Zoek.exe v5.0.0.0 Updated 18-01-2015 Tool run by Jelmer on ma 19-01-2015 at 22:53:48,15. Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Jelmer\Downloads\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 19-1-2015 22:56:48 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\Program Files\GrabIt deleted successfully C:\Program Files\MSXML 4.0 deleted successfully C:\PROGRA~2\Oracle deleted successfully C:\Users\Jelmer\AppData\Roaming\.# deleted successfully C:\Users\Jelmer\AppData\Roaming\Three Rings Design deleted successfully C:\Users\Jelmer\AppData\Roaming\Windows Live Writer deleted successfully C:\Users\Gast\AppData\Local\VirtualStore deleted successfully C:\Users\Jelmer\AppData\Local\AmoltoCallRecorder deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-3799817470-1835505006-930431846-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32004B8A-44A9-43E7-84E9-808838809519} deleted successfully HKEY_USERS\S-1-5-21-3799817470-1835505006-930431846-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3fed0486-986d-4c35-ec94-4d3d9a8f6caf} deleted successfully HKEY_USERS\S-1-5-21-3799817470-1835505006-930431846-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BA300214-DAE5-4BA8-A42F-645A186FFB56} deleted successfully HKEY_USERS\S-1-5-21-3799817470-1835505006-930431846-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cefc0af2-0e23-4c01-739f-81909e6e3687} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-3799817470-1835505006-930431846-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} deleted successfully HKEY_USERS\S-1-5-21-3799817470-1835505006-930431846-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== C:\Program Files\ArcGIS deleted C:\Program Files\GUTEE25.tmp deleted C:\Program Files\GUMEDF5.tmp deleted C:\PROGRA~2\hash.dat deleted C:\PROGRA~2\PC Drivers HeadQuarters deleted C:\Users\Gast.PC_van_Jelmer\AppData\LocalLow\Toolbar4 deleted C:\Users\Jelmer\AppData\LocalLow\Toolbar4 deleted C:\Windows\System32\SearchProtect deleted "C:\Users\Jelmer\AppData\Local\{685F4A7B-DC75-49D6-9BE1-9D0D405BD912}" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Jelmer\AppData\Local\Temp ==== 2015-01-19 11:23:29 97511FE2CA09CC2E06C3CD6519C3494E 43008 ----a-w- C:\Users\Jelmer\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmptjdf73.dll ====== Java Cache ===== 2015-01-09 03:12:28 8D1F48BAAC3263F592020471E6477E94 14016 ----a-w- C:\Users\Jelmer\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\6a4d5f58-44e1fa19 ====== C:\Windows\system32 ===== 2015-01-16 08:55:05 C96411DD46AABC0D6F3CF06D0E0E7E14 174080 ----a-w- C:\Windows\System32\nlasvc.dll 2015-01-16 08:55:05 66BCFB248EF26CABCD955FB27A7D439B 93184 ----a-w- C:\Windows\System32\ncsi.dll 2015-01-16 08:55:05 16D4D2D721E6DB8518225A37674163F8 48640 ----a-w- C:\Windows\System32\nlaapi.dll 2015-01-16 08:53:42 0D5DAD610D7EA1627581ED06FB2BAA9A 153600 ----a-w- C:\Windows\System32\profsvc.dll ====== C:\Windows\system32\drivers ===== 2015-01-16 09:38:28 B0584CA7DEF55929FDB5169BD28B2484 115200 ----a-w- C:\Windows\System32\drivers\mrxdav.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2015-01-18 17:03:06 -------- d-----w- C:\Program Files\trend micro 2015-01-17 17:46:00 -------- d-----w- C:\Program Files\MSECache 2015-01-04 11:28:52 -------- d-----w- C:\Program Files\Amolto Call Recorder for Skype ======= C: ===== ====== C:\Users\Jelmer\AppData\Roaming ====== 2015-01-17 13:57:49 -------- d-----w- C:\Users\Jelmer\AppData\Local\ElevatedDiagnostics 2015-01-06 09:39:23 -------- d-----w- C:\Users\Jelmer\AppData\Local\Vensim 2015-01-04 11:30:16 -------- d-----w- C:\Users\Jelmer\AppData\Roaming\Amolto 2015-01-04 11:29:55 -------- d-----w- C:\Users\Jelmer\AppData\Local\Amolto ====== C:\Users\Jelmer ====== 2015-01-18 17:02:29 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\Users\Jelmer\Downloads\RSIT.exe 2015-01-17 17:32:02 F12FE98405679BDAD148C491D98E5166 38824552 ----a-w- C:\Users\Jelmer\Downloads\FileFormatConverters.exe 2015-01-17 13:55:44 A0844C730F1091B491A8737404F4C914 347816 ----a-w- C:\Users\Jelmer\Downloads\MicrosoftFixit.WordStartup.Run.exe 2015-01-04 11:28:59 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amolto ====== C: exe-files == 2015-01-18 17:03:08 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Jelmer.exe 2015-01-18 17:02:29 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\Users\Jelmer\Downloads\RSIT.exe 2015-01-17 17:32:02 F12FE98405679BDAD148C491D98E5166 38824552 ----a-w- C:\Users\Jelmer\Downloads\FileFormatConverters.exe 2015-01-17 13:55:44 A0844C730F1091B491A8737404F4C914 347816 ----a-w- C:\Users\Jelmer\Downloads\MicrosoftFixit.WordStartup.Run.exe 2015-01-14 01:46:29 BA7DC0C9141BE7292CA7E744B6F19F26 897104 ----a-w- C:\Program Files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\39.0.2171.99\39.0.2171.99_39.0.2171.95_chrome_updater.exe === C: other files == 2015-01-16 09:38:28 B0584CA7DEF55929FDB5169BD28B2484 115200 ----a-w- C:\Windows\System32\drivers\mrxdav.