Zoek.exe v5.0.0.0 Updated 05-November-2014
Tool run by Andries on do 06-11-2014 at 11:30:25,50.
Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Andries\Desktop\zoek.exe [Scan all users] [Script inserted] [Checkboxes used]

==== System Restore Info ======================

6-11-2014 11:34:04 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\PROGRA~2\Example1 deleted successfully
C:\PROGRA~2\Malwarebytes' Anti-Malware deleted successfully
C:\Program Files\Cogmed deleted successfully
C:\PROGRA~3\HPSSUPPLY deleted successfully
C:\PROGRA~3\Oracle deleted successfully
C:\PROGRA~3\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} deleted successfully
C:\Users\Andries\AppData\Roaming\HpUpdate deleted successfully
C:\Users\Andries\AppData\Roaming\Malwarebytes deleted successfully
C:\Users\Andries\AppData\Roaming\PhotoScape deleted successfully
C:\Users\Andries\AppData\Roaming\UltraVNC deleted successfully
C:\Users\Andries\AppData\Local\genienext deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2901396684-229164005-3513228589-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{326E768D-4182-46FD-9C16-1449A49795F4} deleted successfully
HKEY_USERS\S-1-5-21-2901396684-229164005-3513228589-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{326E768D-4182-46FD-9C16-1449A49795F4} deleted successfully
HKEY_USERS\S-1-5-21-2901396684-229164005-3513228589-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411901140} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2901396684-229164005-3513228589-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\ff-bmboc@bytemobile.com deleted successfully

==== Installed Programs ======================

æTorrent  
Aangifte inkomstenbelasting 2008  
Aangifte inkomstenbelasting 2009  
Aangifte inkomstenbelasting 2010  
Aangifte inkomstenbelasting 2011  
Acrobat.com  
Adblock Plus voor IE (32-bit en 64-bit)  
Adobe AIR  
Adobe Digital Editions 2.0  
Adobe Flash Player 15 ActiveX  
Adobe Flash Player 15 Plugin  
Adobe Reader XI (11.0.09) - Nederlands  
Adobe Shockwave Player 11.5  
Adobe SVG Viewer 3.0  
Alcor Micro USB Card Reader  
Apple Application Support  
Apple Mobile Device Support  
Apple Software Update  
ArcSoft MediaConverter 2.5  
ArcSoft ShowBiz DVD 2  
ArcSoft TotalMedia Extreme  
ASUS AI Recovery  
ASUS AP Bank  
ASUS FancyStart  
ASUS LifeFrame3  
ASUS Live Update  
ASUS MultiFrame  
ASUS Power4Gear Hybrid  
ASUS SmartLogon  
ASUS Splendid Video Enhancement Technology  
ASUS USB2.0 UVC VGA WebCam  
ASUS Virtual Camera  
ASUS WebStorage  
ATI Catalyst Install Manager  
ATK Package  
Aurora MPEG To DVD Burner 5.2.47  
Baruch 7.10.2084  
BitLord 2.3  
Boingo Wi-Fi  
BufferChm  
Canon MP270 series MP Drivers  
Canon My Printer  
Catalyst Control Center - Branding  
Catalyst Control Center Core Implementation  
Catalyst Control Center Graphics Full Existing  
Catalyst Control Center Graphics Full New  
Catalyst Control Center Graphics Light  
Catalyst Control Center Graphics Previews Common  
Catalyst Control Center Graphics Previews Vista  
Catalyst Control Center InstallProxy  
Catalyst Control Center Localization All  
ccc-core-static  
ccc-utility64  
CCC Help Chinese Standard  
CCC Help Chinese Traditional  
CCC Help Czech  
CCC Help Danish  
CCC Help Dutch  
CCC Help English  
CCC Help Finnish  
CCC Help French  
CCC Help German  
CCC Help Greek  
CCC Help Hungarian  
CCC Help Italian  
CCC Help Japanese  
CCC Help Korean  
CCC Help Norwegian  
CCC Help Polish  
CCC Help Portuguese  
CCC Help Russian  
CCC Help Spanish  
CCC Help Swedish  
CCC Help Thai  
CCC Help Turkish  
CCleaner  
ClipConverter  
ControlDeck  
CustomerResearchQFolder  
D3DX10  
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition  
DeviceDiscovery  
DeviceManagementQFolder  
DivX Setup  
dj_sf_software  
dj_sf_software_req  
Dropbox  
DVDBuilder 2.8  
EasyWorship 2009  
eSupportQFolder  
ETDWare PS/2-x64 7.0.5.9_WHQL  
Fast Boot  
FileZilla Client 3.9.0.6  
Free Photo Frame 1.0  
Free YouTube to MP3 Converter version 3.10.11.923  
Game Park Console  
Google Chrome  
Google Toolbar for Internet Explorer  
Google Update Helper  
HP Customer Participation Program 9.0  
HP Deskjet Printer Driver Software 9.0  
HP Imaging Device Functions 9.0  
HP Officejet 6700 Basissoftware van het apparaat  
HP Photo Creations  
HP Photosmart 7520 series Basissoftware van het apparaat  
HP Photosmart Essential 2.01  
HP Photosmart Essential2.01  
HP Solution Center 9.0  
HP Update  
HPProductAssistant  
HPSSupply  
I.R.I.S. OCR  
IDT Audio  
Intel(R) Management Engine Components  
IObit Malware Fighter  
Java 7 Update 60 (64-bit)  
Java 7 Update 65  
Java Auto Updater  
Java(TM) 6 Update 22  
Junk Mail filter update  
K_Series_ScreenSaver_EN  
KERKLIED  
MailStore Home 4.2.1.6501  
Malwarebytes Anti-Malware versie 2.0.3.1025  
MarketResearch  
MathPlayer  
Mesh Runtime  
Messenger Companion  
Microsoft .NET Framework 4.5.1  
Microsoft Antimalware Service NL-NL Language Pack  
Microsoft Application Error Reporting  
Microsoft Office Access MUI (Dutch) 2010  
Microsoft Office Excel MUI (Dutch) 2010  
Microsoft Office Home and Student 2010  
Microsoft Office Office 64-bit Components 2010  
Microsoft Office OneNote MUI (Dutch) 2010  
Microsoft Office Outlook MUI (Dutch) 2010  
Microsoft Office PowerPoint MUI (Dutch) 2010  
Microsoft Office Proof (Dutch) 2010  
Microsoft Office Proof (English) 2010  
Microsoft Office Proof (French) 2010  
Microsoft Office Proof (German) 2010  
Microsoft Office Proofing (Dutch) 2010  
Microsoft Office Publisher MUI (Dutch) 2010  
Microsoft Office Shared 64-bit MUI (Dutch) 2010  
Microsoft Office Shared MUI (Dutch) 2010  
Microsoft Office Single Image 2010  
Microsoft Office Word MUI (Dutch) 2010  
Microsoft Security Client  
Microsoft Security Client NL-NL Language Pack  
Microsoft Security Essentials  
Microsoft Silverlight  
Microsoft SQL Server 2005 Compact Edition [ENU]  
Microsoft SQL Server Compact 3.5 SP2 ENU  
Microsoft SQL Server Compact 3.5 SP2 x64 ENU  
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053  
Microsoft Visual C++ 2005 Redistributable  
Microsoft Visual C++ 2005 Redistributable (x64)  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148  
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161  
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319  
Mozilla Firefox 33.0.2 (x86 nl)  
Mozilla Maintenance Service  
MSVCRT  
MSVCRT_amd64  
MSXML 4.0 SP3 Parser (KB2721691)  
MSXML 4.0 SP3 Parser (KB2758694)  
MSXML 4.0 SP3 Parser (KB973685)  
MyDriveConnect 3.3.0.1812  
Notepad++  
PanoStandAlone  
PhotoFiltre 7  
PHOTOfunSTUDIO 8.1 PE  
PhotoScape  
Poedit  
PSSWCORE  
QuickTime 7  
SeaMonkey 2.21 (x86 nl)  
Security Update for Microsoft .NET Framework 4.5.1 (KB2894854v2)  
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)  
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)  
Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)  
Security Update for Microsoft .NET Framework 4.5.1 (KB2972107)  
Security Update for Microsoft .NET Framework 4.5.1 (KB2972216)  
Security Update for Microsoft .NET Framework 4.5.1 (KB2979578v2)  
Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2760781) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2810073) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2880971) 32-Bit Edition  
Security Update for Microsoft Office 2010 (KB2881071) 32-Bit Edition  
Security Update for Microsoft Word 2010 (KB2883013) 32-Bit Edition  
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition  
Simple DVD Creator 1.5a  
SkypeT 6.11  
Smart Defrag 2  
SolutionCenter  
Spotify  
Status  
syncables desktop SE  
TeamViewer 9  
Toolbox  
TrayApp  
Ultra DVD Creator 2.9.0412  
UnloadSupport  
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition  
Update for Microsoft Excel 2010 (KB2889836) 32-Bit Edition  
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition  
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2494150)  
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition  
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition  
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition  
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition  
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition  
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition  
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition  
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition  
USB Audio/Video Driver  
uTorrentBar_NL Toolbar  
VC80CRTRedist - 8.0.50727.6195  
VideoToolkit01  
Visual Studio C++ 10.0 Runtime  
WebReg  
Windows Live Communications Platform  
Windows Live Essentials  
Windows Live Family Safety  
Windows Live ID Sign-in Assistant  
Windows Live Installer  
Windows Live Language Selector  
Windows Live Mail  
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen  
Windows Live Mesh  
Windows Live Messenger  
Windows Live Messenger Companion Core  
Windows Live MIME IFilter  
Windows Live Movie Maker  
Windows Live Photo Common  
Windows Live Photo Gallery  
Windows Live PIMT Platform  
Windows Live Remote Client  
Windows Live Remote Client Resources  
Windows Live Remote Service  
Windows Live Remote Service Resources  
Windows Live SOXE  
Windows Live SOXE Definitions  
Windows Live Sync  
Windows Live UX Platform  
Windows Live UX Platform Language Pack  
Windows Live Writer  
Windows Live Writer Resources  
Windows Media Player Firefox Plugin  
WinFlash  
Wireless Console 3  
Xilisoft MPEG to DVD Converter  

