Zoek.exe v5.0.0.0 Updated 11-November-2014 Tool run by Wout on wo 12/11/2014 at 22:13:23,61. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Wout\Downloads\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 12/11/2014 22:16:53 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~2\AVG C:\PROGRA~2\MSXML 4.0 C:\PROGRA~2\Wisdom-soft ScreenHunter 6.0 Pro C:\PROGRA~2\COMMON~1\SWF Studio C:\PROGRA~3\86c09b53-3259-47c2-aea9-9f1c6d6b9b47 C:\Users\Wout\AppData\Roaming\Software Inspection Library C:\Users\Wout\AppData\Roaming\Spotify C:\Users\Wout\AppData\Roaming\TP C:\Users\Wout\AppData\Local\CrashDumps C:\Users\Wout\AppData\Local\Wisdom-soft ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-967676133-987332151-3099326135-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511131190} deleted successfully HKEY_USERS\S-1-5-21-967676133-987332151-3099326135-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511131190} deleted successfully HKEY_USERS\S-1-5-21-967676133-987332151-3099326135-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435b-BC74-9C25C1C588A9} deleted successfully HKEY_USERS\S-1-5-21-967676133-987332151-3099326135-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435b-BC74-9C25C1C588A9} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-967676133-987332151-3099326135-1002\Software\Mozilla\Firefox\Extensions\{CAF8EC82-21A8-418F-C82F-32A802E9A2E4} deleted successfully ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== C:\PROGRA~3\86c09b53-3259-47c2-aea9-9f1c6d6b9b47 deleted C:\PROGRA~2\GUT9EA0.tmp deleted C:\PROGRA~2\GUM9E9F.tmp deleted C:\PROGRA~2\TorrentSearch deleted C:\extensions deleted C:\found.000 deleted C:\PROGRA~3\UpdaterLog.txt deleted C:\PROGRA~3\SPLF949.tmp deleted C:\PROGRA~3\Avg_Update_0814tb deleted C:\PROGRA~3\boost_interprocess deleted C:\PROGRA~3\InstallMate deleted C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job deleted C:\windows\SysNative\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv deleted C:\Windows\SysNative\config\systemprofile\Searches deleted C:\windows\SysNative\GroupPolicy\Machine deleted C:\windows\SysNative\GroupPolicy\User deleted C:\windows\SysNative\GroupPolicy\GPT.INI deleted C:\Windows\Syswow64\GroupPolicy\Machine deleted C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted C:\Windows\Syswow64\sho100A.tmp deleted C:\Windows\Syswow64\sho1472.tmp deleted C:\Windows\Syswow64\sho1664.tmp deleted C:\Windows\Syswow64\sho1691.tmp deleted C:\Windows\Syswow64\sho1802.tmp deleted C:\Windows\Syswow64\sho1870.tmp deleted C:\Windows\Syswow64\sho193A.tmp deleted C:\Windows\Syswow64\sho1C25.tmp deleted C:\Windows\Syswow64\sho1C5.tmp deleted C:\Windows\Syswow64\sho1DD3.tmp deleted C:\Windows\Syswow64\sho248A.tmp deleted C:\Windows\Syswow64\sho28E7.tmp deleted C:\Windows\Syswow64\sho2CDB.tmp deleted C:\Windows\Syswow64\sho2F99.tmp deleted C:\Windows\Syswow64\sho3070.tmp deleted C:\Windows\Syswow64\sho3602.tmp deleted C:\Windows\Syswow64\sho36A.tmp deleted C:\Windows\Syswow64\sho3998.tmp deleted C:\Windows\Syswow64\sho3E09.tmp deleted C:\Windows\Syswow64\sho3EF3.tmp deleted C:\Windows\Syswow64\sho414F.tmp deleted C:\Windows\Syswow64\sho43B3.tmp deleted C:\Windows\Syswow64\sho47D6.tmp deleted C:\Windows\Syswow64\sho4D6.tmp deleted C:\Windows\Syswow64\sho4D9E.tmp deleted C:\Windows\Syswow64\sho4F28.tmp deleted C:\Windows\Syswow64\sho52B8.tmp deleted C:\Windows\Syswow64\sho531E.tmp deleted C:\Windows\Syswow64\sho5324.tmp deleted C:\Windows\Syswow64\sho5373.tmp deleted C:\Windows\Syswow64\sho5408.tmp deleted C:\Windows\Syswow64\sho5A46.tmp deleted C:\Windows\Syswow64\sho5B3A.tmp deleted