Zoek.exe v5.0.0.0 Updated 06-November-2014 Tool run by Gina on vr 07-11-2014 at 15:53:46,97. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Gina\Downloads\zoek (1).exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 7-11-2014 15:55:56 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~3\takeitcheap deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9d66f25a-7abe-447b-8817-605a8db73534} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9d66f25a-7abe-447b-8817-605a8db73534} deleted successfully HKEY_CLASSES_ROOT\CLSID\{9d66f25a-7abe-447b-8817-605a8db73534} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9d66f25a-7abe-447b-8817-605a8db73534} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fa6789c5 deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\fa6789c5 deleted successfully ==== FireFox Fix ====================== ProfilePath: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\weejhwtb.default user.js not found ---- Lines nspdl removed from prefs.js ---- user_pref("extensions.nspdl.aflt", "dsites0103"); user_pref("extensions.nspdl.cd", "2XzuyEtN2Y1L1Qzuzzzz0A0EtC0D0AzzyBzztCzzzzzy0C0EtN0D0Tzu0CyByCzytN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R") user_pref("extensions.nspdl.cr", "574454400"); user_pref("extensions.nspdl.data._dy", "20140708"); user_pref("extensions.nspdl.data.activeDate", "20140713"); user_pref("extensions.nspdl.data.aliveDate", "20140713"); user_pref("extensions.nspdl.data.cc", "nl"); user_pref("extensions.nspdl.data.configDate", "20140217"); user_pref("extensions.nspdl.data.instlDate", "20140208"); user_pref("extensions.nspdl.data.ntopen", "23421263"); user_pref("extensions.nspdl.data.ra-0dd39926325c08d27482ec7852a60095", "04bab667982dc937092edd5deae5b943"); user_pref("extensions.nspdl.data.ra-462f23bb747e4f70407d053a3297bd0b", "2d1b4b8abb3b643fbc27944dd1da6c48"); user_pref("extensions.nspdl.data.ra-65b71db09f71c6c7d7b2071c59e0da25", "f209523f3874f48c6348be9d642217f7"); user_pref("extensions.nspdl.data.ra-abc402c70e46e8cc70f0532c455a3c97", "32c7cebf5126295d4f865493da60492b"); user_pref("extensions.nspdl.data.u0320", "5"); user_pref("extensions.nspdl.favorites.user-added", true); user_pref("extensions.nspdl.general.content", "favorites-beda5f3859ef3d6667c680775e43f370"); user_pref("extensions.nspdl.general.firstRun", false); user_pref("extensions.nspdl.general.guid", "23105867-3d3e-48e8-b5e7-f3e1381f825a"); user_pref("extensions.nspdl.general.version", "9.5.3"); ---- FireFox user.js and prefs.js backups ---- prefs_07-11-2014_1611_.backup ==== Deleting Files \ Folders ====================== C:\ProgramData\takeitcheap not found C:\ProgramData\quickpick deleted C:\ProgramData\343768dd54984b3c deleted C:\PROGRA~2\VideoCnv deleted C:\PROGRA~2\COMMON~1\DVDVideoSoft\bin deleted C:\Users\Gina\AppData\Roaming\WB.CFG deleted C:\PROGRA~3\Package Cache deleted C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Clip Converter deleted C:\Users\Gina\Downloads\FreeYouTubeToMP3Converter.exe deleted C:\Windows\SysNative\config\systemprofile\Searches deleted C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\weejhwtb.default\extensions\TDW@p9b.net deleted C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\weejhwtb.default\nspdl deleted "C:\Program Files (x86)\Popcorn Time\init.txt" not deleted "C:\Program Files (x86)\Popcorn Time\msvcp110.dll" deleted "C:\Program Files (x86)\Popcorn Time\msvcr110.dll" not deleted "C:\Program Files (x86)\Popcorn Time\Updater.exe" deleted "C:\Program Files (x86)\Popcorn Time" not deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Gina\AppData\Local\Temp ==== 2014-11-05 13:54:51 D5CFDE06873A24A7E04DBA14400EFC3C 246272 ----a-w- C:\Users\Gina\AppData\Local\Temp\NL\install\unrar.exe 2014-11-05 13:06:23 C823E1FC96ED615A67FA9D06EBEDFC76 35308560 ----a-w- C:\Users\Gina\AppData\Local\Temp\tmd_34017869.exe ====== Java Cache ===== 2014-10-28 16:30:56 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Users\Gina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\49a00451-24105d5f 2014-10-28 16:30:49 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Users\Gina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\49a00451-4c98a5a6 2014-10-28 16:30:55 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Users\Gina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\3cb32f52-69baabb6 2014-10-28 16:30:49 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Users\Gina\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\3cb32f52-6ca5d005 ====== C:\Windows\SysWOW64 ===== 2014-10-28 22:54:10 A042349B7208BF8BED858B1E9B48B06D 98216 ----a-w- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== ====== C:\Windows\Sysnative\drivers ===== 2014-10-15 05:30:06 946010CDFA91469351B22E2620CEBCD8 663552 ----a-w- C:\Windows\Sysnative\drivers\PEAuth.sys 2014-10-15 05:30:01 80B9412C4DE09147581FC935FB4C97AB 61440 ----a-w- C:\Windows\Sysnative\drivers\appid.sys 2014-10-15 05:28:09 FE571E088C2D83619D2D48D4E961BF41 212480 ----a-w- C:\Windows\Sysnative\drivers\rdpwd.sys 2014-10-15 05:28:09 E232A3B43A894BB327FC161529BD9ED1 39936 ----a-w- C:\Windows\Sysnative\drivers\tssecsrv.sys ====== C:\Windows\Tasks ====== 2014-10-17 07:56:17 006889F198442782F65C53949405CE36 3148 ----a-w- C:\Windows\Sysnative\Tasks\{256D6F35-3B64-464B-A2C8-C4602D158FAA} ====== C:\Windows\Temp ====== ======= C:\Program Files ===== ======= C:\PROGRA~2 ===== ======= C: ===== ====== C:\Users\Gina\AppData\Roaming ====== 2014-10-12 07:48:49 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Programs ====== C:\Users\Gina ====== 2014-11-07 13:39:50 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Gina\Downloads\RSITx64 (1).exe 2014-11-07 13:38:51 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Gina\Downloads\RSITx64.exe 2014-11-05 14:23:16 65B0960BC2A2D68296E4D1522D3AE0A4 880272 ----a-w- C:\Users\Gina\Downloads\ChromeSetup.exe 2014-11-01 11:09:43 BCDFE8E5D5E48EFDE97B8D57BC8954B1 42736 ----a-w- C:\Users\Gina\BelastingdienstToeslagen mutatie Jef.pdf 2014-10-28 22:53:58 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-10-28 22:51:35 3A582BF6FD39DC6A52AAF316126B40BA 638888 ----a-w- C:\Users\Gina\Downloads\chromeinstall-8u25 (5).exe 2014-10-28 16:25:57 3A582BF6FD39DC6A52AAF316126B40BA 638888 ----a-w- C:\Users\Gina\Downloads\chromeinstall-8u25 (4).exe ====== C: exe-files == 2014-11-05 14:27:37 859FC9E24C1F51D74B8A4C90E7FA646F 41100368 ----a-w- C:\Program Files (x86)\Google\Update\Install\{F47C75AE-A8DD-4290-9BC4-351977920305}\38.0.2125.111_chrome_installer.exe 2014-11-05 14:27:36 859FC9E24C1F51D74B8A4C90E7FA646F 41100368 ----a-w- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\38.0.2125.111\38.0.2125.111_chrome_installer.exe 2014-11-05 14:25:33 821E577AB0B119278BD1940FEF224DDA 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleUpdateBroker.exe 2014-11-05 14:25:33 65B0960BC2A2D68296E4D1522D3AE0A4 880272 ----a-w- C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleUpdateSetup.exe 2014-11-05 14:25:33 4067DC9EA0640485F1CF395427FD5E9B 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleUpdateOnDemand.exe 2014-11-05 14:25:32 976D5F35A058340DA2C160CEC4063C4B 230792 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleCrashHandler.exe 2014-11-05 14:25:32 51508F0C2476177E50C31B0BBFBF1BDB 107912 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleUpdate.exe 2014-11-05 14:25:32 26E37D5EAC3F1CF66587183AB348168C 114568 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleUpdateComRegisterShell64.exe 2014-11-05 14:25:32 047556104954A72A2222FFF169166EEE 285064 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleCrashHandler64.exe === C: other files == ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-274440433-1281756902-1481230371-1001\Software\Microsoft\Windows\CurrentVersion\Run] "Facebook Update"="C:\Users\Gina\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" "BackupManagerTray"="C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe -h -k" "NortonOnlineBackupReminder"="C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe UNATTENDED" "Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun" "LManager"="C:\Program Files (x86)\Launch Manager\LManager.exe" "QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime" "iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "KiesTrayAgent"="C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Facebook Update"="C:\Users\Gina\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "Acer ePower Management"="C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe" "Logitech Download Assistant"="C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch" "KiesTrayAgent"="C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe" "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe " ==== Startup Registry Disabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Spotify" "hkey"="HKCU" "command"="\"C:\\Users\\Gina\\AppData\\Roaming\\Spotify\\Spotify.exe\" /uri spotify:autostart" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify Web Helper] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Spotify Web Helper" "hkey"="HKCU" "command"="\"C:\\Users\\Gina\\AppData\\Roaming\\Spotify\\Data\\SpotifyWebHelper.exe\"" ==== Startup Folders ====================== 2010-09-30 05:39:50 2067 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VideoWebCamera.exe.