Zoek.exe v5.0.0.0 Updated 16-November-2014 Tool run by Gebruiker on di 18-11-2014 at 13:00:25,25. Microsoft Windows 8.1 6.3.9600 x64 Running in: Normal Mode Internet Access Detected Launched: D:\Users\Gebruiker\Downloads\Downloads\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 18-11-2014 13:02:21 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~2\COMMON~1\onOne Software Shared deleted successfully C:\Program Files\ATI Technologies deleted successfully C:\PROGRA~3\ALM deleted successfully C:\PROGRA~3\Oracle deleted successfully C:\PROGRA~3\ZoomBrowser deleted successfully C:\Users\Gebruiker\AppData\Roaming\AcerRemote deleted successfully C:\Users\Gebruiker\AppData\Local\GHISLER deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-291832244-1776431606-1187519520-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully HKEY_CLASSES_ROOT\CLSID\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== C:\PROGRA~3\EPSON deleted C:\catalyst_10.5_windows_xp_may21.exe deleted C:\PROGRA~3\boost_interprocess deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk deleted C:\WINDOWS\SysNative\config\systemprofile\Searches deleted "C:\windows\Installer\304cb.msi" deleted "C:\WINDOWS\Installer\62722a35.msi" deleted ==== Files Recently Created / Modified ====================== ====== C:\WINDOWS ==== ====== C:\Users\GEBRUI~1\AppData\Local\Temp ==== 2014-11-18 11:47:04 CF95932C00190451115C782E139DE582 264488 ----a-w- C:\Users\Gebruiker\AppData\Local\Temp\MSS\3.8.150.1\McInstallerRes.dll 2014-11-18 11:47:04 C4CF03B998D4D758B89CD07F22D7A7F9 645168 ----a-w- C:\Users\Gebruiker\AppData\Local\Temp\MSS\3.8.150.1\McUICnt.exe 2014-11-18 11:47:04 87AA773F15D90973090D4DF76F8E60EF 565808 ----a-w- C:\Users\Gebruiker\AppData\Local\Temp\MSS\3.8.150.1\mcbrwsr2.dll 2014-11-18 11:47:04 2AA753368BF68871962D2E99B8692985 153760 ----a-w- C:\Users\Gebruiker\AppData\Local\Temp\MSS\3.8.150.1\McInstallerRes_LD.dll 2014-11-18 11:47:04 14E9947D26B0A418AA02F87741E4B40B 769736 ----a-w- C:\Users\Gebruiker\AppData\Local\Temp\MSS\3.8.150.1\McInstallerStartup.dll 2014-11-08 08:47:13 5C73E64374D9BA37AC5569D1F7DE5C9B 665682 ----a-w- C:\Users\Gebruiker\AppData\Local\Temp\sqlite3.dll 2014-11-08 08:33:34 7AAB90847C56E6F7E922BB29D5B3EA8A 601088 ----a-w- C:\Users\Gebruiker\AppData\Local\Temp\Quarantine.exe ====== Java Cache ===== ====== C:\WINDOWS\SysWOW64 ===== 2014-11-12 22:23:58 BC426A818B7F3DB5F509BC1B62FF1501 357376 ----a-w- C:\WINDOWS\SysWOW64\schannel.dll 2014-11-12 22:23:57 B2AC9E081A847ACBD5B62BE25AF39DA1 88800 ----a-w- C:\WINDOWS\SysWOW64\ncryptsslp.dll 2014-11-12 22:23:53 A22688490DCC2DA19441CA09EF7299BF 736768 ----a-w- C:\WINDOWS\SysWOW64\adtschema.dll 2014-11-12 22:23:53 791BDC9FD3C95F92C7DB2162132C8645 324096 ----a-w- C:\WINDOWS\SysWOW64\certcli.dll 2014-11-12 22:23:52 DDAAC7C966436938526D4CF4C6042A5C 154112 ----a-w- C:\WINDOWS\SysWOW64\msaudite.dll 2014-11-12 22:23:45 75D0FAD0165770819770628239BF57DB 602768 ----a-w- C:\WINDOWS\SysWOW64\oleaut32.dll 2014-11-12 22:23:45 46FBD043A1688EFD6AC1395EE886AD33 3607040 ----a-w- C:\WINDOWS\SysWOW64\msi.dll 2014-11-12 22:23:43 B09332CC976AC43EFF595B6F01AA275C 2459136 ----a-w- C:\WINDOWS\SysWOW64\authui.dll 2014-11-12 22:23:43 48C20EB77757F22840FF4CED98D8DEB1 325120 ----a-w- C:\WINDOWS\SysWOW64\msihnd.dll 2014-11-12 22:23:38 F344D6066EA270AABABA83E2A6B6428F 723968 ----a-w- C:\WINDOWS\SysWOW64\wuapi.dll 2014-11-12 22:23:38 DC523277A7EC2336A654960E08EB5BDC 81920 ----a-w- C:\WINDOWS\SysWOW64\wudriver.dll 2014-11-12 22:23:38 C17F3F1EE09758CF9D234B22B80A1006 25600 ----a-w- C:\WINDOWS\SysWOW64\wups.dll 2014-11-12 22:23:38 529122F3ADC548F0CCBB6164D86FA116 124928 ----a-w- C:\WINDOWS\SysWOW64\wuwebv.dll 2014-11-12 22:23:38 514AEA6CF4B70FAA30A2BC4B4CC10A39 29696 ----a-w- C:\WINDOWS\SysWOW64\wuapp.exe 2014-11-12 22:23:31 5F333FDBF392850373C89BDA31EBEC1B 1346048 ----a-w- C:\WINDOWS\SysWOW64\user32.dll 2014-11-12 22:23:29 3B45EA6108E48406828D4E015FF41DD0 12800 ----a-w- C:\WINDOWS\SysWOW64\winshfhc.dll 2014-11-12 22:23:17 07330241FD9D9A03811DDBDC4F9FD18F 19781632 ----a-w- C:\WINDOWS\SysWOW64\mshtml.dll 2014-11-12 22:21:31 154532E0EC2317E6924A9D27F894FF2F 12819456 ----a-w- C:\WINDOWS\SysWOW64\ieframe.dll 2014-11-12 22:21:13 3CA90FDAB95FB2B0D91249BEDE3DE0D9 4298240 ----a-w- C:\WINDOWS\SysWOW64\jscript9.dll 2014-11-12 22:21:09 03D7DF4711B851EF286562F97429211D 1892864 ----a-w- C:\WINDOWS\SysWOW64\wininet.dll 2014-11-12 22:21:07 027A2CF002AD94399B51C07E855E3B2B 1310208 ----a-w- C:\WINDOWS\SysWOW64\urlmon.dll 