C:\Windows\Syswow64\sho5CA.tmp deleted C:\Windows\Syswow64\sho5D25.tmp deleted C:\Windows\Syswow64\sho5DD7.tmp deleted C:\Windows\Syswow64\sho5FA8.tmp deleted C:\Windows\Syswow64\sho5FD0.tmp deleted C:\Windows\Syswow64\sho633C.tmp deleted C:\Windows\Syswow64\sho6538.tmp deleted C:\Windows\Syswow64\sho6C6A.tmp deleted C:\Windows\Syswow64\sho6CDA.tmp deleted C:\Windows\Syswow64\sho73AC.tmp deleted C:\Windows\Syswow64\sho7418.tmp deleted C:\Windows\Syswow64\sho7BD4.tmp deleted C:\Windows\Syswow64\sho7C1D.tmp deleted C:\Windows\Syswow64\sho7F72.tmp deleted C:\Windows\Syswow64\sho7F8C.tmp deleted C:\Windows\Syswow64\sho8037.tmp deleted C:\Windows\Syswow64\sho8288.tmp deleted C:\Windows\Syswow64\sho82E8.tmp deleted C:\Windows\Syswow64\sho8386.tmp deleted C:\Windows\Syswow64\sho8620.tmp deleted C:\Windows\Syswow64\sho888D.tmp deleted C:\Windows\Syswow64\sho89E8.tmp deleted C:\Windows\Syswow64\sho8DCD.tmp deleted C:\Windows\Syswow64\sho8FFA.tmp deleted C:\Windows\Syswow64\sho9058.tmp deleted C:\Windows\Syswow64\sho912.tmp deleted C:\Windows\Syswow64\sho9388.tmp deleted C:\Windows\Syswow64\sho93E0.tmp deleted C:\Windows\Syswow64\sho9411.tmp deleted C:\Windows\Syswow64\sho977E.tmp deleted C:\Windows\Syswow64\sho97F2.tmp deleted C:\Windows\Syswow64\sho99A2.tmp deleted C:\Windows\Syswow64\sho9F3A.tmp deleted C:\Windows\Syswow64\shoA029.tmp deleted C:\Windows\Syswow64\shoA10.tmp deleted C:\Windows\Syswow64\shoA538.tmp deleted C:\Windows\Syswow64\shoA628.tmp deleted C:\Windows\Syswow64\shoA756.tmp deleted C:\Windows\Syswow64\shoA7C4.tmp deleted C:\Windows\Syswow64\shoAB7C.tmp deleted C:\Windows\Syswow64\shoB8B6.tmp deleted C:\Windows\Syswow64\shoB90A.tmp deleted C:\Windows\Syswow64\shoBAF9.tmp deleted C:\Windows\Syswow64\shoBC35.tmp deleted C:\Windows\Syswow64\shoBCC2.tmp deleted C:\Windows\Syswow64\shoC255.tmp deleted C:\Windows\Syswow64\shoC40F.tmp deleted C:\Windows\Syswow64\shoC71A.tmp deleted C:\Windows\Syswow64\shoC922.tmp deleted C:\Windows\Syswow64\shoCA88.tmp deleted C:\Windows\Syswow64\shoCAD3.tmp deleted C:\Windows\Syswow64\shoCB.tmp deleted C:\Windows\Syswow64\shoCB4B.tmp deleted C:\Windows\Syswow64\shoD1AC.tmp deleted C:\Windows\Syswow64\shoD239.tmp deleted C:\Windows\Syswow64\shoD38F.tmp deleted C:\Windows\Syswow64\shoD4DB.tmp deleted C:\Windows\Syswow64\shoD51F.tmp deleted C:\Windows\Syswow64\shoD539.tmp deleted C:\Windows\Syswow64\shoD53D.tmp deleted C:\Windows\Syswow64\shoD5B9.tmp deleted C:\Windows\Syswow64\shoD692.tmp deleted C:\Windows\Syswow64\shoD745.tmp deleted C:\Windows\Syswow64\shoD84F.tmp deleted C:\Windows\Syswow64\shoD873.tmp deleted C:\Windows\Syswow64\shoDA77.tmp deleted C:\Windows\Syswow64\shoDAA6.tmp deleted C:\Windows\Syswow64\shoDB9.tmp deleted C:\Windows\Syswow64\shoDD16.tmp deleted C:\Windows\Syswow64\shoDE7D.tmp deleted C:\Windows\Syswow64\shoE32E.tmp deleted C:\Windows\Syswow64\shoE40E.tmp deleted C:\Windows\Syswow64\shoE790.tmp deleted C:\Windows\Syswow64\shoEB59.tmp deleted C:\Windows\Syswow64\shoEE29.tmp deleted C:\Windows\Syswow64\shoEED1.tmp deleted C:\Windows\Syswow64\shoEF57.tmp deleted C:\Windows\Syswow64\shoF2F2.tmp deleted C:\Windows\Syswow64\shoF335.tmp deleted C:\Windows\Syswow64\shoF3A0.tmp deleted C:\Windows\Syswow64\shoF59F.tmp deleted C:\Windows\Syswow64\shoF62C.tmp deleted C:\Windows\Syswow64\shoF7A7.tmp deleted C:\Windows\Syswow64\shoFD52.tmp deleted C:\Users\Wout\Desktop\NortonNISDownloader.exe deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Wout\AppData\Local\Temp ==== 2014-11-12 21:10:37 4E566FEA83FCEEAF2873702806B55006 43008 ----a-w- C:\Users\Wout\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpg0ioty.dll ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== ====== C:\Windows\Sysnative\drivers ===== 2014-11-09 14:41:08 26C43960C99EE861A5D0EDC4DCF3B1C3 129752 ----a-w- C:\Windows\Sysnative\drivers\MBAMSwissArmy.sys 2014-11-09 14:40:40 D3311B31C470E7681B14D9B014CBF9ED 93400 ----a-w- C:\Windows\Sysnative\drivers\mbamchameleon.sys 2014-11-09 14:40:40 95EF63A7827D4E3A229CBBCB42619E93 63704 ----a-w- C:\Windows\Sysnative\drivers\mwac.sys 2014-11-09 14:40:40 5C3669B71657F22E67A1D4BD49D2CBE7 25816 ----a-w- C:\Windows\Sysnative\drivers\mbam.sys 2014-10-16 16:02:42 FE571E088C2D83619D2D48D4E961BF41 212480 ----a-w- C:\Windows\Sysnative\drivers\rdpwd.sys 2014-10-16 16:02:41 E232A3B43A894BB327FC161529BD9ED1 39936 ----a-w- C:\Windows\Sysnative\drivers\tssecsrv.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2014-11-12 20:58:59 -------- d-----w- C:\Program Files\iPod 2014-11-12 20:58:56 -------- d-----w- C:\Program Files\iTunes 2014-11-09 10:20:48 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== 2014-11-12 21:01:07 -------- d-----w- C:\PROGRA~2\QuickTime 2014-11-12 20:58:56 -------- d-----w- C:\PROGRA~2\iTunes 2014-11-09 15:26:52 -------- d-----w- C:\PROGRA~2\E Dev ======= C: ===== ====== C:\Users\Wout\AppData\Roaming ====== 2014-10-23 15:06:39 -------- d-----w- C:\Users\Wout\AppData\Local\CrashDumps ====== C:\Users\Wout ====== 2014-11-12 21:02:48 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud 2014-11-12 21:01:12 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-11-12 20:59:52 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-11-12 20:58:56 -------- d-----w- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2014-11-11 13:33:08 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\E-Peek 2014-11-11 13:32:19 2802665C46580E0208ADB694C7FCAE78 53663241 ----a-w- C:\Users\Wout\Downloads\E-PeekSetup (4).exe 2014-11-11 10:56:41 2802665C46580E0208ADB694C7FCAE78 53663241 ----a-w- C:\Users\Wout\Downloads\E-PeekSetup (3).exe 2014-11-11 10:38:46 6504113C2218667814D4F54847BA046A 2140160 ----a-w- C:\Users\Wout\Downloads\adwcleaner_4.101.exe 2014-11-11 09:44:16 33398D340008A0577507FCA7FD443622 19828376 ----a-w- C:\Users\Wout\Downloads\mbam-setup-2.0.3.1025 (2).exe 2014-11-09 17:10:07 2802665C46580E0208ADB694C7FCAE78 53663241 ----a-w- C:\Users\Wout\Downloads\E-PeekSetup (2).exe 2014-11-09 15:27:58 1B4994A72B4C06A7FEF1D1BD61B9392F 109 ----a-w- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc 2014-11-09 15:25:48 2802665C46580E0208ADB694C7FCAE78 53663241 ----a-w- C:\Users\Wout\Downloads\E-PeekSetup (1).exe 2014-11-09 15:25:17 2802665C46580E0208ADB694C7FCAE78 53663241 ----a-w- C:\Users\Wout\Downloads\E-PeekSetup.exe 2014-11-09 15:09:12 92B980C37F4C56498C65265BE033E42D 2145792 ----a-w- C:\Users\Wout\Downloads\adwcleaner_4.100 (1).exe 2014-11-09 14:39:53 33398D340008A0577507FCA7FD443622 19828376 ----a-w- C:\Users\Wout\Downloads\mbam-setup-2.0.3.1025 (1).exe 2014-11-09 14:38:39 33398D340008A0577507FCA7FD443622 19828376 ----a-w- C:\Users\Wout\Downloads\mbam-setup-2.0.3.1025.exe 2014-11-09 10:42:15 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Wout\Downloads\RSITx64 (1).exe 2014-11-09 10:26:52 92B980C37F4C56498C65265BE033E42D 2145792 ----a-w- C:\Users\Wout\Downloads\adwcleaner_4.100.exe 2014-11-09 10:20:27 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Wout\Downloads\RSITx64.exe 2014-11-09 09:50:25 EC1C3E970DCCB51F33816C107911B05F 4977216 ----a-w- C:\Users\Wout\Downloads\ccsetup419.exe ====== C: exe-files == 2014-11-12 21:01:28 2A1E1C431BCCC84A8C02562A51A47576 77104 ----a-w- C:\Users\Wout\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ARLPDF2R\SetupAdmin[2].exe 