 1
Time Zone: West-Europa (standaardtijd)
Motherboard *: Hewlett-Packard 1439
Country: Nederland 
Language: NLD 

==== System Specs (Software) ======================

Anti-Virus: AVG AntiVirus 2013 On-access scanning disabled (Outdated)
Anti-Spyware: Windows Defender disabled (Outdated)
Anti-Spyware: AVG AntiVirus 2013 disabled (Outdated)
Internet Explorer Version: 11.0.9600.17239 
Mozilla Firefox version: 6.0 (x86 nl)
Google Chrome version: 36.0.1985.143
Adobe Reader version: 10.1.9.22
Flash Player version: 14.0.0.145
Shockwave Player version: 11.5.7r609

==== Files Recently Created / Modified ======================

====== C:\Windows ====
====== C:\Users\Jeroen\AppData\Local\Temp ====
2014-08-29 22:32:25	FFF48405C43A06F4B4A29F4562F7CD92	127488	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\OSProvider.dll
2014-08-29 22:32:25	9E7E2B01C65C4E276ED55B1F1BD6CE2B	302080	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\UnattendProvider.dll
2014-08-29 22:32:25	7B38D7916A7CD058C16A0A6CA5077901	271360	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\wdscore.dll
2014-08-29 22:32:25	739968678548BA15F6B9372E8760C012	444416	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\TransmogProvider.dll
2014-08-29 22:32:25	732A13256A9BE7E15E2D58393D6B85F4	471040	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\WimProvider.dll
2014-08-29 22:32:25	011A725B36F05E8A771626017064F2CA	271360	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\SmiProvider.dll
2014-08-29 22:32:24	CCF6EC908566900E9626DC3360B9E35E	112128	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\DismCorePS.dll
2014-08-29 22:32:24	BB9E8732FC0B76EF29DC90C63397078E	312832	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\IntlProvider.dll
2014-08-29 22:32:24	A909643B215FC0587A043C9C15959D41	186368	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\DismProv.dll
2014-08-29 22:32:24	A2D08E8B0AE6750DDD9D01D61BDDC818	435712	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\DmiProvider.dll
2014-08-29 22:32:24	703E7D07687D2751D0474E4D333E832C	1672192	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\CbsProvider.dll
2014-08-29 22:32:24	6EBC2138A3C9B3B7D1E69E0629B6C815	289792	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\DismCore.dll
2014-08-29 22:32:24	64B66A41B61D511E8EBE94625EC0E45A	53760	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\FolderProvider.dll
2014-08-29 22:32:24	5AE6EFCD674AC76CC1A9929F1AFA0ECE	183296	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\CompatProvider.dll
2014-08-29 22:32:24	516A5FCE06BB388499238A5F9286CB74	96768	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\DismHost.exe
2014-08-29 22:32:24	45FF4FA5CA5432BFCCDED4433FE2A85B	216576	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\75FB8C00-87BB-4D8E-8A89-5BE0E61CDE33\MsiProvider.dll
2014-08-28 20:00:45	FFF48405C43A06F4B4A29F4562F7CD92	127488	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\OSProvider.dll
2014-08-28 20:00:45	BB9E8732FC0B76EF29DC90C63397078E	312832	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\IntlProvider.dll
2014-08-28 20:00:45	9E7E2B01C65C4E276ED55B1F1BD6CE2B	302080	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\UnattendProvider.dll
2014-08-28 20:00:45	7B38D7916A7CD058C16A0A6CA5077901	271360	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\wdscore.dll
2014-08-28 20:00:45	739968678548BA15F6B9372E8760C012	444416	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\TransmogProvider.dll
2014-08-28 20:00:45	732A13256A9BE7E15E2D58393D6B85F4	471040	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\WimProvider.dll
2014-08-28 20:00:45	64B66A41B61D511E8EBE94625EC0E45A	53760	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\FolderProvider.dll
2014-08-28 20:00:45	45FF4FA5CA5432BFCCDED4433FE2A85B	216576	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\MsiProvider.dll
2014-08-28 20:00:45	011A725B36F05E8A771626017064F2CA	271360	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\SmiProvider.dll