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_USERS\S-1-5-21-3799817470-1835505006-930431846-1000\Software\Microsoft\Windows\CurrentVersion\Run] "LightScribe Control Panel"="C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" "Spotify Web Helper"="C:\Users\Jelmer\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" "uTorrent"="C:\Users\Jelmer\AppData\Roaming\uTorrent\uTorrent.exe /MINIMIZED" "AmoltoRecorder"="C:\Program Files\Amolto Call Recorder for Skype\AmoltoRecorder.exe /minimized" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun" "DVDAgent"="C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe" "TSMAgent"="C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe" "CLMLServer for HP TouchSmart"="C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe" "UCam_Menu"="C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe C:\Program Files\Hewlett-Packard\Media\Webcam update Software\Hewlett-Packard\Media\Webcam" "UpdateLBPShortCut"="C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe C:\Program Files\CyberLink\LabelPrint UpdateWithCreateOnce Software\CyberLink\LabelPrint\2.5" "UpdatePSTShortCut"="C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe C:\Program Files\CyberLink\DVD Suite UpdateWithCreateOnce Software\CyberLink\PowerStarter" "QlbCtrl.exe"="C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start" "UpdateP2GoShortCut"="C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe C:\Program Files\CyberLink\Power2Go UpdateWithCreateOnce SOFTWARE\CyberLink\Power2Go\6.0" "UpdatePDIRShortCut"="C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe C:\Program Files\CyberLink\PowerDirector UpdateWithCreateOnce SOFTWARE\CyberLink\PowerDirector\7.0" "HP Health Check Scheduler"="c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" "WirelessAssistant"="C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" "Google Quick Search Box"="C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe /autorun" "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" "egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe /hide /waitservice" "TVAgent"="C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe" "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe" "ToolboxFX"="C:\Program Files\HP\ToolboxFX\bin\HPTLBXFX.exe /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on" "HP LaserJet Professional M1530 MFP Series Fax"="C:\Program Files\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe HP LaserJet Professional M1530 MFP Series Fax" "HP Software Update"="C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe" "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe " "SmartMenu"="%ProgramFiles%\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" "Windows Defender"="%ProgramFiles%\Windows Defender\MSASCui.exe -hide" "SysTrayApp"="C:\Program Files\IDT\WDM\sttray.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "LightScribe Control Panel"="C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" "Spotify Web Helper"="C:\Users\Jelmer\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" "uTorrent"="C:\Users\Jelmer\AppData\Roaming\uTorrent\uTorrent.exe /MINIMIZED" "AmoltoRecorder"="C:\Program Files\Amolto Call Recorder for Skype\AmoltoRecorder.exe /minimized" ==== Startup Folders ====================== 2014-08-14 08:23:58 1040 ----a-w- C:\Users\Jelmer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk 2009-10-20 11:22:19 1115 ----a-w- C:\Users\Jelmer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Schermopname en Snel starten.lnk 2009-04-30 01:37:00 797 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [14-01-2015 09:51] C:\Windows\tasks\Google Software Updater.job --a------ C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [18-08-2012 02:36] C:\Windows\tasks\GoogleUpdateTaskMachineCore1cc209d83a0a780.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [23-10-2014 18:58] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [23-10-2014 18:58] ==== Other Scheduled Tasks ====================== "C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\system32\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\system32\tasks\Google Software Updater" [C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore1cc209d83a0a780" [C:\Program Files\Google\Update\GoogleUpdate.exe] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe] "C:\Windows\system32\tasks\HP Health Check" ["c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe"] "C:\Windows\system32\tasks\HPLJCustParticipation" ["C:\Program