2014-11-12 22:21:05 F169B03C4B9996708DB20FF0C875B4FF 880128 ----a-w- C:\WINDOWS\SysWOW64\inetcomm.dll 2014-11-12 22:21:05 98D83B6B4FBA32C39585D1E07121BEA0 2277376 ----a-w- C:\WINDOWS\SysWOW64\iertutil.dll 2014-11-12 22:21:04 8A88AD059EDC1014D5D6A472A6D1D66C 661504 ----a-w- C:\WINDOWS\SysWOW64\jscript.dll 2014-11-12 22:21:02 A6145F4F8C69C3B46653B1C5E75A7BD6 688640 ----a-w- C:\WINDOWS\SysWOW64\msfeeds.dll 2014-11-12 22:21:02 8FC2FB51EB90E6AA582BDBA39C1935FD 620032 ----a-w- C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-11-12 22:21:01 EF7A48E5955736BEECF0B0ABB478E90E 478208 ----a-w- C:\WINDOWS\SysWOW64\ieui.dll 2014-11-12 22:21:01 E855B15E1BE0B58F84843D31F4CC4795 501248 ----a-w- C:\WINDOWS\SysWOW64\vbscript.dll 2014-11-12 22:21:00 108D84EE2359C595CCEA32820A2D5405 2051072 ----a-w- C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-11-12 22:20:59 7B0D22C64F9B6A8CD79EFADD29700693 285696 ----a-w- C:\WINDOWS\SysWOW64\dxtrans.dll 2014-11-12 22:20:59 1BE74145FDF58734CFE968063533FBEC 708096 ----a-w- C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-11-12 22:20:58 7BCC24D058205664BD700D272B169AEC 418304 ----a-w- C:\WINDOWS\SysWOW64\dxtmsft.dll 2014-11-12 22:20:56 9F6204775EB03156B430FD095E3D0B5C 325632 ----a-w- C:\WINDOWS\SysWOW64\iedkcs32.dll 2014-11-12 22:20:56 151E64E5D34DFB95D57B5B97C50DE64D 230400 ----a-w- C:\WINDOWS\SysWOW64\webcheck.dll 2014-11-12 22:20:54 BE5EDCACB9E83C3695F650094367740C 99328 ----a-w- C:\WINDOWS\SysWOW64\hlink.dll 2014-11-12 22:20:54 8DFBD587DBEBBC8EB50AD169DE88C449 340992 ----a-w- C:\WINDOWS\SysWOW64\html.iec 2014-11-12 22:20:53 DCFF6E5356CFF5B50BBA0FAAE01A0412 90624 ----a-w- C:\WINDOWS\SysWOW64\iesysprep.dll 2014-11-12 22:20:53 236AD481F1632F4CE7E9835FFD4AF41D 168960 ----a-w- C:\WINDOWS\SysWOW64\msrating.dll 2014-11-12 22:20:52 ED5A4451A1A2777C6C5DB4238FD09078 115712 ----a-w- C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-11-12 22:20:52 8A109878FA68DD1A4C91D8D499797E22 128000 ----a-w- C:\WINDOWS\SysWOW64\iepeers.dll 2014-11-12 22:20:52 45CDC0E37774D30BEE8C5F62CE30D599 1042944 ----a-w- C:\WINDOWS\SysWOW64\actxprxy.dll 2014-11-12 22:20:52 1D391C687102569FD1EA154F0C1A4CE8 91136 ----a-w- C:\WINDOWS\SysWOW64\inseng.dll 2014-11-12 22:20:51 615D259116D1B331911CE28C8CD1CCF3 73216 ----a-w- C:\WINDOWS\SysWOW64\tdc.ocx 2014-11-12 22:20:51 0FEEFF4B96CA5972121F59525142A14E 52736 ----a-w- C:\WINDOWS\SysWOW64\msfeedsbs.dll 2014-11-12 22:20:50 FC51834D5057B9D7847666AE88BC981C 130048 ----a-w- C:\WINDOWS\SysWOW64\occache.dll 2014-11-12 22:20:50 F1313045CDCBBC4C90C34AEF67CEE088 112128 ----a-w- C:\WINDOWS\SysWOW64\IEAdvpack.dll 2014-11-12 22:20:50 971D57DFB6F3FBC98EB74D1AF8E3C13B 76288 ----a-w- C:\WINDOWS\SysWOW64\mshtmled.dll 2014-11-12 22:20:50 02FF387F6228169EDDCB41F5E4B1A4E4 47104 ----a-w- C:\WINDOWS\SysWOW64\jsproxy.dll 2014-11-12 22:20:49 FCAF49AE2E10EF3823262D10E7F2D0DE 60416 ----a-w- C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll 2014-11-12 22:20:49 159199095C9959BE75E61C0FF947708F 152064 ----a-w- C:\WINDOWS\SysWOW64\iexpress.exe 2014-11-12 22:20:48 8D1E12756ED6F1FDB026AD3CF264F90C 40448 ----a-w- C:\WINDOWS\SysWOW64\imgutil.dll 2014-11-12 22:20:48 53E15B8DBD615567CA8895D65746C8D3 64000 ----a-w- C:\WINDOWS\SysWOW64\MshtmlDac.dll 2014-11-12 22:20:47 59607FB7C6B84860CE2D1C5F7C57E052 47616 ----a-w- C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-11-12 22:20:46 EF7B7299A1D6604AD3CA2CE1BEF8C8F3 30720 ----a-w- C:\WINDOWS\SysWOW64\iernonce.dll 2014-11-12 22:20:46 A66A88FFE53BBB9DDAACE0110A8232EC 137728 ----a-w- C:\WINDOWS\SysWOW64\wextract.exe 2014-11-12 22:20:46 316280CC22CBB15271A91D83CDFB73C3 27136 ----a-w- C:\WINDOWS\SysWOW64\licmgr10.dll 2014-11-12 22:20:46 0812A503FF349D1DCEEB820B2E4FEE15 57344 ----a-w- C:\WINDOWS\SysWOW64\pngfilt.dll 2014-11-12 22:20:45 3C544C566EE7091AC52D4D9156C62687 235520 ----a-w- C:\WINDOWS\SysWOW64\url.dll 2014-11-12 22:20:45 26F4BDB6EA83011885E217A51A4A3E68 62464 ----a-w- C:\WINDOWS\SysWOW64\iesetup.dll 2014-11-12 22:20:41 3FA76B67F25D84B3C2A4E8A8C0919E6E 12800 ----a-w- C:\WINDOWS\SysWOW64\mshta.exe 2014-11-12 22:20:41 1BD4CD20A25B4A3A5F7BAAC25E9D9202 11264 ----a-w- C:\WINDOWS\SysWOW64\msfeedssync.exe 2014-11-12 20:11:48 D6691A65D2414AE04200D5FCE7542E90 70768 ----a-w- C:\WINDOWS\SysWOW64\nlssrv32.exe 2014-11-12 09:23:18 3BF6BEBD0A5666BDB426A734A4578D9B 1346048 ----a-w- C:\WINDOWS\SysWOW64\msxml3.dll 2014-11-12 09:23:17 D1A07DE4DC408E5AA5CFBAE261919BDC 72192 ----a-w- C:\WINDOWS\SysWOW64\packager.dll 2014-11-12 09:23:13 