Zoek.exe v5.0.0.0 Updated 04-May-2015 Tool run by Ivan on di 16-06-2015 at 10:44:52,68. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: E:\$Installs\Y_currently installed\$virus etc checkers\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 16-6-2015 10:45:35 Zoek.exe System Restore Point Created Successfully. ==== Empty Folders Check ====================== C:\PROGRA~3\Wondershare Player deleted successfully C:\Users\Administrator\AppData\Local\EmieSiteList deleted successfully C:\Users\Administrator\AppData\Local\EmieUserList deleted successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== "C:\Windows\SysWOW64\jupdate-1.7.0_21-b11.log" not found "C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log" not found C:\Users\Ivan\AppData\Roaming\ProductData deleted C:\PROGRA~3\Avg_Update_0215pit deleted C:\PROGRA~3\ProductData deleted C:\Users\Ivan\AppData\Roaming\Mozilla\SeaMonkey\Profiles\3ez57wbs.default\extensions\staged deleted ==== Firefox Start and Search pages ====================== ProfilePath: C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\3jcft8zu.default-1425316423199 user_pref("browser.startup.homepage", "https://www.facebook.com/"); user_pref("browser.search.defaultenginename", "Bing"); ProfilePath: C:\Users\Ivan\AppData\Roaming\Mozilla\SeaMonkey\Profiles\3ez57wbs.default user_pref("browser.startup.homepage", "https://www.facebook.com/"); ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "support@vdownloader.com"="C:\Program Files (x86)\$internet\VDownloader\Addons\FireFox" [08-04-2014 11:26] [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "{F003DA68-8256-4b37-A6C4-350FA04494DF}"="C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt" [18-04-2015 21:42] ==== Firefox Extensions ====================== ProfilePath: C:\Users\ADMINI~1\AppData\Roaming\Mozilla\Firefox\Profiles\hrole8o1.default - Undetermined - C:\Program Files (x86)\$internet\Mozilla\Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} - Undetermined - C:\Program Files (x86)\$internet\Mozilla\Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - Undetermined - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com - Default Manager - %ProfilePath%\extensions\DefaultManager@Microsoft ProfilePath: C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\3jcft8zu.default-1425316423199 - Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt - Magyar helyesrs-ellenrz sztr - %ProfilePath%\extensions\hu@dictionaries.addons.mozilla.org - Magyar HU Language Pack - %ProfilePath%\extensions\langpack-hu@firefox.mozilla.org.xpi - Symbaloo bookmarker - %ProfilePath%\extensions\symbaloo-ff-extension@symbaloo.com.xpi ProfilePath: C:\Users\Ivan\AppData\Roaming\Mozilla\SeaMonkey\Profiles\3ez57wbs.default - Magyar helyesrs-ellenrz sztr - %ProfilePath%\extensions\hu@dictionaries.addons.mozilla.org - DOM-granskaren DOM Inspector - %ProfilePath%\extensions\inspector@mozilla.org - ChatZilla - %ProfilePath%\extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} - Undetermined - %ProfilePath%\extensions\{9c21158b-2c76-4d0a-980a-c51fc9cefaa7}.xpi - JavaScript Debugger - %ProfilePath%\extensions\{f13b157f-b174-47e7-a34d-4815ddfdfeb8}.xpi ProfilePath: C:\Users\Ivan\AppData\Roaming\Mozilla\Thunderbird\Profiles\fxbvxset.default - Undetermined - C:\Users\Ivan\AppData\Roaming\Thunderbird\Profiles\fxbvxset.default\extensions\en-GB@dictionaries.addons.mozilla.org - Undetermined - C:\Users\Ivan\AppData\Roaming\Thunderbird\Profiles\fxbvxset.default\extensions\countrylookup@fvds.frih.net - Undetermined - C:\Users\Ivan\AppData\Roaming\Thunderbird\Profiles\fxbvxset.default\extensions\{F8147CF4-B9E3-445B-AA87-081ED66548F8} - Undetermined - C:\Users\Ivan\AppData\Roaming\Thunderbird\Profiles\fxbvxset.default\extensions\hu@dictionaries.addons.mozilla.org - Undetermined - C:\Users\Ivan\AppData\Roaming\Thunderbird\Profiles\fxbvxset.default\extensions\{9c21158b-2c76-4d0a-980a-c51fc9cefaa7} - Undetermined - C:\Users\Ivan\AppData\Roaming\Thunderbird\Profiles\fxbvxset.default\extensions\nl-NL@dictionaries.addons.mozilla.org - Country Lookup - %ProfilePath%\extensions\countrylookup@fvds.frih.net - British English Dictionary - %ProfilePath%\extensions\en-GB@dictionaries.addons.mozilla.org - Hungarian dictionary - %ProfilePath%\extensions\hu@dictionaries.addons.mozilla.org - Woordenboek Nederlands - %ProfilePath%\extensions\nl-NL@dictionaries.addons.mozilla.org - send_format_ldap - %ProfilePath%\extensions\send_format_ldap@milimail.org - Contacts Sidebar - %ProfilePath%\extensions\{4dce973c-25a5-4657-8e37-6c2a85c24a7e} - Mailbox Alert - %ProfilePath%\extensions\{9c21158b-2c76-4d0a-980a-c51fc9cefaa7} - Copy Link Name for Thunderbird - %ProfilePath%\extensions\{C632CA78-E184-44BE-9F15-E8183EDDCC0F} - View Headers Toggle Button - %ProfilePath%\extensions\{CC181FFE-82BD-4c02-907F-4B79C4C404F2} - Display Mail User Agent - %ProfilePath%\extensions\{F8147CF4-B9E3-445B-AA87-081ED66548F8} - header scroll extension - %ProfilePath%\extensions\{F8147CF4-B9E3-445B-AA87-081ED66548FA} ProfilePath: C:\Users\Ivan\AppData\Roaming\Thunderbird\Profiles\9dxpynrg.default - Country Lookup - %ProfilePath%\extensions\countrylookup@fvds.frih.net - British English Dictionary - %ProfilePath%\extensions\en-GB@dictionaries.addons.mozilla.org - Magyar helyesrs-ellenrz sztr - %ProfilePath%\extensions\hu@dictionaries.addons.mozilla.org - Woordenboek Nederlands - %ProfilePath%\extensions\nl-NL@dictionaries.addons.mozilla.org - Folder Pane View Switcher - %ProfilePath%\extensions\FolderPaneSwitcher@kamens.us.xpi - Skicka Senare - %ProfilePath%\extensions\sendlater3@kamens.us.xpi - Send Format LDAP - %ProfilePath%\extensions\send_format_ldap@milimail.org.xpi - Undetermined - %ProfilePath%\extensions\{9c21158b-2c76-4d0a-980a-c51fc9cefaa7}.xpi - Google Contacts - %ProfilePath%\extensions\{BDD92442-0534-4D6F-A966-BAB7D561D781}.xpi ProfilePath: C:\Users\Ivan\AppData\Roaming\TomTom\HOME\Profiles\8q0mqwvh.default - Map status indicator - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com - TomTom HOME default theme - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com - Carminat TomTom - %ProfilePath%\extensions\RenaultTheme@tomtom.com ProfilePath: C:\Users\Juli\AppData\Roaming\Thunderbird\Profiles\la8yr81t.default - Instrument Test - %ProfilePath%\extensions\tbtestpilot@labs.mozilla.com.xpi ==== Firefox Plugins ====================== Profilepath: C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\3jcft8zu.default-1425316423199 87132527E2256CF6683A18C4EB34DD3B - C:\Windows\system32\Wat\npWatWeb.dll - Windows Activation Technologies 77887617FA24E755A5A431E3E28E25E1 - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll - Shockwave for Director / Shockwave for Director 2E661988463BCFA1B95D4DAAB9B0B6FA - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll - Shockwave Flash F7DD45B40F54FF7E8BDB76F63D1F7102 - C:\Users\Ivan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player 6622169512C931AC6DD18CBAC037B6FB - C:\Users\Ivan\AppData\Roaming\TorrentStream\player\npts_plugin.dll - Torrent Stream P2P Multimedia Plug-in 2 08ACECEB47FAF053C468D8AFE44709AD - C:\Users\Ivan\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll - Google Update 3CD19649B2C3023D65E67C056457A2BC - C:\Users\Ivan\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin ==== Fake Chromium Profiles Check ====================== Fake profile C:\Users\Administrator\AppData\Local\Google\Chrome deleted ==== Chromium Look ====================== Google Chrome Version: 43.0.2357.124 HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions cnjfgbikbkcmickdalamlmpmkhmbollm - No path found[] ipmeajfmcoafocgllabadecddnaabakj - No path found[] lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[01-05-2015 11:17] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions apdfllckaahabafndbhieahigkjlhalf - C:\Users\Ivan\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx[04-07-2013 