==== Running Processes ======================

C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Windows\SysWOW64\svchost.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Users\Andries\Desktop\zoek.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe

==== Deleting Services ======================


==== FireFox Fix ======================

ProfilePath: C:\Users\Andries\AppData\Roaming\Mozilla\Firefox\Profiles\bqeyfhda.default

---- Lines CT2865317 removed from prefs.js ----
user_pref("CT2865317..clientLogIsEnabled", false);
user_pref("CT2865317..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2865317..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2865317.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
user_pref("CT2865317.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");
user_pref("CT2865317.AppTrackingLastCheckTime", "Wed Feb 29 2012 18:52:54 GMT+0100");
user_pref("CT2865317.BrowserCompStateIsOpen_130055909048847312", true);
user_pref("CT2865317.CTID", "CT2865317");
user_pref("CT2865317.CurrentServerDate", "20-7-2013");
user_pref("CT2865317.DSInstall", false);
user_pref("CT2865317.DialogsAlignMode", "LTR");
user_pref("CT2865317.DialogsGetterLastCheckTime", "Wed Jul 17 2013 18:44:16 GMT+0200");
user_pref("CT2865317.DownloadReferralCookieData", "");
user_pref("CT2865317.EMailNotifierPollDate", "Sat May 04 2013 19:08:40 GMT+0200");
user_pref("CT2865317.FeedLastCount5397019970362056034", 501);
user_pref("CT2865317.FeedPollDate2429156812186649977", "Sat May 04 2013 19:08:41 GMT+0200");
user_pref("CT2865317.FeedPollDate2429156813040823546", "Sat May 04 2013 19:08:41 GMT+0200");
user_pref("CT2865317.FeedPollDate2429156813130095866", "Sat May 04 2013 19:08:41 GMT+0200");
user_pref("CT2865317.FeedPollDate2429156813224203613", "Sat May 04 2013 19:08:41 GMT+0200");
user_pref("CT2865317.FeedPollDate2429156813230837251", "Sat May 04 2013 19:08:41 GMT+0200");
user_pref("CT2865317.FeedPollDate2429156813454291735", "Sat May 04 2013 19:08:41 GMT+0200");
user_pref("CT2865317.FeedPollDate2429156813729834876", "Sat May 04 2013 19:08:41 GMT+0200");
user_pref("CT2865317.FeedPollDate2429156813860870021", "Sat May 04 2013 19:08:42 GMT+0200");
user_pref("CT2865317.FeedPollDate2429156814264681793", "Sat May 04 2013 19:08:41 GMT+0200");
user_pref("CT2865317.FeedPollDate2429156814863075366", "Sat May 04 2013 19:08:41 GMT+0200");
user_pref("CT2865317.FeedPollDate2429156815257761081", "Sat May 04 2013 19:08:41 GMT+0200");
user_pref("CT2865317.FeedTTL2429156813040823546", 15);
user_pref("CT2865317.FeedTTL2429156813130095866", 10);
user_pref("CT2865317.FeedTTL2429156813454291735", 5);
user_pref("CT2865317.FeedTTL2429156813729834876", 5);
user_pref("CT2865317.FeedTTL2429156814264681793", 5);
user_pref("CT2865317.FirstServerDate", "19-2-2012");
user_pref("CT2865317.FirstTime", true);
user_pref("CT2865317.FirstTimeFF3", true);
user_pref("CT2865317.FixPageNotFoundErrors", true);
user_pref("CT2865317.GroupingServerCheckInterval", 1440);
user_pref("CT2865317.GroupingServiceUrl", "http://grouping.services.conduit.com/");
user_pref("CT2865317.HPInstall", false);
user_pref("CT2865317.HasUserGlobalKeys", true);
user_pref("CT2865317.HomePageProtectorEnabled", false);
user_pref("CT2865317.HomepageBeforeUnload", "http://www.google.com/");
user_pref("CT2865317.Initialize", true);
user_pref("CT2865317.InitializeCommonPrefs", true);
user_pref("CT2865317.InstallationAndCookieDataSentCount", 3);
user_pref("CT2865317.InstallationId", "ConduitXPEIntegration");
user_pref("CT2865317.InstallationType", "ConduitXPEIntegration");
user_pref("CT2865317.InstalledDate", "Sun Feb 19 2012 12:22:00 GMT+0100");
user_pref("CT2865317.IsAlertDBUpdated", true);
user_pref("CT2865317.IsGrouping", false);
user_pref("CT2865317.IsInitSetupIni", true);
user_pref("CT2865317.IsMulticommunity", false);
user_pref("CT2865317.IsOpenThankYouPage", true);
user_pref("CT2865317.IsOpenUninstallPage", false);
user_pref("CT2865317.LanguagePackLastCheckTime", "Sat Jul 20 2013 19:48:09 GMT+0200");
user_pref("CT2865317.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2865317.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
user_pref("CT2865317.LastLogin_3.10.0.1", "Sun Mar 25 2012 09:21:10 GMT+0200");
user_pref("CT2865317.LastLogin_3.12.0.7", "Fri Apr 27 2012 15:47:41 GMT+0200");
user_pref("CT2865317.LastLogin_3.12.2.3", "Wed May 30 2012 16:31:48 GMT+0200");
user_pref("CT2865317.LastLogin_3.13.0.6", "Tue Jul 17 2012 22:24:33 GMT+0200");
user_pref("CT2865317.LastLogin_3.14.1.0", "Tue Aug 28 2012 09:21:55 GMT+0200");
user_pref("CT2865317.LastLogin_3.15.1.0", "Fri Nov 09 2012 22:15:45 GMT+0100");
user_pref("CT2865317.LastLogin_3.16.0.3", "Fri Mar 01 2013 22:05:44 GMT+0100");
user_pref("CT2865317.LastLogin_3.18.0.7", "Wed Jul 17 2013 10:15:24 GMT+0200");
user_pref("CT2865317.LastLogin_3.19.0.3", "Sat Jul 20 2013 19:48:09 GMT+0200");
user_pref("CT2865317.LastLogin_3.9.0.3", "Sat Mar 10 2012 22:13:25 GMT+0100");
user_pref("CT2865317.LatestVersion", "3.19.0.3");
user_pref("CT2865317.Locale", "nl");
user_pref("CT2865317.MCDetectTooltipHeight", "83");
user_pref("CT2865317.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2865317.MCDetectTooltipWidth", "295");
user_pref("CT2865317.MyStuffEnabledAtInstallation", true);
user_pref("CT2865317.OriginalFirstVersion", "3.9.0.3");
user_pref("CT2865317.SearchCaption", "uTorrentBar_NL Customized Web Search");
user_pref("CT2865317.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
user_pref("CT2865317.SearchFromAddressBarIsInit", true);
user_pref("CT2865317.SearchInNewTabEnabled", true);
user_pref("CT2865317.SearchInNewTabIntervalMM", 1440);
user_pref("CT2865317.SearchInNewTabLastCheckTime", "Sat Jul 20 2013 19:48:09 GMT+0200");
user_pref("CT2865317.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
user_pref("CT2865317.SearchInNewTabUserEnabled", false);
user_pref("CT2865317.SearchProtectorEnabled", false);
user_pref("CT2865317.SearchProtectorToolbarDisabled", false);
user_pref("CT2865317.SendProtectorDataViaLogin", true);
user_pref("CT2865317.ServiceMapLastCheckTime", "Sat Jul 20 2013 19:48:09 GMT+0200");
user_pref("CT2865317.SettingsLastCheckTime", "Sat Jul 20 2013 19:48:09 GMT+0200");
user_pref("CT2865317.SettingsLastUpdate", "1374318685");
user_pref("CT2865317.TBHomePageUrl", "http://search.conduit.com/?ctid=CT2865317&SearchSource=13");
user_pref("CT2865317.ThirdPartyComponentsInterval", 504);
user_pref("CT2865317.ThirdPartyComponentsLastCheck", "Sun Apr 28 2013 21:11:33 GMT+0200");
user_pref("CT2865317.ThirdPartyComponentsLastUpdate", "1256026239");
user_pref("CT2865317.ToolbarShrinkedFromSetup", false);
user_pref("CT2865317.TrusteLinkUrl", "http://trust.conduit.com/CT2865317");
user_pref("CT2865317.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityTool
user_pref("CT2865317.UserID", "UN50376948959675820");
user_pref("CT2865317.ValidationData_Search", 1);
user_pref("CT2865317.ValidationData_Toolbar", 2);
user_pref("CT2865317.WeatherNetwork", "");
user_pref("CT2865317.WeatherPollDate", "Sat May 04 2013 19:08:42 GMT+0200");
user_pref("CT2865317.WeatherUnit", "C");
user_pref("CT2865317.alertChannelId", "1257316");
user_pref("CT2865317.autoDisableScopes", -1);
user_pref("CT2865317.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B474953462D584D503D263F2D2E3135443B464E4F5B565E695B426
user_pref("CT2865317.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426
user_pref("CT2865317.backendstorage./9b+7e-x305", "247E29327641363937333545397E3F493B2F77317E202520362D3842474A58515A5C585D505F593964595C49324B393A3F3
user_pref("CT2865317.backendstorage./9b+7e.:2z527", "2423");
user_pref("CT2865317.backendstorage./9b+7e06cg5el8:", "6E6D6B6B6D6F6E707576");
user_pref("CT2865317.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74737171737574767B7C242F4B49474F42357D5D5C3D");
user_pref("CT2865317.backendstorage./9b+7e31;cj7@3=i\"mbe", "247E61393F236B25707876792A212C6E414F444D327A34434C3F49552E594E513E35402360555058535650493
user_pref("CT2865317.backendstorage./9b+7e31;cj7fk;kg#ncep@mc+vkn", "247E61393F236B25737471712A212C6E414F444D327A344352574757532F5A4F515C4C594F3762575
user_pref("CT2865317.backendstorage./9b+7e31;cjc<=fbj#cf", "247E61393F236B25757674722A212C6E414F444D327A344F4849524E562F4F523E3540235F55626764595C5A5F
user_pref("CT2865317.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426
user_pref("CT2865317.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
user_pref("CT2865317.backendstorage./9b-0?3g>d", "393F6F72404174437A724677792074797E4D257E2222212A26575423252D59585D5A2A61");
user_pref("CT2865317.backendstorage./9b-0?3g@6:5;", "");
user_pref("CT2865317.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");
user_pref("CT2865317.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A232E333E58604F6456604F6852645858635E6
user_pref("CT2865317.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");