Files\HP\HPLJUT\HPLJUTSCH.exe"] "C:\Windows\system32\tasks\User_Feed_Synchronization-{BA742F1A-CA30-4C9A-A919-C5395BEFF1B4}" [C:\Windows\system32\msfeedssync.exe] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "{20a82645-c095-46ed-80e3-08825760534b}"="c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension" [03-09-2009 20:51] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Jelmer\AppData\Roaming\Mozilla\Firefox\Profiles\hr1dqj2s.default - Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi AppDir: C:\Program Files\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Jelmer\AppData\Roaming\Mozilla\Firefox\Profiles\hr1dqj2s.default 8560995C727974F27F2A1CE68909FEB9 - C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_257.dll - Shockwave Flash 343BA8F3ABC8CE69700F37DB4A82300F - c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll - Silverlight Plug-In D2377C9458EFEB094E38B8C874AA214C - C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll - Google Update BBF0479C2D30519A2E746D12CAE54B43 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java(TM) Platform SE 7 U71 1ED046D972B98E0ADEC4D4D61BF37695 - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.710.14 0CA4180B21C6B728578F3B0433BB740E - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin E37EAD09D28AE19D8A39B6A95F47513A - C:\Windows\system32\Adobe\Director\np32dsw_1211151.dll - Shockwave for Director / Shockwave for Director F6D12679B9112358AC705A1308156F59 - C:\Users\Jelmer\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player 0E8B2D0D9E3415A91EF259CE1112C579 - C:\Windows\system32\Adobe\Director\np32dsw_1210150.dll - Shockwave for Director / Shockwave for Director 5B92CB0A3EEE50F6B9AE036B4F9B0F0C - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin AE84791D996D1F05A2446B0C447D937A - C:\Program Files\Adobe\Reader 9.0\Reader\browser\nppdf32.dll - Adobe Acrobat AE84791D996D1F05A2446B0C447D937A - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll - Adobe Acrobat C517E5EA7CEE783F3681F62D2A362E5B - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live? Photo Gallery 358878E398AB0FB8B1EE176C2E3EDF48 - C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll - Google Updater 24E990B1E6D55428001843CF7217DD81 - C:\Program Files\Microsoft\Office Live\npOLW.dll - Microsoft Office Live Plug-in for Firefox / Microsoft Office Live Plug-in for Firefox AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation AB3546B509E4B89096078EB2081C39C7 - c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrlui.dll - Microsoft® Silverlight ==== Chromium Look ====================== Google Chrome Version: 39.0.2171.99 (Up to date, latest Stable version: 39.0.2171.99) HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[02-10-2012 18:14] Skype Click to Call - Gast.PC_van_Jelmer\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl Card number - Gast.PC_van_Jelmer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Google Slides - Jelmer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek Google Docs - Jelmer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Jelmer\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf Google Voice Search Hotword (Beta) - Jelmer\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn YouTube - Jelmer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - Jelmer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Google Sheets - Jelmer\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap AdBlock - Jelmer\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom Skype Click to Call - Jelmer\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl Google Wallet - Jelmer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - Jelmer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Chromium Startpages ====================== C:\Users\Gast.PC_van_Jelmer\AppData\Local\Google\Chrome\User Data\Default\Preferences "homepage": "http://www.google.com/", "urls_to_restore_on_startup": [ "http://www.google.com/" ] ==== Chromium Fix ====================== C:\Users\Jelmer\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage deleted successfully C:\Users\Jelmer\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage-journal deleted successfully C:\Users\Jelmer\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_planefinder.net_0.localstorage deleted successfully C:\Users\Jelmer\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_planefinder.net_0.localstorage-journal deleted successfully C:\Users\Jelmer\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully C:\Users\Jelmer\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.nl/" "Default_Page_URL"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=nl_nl&c=91&bd=Pavilion&pf=cnnb" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=nl_nl&c=91&bd=Pavilion&pf=cnnb" "Default_Page_URL"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=nl_nl&c=91&bd=Pavilion&pf=cnnb" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="http://www.google.nl/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {054868BB-0020-4F15-B478-E9463401FAD2} Unknown