Zoek.exe v5.0.0.0 Updated 02-April-2015 Tool run by Nel on di 07-04-2015 at 13:10:49,25. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Nel\Desktop\zoek.exe [Scan all users] [Script inserted] ==== Older Logs ====================== C:\zoek-results2015-02-24-102412.log 41711 bytes ==== Folders Found ====================== 2015-04-07 06:50:23 2015-04-07 06:50:23 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_05213301 2015-02-07 13:35:42 2015-02-07 13:35:42 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_07b25af1 2014-12-20 09:19:09 2014-12-20 09:19:09 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_09012fa9 2015-01-21 07:33:56 2015-01-21 07:33:56 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_0b6575ea 2015-03-23 12:39:01 2015-03-23 12:39:02 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_0c28bb68 2014-12-20 09:27:19 2014-12-20 09:27:19 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_0e74a91c 2015-03-30 08:57:30 2015-03-30 08:57:30 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_0ed83822 2015-02-09 09:01:21 2015-02-09 09:01:21 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_11e9dc99 2015-02-14 14:38:31 2015-02-14 14:38:31 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_17c0ade3 2014-12-15 09:01:56 2014-12-15 09:01:56 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_19ac5f5f 2015-02-23 09:27:41 2015-02-23 09:27:41 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_1a946652 2014-12-29 09:29:19 2014-12-29 09:29:19 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_1c18403c 2015-01-12 09:09:37 2015-01-12 09:09:37 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_1f5b5d3d 2015-01-17 18:12:25 2015-01-17 18:12:25 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_206f113a 2015-03-07 11:35:40 2015-03-07 11:35:40 -------- dc----w- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_221365d4 2015-04-07 06:50:23 2015-04-07 06:50:23 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_05213301 2015-02-07 13:35:42 2015-02-07 13:35:42 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_07b25af1 2014-12-20 09:19:09 2014-12-20 09:19:09 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_09012fa9 2015-01-21 07:33:56 2015-01-21 07:33:56 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_0b6575ea 2015-03-23 12:39:01 2015-03-23 12:39:02 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_0c28bb68 2014-12-20 09:27:19 2014-12-20 09:27:19 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_0e74a91c 2015-03-30 08:57:30 2015-03-30 08:57:30 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_0ed83822 2015-02-09 09:01:21 2015-02-09 09:01:21 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_11e9dc99 2015-02-14 14:38:31 2015-02-14 14:38:31 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_17c0ade3 2014-12-15 09:01:56 2014-12-15 09:01:56 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_19ac5f5f 2015-02-23 09:27:41 2015-02-23 09:27:41 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_1a946652 2014-12-29 09:29:19 2014-12-29 09:29:19 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_1c18403c 2015-01-12 09:09:37 2015-01-12 09:09:37 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_1f5b5d3d 2015-01-17 18:12:25 2015-01-17 18:12:25 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_206f113a 2015-03-07 11:35:40 2015-03-07 11:35:40 -------- dc----w- C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_221365d4 ==== Files Found ====================== --- C:\Windows\Prefetch\MSIEXEC.EXE-8FFB1633.pf --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 