user_pref("CT2865317.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484776213F3E484F4E4D4648502B564B4E2E5959595F4C564F3764535750");
user_pref("CT2865317.backendstorage./9b5ba==9cjag", "393B683C6E6C75447A6F76464A7C7C75494F4F4E23");
user_pref("CT2865317.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6B6B6D6F6E707476787872");
user_pref("CT2865317.backendstorage./9b9643g3/9e", "6A");
user_pref("CT2865317.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");
user_pref("CT2865317.backendstorage./9b<:222h64<", "393F352F3E");
user_pref("CT2865317.backendstorage./9b<:222h64<l8daj", "6D70706F7674717975702A7972727C7B75207D");
user_pref("CT2865317.backendstorage./9b=+03eh8h8j?:", "4443");
user_pref("CT2865317.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
user_pref("CT2865317.backendstorage./9b?b0d:8aj62<h", "6D");
user_pref("CT2865317.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
user_pref("CT2865317.backendstorage.cb_experience_000", "37");
user_pref("CT2865317.backendstorage.cb_firstuse0100", "31");
user_pref("CT2865317.backendstorage.cb_user_id_000", "43423834303630333633313739325F46697265666F78");
user_pref("CT2865317.backendstorage.cbcountry_001", "4852");
user_pref("CT2865317.backendstorage.cbfirsttime", "53756E2046656220313920323031322031323A32323A323220474D542B30313030");
user_pref("CT2865317.backendstorage.cbopenmamsettings", "30");
user_pref("CT2865317.backendstorage.mam_gk_appsdata", "7B2261707073223A5B7B226964223A225072696365476F6E67222C2275726C223A22687474703A2F2F7072696365676
user_pref("CT2865317.backendstorage.mam_gk_appsdefaultenabled", "6E756C6C");
user_pref("CT2865317.backendstorage.mam_gk_appstate_couponbuddy", "6F6E");
user_pref("CT2865317.backendstorage.mam_gk_appstate_pricegong", "6F6E");
user_pref("CT2865317.backendstorage.mam_gk_appstate_windowshopper", "6F6E");
user_pref("CT2865317.backendstorage.mam_gk_appstatereporttime", "31333730323434373235313631");
user_pref("CT2865317.backendstorage.mam_gk_configuration", "7B22636F6E66696775726174696F6E223A5B7B226964223A225072696365476F6E67222C226372697465726961
user_pref("CT2865317.backendstorage.mam_gk_currentversion", "312E362E302E31");
user_pref("CT2865317.backendstorage.mam_gk_first_time", "31");
user_pref("CT2865317.backendstorage.mam_gk_lastlogintime", "31333730323434373231333739");
user_pref("CT2865317.backendstorage.mam_gk_localization", "7B22676164676574436F6E74656E74506F6C696379223A7B2254657874223A2242656C656964206265747265666
user_pref("CT2865317.backendstorage.mam_gk_settings1.4.4.6", "7B22537461747573223A22737563636565646564222C2244617461223A7B22696E74657276616C223A323430
user_pref("CT2865317.backendstorage.mam_gk_settings1.6.0.1", "7B22537461747573223A22737563636565646564222C2244617461223A7B22696E74657276616C223A323430
user_pref("CT2865317.backendstorage.mam_gk_showclosebutton", "74727565");
user_pref("CT2865317.backendstorage.mam_gk_showwelcomegadget", "66616C7365");
user_pref("CT2865317.backendstorage.mam_gk_userid", "36643964383537612D663136352D343261372D616336642D623938346337393738636665");
user_pref("CT2865317.backendstorage.pg_enable", "74727565");
user_pref("CT2865317.backendstorage.sf_just_installed", "46414C5345");
user_pref("CT2865317.backendstorage.sf_status", "454E41424C4544");
user_pref("CT2865317.backendstorage.sf_user_id", "6369645F3238343230313332313133313135393233303736");
user_pref("CT2865317.backendstorage.url_history0001", "687474703A2F2F7777772E66727565736B6F762E646B2F507574253230616E6425323074616B652532306669736B657
user_pref("CT2865317.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.
user_pref("CT2865317.globalFirstTimeInfoLastCheckTime", "Sun Apr 28 2013 21:11:34 GMT+0200");
user_pref("CT2865317.homepageProtectorEnableByLogin", true);
user_pref("CT2865317.initDone", true);
user_pref("CT2865317.isAppTrackingManagerOn", true);
user_pref("CT2865317.myStuffEnabled", true);
user_pref("CT2865317.myStuffPublihserMinWidth", 400);
user_pref("CT2865317.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
user_pref("CT2865317.myStuffServiceIntervalMM", 1440);
user_pref("CT2865317.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUF
user_pref("CT2865317.oldAppsList", "129363015615025603,129363015615338104,1000234,129363015615494356,1000034,129416029873125873,129363015616119359,539
user_pref("CT2865317.revertSettingsEnabled", true);
user_pref("CT2865317.searchProtectorDialogDelayInSec", 10);
user_pref("CT2865317.searchProtectorEnableByLogin", true);
user_pref("CT2865317.testingCtid", "");
user_pref("CT2865317.toolbarAppMetaDataLastCheckTime", "Sat Jul 20 2013 19:48:09 GMT+0200");
user_pref("CT2865317.toolbarContextMenuLastCheckTime", "Sun Apr 28 2013 21:11:34 GMT+0200");
user_pref("CT2865317.usagesFlag", 2);
user_pref("CommunityToolbar.ETag.http://Settings.toolbar.search.conduit.com/root/CT2865317/CT2865317", "\"4ac5570afc548705099656eac94998033\"");
user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT2865317", "\"1361117305\"");
user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT2865317", "\"dbe4460d95840339477519b3f77dc11a\"");
user_pref("CommunityToolbar.ToolbarsList", "CT2865317");
user_pref("CommunityToolbar.ToolbarsList2", "CT2865317");
user_pref("CommunityToolbar.ToolbarsList4", "CT2865317");
user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2865317");
---- Lines conduit removed from prefs.js ----
user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/1257316/1252989/DK", "\"0\"");
user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/1257316/1252989/NL", "\"0\"");
user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=EB_LOCALE", "wVmmvqqOMqrv5xct1cJIHg==");
user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=nl", "RI0i/dIgP9+fnhQsT/1dFw==");
user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=EB_LOCALE", "0uSPYx+Kl2jpu8sJZMeHjw==");
user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=nl", "lnsNV9M54eN24FUq9fK1cA==");
user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=EB_LOCALE", "Dclc8oo4TTv7+mAkSlUSWg==");
user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=nl", "k5hdy7Ml3yj9iRcHUnxH0Q==");
user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=EB_LOCALE", "K4Vqu91uAzWURlxJRdXJOg==");
user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=nl", "KkqTxz18Neh/j4sUf0IuNw==");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"d229fa25f6c9cc1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"801a319dd78ccc1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.0.7", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18.0.7", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.19.0.3", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.0.3", "\"801a319dd78ccc1:0\"");
user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=EB_LOCALE", "\"073e33a707e0305bf15c11c5bbb33921\"");
user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=nl", "\"5e51ce1a6afb467146ca6fee6fca9746\"");
user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Andries\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\bqeyfhda.default\\conduitCommo
user_pref("CommunityToolbar.notifications.clientsServerUrl", "http://alert.client.conduit.com");
user_pref("CommunityToolbar.notifications.servicesServerUrl", "http://alert.services.conduit.com");
---- Lines iminent removed from prefs.js ----
user_pref("iminent.adapters", "{\"www.iminent.com\":{\"CountryCode\":\"DE\",\"NoAds\":false,\"Status\":1,\"AdapterKey\":\"iminent\",\"v\":true,\"p\":0
user_pref("iminent.externalScripts", "{\"value\":[{\"addonUid\":\"b7110a40-a16f-4a12-a411-bd0b6014905a\",\"name\":\"Superfish\",\"addonId\":2,\"url\":
user_pref("iminent.registerToolbarEvent102", "1406020131785");
user_pref("iminent.trackingInfo", "{\"state\":0,\"samplingRate\":0}");
---- Lines CommunityToolbar removed from prefs.js ----
user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Mar 24 2012 22:53:00 GMT+0100");
user_pref("CommunityToolbar.globalUserId", "41558ae1-29ad-4dee-ba56-e5341221aa70");
user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.18.0.7");
user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Apr 28 2013 21:11:35 GMT+0200");
user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Sat May 04 2013 10:53:54 GMT+0200");
user_pref("CommunityToolbar.notifications.locale", "en");
user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sat May 04 2013 10:53:47 GMT+0200");
user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
user_pref("CommunityToolbar.notifications.showTrayIcon", false);
user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
user_pref("CommunityToolbar.notifications.userId", "9f1af15e-8ce1-47bc-8a82-4bab5dd400d2");
user_pref("CommunityToolbar.originalHomepage", "http://www.google.com/");
user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties");
user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
---- FireFox user.js and prefs.js backups ---- 