2014-11-12 21:01:28 2A1E1C431BCCC84A8C02562A51A47576 77104 ----a-w- C:\ProgramData\Apple\Installer Cache\iCloud Control Panel 4.0.5.20\SetupAdmin.exe 2014-11-12 21:00:26 7C444BCCB32E3A5ECFEE6315C058D351 80216 ----a-w- C:\Users\Wout\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R1G2M1L\QuickTimeInstallerAdmin[1].exe 2014-11-12 20:53:35 2BF25BB82936758771C99A2C70754E09 77104 ----a-w- C:\Users\Wout\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ARLPDF2R\SetupAdmin[1].exe 2014-11-12 20:53:35 2BF25BB82936758771C99A2C70754E09 77104 ----a-w- C:\ProgramData\Apple Computer\Installer Cache\iTunes 12.0.1.26\SetupAdmin.exe 2014-11-11 13:33:07 B90CFFC3DA777DE4574C421797AC251F 83705 ----a-w- C:\Program Files (x86)\E Dev\E-Peek\Uninstal.exe 2014-11-11 13:32:19 2802665C46580E0208ADB694C7FCAE78 53663241 ----a-w- C:\Users\Wout\Downloads\E-PeekSetup (4).exe 2014-11-11 10:56:41 2802665C46580E0208ADB694C7FCAE78 53663241 ----a-w- C:\Users\Wout\Downloads\E-PeekSetup (3).exe 2014-11-11 10:38:46 6504113C2218667814D4F54847BA046A 2140160 ----a-w- C:\Users\Wout\Downloads\adwcleaner_4.101.exe 2014-11-11 09:44:16 33398D340008A0577507FCA7FD443622 19828376 ----a-w- C:\Users\Wout\Downloads\mbam-setup-2.0.3.1025 (2).exe 2014-11-09 17:10:07 2802665C46580E0208ADB694C7FCAE78 53663241 ----a-w- C:\Users\Wout\Downloads\E-PeekSetup (2).exe 2014-11-09 15:25:48 2802665C46580E0208ADB694C7FCAE78 53663241 ----a-w- C:\Users\Wout\Downloads\E-PeekSetup (1).exe 2014-11-09 15:25:17 2802665C46580E0208ADB694C7FCAE78 53663241 ----a-w- C:\Users\Wout\Downloads\E-PeekSetup.exe 2014-11-09 15:09:12 92B980C37F4C56498C65265BE033E42D 2145792 ----a-w- C:\Users\Wout\Downloads\adwcleaner_4.100 (1).exe 2014-11-09 14:39:53 33398D340008A0577507FCA7FD443622 19828376 ----a-w- C:\Users\Wout\Downloads\mbam-setup-2.0.3.1025 (1).exe 2014-11-09 14:38:39 33398D340008A0577507FCA7FD443622 19828376 ----a-w- C:\Users\Wout\Downloads\mbam-setup-2.0.3.1025.exe 2014-11-09 10:42:15 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Wout\Downloads\RSITx64 (1).exe 2014-11-09 10:26:52 92B980C37F4C56498C65265BE033E42D 2145792 ----a-w- C:\Users\Wout\Downloads\adwcleaner_4.100.exe 2014-11-09 10:20:48 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Wout.exe 2014-11-09 10:20:27 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Wout\Downloads\RSITx64.exe 2014-11-09 09:50:25 EC1C3E970DCCB51F33816C107911B05F 4977216 ----a-w- C:\Users\Wout\Downloads\ccsetup419.exe 2014-11-09 09:46:07 DCC534F22A5A4B43E5123A772D3ECF5A 895568 ----a-w- C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\38.0.2125.111\38.0.2125.111_38.0.2125.104_chrome_updater.exe === C: other files == 2014-11-09 14:41:08 26C43960C99EE861A5D0EDC4DCF3B1C3 129752 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys 2014-11-09 14:40:40 D3311B31C470E7681B14D9B014CBF9ED 93400 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys 2014-11-09 14:40:40 95EF63A7827D4E3A229CBBCB42619E93 63704 ----a-w- C:\Windows\System32\drivers\mwac.sys 2014-11-09 14:40:40 5C3669B71657F22E67A1D4BD49D2CBE7 25816 ----a-w- C:\Windows\System32\drivers\mbam.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-967676133-987332151-3099326135-1001\Software\Microsoft\Windows\CurrentVersion\Run] "AVG-Secure-Search-Update_JUNE2013_TB"="C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe /PROMPT /CMPID=JUNE2013_TB" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-967676133-987332151-3099326135-1002\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-21-967676133-987332151-3099326135-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe" "QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="C:\Windows\system32\igfxtray.exe" "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" "Persistence"="C:\Windows\system32\igfxpers.exe" ==== Startup Registry Disabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Adobe ARM" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe Reader Speed Launcher] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Adobe Reader Speed Launcher" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Adobe\\Reader 9.0\\Reader\\Reader_sl.