Zoek.exe v5.0.0.0 Updated 04-May-2015 Tool run by Carl on wo 13-05-2015 at 10:17:40,83. Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Carl\Desktop\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 13-5-2015 10:19:56 Zoek.exe System Restore Point Created Successfully. ==== Empty Folders Check ====================== C:\PROGRA~2\PDF Architect 3 deleted successfully C:\Users\Carl\AppData\Roaming\The Complete Genealogy Reporter - FTB deleted successfully C:\Users\Carl\AppData\Local\Acer PowerSaver deleted successfully C:\Users\Carl\AppData\Local\calibre-cache deleted successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== C:\Users\Carl\AppData\Roaming\calibre deleted C:\Windows\system32\Tasks\McQcModifier-5c47-a7b0 deleted C:\Users\Carl\AppData\Local\30282570 deleted C:\Program Files\iMesh Applications deleted C:\Users\Carl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\iMesh.lnk deleted C:\Users\Carl\AppData\Roaming\GoldenGate deleted C:\Users\Carl\AppData\Roaming\pdfforge deleted C:\Users\Carl\AppData\Local\WavXMapDrive.bat deleted C:\Users\Carl\AppData\Local\CleanerPro deleted C:\Users\Carl\AppData\Local\iMesh deleted C:\Users\Carl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iMesh.lnk deleted C:\Windows\system32\tasks\CleanerPro_Popup deleted C:\Windows\system32\tasks\CleanerPro_Start deleted C:\Windows\system32\config\systemprofile\Searches deleted C:\Users\Carl\Documents\CleanerPro deleted C:\Users\Carl\Desktop\iMesh.lnk deleted ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "FFPDFArchitectConverter@pdfarchitect.com"=hex(2):43,00,3a,00,5c,00,50,00,72,\ [] ==== Chromium Look ====================== ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.nl/" "Default_Page_URL"="http://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=veriton_m275&r=17050115r806pe415u245z4654r44r" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="http://www.google.nl/" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{67A2568C-7A0A-4EED-AECC-B5405DE63B64}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02" {67A2568C-7A0A-4EED-AECC-B5405DE63B64} Google Url="http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_nlNL624" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7" ==== Reset Google Chrome ====================== Nothing found to reset ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\FFPDFArchitectConverter@pdfarchitect.com deleted successfully ==== shortcuts on Users Desktops ====================== C:\Users\Carl\Desktop\DOCUMENTEN.lnk - D:\DOCUMENTEN C:\Users\Carl\Desktop\EMAIL.lnk - C:\Program Files\Windows Live\Mail\wlmail.exe C:\Users\Carl\Desktop\FAVORIETEN.lnk - C:\Users\Carl\Favorites C:\Users\Carl\Desktop\FOTO´S.lnk - C:\Users\Carl\Desktop\FRONTPAGE.lnk - C:\Windows\Installer\{90170413-6000-11D3-8CFE-0150048383C9}\misc.exe C:\Users\Carl\Desktop\INTERNET.lnk - C:\Program Files\Internet Explorer\iexplore.exe C:\Users\Carl\Desktop\MUZIEK.lnk - D:\MUZIEK C:\Users\Carl\Desktop\MyHeritage Family Tree Builder.lnk - C:\Program Files\MyHeritage\Bin\MyHeritage.exe C:\Users\Carl\Desktop\NIEUW DOCUMENT.lnk - C:\Windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\wordicon.exe C:\Users\Carl\Desktop\Paint.lnk - C:\Windows\system32\mspaint.exe C:\Users\Carl\Desktop\PATIENCE.lnk - C:\Users\Carl\Desktop\SCAN-PRINT.lnk - C:\Users\Carl\Desktop\VERKENNER.lnk - C:\Windows\explorer.exe C:\Users\Carl\Desktop\VOIP.lnk - C:\Program Files\VoipConnect.com\VoipConnect\VoipConnect.exe C:\Users\Carl\Desktop\WEBSITES.lnk - D:\DOCUMENTEN\WEBSITES C:\Users\Carl\Desktop\WORD.lnk - D:\DOCUMENTEN\WORD C:\Users\Carl\Desktop\WS_FTP.lnk - C:\Program Files\WS_FTP\ws_ftp95.exe ==== shortcuts on All Users Desktop ====================== C:\Users\Public\Desktop\AVG 2015.lnk - C:\Program Files\AVG\AVG2015\avgui.exe C:\Users\Public\Desktop\CALIBRE.lnk - C:\Program Files\Calibre2\calibre.exe C:\Users\Public\Desktop\CCLEANER.lnk - C:\Program Files\CCleaner\CCleaner.exe C:\Users\Public\Desktop\CDBurnerXP.lnk - C:\Program Files\CDBurnerXP\cdbxpp.exe C:\Users\Public\Desktop\MALWAREBYTES.lnk - C:\Program Files\Malwarebytes Anti-Malware\mbam.exe C:\Users\Public\Desktop\PDFCreator.lnk - C:\Program Files\PDFCreator\PDFCreator.exe C:\Users\Public\Desktop\Skype.lnk - C:\Windows\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\SkypeIcon.exe C:\Users\Public\Desktop\SPECCY.lnk - C:\Program Files\Speccy\Speccy.exe ==== shortcuts in Users Start Menu ====================== C:\Users\Carl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyHeritage.com\MyHeritage Family Tree Builder.lnk - C:\Program Files\MyHeritage\Bin\MyHeritage.exe C:\Users\Carl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk - C:\Program Files\WinRAR\Rar.txt C:\Users\Carl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\What is new in the latest version.lnk - C:\Program Files\WinRAR\WhatsNew.txt C:\Users\Carl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR help.lnk - C:\Program Files\WinRAR\WinRAR.chm C:\Users\Carl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk - C:\Program Files\WinRAR\WinRAR.exe ==== shortcuts in All Users Start Menu ====================== C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk - C:\Program Files\CDBurnerXP\cdbxpp.