user_06-11-2014_1145_.backup
prefs_06-11-2014_1145_.backup

ProfilePath: C:\Users\Andries\AppData\Roaming\Mozilla\SeaMonkey\Profiles\iortyw2e.default

user.js not found
---- FireFox user.js and prefs.js backups ---- 

prefs_06-11-2014_1145_.backup

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon] 
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\SEAMONKEY.EXE\shell\open\command]
@="C:\\Program Files (x86)\\SeaMonkey\\seamonkey.exe"

==== Registry Fix Code x64 ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon] 

==== Deleting Files \ Folders ======================

C:\PROGRA~3\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} not found
C:\Program Files (x86)\Mobogenie deleted
C:\Users\Andries\daemonprocess.txt deleted
C:\Users\Andries\.android deleted
C:\PROGRA~2\COMMON~1\DVDVideoSoft\TB deleted
C:\PROGRA~2\COMMON~1\DVDVideoSoft\bin deleted
C:\PROGRA~2\uTorrentBar_NL deleted
C:\PROGRA~2\Conduit deleted
C:\Users\Andries\AppData\Roaming\BitLord deleted
C:\Users\Andries\AppData\Roaming\DVDVideoSoftIEHelpers deleted
C:\PROGRA~3\Partner deleted
C:\PROGRA~3\OberonGameConsole deleted
C:\PROGRA~3\WPM deleted
C:\Users\Andries\AppData\Local\Mobogenie deleted
C:\Users\Andries\AppData\Local\cache deleted
C:\Users\Andries\AppData\Local\Conduit deleted
C:\Users\Andries\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitLord deleted
C:\Users\Andries\AppData\LocalLow\boost_interprocess deleted
C:\Users\Andries\AppData\LocalLow\Conduit deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Users\Andries\Documents\Mobogenie deleted
C:\Users\Andries\Documents\BitLord deleted
C:\Users\Andries\AppData\Roaming\Mozilla\Firefox\Profiles\bqeyfhda.default\CT2865317 deleted
C:\Users\Andries\AppData\Roaming\Mozilla\SeaMonkey\Profiles\iortyw2e.default\extensions\staged deleted
C:\Users\Andries\AppData\Roaming\Mozilla\Firefox\Profiles\bqeyfhda.default\conduitCommon deleted
"C:\Users\Andries\AppData\Local\{1847244C-67AB-41B1-8155-186F581CFC97}" deleted
"C:\PROGRA~2\BitLord 2" deleted

