Zoek.exe v5.0.0.0 Updated 04-May-2015 Tool run by francist on za 04/07/2015 at 20:48:28,46. Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\francist\Downloads\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== Older Logs ====================== C:\zoek-results2015-01-23-175101.log 70785 bytes C:\zoek-results2015-01-25-102734.log 23371 bytes C:\zoek-results2015-01-25-173633.log 1861 bytes ==== Empty Folders Check ====================== C:\Users\francist\AppData\Roaming\Foxit Reader deleted successfully C:\Users\francist\AppData\Roaming\Windows Live Writer deleted successfully C:\Users\Administrator\AppData\Local\Comodo deleted successfully C:\Users\Administrator\AppData\Local\Google deleted successfully C:\Users\francist\AppData\Local\Comodo deleted successfully C:\Users\francist\AppData\Local\CrashDumps deleted successfully C:\Users\francist\AppData\Local\Deshaker deleted successfully C:\Users\francist\AppData\Local\EmieBrowserModeList deleted successfully C:\Users\francist\AppData\Local\EmieSiteList deleted successfully C:\Users\francist\AppData\Local\EmieUserList deleted successfully C:\Users\Gast\AppData\Local\Comodo deleted successfully C:\Users\Gast\AppData\Local\Google deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Comodo deleted successfully C:\Users\HomeGroupUser$\AppData\Local\Google deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15B851AF-A4B9-43EF-97D3-28E1B4A5DB9B} deleted successfully HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A} deleted successfully HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Installed Programs ====================== ABBYY FineReader 10 Professional Edition Adobe Flash Player 18 ActiveX Adobe Flash Player 18 NPAPI Adobe Reader XI (11.0.11) - Nederlands Adobe Refresh Manager Ahead Nero Burning ROM AMD Catalyst Control Center AMD Catalyst Install Manager AMD DnD V1.0.20 AMD Fuel ATI AVIVO Codecs ATI Problem Report Wizard AVG 2015 Belgium e-ID middleware 4.0.7 (build 7453) Catalyst Control Center - Branding Catalyst Control Center Localization All ccc-utility CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help English CCC Help French CCC Help German CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Russian CCC Help Spanish CCleaner ConvertHelper 2.2 D3DX10 Definition Update for Microsoft Office 2010 (KB3054883) 32-Bit Edition DVD Shrink 3.2 E-Peek EclipseCrossword Foxit PhantomPDF Google Chrome HD Tune 2.55 honestech VHS to DVD 2.0 SE HydraVision Java 8 Update 45 Java Auto Updater Junk Mail filter update Malwarebytes Anti-Malware versie 2.0.4.1028 Microsoft .NET Framework 4.5.1 (Nederlands) Microsoft .NET Framework 4.5.1 (NLD) Microsoft .NET Framework 4.5.2 Microsoft Application Error Reporting Microsoft Office Access MUI (Dutch) 2010 Microsoft Office Excel MUI (Dutch) 2010 Microsoft Office Groove MUI (Dutch) 2010 Microsoft Office InfoPath MUI (Dutch) 2010 Microsoft Office OneNote MUI (Dutch) 2010 Microsoft Office Outlook Connector Microsoft Office Outlook MUI (Dutch) 2010 Microsoft Office PowerPoint MUI (Dutch) 2010 Microsoft Office Professional Plus 2010 Microsoft Office Project MUI (Dutch) 2010 Microsoft Office Project Professional 2010 Microsoft Office Proof (Dutch) 2010 Microsoft Office Proof (English) 2010 Microsoft Office Proof (French) 2010 Microsoft Office Proof (German) 2010 Microsoft Office Proofing (Dutch) 2010 Microsoft Office Publisher MUI (Dutch) 2010 Microsoft Office Shared MUI (Dutch) 2010 Microsoft Office Word MUI (Dutch) 2010 Microsoft OneDrive Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit Microsoft Project Professional 2010 Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft SQL Server Compact 3.5 SP2 ENU Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - NLD Movie Maker Mozilla Firefox 37.0.2 (x86 nl) Mozilla Maintenance Service MSVCRT MSVCRT110 OKI C3200 Status Monitor OKI Print Job Accounting OpenOffice.org 3.4.1 Opera Stable 30.0.1835.88 Photo Common Photo Gallery Picasa 3 RealDownloader RealNetworks - Microsoft Visual C++ 2008 Runtime RealNetworks - Microsoft Visual C++ 2010 Runtime Realtek Ethernet Controller Driver Realtek High Definition Audio Driver RealTimes (RealPlayer) RealUpgrade 1.1 Security Update for Microsoft .NET Framework 4.5.2 (KB3023224) Security Update for Microsoft .NET Framework 4.5.2 (KB3035490) Security Update for Microsoft .NET Framework 4.5.2 (KB3037581) Security Update for Microsoft Excel 2010 (KB3054845) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2589288) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2760781) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2810073) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2863817) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2880971) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2881071) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2920748) 32-Bit Edition Security Update for Microsoft Office 2010 (KB2956076) 32-Bit Edition Security Update for Microsoft Office 2010 (KB3054834) 32-Bit Edition Security Update for Microsoft Office 2010 (KB3054848) 32-Bit Edition Security Update for Microsoft PowerPoint 2010 (KB2920812) 32-Bit Edition Security Update for Microsoft PowerPoint 2010 (KB3054835) 32-Bit Edition Security Update for Microsoft Word 2010 (KB2553428) 32-Bit Edition Security Update for Microsoft Word 2010 (KB3054842) 32-Bit Edition Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition SMI Grabber Device Snagit 11 Speccy StreamTransport version: 1.1.3.0 Stuurprogrammapakket voor Windows - Fedict SmartCard (03/25/2014 4.0.7.4) Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x86) - NLD Update for Microsoft Access 2010 (KB2837601) 32-Bit Edition Update for Microsoft Excel 2010 (KB2956084) 32-Bit Edition Update for Microsoft Filter Pack 2.0 (KB2881026) 32-Bit Edition Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition Update for Microsoft Office 2010 (KB2553140) 32-Bit Edition Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition Update for Microsoft Office 2010 (KB2589386) 32-Bit Edition Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition Update for Microsoft Office 2010 (KB2687275) 32-Bit Edition Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition Update for Microsoft Office 2010 (KB2883019) 32-Bit Edition Update for Microsoft Office 2010 (KB2889828) 32-Bit Edition Update for Microsoft Office 2010 (KB2965291) 32-Bit Edition Update for Microsoft Office 2010 (KB2965296) 32-Bit Edition Update for Microsoft Office 2010 (KB2965301) 32-Bit Edition Update for Microsoft Office 2010 (KB3054875) 32-Bit Edition Update for Microsoft OneNote 2010 (KB2956075) 32-Bit Edition Update for Microsoft OneNote 2010 (KB2965297) 32-Bit Edition Update for Microsoft Outlook 2010 (KB3054881) 32-Bit Edition Update for Microsoft Outlook Social Connector 2010 (KB2553308) 32-Bit Edition Update for Microsoft Project 2010 (KB2553251) 32-Bit Edition Update for Microsoft Project 2010 (KB3017816) 32-Bit Edition Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition Update for Microsoft Visio 2010 (KB2965292) 32-Bit Edition Update for Microsoft Visio Viewer 2010 (KB2881021) 32-Bit Edition UpdateService USB Audio/Video Driver VASCO Card Reader Plug-In (32-Bit) VASCO Smart Card Reader Plug-In (User) Video Downloader Visual Studio 2012 x86 Redistributables VLC media player Windows Live Communications Platform Windows Live Essentials Windows Live Family Safety Windows Live ID Sign-in Assistant Windows Live Installer Windows Live Mail Windows Live Messenger Windows Live MIME IFilter Windows Live Photo Common Windows Live PIMT Platform Windows Live SOXE Windows Live SOXE Definitions Windows Live UX Platform Windows Live UX Platform Language Pack Windows Live Writer Windows Live Writer Resources ZHPDiag 2015 ==== Running Processes ====================== C:\Windows\System32\smss.exe C:\Windows\system32\csrss.exe C:\Windows\system32\wininit.exe C:\Windows\system32\csrss.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\atiesrxx.exe C:\Windows\system32\atieclxx.exe C:\Windows\System32\spoolsv.exe C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe C:\Program Files\AVG\AVG2015\avgwdsvc.exe C:\Windows\system32\spool\DRIVERS\W32X86\3\OPHCLDCS.EXE C:\Program Files\Okidata\Print Job Accounting\oklogsvc.exe C:\Program Files\Okidata\Print Job Accounting\okwchsvc.exe C:\Program Files\Okidata\Print Job Accounting\opja0004.exe C:\Program Files\Okidata\Common\Extend3\portmgrsrv.exe C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Windows\Explorer.EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\GWX\GWX.exe C:\Program Files\AVG\AVG2015\avgui.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\RealNetworks\RealDownloader\downloader2.exe C:\Windows\WindowsMobile\wmdcBase.exe C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Windows\system32\taskeng.exe C:\Program Files\CCleaner\CCleaner.