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ApnUpdater" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Ask.com\\Updater\\Updater.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\APSDaemon] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="APSDaemon" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BullGuard] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="BullGuard" "hkey"="HKLM" "command"="\"C:\\Program Files\\BullGuard Ltd\\BullGuard\\bullguard.exe\" -boot" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CLMLServer] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="CLMLServer" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\CyberLink\\Power2Go\\CLMLSvc.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\EzPrint] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="EzPrint" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Lexmark S300-S400 Series\\ezprint.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HotkeyApp] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="HotkeyApp" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Launch Manager\\HotkeyApp.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\iTunesHelper] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="iTunesHelper" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\iTunes\\iTunesHelper.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LMgrVolOSD] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="LMgrVolOSD" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Launch Manager\\OSD.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\lxeamon.exe] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="lxeamon.exe" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Lexmark S300-S400 Series\\lxeamon.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NUSB3MON] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NUSB3MON" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Renesas Electronics\\USB 3.0 Host Controller Driver\\Application\\nusb3mon.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ooVoo.exe] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ooVoo.exe" "hkey"="HKCU" "command"="C:\\Program Files (x86)\\ooVoo\\oovoo.exe /minimized" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="QuickTime Task" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\QuickTime\\QTTask.exe\" -atboottime" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RtHDVBg] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="RtHDVBg" "hkey"="HKLM" "command"="C:\\Program Files\\Realtek\\Audio\\HDA\\RAVBg64.exe /FORPCEE3 " [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RtHDVCpl] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="RtHDVCpl" "hkey"="HKLM" "command"="C:\\Program Files\\Realtek\\Audio\\HDA\\RAVCpl64.exe -s" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="SunJavaUpdateSched" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\swg] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="swg" "hkey"="HKCU" "command"="\"C:\\Program Files (x86)\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SynTPEnh] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="SynTPEnh" "hkey"="HKLM" "command"="%ProgramFiles%\\Synaptics\\SynTP\\SynTPEnh.