00:30] lmjegmlicamnimmfhcmpkclmigmmcbeh - No path found[] Comodo Drag&Drop Service - Ivan\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aneodkojaglhnkkdbbdnmmmgimlcaogo Comodo Web Inspector - Ivan\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdngekjahnmlkinegnhdmmbcfnmbclnn Comodo Media Downloader - Ivan\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dihmnpngfonlhjmgkflpnibiaaliendo Text Mode - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\adelhekhakakocomdfejiipdnaadiiib Bejeweled - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm Symbaloo Bookmarker 0.5.0 - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnjfgbikbkcmickdalamlmpmkhmbollm Symbaloo - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfnbdccaiknlpdgabdgjijniolkgmoeh Weerplaza - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\djakjaebiehcbcjclfgifnhipfcobpaa Logitech Smooth Scrolling - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk Easy WebContent Free HTML Editor - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\encbaekhkcjjmhbcghnlcaiifdmfeokn AdBlock - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom TinEye Reverse Image Search - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl TweetDeck by Twitter - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl IE Tab - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd NOS Video - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\iggmbjghgeahcopdibklblgfkfendefg Televisie - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioiokildeekemklablpefodkilpfkmgp SingleFile Core - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jemlklgaibiijojffihnhieihhagocma TweetDeck Launcher - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmjdnkpkpnjblbgbnkeedepgnomafojk Google Drive App Launcher - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh SingleFile - Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpiodijhokgodhhofbcjdecpffjipkle Wondershare Video Converter Ultimate - Juli\AppData\Local\Google\Chrome\User Data\Default\Extensions\chgdeabpmphfhkoemjjglmilajldekbp ==== Chromium Startpages ====================== C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Preferences ,"www-onepick-opensocial.googleusercontent.com:443":{"network_stats":{"srtt":9089},"supports_spdy":true},"www.facebook.com:443":{"supports_spdy":true},"www.google-analytics.com:443":{"supports_spdy":true},"www.google-analytics.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"www.google.com:443":{"network_stats":{"srtt":12733},"supports_spdy":true},"www.google.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"www.google.nl:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":14776},"supports_spdy":true},"www.google.nl:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"www.googleadservices.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"supports_spdy":true},"www.googleadservices.com:80":{"alternative_service":[{"port":80,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":7876}},"www.googleapis.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":8742},"supports_spdy":true},"www.googletagmanager.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":8905},"supports_spdy":true},"www.googletagmanager.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"www.googletagservices.com:80":{"alternative_service":[{"port":80,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":7469}},"www.gstatic.com:443":{"supports_spdy":true},"www.gstatic.