FACBA112943A89FBB8AC25085521924F 344536 ----a-w- C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2014-11-12 09:23:13 22B2920A0857BDD61B1331C30AD76F30 424544 ----a-w- C:\WINDOWS\SysWOW64\AudioEng.dll 2014-11-12 09:23:13 0CBA301F325F922FAFB3B83AD3337BB2 370424 ----a-w- C:\WINDOWS\SysWOW64\AudioSes.dll 2014-11-12 09:23:05 CA23E168518460519DC8D49EC6AD9550 18723112 ----a-w- C:\WINDOWS\SysWOW64\shell32.dll 2014-11-12 09:23:00 1FB4389CA807D59B105B0827FCC8F768 11820544 ----a-w- C:\WINDOWS\SysWOW64\twinui.dll 2014-11-12 09:22:59 1793FC07D568C930C04F9FF40FFF9A69 799744 ----a-w- C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2014-11-12 09:22:59 0EEE3F2278E447498B2CDBDF34C63C91 670384 ----a-w- C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2014-11-12 09:22:58 C1AD30D5E28B4291D4A16BC6944ABC0C 2030592 ----a-w- C:\WINDOWS\SysWOW64\WsmSvc.dll 2014-11-12 09:22:58 A208DEE0CD61E24817C26D5A05503DA7 334336 ----a-w- C:\WINDOWS\SysWOW64\puiobj.dll 2014-11-12 09:22:57 17FC09725FEE2546B96A938288509719 485376 ----a-w- C:\WINDOWS\SysWOW64\untfs.dll 2014-11-12 09:22:55 46C1902654FF54C835E4C4E8C14B7F2A 239104 ----a-w- C:\WINDOWS\SysWOW64\FXSAPI.dll ====== C:\WINDOWS\SysWOW64\drivers ===== ====== C:\WINDOWS\Sysnative ===== 2014-11-12 22:23:58 F0CE4A653EEBA09509EAF93AE2226FA9 426496 ----a-w- C:\WINDOWS\Sysnative\schannel.dll 2014-11-12 22:23:58 6DE50D5592C6EE18C87B0C2EEEDC1621 185856 ----a-w- C:\WINDOWS\Sysnative\dpapisrv.dll 2014-11-12 22:23:57 622928F5A8045F8122F10561D6C35ED0 104336 ----a-w- C:\WINDOWS\Sysnative\ncryptsslp.dll 2014-11-12 22:23:54 1D25CC0A9C480C5D56A5A6CF2B5DEB99 3547648 ----a-w- C:\WINDOWS\Sysnative\rdpcorets.dll 2014-11-12 22:23:53 949E590B76018E4523FC71CE510ED9ED 1441792 ----a-w- C:\WINDOWS\Sysnative\lsasrv.dll 2014-11-12 22:23:53 91E59FCB3B32DD84E5DCDA2EA1583807 736768 ----a-w- C:\WINDOWS\Sysnative\adtschema.dll 2014-11-12 22:23:53 488CEA4F1B4D2446FFB7A94E3CB385FE 445440 ----a-w- C:\WINDOWS\Sysnative\certcli.dll 2014-11-12 22:23:53 3D2D2EA099D98FE6B94C7D8C7992C08C 40448 ----a-w- C:\WINDOWS\Sysnative\rfxvmt.dll 2014-11-12 22:23:52 D7B23B3154508256C9F434EF9B65B91D 131584 ----a-w- C:\WINDOWS\Sysnative\rdpudd.dll 2014-11-12 22:23:52 A8484FB640E044858BA19FB4F13DD4CE 154112 ----a-w- C:\WINDOWS\Sysnative\msaudite.dll 2014-11-12 22:23:45 EF745B98D81B8C462DB99FC8B5C4322A 3320320 ----a-w- C:\WINDOWS\Sysnative\msi.dll 2014-11-12 22:23:45 9A108C0A3092110F4651B3AFB9CC7B3D 789184 ----a-w- C:\WINDOWS\Sysnative\oleaut32.dll 2014-11-12 22:23:44 D5B41A0C38408814A3E9BAC8C82B2E5B 2773504 ----a-w- C:\WINDOWS\Sysnative\authui.dll 2014-11-12 22:23:43 D1A2E993DB1867C79177CCC9DB6337D0 116032 ----a-w- C:\WINDOWS\Sysnative\consent.exe 2014-11-12 22:23:43 D0C15BC83B3D0AF4F9B1D70216D91794 428032 ----a-w- C:\WINDOWS\Sysnative\msihnd.dll 2014-11-12 22:23:43 034ED41F13D9C1845C1E081F05B640DB 110080 ----a-w- C:\WINDOWS\Sysnative\appinfo.dll 2014-11-12 22:23:40 DCD090318EC800CF6275C6835900B0C6 3557376 ----a-w- C:\WINDOWS\Sysnative\wuaueng.dll 2014-11-12 22:23:39 BCC10D47920E83EAC8F2E7E2D414692E 894976 ----a-w- C:\WINDOWS\Sysnative\wuapi.dll 2014-11-12 22:23:38 EA2DF5520D3623F353F43809A2F88086 55776 ----a-w- C:\WINDOWS\Sysnative\wuauclt.exe 2014-11-12 22:23:38 E67B019D23320AA0C5F1E6DE5D30546A 407552 ----a-w- C:\WINDOWS\Sysnative\WUSettingsProvider.dll 2014-11-12 22:23:38 CCE7F88AD038494253B485EC1B144EB3 60416 ----a-w- C:\WINDOWS\Sysnative\wups.dll 2014-11-12 22:23:38 70AC0FA699C9420CB282CCF72993C2E1 51712 ----a-w- C:\WINDOWS\Sysnative\wups2.dll 2014-11-12 22:23:38 5D67074419BBFDCA587C2E2A93743E8A 140288 ----a-w- C:\WINDOWS\Sysnative\wuwebv.dll 2014-11-12 22:23:38 4D94560FD4982BB52C1FE64AE38E1A9F 35840 ----a-w- C:\WINDOWS\Sysnative\wuapp.exe 2014-11-12 22:23:38 2E66E7D4F1E39F7048A231AA60FD2532 95744 ----a-w- C:\WINDOWS\Sysnative\wudriver.dll 2014-11-12 22:23:38 2585412FC573F298FCBFD6759F8C4C0F 1714176 ----a-w- C:\WINDOWS\Sysnative\wucltux.dll 2014-11-12 22:23:37 4A112AD7D9C7289FE9945D05E97019D0 17408 ----a-w- C:\WINDOWS\Sysnative\wuaext.dll 2014-11-12 22:23:32 F0A117D19873FCDF801F082F33BFBB6C 1519488 ----a-w- C:\WINDOWS\Sysnative\user32.dll 2014-11-12 22:23:29 668417ED63F9FBE7DD8D7A54B04279DA 14336 ----a-w- C:\WINDOWS\Sysnative\winshfhc.dll 2014-11-12 22:23:19 6432F143CDC9D73BD2BF832CAB2EDC01 25110016 ----a-w- C:\WINDOWS\Sysnative\mshtml.dll 2014-11-12 22:21:45 BED4D30B7FF094E368333CE2D1CE3195 14390272 ----a-w- C:\WINDOWS\Sysnative\ieframe.dll 2014-11-12 22:21:19 079FEE6FC11A74E4309B6A10931C1CB2 6040064 ----a-w- C:\WINDOWS\Sysnative\jscript9.dll 