Url="Not_Found" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.nl/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGLL_nl" {6CE87B1C-AE5D-4B37-BF39-7031264C1BAC} Unknown Url="Not_Found" {C5263E7F-8621-49BD-B546-C7BBC60A0B64} Unknown Url="Not_Found" ==== Reset Google Chrome ====================== C:\Users\Gast.PC_van_Jelmer\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Users\Jelmer\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Users\Gast.PC_van_Jelmer\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully C:\Users\Jelmer\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-3799817470-1835505006-930431846-1000\Software\Microsoft\Internet Explorer\SearchScopes\{054868BB-0020-4F15-B478-E9463401FAD2} deleted successfully HKEY_USERS\S-1-5-21-3799817470-1835505006-930431846-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6CE87B1C-AE5D-4B37-BF39-7031264C1BAC} deleted successfully HKEY_USERS\S-1-5-21-3799817470-1835505006-930431846-1000\Software\Microsoft\Internet Explorer\SearchScopes\{C5263E7F-8621-49BD-B546-C7BBC60A0B64} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== shortcuts on Users Desktops ====================== C:\Users\Gast.PC_van_Jelmer\Desktop\Internet - Snelkoppeling.lnk - C:\Users\Gast.PC_van_Jelmer\Desktop\Spellen\Play Rayman 3.lnk - C:\Program Files\Ubi Soft\Rayman3\Rayman3.exe C:\Users\Gast.PC_van_Jelmer\Desktop\Spellen\Taxi Racer London 2.lnk - C:\Program Files\Taxi Racer London 2\London Taxi\LT2.exe C:\Users\Jelmer\Desktop\Spotify.lnk - C:\Users\Jelmer\AppData\Roaming\Spotify\spotify.exe C:\Users\Jelmer\Desktop\µTorrent.lnk - C:\Users\Jelmer\Desktop\KT-GEM Thesis\Vensim Model Reader.lnk - C:\Program Files\Vensim\Venread.exe ==== shortcuts on All Users Desktop ====================== C:\Users\Public\Desktop\Adobe Reader 9.lnk - C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe C:\Users\Public\Desktop\Amolto Call Recorder.lnk - C:\Windows\Installer\{0121D9B6-A577-4C43-B486-39DBEC056F3B}\_E71A8387BC7BD85A53D286.exe C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\Public\Desktop\Google Earth.lnk - C:\Program Files\Google\Google Earth\client\googleearth.exe C:\Users\Public\Desktop\HP LJ M1530 Scan.lnk - C:\Program Files\HP\HP LJ M1530 MFP Series\bin\HPScan.exe C:\Users\Public\Desktop\Mendeley Desktop.lnk - C:\Program Files\Mendeley Desktop\MendeleyDesktop.exe C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe C:\Users\Public\Desktop\VLC media player.lnk - C:\Program Files\VideoLAN\VLC\vlc.exe ==== shortcuts in Users Start Menu ====================== C:\Users\Jelmer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox.lnk - C:\Users\Jelmer\AppData\Roaming\Dropbox\bin\Dropbox.exe /home C:\Users\Jelmer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Uninstall Dropbox.lnk - C:\Users\Jelmer\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe C:\Users\Jelmer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP\HP LaserJet Professional M1530 MFP Series\Verwijderen.lnk - C:\Program Files\HP\csiInstaller\74280B5D-A0AF-46c5-9C85-D9EA078262F1\Setup.exe /Uninstall C:\Users\Jelmer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk - C:\Users\Jelmer\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup ==== shortcuts in All Users Start Menu ====================== C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-registratie.lnk - C:\Program Files\HP\IrisOCR_12.3.4.0\regipe.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amolto\Amolto Call Recorder.lnk - C:\Windows\Installer\{0121D9B6-A577-4C43-B486-39DBEC056F3B}\_FA0F427406E4CC5FEF068C.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Update.lnk - C:\Program Files\HP\HP Software Update\hpwucli.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP LaserJet Professional M1530 MFP Series\Help- en leercentrum.lnk - C:\Program Files\HP\HP LaserJet Professional M1530 MFP Series\Help_Learn\Help.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP LaserJet Professional M1530 MFP Series\HP Fax Setup Wizard.lnk - C:\Program Files\HP\HP LaserJet Professional M1530 MFP Series\hppfsu_m1530.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP LaserJet Professional M1530 MFP Series\HP LaserJet Customer Participation Program.lnk - C:\Program Files\HP\HPLJUT\HPLJUTSCH.exe /optToggle /prod "HP LaserJet M1530 MFP Series PCL 6" C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP LaserJet Professional M1530 MFP Series\HP Scan.lnk - C:\Program Files\HP\HP LJ M1530 MFP Series\bin\HPScan.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP LaserJet Professional M1530 MFP Series\HP Send Fax.lnk - C:\Program Files\HP\HP LaserJet Professional M1530 MFP Series\hppeFax_M1530.