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [15-10-2014 22:54] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-274440433-1281756902-1481230371-1001Core.job --a------ C:\Users\Gina\AppData\Local\Facebook\Update\FacebookUpdate.exe [20-01-2014 21:17] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-274440433-1281756902-1481230371-1001UA.job --a------ [Undetermined Task] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [05-11-2014 15:25] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [05-11-2014 15:25] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-274440433-1281756902-1481230371-1001Core" [C:\Users\Gina\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-274440433-1281756902-1481230371-1001UA" [C:\Users\Gina\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\Norton WSC Integration" ["C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\WSCStub.exe"] "C:\Windows\SysNative\tasks\{09571229-53C0-41D4-9074-E9516E464FCD}" [C:\Users\Gina\Desktop\Java\jre7\bin\java.exe] "C:\Windows\SysNative\tasks\{0D6845FC-5F54-42B0-8713-A45924AF0F8F}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{0E63B693-31DD-4E05-A1E4-F447E707697F}" [C:\Users\Gina\Desktop\Java\jre7\bin\java.exe] "C:\Windows\SysNative\tasks\{0EB36783-686D-42C9-99DD-A33CB49A28BC}" [C:\Users\Gina\Desktop\Java\jre7\bin\java.exe] "C:\Windows\SysNative\tasks\{12B2697D-A414-4412-8064-950F21535E2B}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{148110C4-822D-4A3A-B30F-D44E40F71EF1}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Beestenbende\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{1E6C05F6-5269-4EE4-8FE1-076C2CB04381}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{2AB55629-C6BC-4601-9384-6A54F870250E}" [msiexec.exe] "C:\Windows\SysNative\tasks\{370A7318-48E4-45E4-91D4-12C6597816B7}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{37311FCD-7866-4510-9211-BD1B91524DC4}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{3B3C11EF-C045-40B1-AF50-5C9600E6F4E9}" [C:\Users\Gina\Desktop\Java\jre7\bin\java.exe] "C:\Windows\SysNative\tasks\{40880D92-5F4D-4B47-899A-83A3FD856C4D}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{442D54A7-9885-4A6C-8E4B-09036DF3B8B5}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{465F21B5-0397-4C1E-8808-FB00910C8DE6}" [C:\Users\Gina\Desktop\Java\jre7\bin\java.exe] "C:\Windows\SysNative\tasks\{4695A62B-5DE8-4482-88E6-72682F814DB0}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{47D3C7B0-2F38-4637-B586-42ADBF83E4F0}" [C:\Users\Gina\Desktop\Java\jre7\bin\java.exe] "C:\Windows\SysNative\tasks\{4C8F1983-A3C3-4894-A37C-CED0199E2092}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{5016F1B6-A64F-40D1-9033-CFD932C3F878}" [C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe] "C:\Windows\SysNative\tasks\{597A124B-CECF-49BC-8164-B6BB21822C1F}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{62360091-E5B8-4C0D-A930-0AEC8A92C50F}" [C:\Users\Gina\Desktop\Java\jre7\bin\java.exe] "C:\Windows\SysNative\tasks\{6269621C-F93E-42FB-9496-2282621B6FA7}" [C:\Users\Gina\Desktop\Java\jre7\bin\java.exe] "C:\Windows\SysNative\tasks\{6B01FD79-E13C-42C6-8E92-BEE145D98617}" [C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe] "C:\Windows\SysNative\tasks\{6E23C9E2-5EC6-446F-8582-5376AE118E8D}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{7524B68A-9DC1-48C4-8782-24A9B7D2CCF4}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Levensweg\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{7C1F122E-2CB7-4CF8-8D84-A2D9ED57B067}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Beestenbende\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{889F9728-6218-457B-962F-975C0277FE6F}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{88EEA419-B421-4BE3-9507-E87F4AEB8C33}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{8E3A9AA3-6D26-4922-AA90-B737EA080A6B}" [msiexec.exe] "C:\Windows\SysNative\tasks\{8E654D8F-F9DD-40F0-9B28-98095F1A8978}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{8F1591D5-35DB-4C11-9F35-F66C30602BFA}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{933AF78B-23D0-4233-A463-880416C91E06}" [E:\Java\jre7\bin\java.exe] "C:\Windows\SysNative\tasks\{95F42AB2-8D70-489E-AD4B-F0008BF2D35D}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{974F931B-83AA-4E3B-8C6E-ABE08536A3DC}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{9A3E44EB-FE39-442D-B351-3F72AAE9E799}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{A815276D-A436-4569-BB2C-F8175C2DA761}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{ABBACF30-4C73-4CF6-B6D1-632728C93AD6}