2014-11-12 22:21:10 BF1FC65A307B31939ADF7F976FDE033C 2365440 ----a-w- C:\WINDOWS\Sysnative\wininet.dll 2014-11-12 22:21:08 559E084EEBE44864493B2903433F19B3 1550336 ----a-w- C:\WINDOWS\Sysnative\urlmon.dll 2014-11-12 22:21:07 22CBDB8810CBED0B4F5E4BE69D7E2AE8 2884096 ----a-w- C:\WINDOWS\Sysnative\iertutil.dll 2014-11-12 22:21:06 62D54F4673A6208C8CC147758122B3C3 2865152 ----a-w- C:\WINDOWS\Sysnative\actxprxy.dll 2014-11-12 22:21:06 46B5DD7C4B1851F59E48302185E076DF 1032704 ----a-w- C:\WINDOWS\Sysnative\inetcomm.dll 2014-11-12 22:21:04 DE58DE2C6C8439B7174D6D3568AA4A80 814080 ----a-w- C:\WINDOWS\Sysnative\jscript9diag.dll 2014-11-12 22:21:03 587DEBB59F5F14C9610966FB14A33607 633856 ----a-w- C:\WINDOWS\Sysnative\ieui.dll 2014-11-12 22:21:03 0D03DAD6BB183156C70F863D0F2FA55A 812544 ----a-w- C:\WINDOWS\Sysnative\jscript.dll 2014-11-12 22:21:02 200CEA827BDC503F00C0AED0EA227D49 800768 ----a-w- C:\WINDOWS\Sysnative\msfeeds.dll 2014-11-12 22:21:01 258C3082AD82C1AAD335DA3FE2D3EB25 580096 ----a-w- C:\WINDOWS\Sysnative\vbscript.dll 2014-11-12 22:20:59 F7522B00C823794F86ABD5BE1F3D6B09 316928 ----a-w- C:\WINDOWS\Sysnative\dxtrans.dll 2014-11-12 22:20:59 175C139D51F99099D1BDA17794B02191 490496 ----a-w- C:\WINDOWS\Sysnative\dxtmsft.dll 2014-11-12 22:20:58 BC3B7CCE855F9A8E7BC96F7062229A02 799232 ----a-w- C:\WINDOWS\Sysnative\ieapfltr.dll 2014-11-12 22:20:58 62E2FCF45F349DE6CAFB3AA7E1D81DA4 2124288 ----a-w- C:\WINDOWS\Sysnative\inetcpl.cpl 2014-11-12 22:20:57 A7F53772ECAE2F44B455D14F71179940 48640 ----a-w- C:\WINDOWS\Sysnative\ieetwproxystub.dll 2014-11-12 22:20:56 853BB696932E4C48EE7034BFF1209A5A 262144 ----a-w- C:\WINDOWS\Sysnative\webcheck.dll 2014-11-12 22:20:54 9CD8D475F462F82E6FD8BFCA7186ACD4 372736 ----a-w- C:\WINDOWS\Sysnative\iedkcs32.dll 2014-11-12 22:20:53 FD7C8FAC461BED1FEEB808E477D884D4 716800 ----a-w- C:\WINDOWS\Sysnative\ie4uinit.exe 2014-11-12 22:20:53 F0A53129AE95A895EC8C4DC36E1797A2 108544 ----a-w- C:\WINDOWS\Sysnative\hlink.dll 2014-11-12 22:20:53 E40D3696BE4852956669C285038B37A6 114688 ----a-w- C:\WINDOWS\Sysnative\ieetwcollector.exe 2014-11-12 22:20:53 AF28C90094C4C50F083599C10D2DC072 145408 ----a-w- C:\WINDOWS\Sysnative\iepeers.dll 2014-11-12 22:20:53 8AE1AC97407CD82D8389390C21430579 111616 ----a-w- C:\WINDOWS\Sysnative\iesysprep.dll 2014-11-12 22:20:53 1C3C54FA2D620DF3093F356A56EC5957 144384 ----a-w- C:\WINDOWS\Sysnative\ieUnatt.exe 2014-11-12 22:20:51 C9AB2198141844D3DF96B4552CE9D5AB 77824 ----a-w- C:\WINDOWS\Sysnative\JavaScriptCollectionAgent.dll 2014-11-12 22:20:51 A348DEFC16B6FBC88B7D61C3B861BCB1 107520 ----a-w- C:\WINDOWS\Sysnative\inseng.dll 2014-11-12 22:20:51 85E97591864F3125C5B08FB44E0E8078 60416 ----a-w- C:\WINDOWS\Sysnative\msfeedsbs.dll 2014-11-12 22:20:51 2E475D2FCE0125FA0C486DB9D59E739B 417280 ----a-w- C:\WINDOWS\Sysnative\html.iec 2014-11-12 22:20:51 00FB2FB8C27C834CF575BC415B80F995 87552 ----a-w- C:\WINDOWS\Sysnative\tdc.ocx 2014-11-12 22:20:50 F79E5258AF040A8AD83C7C1273A071C3 54784 ----a-w- C:\WINDOWS\Sysnative\jsproxy.dll 2014-11-12 22:20:50 2CEACC509889A095828F27115257408D 92160 ----a-w- C:\WINDOWS\Sysnative\mshtmled.dll 2014-11-12 22:20:49 70576D76A11DD5AE54E719297A315F90 88064 ----a-w- C:\WINDOWS\Sysnative\MshtmlDac.dll 2014-11-12 22:20:49 3721721151DB49457B0FD35E0C04594C 199680 ----a-w- C:\WINDOWS\Sysnative\msrating.dll 2014-11-12 22:20:48 DD8FD33C108F14681A410067AB21DDF3 152064 ----a-w- C:\WINDOWS\Sysnative\occache.dll 2014-11-12 22:20:48 161BC2E883A8D8759A4DCF2A85AF9128 51200 ----a-w- C:\WINDOWS\Sysnative\imgutil.dll 2014-11-12 22:20:47 D66D11191B48007179B0A77DC0717267 33280 ----a-w- C:\WINDOWS\Sysnative\licmgr10.dll 2014-11-12 22:20:47 6096209CB47D61499C3608B9C25B073C 64512 ----a-w- C:\WINDOWS\Sysnative\pngfilt.dll 2014-11-12 22:20:46 6A7F8D139610E5F3F158182778EF9275 34304 ----a-w- C:\WINDOWS\Sysnative\iernonce.dll 2014-11-12 22:20:45 F54E1190251EB245183BF16D6C315613 237568 ----a-w- C:\WINDOWS\Sysnative\url.dll 2014-11-12 22:20:45 CDC8A85EB301A8CBE55A81A1D55AF5E5 132096 ----a-w- C:\WINDOWS\Sysnative\IEAdvpack.dll 2014-11-12 22:20:44 4B9C652BD0FD95A9E6123913C35519D6 143872 ----a-w- C:\WINDOWS\Sysnative\wextract.exe 2014-11-12 22:20:42 E99E2E88BFE584184AE92B1F8995CE93 66560 ----a-w- C:\WINDOWS\Sysnative\iesetup.dll 2014-11-12 22:20:41 CA2F3153EF3BCB0BD3A8984C933DF604 167424 ----a-w- C:\WINDOWS\Sysnative\iexpress.exe 2014-11-12 22:20:40 66585D645C4E23A0FD5124BD714AE020 12800 ----a-w- C:\WINDOWS\Sysnative\msfeedssync.exe 2014-11-12 22:20:39 A3871DED5ED88F59C0D1396761708F81 