==== System Specs ======================

Windows: Windows 7 Home Premium Edition (64-bit) Service Pack 1 (Build 7601)
Memory (RAM): 3949 MB
CPU Info: Intel(R) Core(TM) i3 CPU       M 370  @ 2.40GHz
CPU Speed: 2448,2 MHz
Sound Card: Speakers / Headphones (IDT High | 
Display Adapters: ATI Mobility Radeon HD 5470 | ATI Mobility Radeon HD 5470 | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver
Monitors: 1x; Generic PnP Monitor | 
Screen Resolution: 1600 X 900 - 32 bit
Network: Network Present
Network Adapters: Microsoft Virtual WiFi Miniport Adapter | Atheros AR8131 PCI-E Gigabit Ethernet Controller | Atheros AR9285 Wireless Network Adapter
CD / DVD Drives: 1x (E: | ) E: TSSTcorpCDDVDW TS-L633C
Ports: COM Ports NOT Present. LPT Port NOT Present. 
Mouse: 16 Button Wheel Mouse Present
Hard Disks: C:  74,5GB | D:  204,0GB | F:  149,0GB | G:  149,0GB
Hard Disks - Free: C:  18,2GB | D:  155,3GB | F:  148,9GB | G:  149,0GB
Manufacturer *: American Megatrends Inc.
BIOS Info: AT/AT COMPATIBLE | 10/30/09 | _ASUS_ - 6222004
Time Zone: West-Europa (standaardtijd)
Motherboard *: ASUSTeK Computer Inc.         K72Jr
Country: Nederland 
Language: NLD 

==== System Specs (Software) ======================

Anti-Virus: Microsoft Security Essentials On-access scanning disabled (Outdated)
Anti-Spyware: Microsoft Security Essentials disabled (Outdated)
Anti-Spyware: Windows Defender disabled (Outdated)
Default Browser: Firefox	33.0.2
Internet Explorer Version: 11.0.9600.17358 
Mozilla Firefox version: 33.0.2 (x86 nl)
Google Chrome version: 38.0.2125.111
Adobe Reader version: 11.0.9.29
Sun Java version: 1.7.0_65 (32-bit) 
Sun Java version: 1.7.0_60 (64-bit) 
Flash Player version: 15.0.0.189
Shockwave Player version: 11.5.9r615

==== Files Recently Created / Modified ======================

====== C:\Windows ====
====== C:\Users\Andries\AppData\Local\Temp ====
2014-11-03 19:47:35	9E9F1D6BC3188053F4D3F0D183349243	933256	----a-w-	C:\Users\Andries\AppData\Local\Temp\DivXSetup.exe
2014-11-02 10:19:49	4E566FEA83FCEEAF2873702806B55006	43008	----a-w-	C:\Users\Andries\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpi14dmo.dll
====== Java Cache =====
2014-11-04 12:45:45	53D54EC1351318F7F5D5E4F07942D323	7645	----a-w-	C:\Users\Andries\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\cc2d72a-141be559
2014-11-04 12:45:44	04EC8AC0F7F963C3977A2F5335DC3029	37	----a-w-	C:\Users\Andries\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\9677f9-c7a8bcfddb52fc0cde5352209b70abb5bfb9b017d81101ca58e302aab267304a-6.0.lap
====== C:\Windows\SysWOW64 =====
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
2014-11-02 21:11:39	6B2F2DEA2FA7E9E1CE844C7171457128	423984	----a-w-	C:\Windows\Sysnative\FNTCACHE.DAT
====== C:\Windows\Sysnative\drivers =====
2014-10-15 09:07:41	946010CDFA91469351B22E2620CEBCD8	663552	----a-w-	C:\Windows\Sysnative\drivers\PEAuth.sys
2014-10-15 09:07:37	80B9412C4DE09147581FC935FB4C97AB	61440	----a-w-	C:\Windows\Sysnative\drivers\appid.sys
2014-10-15 09:06:37	FE571E088C2D83619D2D48D4E961BF41	212480	----a-w-	C:\Windows\Sysnative\drivers\rdpwd.sys
2014-10-15 09:06:36	E232A3B43A894BB327FC161529BD9ED1	39936	----a-w-	C:\Windows\Sysnative\drivers\tssecsrv.sys
====== C:\Windows\Tasks ======
====== C:\Windows\Temp ======
======= C:\Program Files =====
2014-11-06 09:02:13	--------	d-----w-	C:\Program Files\trend micro
======= C:\PROGRA~2 =====
2014-11-05 13:06:20	--------	d-----w-	C:\PROGRA~2\QuickTime
2014-10-30 18:35:41	--------	d-----w-	C:\PROGRA~2\MyDrive Connect
======= C: =====
====== C:\Users\Andries\AppData\Roaming ======
2014-11-03 19:56:50	3610EB02B186C2993B624457A153763C	3897	----a-w-	C:\Users\Andries\AppData\Locallow\lpm.dat
2014-11-03 19:47:20	8DE9F588DFB1641F2C0EA05BD4B60605	218	----a-w-	C:\Users\Andries\AppData\Local\recently-used.xbel
2014-11-02 12:49:09	38E74CDB2D9D22C353AA8F646D5870BB	112952	----a-w-	C:\Users\Andries\AppData\Local\GDIPFONTCACHEV1.DAT
====== C:\Users\Andries ======
2014-11-05 13:06:26	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-11-03 19:55:43	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-10-23 19:41:35	C01900034966F722ED450F1CC6CDD2AC	6126536	----a-w-	C:\Users\Andries\Downloads\FileZilla_3.9.0.6_win32-setup.exe

====== C: exe-files ==
2014-11-06 09:02:13	9A2347903D6EDB84C10F288BC0578C1C	388608	----a-w-	C:\Program Files\trend micro\Andries.exe
2014-11-03 19:56:21	84057E7577744437AE028CD99429B701	418784	----a-w-	C:\ProgramData\DivX\WebPlayer\Uninstaller.exe
2014-11-03 19:56:17	97F2AE7A81565DFEA98D347F4F9AAA22	420963	----a-w-	C:\ProgramData\DivX\Player\Uninstaller.exe
2014-11-03 19:56:17	083DA3B2E07ABA194D77AB050345622B	414616	----a-w-	C:\ProgramData\DivX\Update\Uninstaller.exe
2014-11-03 19:56:06	C6235F83C59D8A288014E06F05189559	65785	----a-w-	C:\ProgramData\DivX\MFComponents\Uninstaller.exe
2014-11-03 19:56:06	A2182EF28D9E60A755AC450413AAEE07	417857	----a-w-	C:\ProgramData\DivX\TransferWizard\Uninstaller.exe
2014-11-03 19:56:00	38496A39D03FD2EBC8803F8B0962E3F4	417391	----a-w-	C:\ProgramData\DivX\DivXMediaServer\Uninstaller.exe
2014-11-03 19:55:59	92D349FAFA08C4B5431AF48A8116D716	65236	----a-w-	C:\ProgramData\DivX\DSDesktopComponents\Uninstaller.exe
2014-11-03 19:55:58	EF010320B81CA631A5CFB33DCF2CF7BC	415161	----a-w-	C:\ProgramData\DivX\DSAVCDecoder\Uninstaller.exe
2014-11-03 19:55:57	1D40EEF33FF439616CA7D7CFF62208D1	415177	----a-w-	C:\ProgramData\DivX\DSAACDecoder\Uninstaller.exe
2014-11-03 19:55:56	2666695456EF62A0CBFE3E19D29C3F7F	414788	----a-w-	C:\ProgramData\DivX\DPC\Uninstaller.exe
2014-11-03 19:55:52	89F33E32F12DF7DE1EF5CB4AA24EDC39	415583	----a-w-	C:\ProgramData\DivX\Converter\Uninstaller.exe
2014-11-03 19:55:50	474BB0A39A19012B047B37690E020221	415707	----a-w-	C:\ProgramData\DivX\TranscodeEngine\Uninstaller.exe
2014-11-03 19:55:43	3BB61309B1794E197EC32AD13369F476	419803	----a-w-	C:\ProgramData\DivX\ControlPanel\Uninstaller.exe
2014-11-03 19:55:42	83C970BEDF14FA176A2B21FA7BE86C6B	62264	----a-w-	C:\ProgramData\DivX\Qt4.8\Uninstaller.exe
2014-11-03 19:55:40	23D9F9CFA12A8F28AAA2FF0FA8E88B2D	414515	----a-w-	C:\ProgramData\DivX\AVCCodec\Uninstaller.exe
2014-11-03 19:55:39	2EEF0B5226C6E101BD844894CC2F8F1C	415497	----a-w-	C:\ProgramData\DivX\OVSHelper\Uninstaller.exe
2014-11-03 19:47:41	9465C3A0C4080C37121DB7D17B958B32	995648	----a-w-	C:\Users\Andries\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1ED6MG8Z\DivXWebPlayerInstaller[1].exe
2014-11-03 19:47:35	9E9F1D6BC3188053F4D3F0D183349243	933256	----a-w-	C:\Users\Andries\AppData\Local\Temp\DivXSetup.exe
=== C: other files ==
2014-10-30 14:02:59	2273BADAC17BCBA88EE2EC0050AB3286	494392	----a-w-	C:\Users\Andries\Downloads\downloadje.zip