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"www.wikipedia.org:443":{"supports_spdy":true},"www.youtube.com:443":{"network_stats":{"srtt":12012},"supports_spdy":true},"www.youtube.com:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"youtu.be:80":{"alternative_service":[{"port":80,"probability":0.0,"protocol_str":"quic"}]},"yt3.ggpht.com:443":{"alternative_service":[{"port":443,"probability":1.0,"protocol_str":"quic"}],"network_stats":{"srtt":8282},"supports_spdy":true}},"supports_quic":{"address":"192.168.0.102","used_quic":true},"version":3}},"partition":{"per_host_zoom_levels":{"2166136261":{"www.ganymedes.nl":2.223901085741545}}},"password_bubble":{"nopes":0},"plugins":{"migrated_to_pepper_flash":true,"plugins_list":[],"removed_old_component_pepper_flash_settings":true},"profile":{"avatar_bubble_tutorial_shown":2,"avatar_index":0,"content_settings":{"exceptions":{"app_banner":{},"auto_select_certificate":{},"automatic_downloads":{},"cookies":{},"fullscreen":{"https://www.youtube.com:443,http://www.benel.nl:80":{"setting":1}},"geolocation":{},"images":{},"javascript":{},"media_stream":{},"media_stream_camera":{},"media_stream_mic":{},"metro_switch_to_desktop":{},"midi_sysex":{},"mixed_script":{},"mouselock":{},"notifications":{},"plugins":{},"popups":{},"ppapi_broker":{},"protocol_handlers":{},"push_messaging":{},"ssl_cert_decisions":{}},"pattern_pairs":{"https://www.youtube.com:443,http://www.benel.nl:80":{"fullscreen":1}},"pref_version":1},"created_by_version":"43.0.2357.124","exit_type":"Normal","exited_cleanly":true,"gaia_info_picture_url":"https://lh3.googleusercontent.com/-XdUIqdMkCWA/AAAAAAAAAAI/AAAAAAAAAAA/4252rscbv5M/s256-c/photo.jpg","gaia_info_update_time":"13078847007349584","icon_version":3,"managed_user_id":"","migrated_content_settings_exceptions":true,"migrated_default_content_settings":true,"migrated_default_media_stream_content_settings":true,"name":"Ivan","per_host_zoom_levels":{}},"protection":{"macs":{}},"savefile":{"default_directory":"E:\\Downloads\\altbinz"},"selectfile":{"last_directory":"D:\\wegermee"},"session":{"restore_on_startup_migrated":true,"startup_urls_migration_time":"13078760601350099"},"spellcheck":{"dictionary":"hu"},"translate_accepted_count":{"en":0},"translate_blocked_languages":["nl","hu"],"translate_denied_count":{"en":2},"translate_last_denied_time":1434295177983.792,"translate_too_often_denied":true,"translate_whitelists":{}} icjnkifamhpbaefhdpacpmihicfbomb":"E797D93A893E6AFB0B088A56E8B37F61F6354CA35335CA087566C89480E61CD4","lifbcibllhkdhoafpjfnlhfpfgnpldfl":"D70E53787D359CC989E0A66C6F73B782BBE999FD9E71CE5E89D6FCB3C2E99BCA","lmjegmlicamnimmfhcmpkclmigmmcbeh":"F8262BAA69BD40EA6E6A1454266813B591A0343CFA08D859824B28EE3125D84F","mfehgcgbbipciphmccgaenjidiccnmng":"595D2F23FF6F71F15825F9D9C54DAB3A40796913C1C50DC86478EAADB8D1DF0C","mfffpogegjflfpflabcdkioaeobkgjik":"E2F59DDDD3889993183BDA2A7CA30D45A5E83D6F959FB2B1A15EB2B5BA4FB50B","mgndgikekgjfcpckkfioiadnlibdjbkf":"2C7BAE942AC57ACD64E6618597044BE152F17E6BD95A2469CA5F592A4105F7A1","mhhnnpdiclfmdbhammncfhpaonhencaj":"907725219214C6727C6ADBBA11C90A926E5F022A6EC72DF3B6A493FD5DFC2AC5","mhjfbmdgcfjbbpaeojofohoefgiehjai":"5E48C1B76065EDC286230642380AC2AC42449F16A26CD654A05BE6EAA4E3D741","mpiodijhokgodhhofbcjdecpffjipkle":"128DE7AB8249595A30C531F4A5BC7832AD846A9884B77A0F23846A72B6D77B68","neajdppkdcdipfabeoofebfddakdcjhd":"D13C871C61AE00A93E3ECA133AEF4C48D8909AAFC0AF800403CE74619B41DAA2","nkeimhogjdpnpccoofpliimaahmaaome":"A3DEDFA8CF41CBA7026F2F9FD7FEC196385AEEF2ADE49625AE729656DAF9080D","nmmhkkegccagdldgiimedpiccmgmieda":"3C5E80205EB3D041B01E2ACAB8868A1ACA80367DF2DE9D668CF226F9E5654C65","nnbmlagghjjcbdhgmkedmbmedengocbn":"0EF6CC364F01CF5FD5AD44A555116FAAFAA98FDE39C6EB3FA8E7D2D4A1181933","oilipfekkmncanaajkapbpancpelijih":"6CF7C533AA1A1CB904031F8FA5C9CC24FB87B1D7A58C233AB9701B200AC72645","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"CE4114F26276BBE19E8C1743026701A4B0F354C73741CB29BC09C5F67D3CF9FB","phkgflgjcpmlohkfpnlajcpcoklkcbnb":"8E4EBDC1276645994FDEEAA8BEBF6E21F4B4A4E00B85C3D06C0AC03D831C36F8","pjkljhegncpnkpknbcohdijeoejaedia":"9917F6F95EB5CBAACC2A59C1E0AEA2CB903D0401D26D62C128D407FEFC92A756"}},"google":{"services":{"last_username":"71E79106AB8D5D88B1271BBEFCC60467C8156109CFE7D3EFD966D72B60302A97","username":"9EE54769BCF7540AFB171284FB5A58CFF801C8A086E27765049E8C981B4A5647"}},"homepage":"F2D9C9567F837C518D351446B2265BB78B1024BFC15E30A93EC5014E7C44D815","homepage_