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\Windows\system32\DllHost.exe C:\Windows\system32\ctfmon.exe C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE C:\Windows\servicing\TrustedInstaller.exe C:\Program Files\Okidata\OKI C3200 Status Monitor\OPSTM010.exe C:\Program Files\Real\RealPlayer\update\realsched.exe C:\Windows\system32\Macromed\Flash\FlashUtil32_18_0_0_194_ActiveX.exe C:\Users\francist\Downloads\zoek.exe C:\Windows\system32\conhost.exe C:\Windows\system32\conhost.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\System32\svchost.exe -k utcsvc C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\svchost.exe -k WindowsMobile ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== "C:\Windows\AutoKMS\AutoKMS.exe" not found C:\ProgramData\Avg_Update_0215av deleted C:\Windows\system32\Tasks\0215avUpdateInfo deleted C:\Windows\system32\Tasks\AVG_SYS_TASK_0615av_RUN deleted C:\Windows\system32\Tasks\{E2D57E2C-544E-4C2B-89DF-3B5A9EF8E7FB} deleted C:\Program Files\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml deleted C:\Program Files\AVG Web TuneUp deleted C:\Program Files\Wondershare deleted C:\UNWISE.EXE deleted C:\PROGRA~2\AVG Security Toolbar deleted C:\PROGRA~2\Wondershare Video Editor deleted C:\PROGRA~2\Package Cache deleted C:\Users\francist\AppData\Local\Wondershare deleted C:\Windows\system32\config\systemprofile\AppData\LocalLow\AVG Web TuneUp deleted C:\Windows\tasks\0215avUpdateInfo.job deleted C:\Windows\system32\config\systemprofile\Searches deleted C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\u38188c5.default-1422026848436\jetpack deleted "C:\Windows\tasks\AutoKMS.job" deleted "C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll" deleted "C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll" deleted "C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll" deleted "C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe" deleted "C:\Program Files\Common Files\Wondershare" deleted "C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact" deleted ==== System Specs ====================== Windows: Windows 7 Professional Edition Service Pack 1 (Build 7601) Memory (RAM): 2815 MB CPU Info: AMD Athlon(tm) 7750 Dual-Core Processor CPU Speed: 2703,7 MHz Sound Card: Luidsprekers (Realtek High Defi | Realtek Digital Output (Realtek | Display Adapters: ATI Radeon HD 3200 Graphics | ATI Radeon HD 3200 Graphics | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver Monitors: 1x; Algemeen PnP-beeldscherm | Screen Resolution: 1680 X 1050 - 32 bit Network: Network Present Network Adapters: Realtek PCIe GBE Family Controller CD / DVD Drives: 1x (E: | ) E: HL-DT-STDVD-RAM GH22NS30 Ports: COM1 LPT1 Mouse: 8 Button Wheel Mouse Present Hard Disks: C: 465,8GB | D: 348,6GB Hard Disks - Free: C: 318,8GB | D: 221,0GB Manufacturer *: Award Software International, Inc. BIOS Info: AT/AT COMPATIBLE | 12/30/08 | GBT - 42302e31 Time Zone: Romance (standaardtijd) Motherboard *: Gigabyte Technology Co., Ltd. GA-MA780G-UD3H Country: Belgi‰ Language: NLB ==== System Specs (Software) ====================== Anti-Virus: AVG AntiVirus Free Edition 2015 On-access scanning disabled (Outdated) Anti-Spyware: Windows Defender disabled (Outdated) Anti-Spyware: AVG AntiVirus Free Edition 2015 disabled (Outdated) Internet Explorer Version: 11.0.9600.17843 Mozilla Firefox version: 37.0.2 (x86 nl) Opera Browser version: 30.0.1835.88 Google Chrome version: 37.0.2062.124 Adobe Reader version: 11.0.11.18 Sun Java version: 1.8.0_45 (32-bit) Flash Player version: 18.0.0.198 ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\francist\AppData\Local\Temp ==== ====== Java Cache ===== 2015-06-30 10:11:59 71CE049C0DC6E7B074E2D0363559B082 442 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\11d6c000-54c85bfa999fd7adb5ee4f5b132d4d07e128ef215bfbde0577dc8e6df93792b5-6.0.lap 2015-06-30 10:12:13 A537385D87AD3B252B3839219DCD0B3C 5690 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\1ea61680-51a078d1 2015-06-30 10:12:06 9D18C06B0D2A479DDC54448EE519E136 4303 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\29713240-2c56a79e 2015-06-30 10:12:15 0596584451EB11881990624EB588B5FE 5625 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\37286880-66c30e2d 2015-06-30 10:12:10 7CFFC3B03FCC3F565C1503E37469F753 4749 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\51f6aa00-4a970233 2015-06-30 10:12:11 4AC2D416DD11EA557CA8755D90A4E8BC 4647 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\7315fa80-55295d63 2015-06-30 10:12:07 7073E1F61844DCEF3C9D870229AED2F4 540 