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"DivXMediaServer"="C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe"
"DivXUpdate"="C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe /CHECKNOW"
"QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"="C:\Program Files\Elantech\ETDCtrl.exe"
"MSC"="C:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Adobe ARM"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe Reader Speed Launcher]
"command"="\"C:\\Program Files (x86)\\Adobe\\Reader 9.0\\Reader\\Reader_sl.exe\""
"hkey"="HKLM"
"item"="Adobe Reader Speed Launcher"
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AmIcoSinglun64]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="AmIcoSinglun64"
"hkey"="HKLM"
"command"="C:\\Program Files (x86)\\AmIcoSingLun\\AmIcoSinglun64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\APSDaemon]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="APSDaemon"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ArcSoft Connection Service]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="ArcSoft Connection Service"
"hkey"="HKLM"
"command"="C:\\Program Files (x86)\\Common Files\\ArcSoft\\Connection Service\\Bin\\ACDaemon.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ATKMEDIA]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="ATKMEDIA"
"hkey"="HKLM"
"command"="C:\\Program Files (x86)\\ASUS\\ATK Package\\ATK Media\\DMedia.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ATKOSD2]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="ATKOSD2"
"hkey"="HKLM"
"command"="C:\\Program Files (x86)\\ASUS\\ATK Package\\ATKOSD2\\ATKOSD2.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CCleaner Monitoring]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="CCleaner Monitoring"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\CCleaner\\CCleaner64.exe\" /MONITOR"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DataCardMonitor]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="DataCardMonitor"
"hkey"="HKLM"
"command"="C:\\Program Files (x86)\\T-Mobile\\InternetManager_H\\DataCardMonitor.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HControlUser]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="HControlUser"
"hkey"="HKLM"
"command"="C:\\Program Files (x86)\\ASUS\\ATK Package\\ATK Hotkey\\HControlUser.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HP Photosmart 7520 series (NET)]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="HP Photosmart 7520 series (NET)"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\HP\\HP Photosmart 7520 series\\Bin\\ScanToPCActivationApp.exe\" -deviceID \"CN35T493FY05YY:NW\" -scfn \"HP Photosmart 7520 series (NET)\" -AutoStart 1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\iTunesHelper]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="iTunesHelper"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\iTunes\\iTunesHelper.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Malwarebytes Anti-Malware]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\RunOnce"
"item"="Malwarebytes Anti-Malware"
"hkey"="HKLM"
"command"="C:\\Program Files (x86)\\Malwarebytes' Anti-Malware\\mbamgui.exe /install /silent"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MyDriveConnect.exe]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="MyDriveConnect.exe"
"hkey"="HKCU"
"command"="\"C:\\Program Files (x86)\\MyDrive Connect\\MyDriveConnect.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="QuickTime Task"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\QuickTime\\QTTask.exe\" -atboottime"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Skype]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Skype"
"hkey"="HKCU"
"command"="\"C:\\Program Files (x86)\\Skype\\Phone\\Skype.exe\" /minimized /regrun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Spotify"
"hkey"="HKCU"
"command"="\"C:\\Users\\Andries\\AppData\\Roaming\\Spotify\\Spotify.exe\" /uri spotify:autostart"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify Web Helper]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Spotify Web Helper"
"hkey"="HKCU"
"command"="\"C:\\Users\\Andries\\AppData\\Roaming\\Spotify\\Data\\SpotifyWebHelper.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\StartCCC]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="StartCCC"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\ATI Technologies\\ATI.ACE\\Core-Static\\CLIStart.exe\" MSRun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="SunJavaUpdateSched"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SysTrayApp]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="SysTrayApp"
"hkey"="HKLM"
"command"="C:\\Program Files\\IDT\\WDM\\sttray64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\uTorrent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="uTorrent"
"hkey"="HKCU"
"command"="C:\\Users\\Andries\\AppData\\Roaming\\uTorrent\\uTorrent.exe /MINIMIZED"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^PHOTOfunSTUDIO 8.1 PE.lnk]
"item"="PHOTOfunSTUDIO 8.1 PE"
"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\PHOTOfunSTUDIO 8.1 PE.lnk"
"backup"="C:\\Windows\\pss\\PHOTOfunSTUDIO 8.1 PE.lnk.CommonStartup"
"backupExtension"=".CommonStartup"
"command"="C:\\PROGRA~2\\COMMON~1\\PANASO~1\\PHOTOF~1\\AUTOST~1.EXE"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Andries^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
"item"="Dropbox"
"path"="C:\\Users\\Andries\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Dropbox.lnk"
"backup"="C:\\Windows\\pss\\Dropbox.lnk.Startup"
"backupExtension"=".Startup"
"command"="C:\\Users\\Andries\\AppData\\Roaming\\Dropbox\\bin\\Dropbox.exe"


==== Startup Folders ======================

2011-09-13 06:36:03	2101	----a-w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [21-10-2014 07:18]
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [19-10-2014 18:35]
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [19-10-2014 18:35]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\Windows\SysNative\tasks\ASUS P4G" [C:\Program Files\P4G\BatteryLife.exe]
"C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\P4G Sidebar" [C:\Program Files\Windows Sidebar\sidebar.exe]
"C:\Windows\SysNative\tasks\User_Feed_Synchronization-{BC9C7E2A-6B90-4011-AF0E-6C1FA9CC3AB6}" [C:\Windows\system32\msfeedssync.exe]
"C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe]
"C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Andries\AppData\Roaming\Mozilla\Firefox\Profiles\bqeyfhda.default
- Undetermined - desktop@clipconverter.cc
- Undetermined - {0b457cAA-602d-484a-8fe7-c1d894a011ba}
- Undetermined - artur.dubovoy@gmail.com
- Flash Video Downloader - YouTube Full HD Download - %ProfilePath%\extensions\artur.dubovoy@gmail.com
- FireShot - %ProfilePath%\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
- DVDVideoSoft YouTube MP3 and Video Download - %ProfilePath%\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