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{B0E62DF0-75B7-47EB-8D60-C0E6F138F194}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{B7251EC9-CFBC-4329-9247-BD86E70EEBC9}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{B76C8B3F-504A-4000-937E-A46B273F4C33}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{B8144A50-5A0B-47E3-AA68-37FC10EC79AE}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Studententijd\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{BF1377EE-DEEB-4D1B-B49F-26658E8D68EE}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{C0A337F6-EEB3-43FB-B2E5-38A0206CEA15}" [C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe] "C:\Windows\SysNative\tasks\{C173498A-8D99-4019-8DE8-7E651459E605}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{C32E549F-F356-4E7C-9529-6DF82F6A2926}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{C8B5776A-23C3-4B3C-8E55-873A39FCF9AA}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{D38F9845-05D7-4B07-ACE5-1E2F58527B49}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{D50775B9-B194-4EB6-8787-8B8CC80E14C7}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{DB7EFCF5-6836-4DE3-9AED-2E6D5A217889}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{E45FDD38-362A-415B-9C0C-409185D226DF}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{EB3FB450-2B1C-4DCF-A052-86CD56C9CF1C}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{EB6DC899-E7AD-411D-AB22-D20008A27807}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{F21FD26B-2E5C-4024-9D1D-1932007C140C}" [C:\Program Files (x86)\Electronic Arts\De Sims 3 Jaargetijden\Game\Bin\Sims3Launcher.exe] "C:\Windows\SysNative\tasks\{F542C21D-AF24-43F3-A917-4435B57073A3}" [msiexec.exe] "C:\Windows\SysNative\tasks\Norton Internet Security\Norton Error Analyzer" [C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe] "C:\Windows\SysNative\tasks\Norton Internet Security\Norton Error Processor" [C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.3.0.12\coFFPlgn" [07-11-2014 10:10] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\weejhwtb.default - Undetermined - leethax@leethax.net - leethax.net extension - %ProfilePath%\extensions\leethax@leethax.net.xpi AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\weejhwtb.default 63F8C13F269B10BC9363B007DAAACAE6 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll - Shockwave Flash 3CD19649B2C3023D65E67C056457A2BC - C:\Users\Gina\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin ==== Chromium Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions iikflkcanblccfahdhdonehdalibjnif - No path found[] mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx[20-09-2014 09:52] Norton Identity Safe - Gina\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif Norton Security Toolbar - Gina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk FREE TV - Gina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofddcjfikfghkmoapnjnmmflbcjohbic ==== Chromium Fix ====================== C:\Users\Gina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully C:\Users\Gina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully C:\Users\Gina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage deleted successfully C:\Users\Gina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal deleted successfully C:\Users\Gina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_t.goadservices.com_0.localstorage deleted successfully C:\Users\Gina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_t.goadservices.com_0.localstorage-journal deleted successfully C:\Users\Gina\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Page_URL"="http://www.google.com" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02" {67A2568C-7A0A-4EED-AECC-B5405DE63B64} Google Url="http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_nlNL434NL434" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{fa6789c5} deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gina\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== C:\Users\Gina\AppData\Local\Mozilla\Firefox\Profiles\weejhwtb.default\cache2 emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Gina\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=1778 folders=333 253127065 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Gina\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Gina\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Program Files (x86)\Popcorn Time\init.txt" not found "C:\Program Files (x86)\Popcorn Time\msvcr110.dll" not found "C:\Program Files (x86)\Popcorn Time" not found ==== EOF on vr 07-11-2014 at 16:34:51,57 ======================