2014-08-28 20:00:44	CCF6EC908566900E9626DC3360B9E35E	112128	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\DismCorePS.dll
2014-08-28 20:00:44	A909643B215FC0587A043C9C15959D41	186368	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\DismProv.dll
2014-08-28 20:00:44	A2D08E8B0AE6750DDD9D01D61BDDC818	435712	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\DmiProvider.dll
2014-08-28 20:00:44	703E7D07687D2751D0474E4D333E832C	1672192	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\CbsProvider.dll
2014-08-28 20:00:44	6EBC2138A3C9B3B7D1E69E0629B6C815	289792	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\DismCore.dll
2014-08-28 20:00:44	5AE6EFCD674AC76CC1A9929F1AFA0ECE	183296	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\CompatProvider.dll
2014-08-28 20:00:44	516A5FCE06BB388499238A5F9286CB74	96768	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\4A34F25B-3FF0-4EB1-B0DE-D20182034CEF\DismHost.exe
2014-08-28 18:39:20	2F4D70DC3EBB082D7A940B03137A0304	28439280	----a-w-	C:\Users\Jeroen\AppData\Local\Temp\Softonic_NL_1-5-11_NL-Production_10_CleanRelease.exe
====== Java Cache =====
====== C:\Windows\SysWOW64 =====
2014-08-27 20:36:14	980305AC3AF53C1964A11190451ABB32	311808	----a-w-	C:\Windows\SysWOW64\gdi32.dll
2014-08-25 19:03:37	867148EBF47E7E7E7B21C07B4A981929	581600	----a-w-	C:\Windows\SysWOW64\wuapi.dll
2014-08-25 19:03:37	372218B80DEF827063049EBEE76B7501	92672	----a-w-	C:\Windows\SysWOW64\wudriver.dll
2014-08-25 19:03:37	255F0417EC31C71585824269522EC8E9	36320	----a-w-	C:\Windows\SysWOW64\wups.dll
2014-08-25 19:02:28	F419D738BD2AE58D9DF2F9FEB5F43842	33792	----a-w-	C:\Windows\SysWOW64\wuapp.exe
2014-08-25 19:02:28	5AA2CAD923E9E647276A61387E83DDD0	179656	----a-w-	C:\Windows\SysWOW64\wuwebv.dll
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
2014-08-27 20:36:14	A347EF56B7CD8360B3EF7772FEA597B9	3163648	----a-w-	C:\Windows\Sysnative\win32k.sys
2014-08-27 20:36:14	860528C9E50AB84935843B23A80E665E	404480	----a-w-	C:\Windows\Sysnative\gdi32.dll
2014-08-25 19:03:49	EAD9E413A6CEB9FD8E2AD9DC0716C061	58336	----a-w-	C:\Windows\Sysnative\wuauclt.exe
2014-08-25 19:03:49	E76F105AD039B9E4DA9ECE839298C4A2	44512	----a-w-	C:\Windows\Sysnative\wups2.dll
2014-08-25 19:03:49	6335F8B4B89F002A3801473C1A799237	2620928	----a-w-	C:\Windows\Sysnative\wucltux.dll
2014-08-25 19:03:49	61FF576450CCC80564B850BC3FB6713A	2477536	----a-w-	C:\Windows\Sysnative\wuaueng.dll
2014-08-25 19:03:37	7EC6617005F76714C7E16605E7A8AB06	38880	----a-w-	C:\Windows\Sysnative\wups.dll
2014-08-25 19:03:37	1180B5ADFB507258DA10F51B46681A33	97792	----a-w-	C:\Windows\Sysnative\wudriver.dll
2014-08-25 19:03:37	0DB2758CF1BAFE22E0970FDA0785B74C	700384	----a-w-	C:\Windows\Sysnative\wuapi.dll
2014-08-25 19:02:28	45D4BDEA136E72E75CF008D3C38D949A	198600	----a-w-	C:\Windows\Sysnative\wuwebv.dll
2014-08-25 19:02:28	29FE783F75362AD6D2D9C0555BA83BD2	36864	----a-w-	C:\Windows\Sysnative\wuapp.exe
====== C:\Windows\Sysnative\drivers =====
2014-08-13 21:22:18	87CE5C8965E101CCCED1F4675557E868	985536	----a-w-	C:\Windows\Sysnative\drivers\dxgkrnl.sys
====== C:\Windows\Tasks ======
2014-08-06 22:11:31	--------	d-----w-	C:\Windows\Sysnative\Tasks\Western Digital
====== C:\Windows\Temp ======
======= C:\Program Files =====
2014-08-29 19:41:12	--------	d-----w-	C:\Program Files\trend micro
2014-08-06 22:01:10	--------	d-----w-	C:\Program Files\Common Files\Western Digital
2014-08-06 22:01:09	--------	d-----w-	C:\Program Files\Western Digital
======= C:\PROGRA~2 =====
2014-08-06 22:01:09	--------	d-----w-	C:\PROGRA~2\Western Digital
2014-08-06 22:01:09	--------	d-----w-	C:\PROGRA~2\COMMON~1\Western Digital
======= C: =====
====== C:\Users\Jeroen\AppData\Roaming ======
2014-08-28 18:45:57	--------	d-----w-	C:\Users\Jeroen\AppData\Local\CrashRpt
2014-08-28 18:39:40	--------	d-----w-	C:\Users\Jeroen\AppData\Local\Programs
====== C:\Users\Jeroen ======
2014-08-29 19:40:33	8045ABB21A3BDD66A48E1ED5C0F0EF6A	1222144	----a-w-	C:\Users\Jeroen\Downloads\RSITx64.exe
2014-08-06 22:01:35	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital

====== C: exe-files ==
2014-08-29 19:55:22	0FFA34CAF89832636992D718E220324B	544	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-1135842697-740597286-3515451176-1001\$IIN0FOL.exe
2014-08-29 19:54:55	2851BFF31D3D0E8FD624ABDD9A34439D	544	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-1135842697-740597286-3515451176-1001\$ILB7PB4.exe
2014-08-29 19:47:00	DF6D99835DF28BB67876F46B16632782	584000	----a-w-	C:\Program Files (x86)\PokerStars\gameutil1.exe
2014-08-29 19:47:00	35683682ABEEF9808ABCAA046EA6A2DB	816472	----a-w-	C:\Program Files (x86)\PokerStars\backup\PokerStarsCommunicate.exe
2014-08-29 19:47:00	3266C86D19FAEC7F2373412E8A3F7746	656728	----a-w-	C:\Program Files (x86)\PokerStars\backup\PokerStarsOnlineUpdate.exe
2014-08-29 19:47:00	294D73284C4207E339C6AB6A6BF64EB4	489792	----a-w-	C:\Program Files (x86)\PokerStars\gameutil2.exe
2014-08-29 19:47:00	175CD4AB2C91FE3BAE9FA8550A517144	12043584	----a-w-	C:\Program Files (x86)\PokerStars\backup\PokerStars.exe
2014-08-29 19:41:12	9A2347903D6EDB84C10F288BC0578C1C	388608	----a-w-	C:\Program Files\trend micro\Jeroen.exe
2014-08-28 18:39:20	D848F66D99F9008CE10D3FBC0E325F8E	6480192	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-1135842697-740597286-3515451176-1001\$RLB7PB4.exe
2014-08-28 18:39:20	D250C764D2E04DB409B707734D3F215E	3853840	----a-w-	C:\$RECYCLE.BIN\S-1-5-21-1135842697-740597286-3515451176-1001\$RIN0FOL.exe
=== C: other files ==
2014-08-28 22:26:50	2D2F0E31EF07233FB7F36BDE3D849DF9	27084936	----a-w-	C:\Users\Jeroen\Downloads\ImRA_2014_12_Duitsland.zip
2014-08-27 20:36:14	A347EF56B7CD8360B3EF7772FEA597B9	3163648	----a-w-	C:\Windows\System32\win32k.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Windows\CurrentVersion\Run]
@="C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe"
"iLivid"="C:\Users\Jeroen\AppData\Local\iLivid\iLivid.exe -autorun"
"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun"
"uTorrent"="C:\Users\Jeroen\AppData\Roaming\uTorrent\uTorrent.exe  /MINIMIZED"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"Microsoft Default Manager"="C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe -resume"
"Easybits Recovery"="C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe"
"AVG_UI"="C:\Program Files (x86)\AVG\AVG2013\avgui.exe /TRAYONLY"
"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"BCSSync"="C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe /DelayServices"
"QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime"
"APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
"WD Quick View"="C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
@="C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe"
"iLivid"="C:\Users\Jeroen\AppData\Local\iLivid\iLivid.exe -autorun"
"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun"
"uTorrent"="C:\Users\Jeroen\AppData\Roaming\uTorrent\uTorrent.exe  /MINIMIZED"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="   "

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s"
"HPWirelessAssistant"="C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden"
"IgfxTray"="C:\Windows\system32\igfxtray.exe"
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"
"Persistence"="C:\Windows\system32\igfxpers.exe"
"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"="C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe Update"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="   "