ProfilePath: C:\Users\Andries\AppData\Roaming\Mozilla\SeaMonkey\Profiles\iortyw2e.default
- ChatZilla - %ProfilePath%\extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Andries\AppData\Roaming\Mozilla\Firefox\Profiles\bqeyfhda.default
63F8C13F269B10BC9363B007DAAACAE6	- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll -	Shockwave Flash
AC47B55B38D626B678897F195793ECAB	- C:\Windows\SysWoW64\Adobe\Director\np32dsw.dll -	Shockwave for Director / Shockwave for Director


==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
cjofdnhdkbflacojpfpkchgafjahijbb - C:\Users\Andries\AppData\Local\Temp\ccex.crx[]

Google Search - Andries\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Google Wallet - Andries\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - Andries\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.facebook.com/"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="https://www.facebook.com/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{67A2568C-7A0A-4EED-AECC-B5405DE63B64}"
{012E1000-F331-11DB-8314-0800200C9A66} Google  Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Unknown  Url="Not_Found"
{67A2568C-7A0A-4EED-AECC-B5405DE63B64} Google  Url="http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT_nlNL452NL404"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ASUT_nlNL452NL404"
{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Unknown  Url="Not_Found"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2901396684-229164005-3513228589-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully
HKEY_USERS\S-1-5-21-2901396684-229164005-3513228589-1001\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} deleted successfully

==== Deleting CLSID Registry Values ======================


==== shortcuts on Users Desktops ======================

C:\Users\Andries\Desktop\AsKlaver - Snelkoppeling.lnk - C:\AppieSoft\AsKlaver\AsKlaver.EXE 
C:\Users\Andries\Desktop\Calculator.lnk - C:\Windows\system32\calc.exe 
C:\Users\Andries\Desktop\Docjes (HOOFDPC) - Snelkoppeling.lnk - \\HOOFDPC\Docjes 
C:\Users\Andries\Desktop\Spotify.lnk - C:\Users\Andries\AppData\Roaming\Spotify\spotify.exe 
C:\Users\Andries\Desktop\Asus\AI Recovery Burner.lnk - C:\Windows\Installer\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}\_212D6EFADF931E4D910164.exe 
C:\Users\Andries\Desktop\Asus\ASUS ACCESS.lnk -  
C:\Users\Andries\Desktop\Asus\ASUS MultiFrame.lnk - C:\Program Files (x86)\ASUS\Asus MultiFrame\MultiFrame.exe 
C:\Users\Andries\Desktop\Asus\ControlDeck.lnk - C:\Windows\Installer\{5B65EF64-1DFA-414A-8C94-7BB726158E21}\_6C69FEE3A61070C3169D10.exe 
C:\Users\Andries\Desktop\Asus\eManual.Lnk - C:\eSupport\Manual\eManual.exe 
C:\Users\Andries\Desktop\Asus\Game Park Console.lnk - C:\Program Files (x86)\ASUS\Game Park\GameConsole\GameParkConsole.exe 
C:\Users\Andries\Desktop\Asus\LifeFrame.lnk - C:\Program Files (x86)\ASUS\ASUS LifeFrame3\LifeFrame.exe 
C:\Users\Andries\Desktop\Asus\SmartLogon Manager.lnk - C:\Program Files (x86)\ASUS\SmartLogon\logonmgr.exe 
C:\Users\Andries\Desktop\Asus\Splendid Utility.Lnk - C:\Program Files (x86)\ASUS\Splendid\Backbone.exe 
C:\Users\Andries\Desktop\Asus\syncables desktop SE.lnk - C:\Program Files (x86)\syncables\syncables desktop\syncablesHost.exe 
C:\Users\Andries\Desktop\BELASTING\Aangifte inkomstenbelasting 2008.lnk - C:\Program Files (x86)\Belastingdienst\Aangifte inkomstenbelasting\2008\ib2008.exe 
C:\Users\Andries\Desktop\BELASTING\Aangifte inkomstenbelasting 2009.lnk - C:\Program Files (x86)\Belastingdienst\Aangifte inkomstenbelasting\2009\ib2009.exe 
C:\Users\Andries\Desktop\BELASTING\Aangifte inkomstenbelasting 2010.lnk - C:\Program Files (x86)\Belastingdienst\Aangifte inkomstenbelasting\2010\ib2010.exe 
C:\Users\Andries\Desktop\BELASTING\Aangifte inkomstenbelasting 2011.lnk - C:\Program Files (x86)\Belastingdienst\Aangifte inkomstenbelasting\2011\ib2011.exe 
C:\Users\Andries\Desktop\Filebeheer\Adobe Digital Editions 2.0.lnk - C:\Program Files (x86)\Adobe\Adobe Digital Editions 2.0\DigitalEditions.exe 
C:\Users\Andries\Desktop\Filebeheer\Adobe Reader XI.lnk - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe 
C:\Users\Andries\Desktop\Filebeheer\Dropbox.lnk - C:\Users\Andries\AppData\Roaming\Dropbox\bin\Dropbox.exe /home
C:\Users\Andries\Desktop\Internet e.d\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe 
C:\Users\Andries\Desktop\Internet e.d\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
C:\Users\Andries\Desktop\Internet e.d\Windows Live Mail.lnk - C:\Program Files (x86)\Windows Live\Mail\wlmail.exe 
C:\Users\Andries\Desktop\Kerkzaken\EasyWorship 2009.lnk - C:\Program Files (x86)\Softouch\EasyWorship\EasyWorship.exe 
C:\Users\Andries\Desktop\Kerkzaken\FileZilla Client.lnk - C:\Program Files (x86)\FileZilla FTP Client\filezilla.exe 
C:\Users\Andries\Desktop\Kerkzaken\mp3DirectCut.lnk - C:\Program Files (x86)\mp3DirectCut\mp3DirectCut.exe 
C:\Users\Andries\Desktop\Multimedia\Alcohol 120%.lnk - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Alcohol.exe 
C:\Users\Andries\Desktop\Multimedia\Aurora MPEG To DVD Burner.lnk - C:\Program Files (x86)\Aurora MPEG To DVD Burner\Aurora MPEG To DVD.exe 
C:\Users\Andries\Desktop\Multimedia\BitLord.lnk - C:\Program Files (x86)\BitLord 2\Bitlord files\bitlord.exe 
C:\Users\Andries\Desktop\Multimedia\ClipConverter.lnk - C:\Users\Andries\AppData\Roaming\Lunaweb\ClipConverter\ClipConverter.exe 
C:\Users\Andries\Desktop\Multimedia\DivX Movies.lnk - C:\Users\Andries\Videos\DivX Movies 
C:\Users\Andries\Desktop\Multimedia\DivX Plus Player.lnk - C:\Program Files (x86)\DivX\DivX Plus Player\DivX Plus Player.exe 
C:\Users\Andries\Desktop\Multimedia\DVDBuilder.lnk - C:\Program Files (x86)\Keronsoft\DVDBuilder\dvdbuilder.exe 
C:\Users\Andries\Desktop\Multimedia\DVDVideoSoft Free Studio.lnk - C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe 
C:\Users\Andries\Desktop\Multimedia\Free Audio CD Burner.lnk - C:\Program Files (x86)\DVDVideoSoft\Free Audio CD Burner\FreeAudioCDBurner.exe 
C:\Users\Andries\Desktop\Multimedia\Free Photo Frame.lnk - C:\Program Files (x86)\Free Photo Frame\PhotoFrame.exe 
C:\Users\Andries\Desktop\Multimedia\Free YouTube to MP3 Converter.lnk - C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe 
C:\Users\Andries\Desktop\Multimedia\HP Photo Creations.lnk - C:\Program Files (x86)\HP Photo Creations\PhotoProduct.exe 
C:\Users\Andries\Desktop\Multimedia\Media Converter 2.5.lnk - C:\Program Files (x86)\ArcSoft\MediaConverter 2.5\MediaConverter.exe 
C:\Users\Andries\Desktop\Multimedia\PhotoFiltre 7.lnk - C:\Program Files (x86)\PhotoFiltre 7\PhotoFiltre7.exe 
C:\Users\Andries\Desktop\Multimedia\PHOTOfunSTUDIO 8.1 PE.lnk - C:\Program Files (x86)\Panasonic\PHOTOfunSTUDIO 8.1 PE\PHOTOfunSTUDIO.exe 
C:\Users\Andries\Desktop\Multimedia\PhotoScape.lnk - C:\Program Files (x86)\PhotoScape\PhotoScape.exe 
C:\Users\Andries\Desktop\Multimedia\QuickTime Player.lnk - C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe 
C:\Users\Andries\Desktop\Multimedia\SeaMonkey.lnk - C:\Program Files (x86)\SeaMonkey\seamonkey.exe 
C:\Users\Andries\Desktop\Multimedia\ShowBiz DVD 2.lnk - C:\Program Files (x86)\ArcSoft\ShowBiz DVD 2\Wizard.exe 
C:\Users\Andries\Desktop\Multimedia\Simple DVD Creator.lnk - C:\Program Files (x86)\Simple DVD Creator\dvdcreator.exe 
C:\Users\Andries\Desktop\Multimedia\Skype.lnk - C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe 
C:\Users\Andries\Desktop\Multimedia\TotalMedia Extreme.lnk - C:\Program Files (x86)\ArcSoft\TotalMedia Extreme\TMExtreme.exe 
C:\Users\Andries\Desktop\Multimedia\Ultra DVD Creator.lnk - C:\Program Files (x86)\Ultra DVD Creator\Ultra DVD Creator.exe 
C:\Users\Andries\Desktop\Multimedia\Xilisoft MPEG to DVD Converter.lnk - C:\Program Files (x86)\Xilisoft\MPEG to DVD Converter\SplashScreen.exe 
C:\Users\Andries\Desktop\Multimedia\µTorrent.lnk -  
C:\Users\Andries\Desktop\Sys-beheer\Benodigdheden kopen - HP Officejet 6700.lnk - C:\Program Files (x86)\HP\HP Officejet 6700\Bin\hpqDTSS.exe 
C:\Users\Andries\Desktop\Sys-beheer\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe 
C:\Users\Andries\Desktop\Sys-beheer\Hitman Pro 3.5.lnk - C:\Program Files (x86)\Hitman Pro 3.5\HitmanPro35_x64.exe 
C:\Users\Andries\Desktop\Sys-beheer\HP Officejet 6700.lnk - C:\Program Files (x86)\HP\HP Officejet 6700\Bin\HP Officejet 6700.exe -Start UDCDevicePage
C:\Users\Andries\Desktop\Sys-beheer\HP Photosmart Essential 2.01.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpse.exe 
C:\Users\Andries\Desktop\Sys-beheer\IObit Malware Fighter.lnk - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe 
C:\Users\Andries\Desktop\Sys-beheer\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe 
C:\Users\Andries\Desktop\Sys-beheer\Smart Defrag 2.lnk - C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe 
C:\Users\Andries\Desktop\Sys-beheer\TeamViewer 9.lnk - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe 