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP LaserJet Professional M1530 MFP Series\HP ToolboxFX.lnk - C:\Program Files\HP\ToolboxFX\bin\HPTLBXFX.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware.lnk - C:\Program Files\Malwarebytes Anti-Malware\mbam.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Verwijder Malwarebytes Anti-Malware.lnk - C:\Program Files\Malwarebytes Anti-Malware\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk - C:\Program Files\Malwarebytes Anti-Malware\Chameleon\Windows\chameleon.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mendeley Desktop\Mendeley Desktop.lnk - C:\Program Files\Mendeley Desktop\MendeleyDesktop.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mendeley Desktop\Uninstall.lnk - C:\Program Files\Mendeley Desktop\Uninstall.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk - C:\Program Files\Microsoft Silverlight\5.1.31211.0\Silverlight.Configuration.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vensim\Vensim Model Reader.lnk - C:\Program Files\Vensim\Venread.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vensim\Vensim PLE.lnk - C:\Program Files\Vensim\Venple.exe ==== shortcuts in Quick Launch ====================== C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\HP MediaSmart.lnk - C:\Windows\Installer\{A7AC8E69-01FF-494E-9A2C-423B82CEA604}\_3D6C77F60D97007F65EA64.exe C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\HP MediaSmart.lnk - C:\Windows\Installer\{A7AC8E69-01FF-494E-9A2C-423B82CEA604}\_3D6C77F60D97007F65EA64.exe C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Gast.PC_van_Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\Gast.PC_van_Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\HP MediaSmart.lnk - C:\Windows\Installer\{A7AC8E69-01FF-494E-9A2C-423B82CEA604}\_3D6C77F60D97007F65EA64.exe C:\Users\Gast.PC_van_Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe C:\Users\Gast.PC_van_Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Gast.PC_van_Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Gast.PC_van_Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk - C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 C:\Users\Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\HP MediaSmart.lnk - C:\Windows\Installer\{A7AC8E69-01FF-494E-9A2C-423B82CEA604}\_3D6C77F60D97007F65EA64.exe C:\Users\Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Internet - Snelkoppeling.lnk - C:\Users\Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe C:\Users\Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk - C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE /recycle C:\Users\Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe C:\Users\Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk - C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 C:\Users\Jelmer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk - ==== Reset IE Proxy ====================== Value(s) before fix: "ProxyEnable"=dword:00000000 Value(s) after fix: "ProxyEnable"=dword:00000000 ==== Empty IE Cache ====================== C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast.PC_van_Jelmer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Gast.PC_van_Jelmer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Jelmer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Jelmer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Jelmer\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Jelmer\AppData\Local\Temp\arc634C\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Jelmer\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\TEMP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Jelmer\AppData\Local\Temp\Temporary Internet Files\Content.IE5\5R19VK0R will be deleted at reboot C:\Users\Jelmer\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\Jelmer\AppData\Local\Mozilla\Firefox\Profiles\hr1dqj2s.default\cache2 emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Gast.PC_van_Jelmer\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\Users\Jelmer\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=10444 folders=220 2003690084 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Gast\AppData\Local\Temp emptied successfully C:\Users\Gast.PC_van_Jelmer\AppData\Local\Temp emptied successfully C:\Users\Jelmer\AppData\Local\Temp will be emptied at reboot C:\Users\TEMP\AppData\Local\Temp emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Jelmer\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== After Reboot ====================== ==== Deleting Files / Folders ====================== "C:\Users\Jelmer\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Users\Jelmer\AppData\Local\Temp\Temporary Internet Files\Content.IE5\5R19VK0R" not found