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\vProt] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="vProt" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\AVG Secure Search\\vprot.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Wbutton] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Wbutton" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Launch Manager\\Wbutton.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Wisdom-soft AutoScreenRecorder 3.1 Pro] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Wisdom-soft AutoScreenRecorder 3.1 Pro" "hkey"="HKCU" "command"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Wisdom-soft ScreenHunter 6.0 Free] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Wisdom-soft ScreenHunter 6.0 Free" "hkey"="HKCU" "command"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Wisdom-soft ScreenHunter 6.0 Pro] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Wisdom-soft ScreenHunter 6.0 Pro" "hkey"="HKCU" "command"="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\YouCam Mirage] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="YouCam Mirage" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\CyberLink\\YouCam\\YCMMirage.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk] "item"="McAfee Security Scan Plus" "path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\McAfee Security Scan Plus.lnk" "backup"="C:\\Windows\\pss\\McAfee Security Scan Plus.lnk.CommonStartup" "backupExtension"=".CommonStartup" "command"="C:\\PROGRA~1\\MCAFEE~1\\385C9A~1.150\\SSSCHE~1.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Wout^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk] "item"="Dropbox" "path"="C:\\Users\\Wout\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Dropbox.lnk" "backup"="C:\\Windows\\pss\\Dropbox.lnk.Startup" "backupExtension"=".Startup" "command"="C:\\Users\\Wout\\AppData\\Roaming\\Dropbox\\bin\\Dropbox.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Wout^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MyPC Backup.lnk] "item"="MyPC Backup" "path"="C:\\Users\\Wout\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\MyPC Backup.lnk" "backup"="C:\\Windows\\pss\\MyPC Backup.lnk.Startup" "backupExtension"=".Startup" "command"="C:\\PROGRA~2\\MYPCBA~1\\MYPCBA~1.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Wout^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OOo-dev 3.4.lnk] "item"="OOo-dev 3.4" "path"="C:\\Users\\Wout\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\OOo-dev 3.4.lnk" "backup"="C:\\Windows\\pss\\OOo-dev 3.4.lnk.Startup" "backupExtension"=".Startup" "command"="C:\\PROGRA~2\\OOO-DE~1\\program\\QUICKS~1.EXE" ==== Startup Folders ====================== 2014-09-22 20:37:32 1051 ----a-w- C:\Users\Wout\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [12/11/2014 22:16] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [21/10/2014 20:47] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [21/10/2014 20:47] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\Norton WSC Integration" ["C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\WSCStub.exe"] "C:\Windows\SysNative\tasks\User_Feed_Synchronization-{003F9635-7473-479D-B899-918E6D753DB8}" [C:\Windows\system32\msfeedssync.exe] "C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe] "C:\Windows\SysNative\tasks\Norton Internet Security\Norton Error Analyzer" [C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe] "C:\Windows\SysNative\tasks\Norton Internet