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\QuickTime Player.lnk - C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe 

==== shortcuts in Users Start Menu ======================

C:\Users\Andries\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox.lnk - C:\Users\Andries\AppData\Roaming\Dropbox\bin\Dropbox.exe /home
C:\Users\Andries\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Uninstall Dropbox.lnk - C:\Users\Andries\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe 

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk - C:\Windows\Installer\{AC76BA86-7AD7-1043-7B44-AB0000000001}\SC_Reader.ico 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk - C:\Program Files (x86)\Microsoft Security Client\msseces.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk - C:\Windows\system32\mstsc.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX\Check for Updates.lnk - C:\Program Files (x86)\DivX\DivX Control Panel\DivXControlPanelLauncher.exe /start=update
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX\Codec Settings.lnk - C:\Program Files (x86)\DivX\DivX Control Panel\DivXControlPanelLauncher.exe /start=decoder
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX\DivX Converter.lnk - C:\Program Files (x86)\DivX\DivX Converter\DivXConverterLauncher.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX\DivX Player.lnk - C:\Program Files (x86)\DivX\DivX Player\DivX Player.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX\Register.lnk - C:\Program Files (x86)\DivX\DivX Control Panel\DivXControlPanelLauncher.exe /start=registration
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client\FileZilla.lnk - C:\Program Files (x86)\FileZilla FTP Client\filezilla.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client\Uninstall.lnk - C:\Program Files (x86)\FileZilla FTP Client\uninstall.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Photo Frame\Free Photo Frame.lnk - C:\Program Files (x86)\Free Photo Frame\PhotoFrame.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Photo Frame\Uninstall Free Photo Frame.lnk - C:\Program Files (x86)\Free Photo Frame\unins000.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KERKLIED\KERKLIED.lnk -  
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KERKLIED\Uninstall.lnk - C:\Program Files (x86)\KERKLIED\uninstall.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Verwijder Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\unins000.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\chameleon.chm 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape\PhotoScape.lnk - C:\Program Files (x86)\PhotoScape\PhotoScape.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape\Uninstall PhotoScape.lnk - C:\Program Files (x86)\PhotoScape\uninstall.exe 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime\Over QuickTime.lnk - C:\Windows\Installer\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}\RichText.ico 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime\QuickTime deïnstalleren.lnk -  
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime\QuickTime Player.lnk - C:\Windows\Installer\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}\QTPlayer.ico 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom\MyDriveConnect.lnk - C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe ""
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom\Verwijder MyDriveConnect.lnk - C:\Program Files (x86)\MyDrive Connect\Uninstall MyDriveConnect.exe 

==== shortcuts in Quick Launch ======================

C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\EasyWorship 2009.lnk - C:\Program Files (x86)\Softouch\EasyWorship\EasyWorship.exe 
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.nationzoom.com/?type=sc&ts=1389281493&from=ild&uid=WDCXWD3200BEVT-80A0RT0_WD-WXE1A80H4497H4497
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.nationzoom.com/?type=sc&ts=1389281493&from=ild&uid=WDCXWD3200BEVT-80A0RT0_WD-WXE1A80H4497H4497
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk - C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE /recycle
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.nationzoom.com/?type=sc&ts=1389281493&from=ild&uid=WDCXWD3200BEVT-80A0RT0_WD-WXE1A80H4497H4497
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk - C:\Program Files (x86)\PhotoScape\PhotoScape.exe 
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\SeaMonkey.lnk - C:\Program Files (x86)\SeaMonkey\seamonkey.exe 
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -  
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe 
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe 
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Microsoft Word 2010.lnk - C:\Windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe 
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Uninstall Unwanted Apps.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 3\Sut_SoftUninstal.exe 
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe 
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Live Mail.lnk - C:\Program Files (x86)\Windows Live\Mail\wlmail.exe 
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

==== shortcuts After Repair ======================

C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe 
C:\Users\Andries\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe 

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\cjofdnhdkbflacojpfpkchgafjahijbb deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentBar_NL Toolbar deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DataCardMonitor deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware deleted successfully

==== HijackThis Entries ======================

F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Andries\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://intranet.christal.nl
O15 - Trusted Zone: http://symagic.christal.nl
O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/NL/Core/Player/2020PlayerAX_IKEA_Win32.cab
O16 - DPF: {1FEC8B6F-250A-4293-B12C-67A7EF0B758A} (sIKN Speler) - http://www.kerkomroep.nl/ocx/sIKNPlayer.cab
O16 - DPF: {A4150320-98EC-4DB6-9BFB-EBF4B6FBEB16} (DVM_IPCam2 Control) - http://192.168.178.14/codebase/DVM_IPCam2.ocx
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll
O18 - Filter: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O18 - Filter: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll
O18 - Filter: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\STacSV64.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Andries\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Andries\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Andries\AppData\Local\Mozilla\Firefox\Profiles\bqeyfhda.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Andries\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=2383 folders=458 155072477 bytes)

==== Empty Temp Folders ======================

C:\Users\Andries\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Andries\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on do 06-11-2014 at 12:07:08,58 ======================