291580 Created time: 2014-12-09 16:25:36 Modified time: 2015-04-06 08:56:25 MD5: F407B2B5F6A58BD49BD4ED3D77222FA1 SHA1: 99406F024B203A2E637A48BF4841CE6639E35110 --- C:\Windows\Prefetch\MSIEXEC.EXE-CDBFC0F7.pf --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 141428 Created time: 2014-12-10 20:14:54 Modified time: 2015-04-06 08:54:15 MD5: 5276AD5FDE692A70797383393920FB1A SHA1: 97640C432C680F8ACDDAD78E3446AB88AF0CD412 --- C:\Windows\System32\msiexec.exe --- Company: Microsoft Corporation File Description: Windows® Installer File Version: 5.0.7600.16385 (win7_rtm.090713-1255) Product Name: Windows Installer - Unicode Copyright: © Microsoft Corporation. Alle rechten voorbehouden. Original Filename: msiexec.exe.mui File type: ----a-w- File size: 73216 Created time: 2010-11-21 03:24:28 Modified time: 2010-11-21 03:24:28 MD5: EEE470F2A771FC0B543BDEEF74FCECA0 SHA1: BD9BBB448DEC04B1AAA8AE530E9814FDBCE0A3D5 --- C:\Windows\System32\nl-NL\msiexec.exe.mui --- Company: Microsoft Corporation File Description: Windows® Installer File Version: 5.0.7600.16385 (win7_rtm.090713-1255) Product Name: Windows Installer - Unicode Copyright: © Microsoft Corporation. Alle rechten voorbehouden. Original Filename: msiexec.exe.mui File type: ----a-w- File size: 2048 Created time: 2012-04-28 20:10:50 Modified time: 2012-04-28 20:10:50 MD5: 15C2943E8FB878CD7819C73921343923 SHA1: AE7F22124A85F56E81AAB33F7FB1CA9556829740 --- C:\Windows\SysWOW64\msiexec.exe --- Company: Microsoft Corporation File Description: Windows® Installer File Version: 5.0.7600.16385 (win7_rtm.090713-1255) Product Name: Windows Installer - Unicode Copyright: © Microsoft Corporation. Alle rechten voorbehouden. Original Filename: msiexec.exe.mui File type: ----a-w- File size: 73216 Created time: 2010-11-21 03:24:28 Modified time: 2010-11-21 03:24:28 MD5: EEE470F2A771FC0B543BDEEF74FCECA0 SHA1: BD9BBB448DEC04B1AAA8AE530E9814FDBCE0A3D5 --- C:\Windows\SysWOW64\config\systemprofile\AppData\Local\CrashDumps\msiexec.exe.7988.dmp --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 798561 Created time: 2014-08-28 12:28:06 Modified time: 2014-08-28 12:28:06 MD5: AA84E0ED4D0CECC8C131DDEB1DECFAF7 SHA1: BA822B5223DA3E812DC4E0D0267805399AF28902 --- C:\Windows\SysWOW64\nl-NL\msiexec.exe.mui --- Company: Microsoft Corporation File Description: Windows® Installer File Version: 5.0.7600.16385 (win7_rtm.090713-1255) Product Name: Windows Installer - Unicode Copyright: © Microsoft Corporation. Alle rechten voorbehouden. Original Filename: msiexec.exe.mui File type: ----a-w- File size: 2048 Created time: 2012-04-28 20:10:50 Modified time: 2012-04-28 20:10:50 MD5: 15C2943E8FB878CD7819C73921343923 SHA1: AE7F22124A85F56E81AAB33F7FB1CA9556829740 --- C:\Windows\winsxs\amd64_microsoft-windows-i..xecutable.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_0da1c434a2b4e6a4\msiexec.exe.mui --- Company: Microsoft Corporation File Description: Windows® Installer File Version: 5.0.7600.16385 (win7_rtm.090713-1255) Product Name: Windows Installer - Unicode Copyright: © Microsoft Corporation. Alle rechten voorbehouden. Original Filename: msiexec.exe.mui File type: ----a-w- File size: 2048 Created time: 2012-04-28 20:10:45 Modified time: 2012-04-28 20:10:45 MD5: 9789CD1DE5354148E1E6AC66EC737712 SHA1: 008467ADC29D1A9EFADB05EBAE08F7BE3D935116 --- C:\Windows\winsxs\amd64_microsoft-windows-installer-executable_31bf3856ad364e35_6.1.7601.17514_none_a7a77a3b9cb96ce6\msiexec.exe --- Company: Microsoft Corporation File Description: Windows® installer File Version: 5.0.7601.17514 (win7sp1_rtm.101119-1850) Product Name: Windows Installer - Unicode Copyright: © Microsoft Corporation. All rights reserved. Original Filename: msiexec.exe File type: ----a-w- File size: 128000 Created time: 2010-11-21 03:24:15 Modified time: 2010-11-21 03:24:15 MD5: A190DA6546501CB4146BBCC0B6A3F48B SHA1: 443AAC22D57EDD4EF893E2A245B356CBA5B2C2DD --- C:\Windows\winsxs\x86_microsoft-windows-i..xecutable.resources_31bf3856ad364e35_6.1.7600.16385_nl-nl_b18328b0ea57756e\msiexec.exe.mui --- Company: Microsoft Corporation File Description: Windows® Installer File Version: 5.0.7600.16385 (win7_rtm.090713-1255) Product Name: Windows Installer - Unicode Copyright: © Microsoft Corporation. Alle rechten voorbehouden. Original Filename: msiexec.exe.mui File type: ----a-w- File size: 2048 Created time: 2012-04-28 20:10:50 Modified time: 2012-04-28 20:10:50 MD5: 15C2943E8FB878CD7819C73921343923 SHA1: AE7F22124A85F56E81AAB33F7FB1CA9556829740 --- C:\Windows\winsxs\x86_microsoft-windows-installer-executable_31bf3856ad364e35_6.1.7601.17514_none_4b88deb7e45bfbb0\msiexec.exe --- Company: Microsoft Corporation File Description: Windows® installer File Version: 5.0.7601.17514 (win7sp1_rtm.101119-1850) Product Name: Windows Installer - Unicode Copyright: © Microsoft Corporation. All rights reserved. Original Filename: msiexec.exe File type: ----a-w- File size: 73216 Created time: 2010-11-21 03:24:28 Modified time: 2010-11-21 03:24:28 MD5: EEE470F2A771FC0B543BDEEF74FCECA0 SHA1: BD9BBB448DEC04B1AAA8AE530E9814FDBCE0A3D5 ==== Registry Search Results for "msiexec" ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_IGNORE_XML_PROLOG] "msiexec.exe"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\FileAssociation] "AddRemoveApps"="SETUP.EXE;INSTALL.EXE;ISUNINST.EXE;UNWISE.EXE;UNWISE32.EXE;ST5UNST.EXE;MSOOBE.EXE;LNKSTUB.EXE;CONTROL.EXE;WERFAULT.EXE;WLRMDR.EXE;GUESTMODEMSG.EXE;MSIEXEC.EXE;DFSVC.EXE;WUAPP.EXE;" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FoozKids] "UninstallString"="msiexec /qb /x {FCDB0EF3-673C-FDCE-6498-750F51391660}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\JLQuickSendWidget] "UninstallString"="msiexec /qb /x {942B326A-B4B0-AF70-81E8-84A858D2FCA8}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Live\Messenger] "RollbackCommand"="msiexec.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Live Mail] "RollbackCommand"="msiexec.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\msiexec.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Msi.Package\DefaultIcon] @="C:\\Windows\\system32\\msiexec.exe,0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Msi.Patch\DefaultIcon] @="C:\\Windows\\system32\\msiexec.exe,0" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "IsMyWinLockerReboot"="msiexec.exe /qn /x{voidguid}" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Windows Error Reporting\Debug] "StoreLocation"="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_cab_129237c5" [HKEY_USERS\S-1-5-21-2088802119-1191371545-69361678-1001\Software\Microsoft\Windows\Windows Error Reporting\Debug] "StoreLocation"="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_05213301" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce] "IsMyWinLockerReboot"="msiexec.exe /qn /x{voidguid}" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\Windows Error Reporting\Debug] "StoreLocation"="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\AppCrash_msiexec.exe_7f90dc7577c3b6fc5b44f96ed116333719ff623_cab_129237c5" ==== C:\zoek_backup content ====================== C:\zoek_backup (files=267 folders=84 97426052 bytes) ==== EOF on di 07-04-2015 at 13:14:46,72 ======================