Security\Norton Error Processor" [C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe] "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.5.0.19\coFFPlgn" [12/11/2014 22:08] ==== Chromium Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions cjofdnhdkbflacojpfpkchgafjahijbb - C:\Users\Wout\AppData\Local\Temp\ccex.crx[] hfimjncgpflkpkhbnnblhblobjjjhjhd - C:\Program Files (x86)\qualitink\hfimjncgpflkpkhbnnblhblobjjjhjhd.crx[] iikflkcanblccfahdhdonehdalibjnif - No path found[] {page b.html}content_scripts:[{all_frames:falsejs:[c.js]matches:[http://*/*https://*/*]run_at:document_end}]description:icons:{16:icon16.png48:icon48.png128:icon128.png}manifest_version:2name:BetterMarkItpermissions:[cookiesstorageunlimitedStoragehttp://*/*https://*/*tabswebRequestwebRequestBlocking]version:1.174.0.0} - Wout\AppData\Local\Google\Chrome\User Data\Default\Extensions\eilmilkkamlilakoagllheemfjfadhfk qualitink - Wout\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfimjncgpflkpkhbnnblhblobjjjhjhd Norton Identity Safe - Wout\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif Google Wallet - Wout\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda ==== Chromium Fix ====================== C:\Users\Wout\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfimjncgpflkpkhbnnblhblobjjjhjhd deleted successfully C:\Users\Wout\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hfimjncgpflkpkhbnnblhblobjjjhjhd_0.localstorage deleted successfully C:\Users\Wout\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hfimjncgpflkpkhbnnblhblobjjjhjhd_0.localstorage-journal deleted successfully C:\Users\Wout\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hfimjncgpflkpkhbnnblhblobjjjhjhd deleted successfully C:\Users\Wout\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif deleted successfully C:\Users\Wout\AppData\Local\Google\Chrome\User Data\Default\Extensions\eilmilkkamlilakoagllheemfjfadhfk deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" "Default_Page_URL"="http://www.aldi.com" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="http://www.google.com" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs] "Tabs"="http://www.google.com" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}] not found New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="http://www.google.com" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="res://ieframe.dll/tabswelcome.htm" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs] "Tabs"="res://ieframe.dll/tabswelcome.htm" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MDNA_nl___BE444" {902821CA-6D75-4626-92F4-EFF8276E55FA} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MDNA_nl___BE444" ==== Reset Google Chrome ====================== C:\Users\Wout\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Users\Wout\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\cjofdnhdkbflacojpfpkchgafjahijbb deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\hfimjncgpflkpkhbnnblhblobjjjhjhd deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApnUpdater deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BullGuard deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ooVoo.exe deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Wout\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\Wout\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=329 folders=33 24955650 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully C:\Users\Wout\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Wout\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on wo 12/11/2014 at 22:46:24,87 ======================