13824 ----a-w- C:\WINDOWS\Sysnative\mshta.exe 2014-11-12 20:11:47 D6691A65D2414AE04200D5FCE7542E90 70768 ----a-w- C:\WINDOWS\Sysnative\nlssrv32.exe 2014-11-12 09:23:18 B31C4917EC5EADE24A90DDAF37EA00E0 4182016 ----a-w- C:\WINDOWS\Sysnative\win32k.sys 2014-11-12 09:23:18 93645AEBE163230A2ED5050C14AE6603 2149376 ----a-w- C:\WINDOWS\Sysnative\msxml3.dll 2014-11-12 09:23:17 84549E8C8BF76B293A7E625A98D4BCF9 81408 ----a-w- C:\WINDOWS\Sysnative\packager.dll 2014-11-12 09:23:16 D18149850795E7203610CEE9491515F1 304128 ----a-w- C:\WINDOWS\Sysnative\generaltel.dll 2014-11-12 09:23:16 9E20A052D83A81AEC35B2EA29F32637A 391168 ----a-w- C:\WINDOWS\Sysnative\devinv.dll 2014-11-12 09:23:16 91BB0DDA472733457072DA61178FA48E 228864 ----a-w- C:\WINDOWS\Sysnative\aepdu.dll 2014-11-12 09:23:16 22ED46DE0E684749DA1BD703526FAA26 537088 ----a-w- C:\WINDOWS\Sysnative\aeinv.dll 2014-11-12 09:23:15 F00E643D9244F31ECF5DE8A98C2C5FC6 98816 ----a-w- C:\WINDOWS\Sysnative\aepic.dll 2014-11-12 09:23:13 DFDFDE2EA4B5CD0606BA6E56ECEE502D 272248 ----a-w- C:\WINDOWS\Sysnative\audiodg.exe 2014-11-12 09:23:13 C0484CA5C7F87E38909746B63C7FC868 911360 ----a-w- C:\WINDOWS\Sysnative\audiosrv.dll 2014-11-12 09:23:13 BB93DAAAE9006598935192B9CB65E475 108432 ----a-w- C:\WINDOWS\Sysnative\EncDump.dll 2014-11-12 09:23:13 9F87516BF76C40B41D831F7D729A6044 482872 ----a-w- C:\WINDOWS\Sysnative\AudioEng.dll 2014-11-12 09:23:13 9C88C9397B44B76E5C9A44B8E2CE53A1 500016 ----a-w- C:\WINDOWS\Sysnative\AudioSes.dll 2014-11-12 09:23:13 8085F95BB18A171E7221D2831BC08BC2 394120 ----a-w- C:\WINDOWS\Sysnative\AUDIOKSE.dll 2014-11-12 09:23:13 7F70B1044272982AAEA7C16E83424770 226304 ----a-w- C:\WINDOWS\Sysnative\AudioEndpointBuilder.dll 2014-11-12 09:23:08 1D303CE5BCBD5B80BBA08321F28A3F86 21197152 ----a-w- C:\WINDOWS\Sysnative\shell32.dll 2014-11-12 09:23:06 BCE66E78D388875B87286CA091E7075F 7484224 ----a-w- C:\WINDOWS\Sysnative\ntoskrnl.exe 2014-11-12 09:23:03 C4306ADC38939CAC60EA38AAD9F170C0 13424128 ----a-w- C:\WINDOWS\Sysnative\twinui.dll 2014-11-12 09:23:03 1907823D5ACFD75D1D8C0D4318299726 2714112 ----a-w- C:\WINDOWS\Sysnative\SettingsHandlers.dll 2014-11-12 09:23:01 CA729FCE295895515A09BD6FF7903DC8 836176 ----a-w- C:\WINDOWS\Sysnative\mfmp4srcsnk.dll 2014-11-12 09:23:01 C88B63FE96DB4BCED65DD442BC8E77F5 1053184 ----a-w- C:\WINDOWS\Sysnative\localspl.dll 2014-11-12 09:23:01 A208498C5CD750A1743C1AC8162A810F 941568 ----a-w- C:\WINDOWS\Sysnative\MFMediaEngine.dll 2014-11-12 09:22:59 50E96089F9BE352621997143A56C8E76 822272 ----a-w- C:\WINDOWS\Sysnative\win32spl.dll 2014-11-12 09:22:58 9CE162EB9057CF079736F4DD00FC0D6C 2480128 ----a-w- C:\WINDOWS\Sysnative\WsmSvc.dll 2014-11-12 09:22:58 5416C603B6C85CF0698E8A2A1D28BAA2 448512 ----a-w- C:\WINDOWS\Sysnative\puiobj.dll 2014-11-12 09:22:57 8758F5DEBD2B950B2D56ED11F9E0B38F 545792 ----a-w- C:\WINDOWS\Sysnative\untfs.dll 2014-11-12 09:22:56 9C55CE9707B3CA29A6505BCDCC546390 275968 ----a-w- C:\WINDOWS\Sysnative\FXSAPI.dll 2014-11-12 09:22:56 6C118AEDD15FDBEAECC0E85C64B5B86B 615424 ----a-w- C:\WINDOWS\Sysnative\FXSCOMEX.dll 2014-11-12 09:22:55 A92EF73B02686B7E6F070B486512DB88 389176 ----a-w- C:\WINDOWS\Sysnative\ApnDatabase.xml ====== C:\WINDOWS\Sysnative\drivers ===== 2014-11-17 18:54:11 26C43960C99EE861A5D0EDC4DCF3B1C3 129752 ----a-w- C:\WINDOWS\Sysnative\drivers\MBAMSwissArmy.sys 2014-11-17 18:53:39 D3311B31C470E7681B14D9B014CBF9ED 93400 ----a-w- C:\WINDOWS\Sysnative\drivers\mbamchameleon.sys 2014-11-17 18:53:39 D1F2D4DF0A5D3B700794E26356A55B44 64216 ----a-w- C:\WINDOWS\Sysnative\drivers\mwac.sys 2014-11-17 18:53:39 5C3669B71657F22E67A1D4BD49D2CBE7 25816 ----a-w- C:\WINDOWS\Sysnative\drivers\mbam.sys 2014-11-12 22:23:53 9F08A6608F98B5407E7DDBCF306573EF 27456 ----a-w- C:\WINDOWS\Sysnative\drivers\rdpvideominiport.sys 2014-11-12 22:23:53 6D2EE96150E35B9EA49F2B481DE0369A 177472 ----a-w- C:\WINDOWS\Sysnative\drivers\ksecpkg.sys 2014-11-12 22:23:53 4E1207CE16E615B0B7A70DC889F4500E 563976 ----a-w- C:\WINDOWS\Sysnative\drivers\cng.sys 2014-11-12 22:23:31 DE8D12B4C3F55FA2C5E9774314F6C58A 258368 ----a-w- C:\WINDOWS\Sysnative\drivers\WdFilter.sys 2014-11-12 22:23:30 4AD874CDC812EC156265E451B6B09DAB 114496 ----a-w- C:\WINDOWS\Sysnative\drivers\WdNisDrv.sys 2014-11-12 22:23:30 0359607177E5E9F6041136CC0A5CB0B6 35320 ----a-w- C:\WINDOWS\Sysnative\drivers\WdBoot.sys 2014-11-12 09:23:02 CCB3A2BB60FE5073F2DEA63FE83CF8FE 2497344 ----a-w- C:\WINDOWS\Sysnative\drivers\tcpip.sys 2014-11-12 09:22:59 E3FCE2A6B3533D99A3B498504DF9CC47 474432 ----a-w- C:\WINDOWS\Sysnative\drivers\netio.sys 2014-11-12 09:22:57 7F23E38C5B6448F91439E4066645191E 428864 ----a-w- C:\WINDOWS\Sysnative\drivers\FWPKCLNT.SYS 2014-11-12 09:22:57 66732C13628BDB1AB0D6FD46027327C2 148800 ----a-w- C:\WINDOWS\Sysnative\drivers\USBSTOR.SYS ====== C:\WINDOWS\Tasks ====== 2014-10-23 15:08:09 6B09FDCDD867B468D6D2D1F038B27F0F 3334 ----a-w- C:\WINDOWS\Sysnative\Tasks\AcerCloud ====== C:\WINDOWS\Temp ====== ======= C:\Program Files ===== 2014-11-17 08:27:47 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== 2014-11-12 20:11:48 -------- d-----w- C:\PROGRA~2\onOne Software ======= C: ===== 2014-11-16 16:01:01 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\autoexec.bat ====== C:\Users\Gebruiker\AppData\Roaming ====== 2014-10-21 18:00:54 -------- d-sh--w- C:\Users\Gebruiker\AppData\Locallow\EmieUserList ====== C:\Users\Gebruiker ====== 2014-11-16 16:00:26 -------- d-----w- C:\Users\Gebruiker\Start Menu 2014-11-16 14:13:24 -------- d-----w- C:\Users\Gebruiker\abBox 2014-11-16 14:12:48 -------- d-----r- C:\Users\Gebruiker\Saved Games 2014-11-16 14:12:40 -------- d-----r- C:\Users\Gebruiker\Contacts 2014-11-12 20:11:44 -------- d-----w- C:\ProgramData\onOne Software 2014-11-11 13:36:07 -------- d-----r- C:\Users\Gebruiker\Videos ====== C: exe-files == 2014-11-18 11:47:04 C4CF03B998D4D758B89CD07F22D7A7F9 645168 ----a-w- C:\Users\Gebruiker\AppData\Local\Temp\MSS\3.8.150.1\McUICnt.exe 2014-11-17 08:27:47 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Gebruiker.exe 2014-11-16 04:43:05 5B4ED5734945619EE3BCDB9825D2F526 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe 2014-11-16 04:43:05 06036279056145E0F08FC095CB789E6A 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleUpdateBroker.exe 2014-11-16 04:42:49 87EB5AFD21E52CB08883E04605B55829 880784 ----a-w- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleUpdateSetup.exe 2014-11-16 04:42:36 EDD3E562684CB4C50704B471BEAB1F86 114568 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleUpdateComRegisterShell64.exe 2014-11-16 04:42:36 7161E8E31B7FD3B1CE083C2CA5FD5F44 285064 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe 2014-11-16 04:42:35 CB8C1CC4F46FBAC78150754D77460C73 230792 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe 2014-11-16 04:42:34 F172AD4E906D97ED8F071896FC6789DC 107912 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleUpdate.exe 2014-11-16 04:42:23 87EB5AFD21E52CB08883E04605B55829 880784 ----a-w- C:\Program Files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.25.11\GoogleUpdateSetup.exe 2014-11-12 22:23:43 D1A2E993DB1867C79177CCC9DB6337D0 116032 ----a-w- C:\Windows\System32\consent.exe 2014-11-12 22:23:38 EA2DF5520D3623F353F43809A2F88086 55776 ----a-w- C:\Windows\System32\wuauclt.exe 2014-11-12 22:23:38 514AEA6CF4B70FAA30A2BC4B4CC10A39 29696 ----a-w- C:\Windows\SysWOW64\wuapp.exe 2014-11-12 22:23:38 4D94560FD4982BB52C1FE64AE38E1A9F 35840 ----a-w- C:\Windows\System32\wuapp.exe 2014-11-12 22:20:53 FD7C8FAC461BED1FEEB808E477D884D4 716800 ----a-w- C:\Windows\System32\ie4uinit.exe 2014-11-12 22:20:53 E40D3696BE4852956669C285038B37A6 114688 ----a-w- C:\Windows\System32\ieetwcollector.exe 2014-11-12 22:20:53 1C3C54FA2D620DF3093F356A56EC5957 144384 ----a-w- C:\Windows\System32\ieUnatt.exe 2014-11-12 22:20:52 ED5A4451A1A2777C6C5DB4238FD09078 115712 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe 2014-11-12 22:20:49 5AC6DB399DE418E3955F0CA4567BDD37 813712 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe 2014-11-12 22:20:49 159199095C9959BE75E61C0FF947708F 152064 ----a-w- C:\Windows\SysWOW64\iexpress.exe 2014-11-12 22:20:48 5F1B1148C830C0F149A476A58CE0D09D 815248 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe 2014-11-12 22:20:47 8D7C6EE90630126F79275BAC5FE16E51 468992 ----a-w- C:\Program Files (x86)\Internet Explorer\ieinstal.exe 2014-11-12 22:20:46 A66A88FFE53BBB9DDAACE0110A8232EC 137728 ----a-w- C:\Windows\SysWOW64\wextract.exe 2014-11-12 22:20:46 8CFC152DF5D4FCFD621EF3E231999D03 484352 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe 2014-11-12 22:20:45 CFB15ED916904B30D32DFDE29B67CDCC 25600 ----a-w- C:\Program Files (x86)\Internet Explorer\ExtExport.exe 2014-11-12 22:20:44 CC5C5634FA72689449B4BF7960AC1AD5 222720 ----a-w- C:\Program Files\Internet Explorer\ielowutil.exe 2014-11-12 22:20:44 6A16741182E4C1E83636053C81CE344E 221184 ----a-w- C:\Program Files (x86)\Internet Explorer\ielowutil.exe 2014-11-12 22:20:44 4B9C652BD0FD95A9E6123913C35519D6 143872 ----a-w- C:\Windows\System32\wextract.exe 2014-11-12 22:20:41 CA2F3153EF3BCB0BD3A8984C933DF604 167424 ----a-w- C:\Windows\System32\iexpress.exe 2014-11-12 22:20:41 3FA76B67F25D84B3C2A4E8A8C0919E6E 12800 ----a-w- C:\Windows\SysWOW64\mshta.exe 2014-11-12 22:20:41 1BD4CD20A25B4A3A5F7BAAC25E9D9202 11264 ----a-w- C:\Windows\SysWOW64\msfeedssync.exe 2014-11-12 22:20:40 66585D645C4E23A0FD5124BD714AE020 12800 ----a-w- C:\Windows\System32\msfeedssync.exe 2014-11-12 22:20:39 A3871DED5ED88F59C0D1396761708F81 13824 ----a-w- C:\Windows\System32\mshta.exe 2014-11-12 20:11:48 D6691A65D2414AE04200D5FCE7542E90 70768 ----a-w- C:\Windows\SysWOW64\nlssrv32.exe 2014-11-12 20:11:47 D6691A65D2414AE04200D5FCE7542E90 70768 ----a-w- C:\Windows\System32\nlssrv32.exe 2014-11-12 20:11:46 2972C90CDB8A129E31C2798A862422EB 819592 ----a-w- C:\Program Files (x86)\InstallShield Installation Information\{54F3375C-5F19-4DE6-957B-EDE4EFEA5F23}\setup.exe 2014-11-12 09:23:13 DFDFDE2EA4B5CD0606BA6E56ECEE502D 272248 ----a-w- C:\Windows\System32\audiodg.exe 2014-11-12 09:23:06 BCE66E78D388875B87286CA091E7075F 7484224 ----a-w- C:\Windows\System32\ntoskrnl.exe 2014-11-12 09:22:57 00027BEFE4F0106DEC51901872EEDB85 86784 ----a-w- C:\Windows\ImmersiveControlPanel\SystemSettings.exe === C: other files == 2014-11-17 18:54:11 26C43960C99EE861A5D0EDC4DCF3B1C3 129752 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys 2014-11-17 18:53:39 D3311B31C470E7681B14D9B014CBF9ED 93400 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys 2014-11-17 18:53:39 D1F2D4DF0A5D3B700794E26356A55B44 64216 ----a-w- C:\Windows\System32\drivers\mwac.sys 2014-11-17 18:53:39 5C3669B71657F22E67A1D4BD49D2CBE7 25816 ----a-w- C:\Windows\System32\drivers\mbam.sys 2014-11-16 16:01:01 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\autoexec.bat 2014-11-12 22:23:53 9F08A6608F98B5407E7DDBCF306573EF 27456 ----a-w- C:\Windows\System32\drivers\rdpvideominiport.sys 2014-11-12 22:23:53 6D2EE96150E35B9EA49F2B481DE0369A 177472 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys 2014-11-12 22:23:53 4E1207CE16E615B0B7A70DC889F4500E 563976 ----a-w- C:\Windows\System32\drivers\cng.sys 2014-11-12 22:23:31 DE8D12B4C3F55FA2C5E9774314F6C58A 258368 ----a-w- C:\Windows\System32\drivers\WdFilter.sys 2014-11-12 22:23:30 4AD874CDC812EC156265E451B6B09DAB 114496 ----a-w- C:\Windows\System32\drivers\WdNisDrv.sys 2014-11-12 22:23:30 0359607177E5E9F6041136CC0A5CB0B6 35320 ----a-w- C:\Windows\System32\drivers\WdBoot.sys 2014-11-12 09:23:18 B31C4917EC5EADE24A90DDAF37EA00E0 4182016 ----a-w- C:\Windows\System32\win32k.sys 2014-11-12 09:23:02 CCB3A2BB60FE5073F2DEA63FE83CF8FE 2497344 ----a-w- C:\Windows\System32\drivers\tcpip.sys 2014-11-12 09:22:59 E3FCE2A6B3533D99A3B498504DF9CC47 474432 ----a-w- C:\Windows\System32\drivers\netio.sys 2014-11-12 09:22:57 7F23E38C5B6448F91439E4066645191E 428864 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS 2014-11-12 09:22:57 66732C13628BDB1AB0D6FD46027327C2 148800 ----a-w- C:\Windows\System32\drivers\USBSTOR.SYS ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-291832244-1776431606-1187519520-1001\Software\Microsoft\Windows\CurrentVersion\Run] "AdobeBridge"="C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe -stealth" "AcerPortal"="C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe startup" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "mcui_exe"="C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey" "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun" "GrooveMonitor"="C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" "AdobeCS5ServiceManager"="C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe -launchedbylogin" "SwitchBoard"="C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "BacKGround Agent"="C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "AdobeBridge"="C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe -stealth" "AcerPortal"="C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe startup" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "BtPreLoad"="C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtPreLoad.exe" "AdobeAAMUpdater-1.0"="C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" "EPSON Stylus DX3800"="C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_FATIACE.EXE /F C:\WINDOWS\TEMP\E_S9873.tmp /EF HKLM" "EPSON Stylus DX3800 Series"="C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_FATIACE.EXE /F C:\WINDOWS\TEMP\E_S248A.tmp /EF HKLM" ==== Startup Folders ====================== 