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk - C:\Program Files\Google\Google Earth\client\googleearth.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG\AVG 2015.lnk - C:\Program Files\AVG\AVG2015\avgui.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect\PDF Architect.lnk - C:\Program Files\PDF Architect\PDF Architect.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect\Uninstall or Modify PDF Architect.lnk - C:\Windows\system32\msiexec.exe /i {86D8A96B-1911-4C3F-AA16-0B47E053E492} C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Doneer aan PDFCreator.lnk - C:\Program Files\PDFCreator\Doneer aan PDFCreator.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Geschiedenis.lnk - C:\Program Files\PDFCreator\History.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\PDFCreator Help.lnk - C:\Program Files\PDFCreator\PDFCreator_english.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\PDFCreator op het Web.lnk - C:\Program Files\PDFCreator\PDFCreator.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\PDFCreator.lnk - C:\Program Files\PDFCreator\PDFCreator.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Translation Tool.lnk - C:\Program Files\PDFCreator\languages\TransTool.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Images2PDF\Images2PDF Console Application.lnk - C:\Windows\System32\cmd.exe /k "C:\Program Files\PDFCreator\Images2PDF\Images2PDFC.exe" C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Images2PDF\Images2PDF.lnk - C:\Program Files\PDFCreator\Images2PDF\Images2PDF.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\AFPL License.lnk - C:\Program Files\PDFCreator\AFPL License.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\FairPlay License.lnk - C:\Program Files\PDFCreator\FairPlay License.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator\Licenses\GPL License.lnk - C:\Program Files\PDFCreator\GNU License.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk - C:\Program Files\Skype\Phone\Skype.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Console RAR manual.lnk - C:\Program Files\WinRAR\Rar.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\What is new in the latest version.lnk - C:\Program Files\WinRAR\WhatsNew.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR help.lnk - C:\Program Files\WinRAR\WinRAR.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk - C:\Program Files\WinRAR\WinRAR.exe ==== shortcuts in Quick Launch ====================== C:\Users\Carl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe C:\Users\Carl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Carl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Carl\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\iMesh deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TVWiz deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA} deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NortonOnlineBackupReminder deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VoipBuster deleted successfully ==== Empty IE Cache ====================== C:\Users\Carl\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Carl\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FWCXG0W7 will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== No Chrome Cache found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== No Java Cache Found ==== C:\zoek_backup content ====================== C:\zoek_backup (files=320 folders=51 104986440 bytes) ==== Empty Temp Folders ====================== C:\Users\Carl\AppData\Local\Temp will be emptied at reboot C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Carl\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Carl\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FWCXG0W7" not found "C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted ==== EOF on wo 13-05-2015 at 10:34:19,62 ======================