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Adobe ARM"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\APSDaemon]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="APSDaemon"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BCSSync]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="BCSSync"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Microsoft Office\\Office14\\BCSSync.exe\" /DelayServices"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BlueStacks Agent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="BlueStacks Agent"
"hkey"="HKCU"
"command"="C:\\Program Files (x86)\\BlueStacks\\HD-Agent.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HP Quick Launch]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="HP Quick Launch"
"hkey"="HKLM"
"command"="C:\\Program Files (x86)\\Hewlett-Packard\\HP Quick Launch\\HPMSGSVC.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HPAdvisorDock]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="HPAdvisorDock"
"hkey"="HKCU"
"command"="C:\\Program Files (x86)\\Hewlett-Packard\\HP Advisor\\Dock\\HPAdvisorDock.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\iTunesHelper]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="iTunesHelper"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\iTunes\\iTunesHelper.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="QuickTime Task"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\QuickTime\\QTTask.exe\" -atboottime"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\swg]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="swg"
"hkey"="HKCU"
"command"="\"C:\\Program Files (x86)\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TomTomHOME.exe]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="TomTomHOME.exe"
"hkey"="HKCU"
"command"="\"C:\\Program Files (x86)\\TomTom HOME 2\\TomTomHOMERunner.exe\""


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WDDMStatus.lnk]
"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\WDDMStatus.lnk"
"backup"="C:\\Windows\\pss\\WDDMStatus.lnk.CommonStartup"
"backupExtension"=".CommonStartup"
"command"="C:\\PROGRA~1\\WESTER~1\\WDSMAR~1\\WDDRIV~1\\WDDMST~1.EXE "
"item"="WDDMStatus"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WDSmartWare.lnk]
"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\WDSmartWare.lnk"
"backup"="C:\\Windows\\pss\\WDSmartWare.lnk.CommonStartup"
"backupExtension"=".CommonStartup"
"command"="C:\\PROGRA~2\\WESTER~1\\WDSMAR~1\\FRONTP~1\\WDSMAR~1.EXE View=show_in_tray"
"item"="WDSmartWare"


==== Startup Folders ======================

2013-07-26 19:37:38	2003	----a-w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PC Auto Backup.lnk
2014-02-01 21:46:59	1895	----a-w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PDFCreator.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:v@C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe []
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [01-04-2011 01:52]
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [01-04-2011 01:52]
C:\Windows\tasks\HPCeeScheduleForJeroen.job --a------ C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [05-01-2010 03:53]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\HP AR Program Upload - d46d405e6908480ea302d4ebe502024cf9aae98d504945d7bb06fc4c8df417cb" [C:\Program Files\HP\HP Deskjet 2540 series\bin\HPRewards.exe]
"C:\Windows\SysNative\tasks\HPCeeScheduleForJeroen" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe]
"C:\Windows\SysNative\tasks\RecoveryCDWin7" ["C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe"]
"C:\Windows\SysNative\tasks\Registration" ["C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe"]
"C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe]
"C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Assistant\HPSA Upgrade" [C:\ProgramData\Hewlett-Packard\HPSAUpgrade3\HpSAUpgrade.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\Update Check" [C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_CN3AT2DJCY" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe]
"C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"avg@toolbar"="C:\ProgramData\AVG Secure Search\FireFoxExt\18.1.9.799" []

==== Firefox Extensions ======================

ProfilePath: C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default
- Undetermined - C:\ProgramData\AVG Secure Search\FireFoxExt\18.1.7.644

ProfilePath: C:\Users\Jeroen\AppData\Roaming\TomTom\HOME\Profiles\w3yqzvj2.default
- Map status indicator - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com
- TomTom HOME default theme - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com
- Emulator - %ProfilePath%\extensions\Navcore.9.151.605385@tomtom.com

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Jeroen\AppData\Roaming\Mozilla\Firefox\Profiles\jw4d2tw0.default
6CD3A99DCEDE9C2D7D3BFBF6D4902F5F	- C:\Windows\SysWOW64\npdeployJava1.dll -	Java Deployment Toolkit 6.0.350.10
31DA97B4682187C6639BBE2215814FDA	- C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll -	Shockwave for Director / Shockwave for Director
4390CCD3790F8D9C427C0C29590C62D7	- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll -	Shockwave Flash
15E298B5EC5B89C5994A59863969D9FF	- C:\Windows\SysWOW64\npmproxy.dll -	Microsoft® Windows® Operating System


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
cjofdnhdkbflacojpfpkchgafjahijbb - C:\Users\Jeroen\AppData\Local\CRE\cjofdnhdkbflacojpfpkchgafjahijbb.crx[]
jcdgjdiieiljkfkdcloehkohchhpekkn - C:\Users\Jeroen\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx[]
ndibdjnfmopecpmkdieinmbadjfpblof - C:\ProgramData\AVG Secure Search\ChromeExt\18.1.0.443\avg.crx[]
pflphaooapbgpeakohlggbpidpppgdff - C:\Users\Jeroen\AppData\Local\mysearchdial-speeddial.crx[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
cjofdnhdkbflacojpfpkchgafjahijbb - C:\Users\Jeroen\AppData\Local\CRE\cjofdnhdkbflacojpfpkchgafjahijbb.crx[]
pflphaooapbgpeakohlggbpidpppgdff - C:\Users\Jeroen\AppData\Local\mysearchdial-speeddial.crx[]