2014-08-20 13:33:32 1111 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk 2013-09-28 10:54:56 1941 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer Remote.lnk ==== Task Scheduler Jobs ====================== C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a-------- C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [11-11-2014 21:34] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [09-04-2014 13:22] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [09-04-2014 13:22] ==== Other Scheduled Tasks ====================== "C:\WINDOWS\SysNative\tasks\AcerCloud" [C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe] "C:\WINDOWS\SysNative\tasks\Adobe Flash Player Updater" [C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\WINDOWS\SysNative\tasks\ALU" [C:\Program Files (x86)\Acer\Live Updater\updater.exe] "C:\WINDOWS\SysNative\tasks\ALUAgent" [C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe] "C:\WINDOWS\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\BrowserChoice\browserchoice.exe] "C:\WINDOWS\SysNative\tasks\DeviceDetector" [C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\Hotkey Utility" ["C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe"] "C:\WINDOWS\SysNative\tasks\Power Management" ["C:\Program Files\Acer\Acer Power Management\ePowerTray.exe"] "C:\WINDOWS\SysNative\tasks\User_Feed_Synchronization-{8DD9C166-183D-40E4-AE16-870EE1BB98BC}" [C:\WINDOWS\system32\msfeedssync.exe] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}"="C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}" [20-12-2013 20:31] [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "{e4f94d1e-2f53-401e-8885-681602c0ddd8}"="C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi" [04-04-2014 11:36] ==== Firefox Extensions ====================== AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\smv6sx65.default 67D325B5AEB28E381B84E8DE1A90C7A8 - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll - Shockwave Flash ==== Chromium Look ====================== ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://acer13.msn.com" "Search Page"="http://www.google.com" "Search Bar"="http://www.google.com/ie" "Default_Search_URL"="http://www.google.com/ie" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] @="http://www.google.com/search?q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search] "SearchAssistant"="http://www.google.com/ie" "Default_Search_URL"="http://www.google.com/ie" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{06C3003F-3C29-4940-B683-38AD2D42141A}" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://acer13.msn.com" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.msn.com/results.asp?q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search] "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02" {06C3003F-3C29-4940-B683-38AD2D42141A} Unknown Url="Not_Found" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Goo Url="http://www.google.com/search?q={sear" ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-291832244-1776431606-1187519520-1001\Software\Microsoft\Internet Explorer\SearchScopes\{06C3003F-3C29-4940-B683-38AD2D42141A} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\203E62EEA6789D84098513925E9B9999 deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F405350054677A7A857BC01110 deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EE26E302-876A-48D9-9058-3129E5B99999} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C1101} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\203E62EEA6789D84098513925E9B9999 deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D2A425F405350054677A7A857BC01110 deleted successfully ==== Empty IE Cache ====================== C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully ==== Empty FireFox Cache ====================== C:\Users\Gebruiker\AppData\Local\Mozilla\Firefox\Profiles\smv6sx65.default\cache2 emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=11 folders=4 192492949 bytes) ==== Empty Temp Folders ====================== C:\Users\A\AppData\Local\Temp emptied successfully C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Gebruiker\AppData\Local\Temp will be emptied at reboot C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\WINDOWS\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\WINDOWS\Temp successfully emptied C:\Users\GEBRUI~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on di 18-11-2014 at 14:15:54,76 ======================