is_newtabpage":"2B2395E6DFA3977260107429E85AED22E95260AB4312B402619F85BC859BD78F","pinned_tabs":"47702E539D59B71E912C4CC6AF81CB4483CD97AA5977A86071AAD2E38F114856","prefs":{"preference_reset_time":"AE55926C6D9E07433E5430238BF0E237C3B92F633B46E4D8443D701A5F873453"},"profile":{"reset_prompt_memento":"89CD00733AC82F94E4FB04B3942E4020EFB37EC140F3DE82293A24DF59F6B7A7"},"safebrowsing":{"incidents_sent":"46A04F05549309E70AC7A31B14F367EC08C000C8C78740388DAF0B149269896F"},"search_provider_overrides":"2D977A697D3C0FDF9331AC7EAE19E938A90B3E15E1CB00E1E5FB4BFE6DB60BDA","session":{"restore_on_startup":"66CAE1353B262F507AA3F526E78639116B7797CEF8109D2C4F827E29460CF358","startup_urls":"3FF6FCEB3BD3D4AA8862938218A43925D660D610BB867DB81DADD544DA6048FD"},"software_reporter":{"prompt_reason":"C3EBE281AC0441442128658C9F5E46515486AF803009E5833873549F75712687","prompt_seed":"02EB912D0358B2AEBBB8300EFC94EB6AB93B1C3B0C3CD3C87AF5F1C244C7AA5C","prompt_version":"5AFC92C502AE5776F8E8E15BBB2871AD607B6B16559150B47AF24A2970AEA7C7"},"sync":{"remaining_rollback_tries":"AE1B4397EB48FD98BEE9CB156B3971E5DE01B3B2A6D6F2D286672814428D7537"}},"super_mac":"2948C0336021103B019ED9CD86A9D48AEE0049675B2B5284CC17FCB4A718D30D"},"session":{"restore_on_startup":4,"startup_urls":["http://www.symbaloo.com/"]},"sync":{"remaining_rollback_tries":0}} C:\Users\Juli\AppData\Local\Google\Chrome\User Data\Default\Preferences "homepage": "http://www.google.nl/ig", "urls_to_restore_on_startup": [ "http://www.google.nl/ig#t_0", "http://www.weerplaza.nl/nederland/1333+(Molenbuurt,+Landgoederenbuurt)/227", "http://www.facebook.com/", "" ] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" "Search Bar"="http://www.google.com" "Search Page"="http://www.google.com" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Search Bar"="http://www.google.com" "Start Page Redirect Cache"="http://www.google.com" "Search Page"="http://www.google.com" "Start Page"="http://www.google.com" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Search Bar"="http://www.google.com" "Start Page Redirect Cache"="http://www.google.com" "Search Page"="http://www.google.com" "Start Page"="http://www.google.com" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://www.google.com" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page Redirect Cache"="http://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page Redirect Cache"="http://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{67C334C0-408D-4E6D-B5A7-0ADD6AFFA252}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {67C334C0-408D-4E6D-B5A7-0ADD6AFFA252} Google Url="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}" ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\DefaultAppPool\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Ivan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Juli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Juli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Ivan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LAOMCJGW will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\Ivan\AppData\Local\Mozilla\Firefox\Profiles\3jcft8zu.default-1425316423199\cache2 emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Ivan\AppData\Local\Comodo\Dragon\User Data\Default\Cache emptied successfully C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=331 folders=94 5271358 bytes) ==== Empty Temp Folders ====================== C:\Users\Administrator\AppData\Local\Temp emptied successfully C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\DefaultAppPool\AppData\Local\Temp emptied successfully C:\Users\Ivan\AppData\Local\Temp will be emptied at reboot C:\Users\Juli\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Ivan\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Ivan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LAOMCJGW" not found "C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted ==== EOF on di 16-06-2015 at 11:21:21,61 ======================