SweetIM for Facebook - Jeroen\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
AVG Security Toolbar - Jeroen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Google Wallet - Jeroen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

==== Chromium Startpages ======================

C:\Users\Jeroen\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "http://www.search.ask.com/?o=APN10645A&gct=hp&d=406-418&v=a10781-135&t=4",
"startup_urls": [ "http://start.mysearchdial.com/?f=1&a=dsites0103&cd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzyyB0A0FtBtBzz0B0BtAtDtN0D0Tzu0CyByCtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=963432192&ir=", "http://www.telegraaf.nl/" ],


==== Chrome Fix ======================

C:\Users\Jeroen\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn deleted successfully
C:\Users\Jeroen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof deleted successfully
C:\Users\Jeroen\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ndibdjnfmopecpmkdieinmbadjfpblof_0.localstorage deleted successfully
C:\Users\Jeroen\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ndibdjnfmopecpmkdieinmbadjfpblof_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://start.mysearchdial.com/?f=1&a=dsites0103&cd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzyyB0A0FtBtBzz0B0BtAtDtN0D0Tzu0CyByCtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=963432192&ir="
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://start.mysearchdial.com/?f=1&a=dsites0103&cd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzyyB0A0FtBtBzz0B0BtAtDtN0D0Tzu0CyByCtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=963432192&ir="
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://start.mysearchdial.com/?f=1&a=dsites0103&cd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzyyB0A0FtBtBzz0B0BtAtDtN0D0Tzu0CyByCtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=963432192&ir="
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google  Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{603D5CD3-A8B6-43E6-8849-AD4AF24834E9} Unknown  Url="Not_Found"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Unknown  Url="Not_Found"
{77AA745B-F4F8-45DA-9B14-61D2D95054C8} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Internet Explorer\SearchScopes\{603D5CD3-A8B6-43E6-8849-AD4AF24834E9} deleted successfully
HKEY_USERS\S-1-5-21-1135842697-740597286-3515451176-1001\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\avg@toolbar deleted successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\cjofdnhdkbflacojpfpkchgafjahijbb deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff deleted successfully
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\cjofdnhdkbflacojpfpkchgafjahijbb deleted successfully
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iLivid deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlueStacks Agent deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg deleted successfully

==== HijackThis Entries ======================

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [WD Quick View] C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
O4 - HKCU\..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [iLivid] "C:\Users\Jeroen\AppData\Local\iLivid\iLivid.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Jeroen\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
O4 - Global Startup: PC Auto Backup.lnk = C:\Program Files (x86)\Samsung\PC Auto Backup\AutoBackup.exe
O4 - Global Startup: PDFCreator.lnk = C:\Program Files (x86)\PDFCreator\PDFCreator.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/4.0.1.0/GarminAxControl_32.CAB
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - (no file)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs:    
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: RtVOsdService Installer (RtVOsdService) - Realtek Semiconductor Corp. - C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WD Backup (WDBackup) - Western Digital Technologies, Inc. - C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
O23 - Service: WD Drive Manager (WDDriveService) - Western Digital Technologies, Inc. - C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
O23 - Service: SAMSUNG WiselinkPro Service (WiselinkPro) - Samsung - C:\Program Files (x86)\Samsung\PC Auto Backup\WiselinkPro.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jeroen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jeroen\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jeroen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ESEPED1 will be deleted at reboot
C:\Users\Jeroen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C27N9US3 will be deleted at reboot
C:\Users\Jeroen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DZ7FJB74 will be deleted at reboot
C:\Users\Jeroen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GQEICDNT will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Jeroen\AppData\Local\Mozilla\Firefox\Profiles\jw4d2tw0.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Jeroen\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=3782 folders=1019 603517954 bytes)

==== Empty Temp Folders ======================

C:\Users\Admin\AppData\Local\temp emptied successfully
C:\Users\Administrator\AppData\Local\temp emptied successfully
C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Jeroen\AppData\Local\Temp will be emptied at reboot
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Jeroen\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\PROGRA~2\jZip"  not found
"C:\Users\Jeroen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ESEPED1" not found
"C:\Users\Jeroen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C27N9US3" not found
"C:\Users\Jeroen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DZ7FJB74" not found
"C:\Users\Jeroen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GQEICDNT" not found

==== EOF on za 30-08-2014 at 18:43:05,88 ======================