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\21726481-2aa9b457 2015-06-30 10:12:15 E1EFAF56F1608EA7E8FA1C254C6128EB 292 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\25dffd41-271246de 2015-06-30 10:12:13 982C3D4819BFC26C42F7567E84CE0D82 4970 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\3eaabc01-3cdbd9ba 2015-06-30 10:12:07 471ADF115FCB284696816E4F83A42509 470 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\5412b981-350dc591 2015-06-30 10:12:05 AD561BA257E92D9358E6A73993B03E9E 401 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\332bb80a-67cb59d0 2015-06-30 10:12:02 CD12BDD1BE8C57111EECBA3FA58F7DCB 101 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\624a394a-7695bfd0962e543741184e506a0b0ca434d9d0ba9043eab22ba6bbea1c94a1d9-6.0.lap 2015-06-30 10:12:09 A8C029EB3CF1F16F29D215AF2E37F317 6167 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\e34ea8a-2f86c268 2015-06-30 10:12:14 F7961781379EE585C8499013D3A79940 5572 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\69d682cb-196848d4 2015-06-30 10:12:11 D86865A399ECCB13B2D973EEF10550B4 737 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\6d78840b-244ac53e 2015-06-30 10:12:08 4F969C64FCDAADC5B4A770A669EFB620 354 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\6f1878b-4d40fafc 2015-06-30 10:12:06 48AB07B502E9D054E0527DCEA4B8E974 4776 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\ec2aa4b-210cfcd7 2015-06-30 10:12:11 504E29C27819B603870E59C0CF8DF917 452 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\66725cc-23d1f04e 2015-06-30 10:12:09 4436847F93FC149AA646912206827FCE 541 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\f916b0c-28949be3 2015-06-30 10:12:10 8DE1FC4B78355CAD6157A2C0625AA4F8 669 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\5c2d684d-6a0ed3e3 2015-06-30 10:12:06 03EEFA8A5964DCF07DF50F793AC35A6B 443 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\2b2b9f4e-368b1d02 2015-06-30 10:12:10 B299AA96872CD48F2F61E1118EFCE0D8 3869 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\5ab1794e-3cae45d3 2015-06-30 10:12:09 914353ABFEC5A5707D1C3218E0C40655 532 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\76304e0e-182094ed 2015-06-30 10:12:11 D4A1594E4C278EA8670EFE89340B6674 515 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\63b0918f-753ab13a 2015-06-30 10:12:09 1C32D60C26D584F6A545CC6699BA3413 5351 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\161c4850-5ea105dd 2015-06-30 10:12:13 C3A32AC44F0043B65F467CB94D4E0534 822 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\402bee91-2651ae2f 2015-06-30 10:12:05 408A8CEF60EB4CAF7514D007D90DBE66 617 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\43509791-65433c88 2015-06-30 10:12:10 E2CD6722EE6A48AD5121BCA758CE9E6F 5898 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\1312df92-3fb9e1dc 2015-06-30 10:12:15 1A8886AE52050E6B64E4856F6E0A55A3 6016 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\591bff52-5fd83b26 2015-06-30 10:12:06 E1EFAF56F1608EA7E8FA1C254C6128EB 292 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\10583b02-2cf585af 2015-06-30 10:12:08 E4B4599F9710CD5244B168B23FE91703 659 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\6c7fd502-7577700f 2015-06-30 10:12:07 6E140190755A0B0A38711608D24EEF92 156 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\75e64082-6b43ae6e 2015-06-30 10:12:10 B00C31C7A91AA50A4BBA0BE370E37C75 3540 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\49838a14-3cebc10f 2015-06-30 10:12:10 0F1104E41964883A42C37EF52D04508F 763 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\4b653515-69447fb2 2015-06-30 10:12:16 45815D21AE2794B408CB15D621F8097F 782 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\165603d6-28ad1d84 2015-06-30 10:12:12 C44479A8EAF7895C1EFE354BEA0DE171 4139 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\26109e96-27301562 2015-06-30 10:12:12 828E902B3956FE44A374CDC61FF62D0A 675 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\311688d6-57ce816c 2015-06-30 10:12:09 66AE4CDCFCA6694B2130D686C0BAC12C 674 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\31446056-23457313 2015-06-30 10:12:05 945C62DAB404C8C6FE2108A37F558A29 1423 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\21a0cbd7-6306c274 2015-06-30 10:12:14 14E689D0528CDB5A78FCA6F6EE60AD0B 5357 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\24349197-601e9e05 2015-06-30 10:12:12 740457FA0CBB4C72A32A1A81B0E7A9F4 5357 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\39294097-31c1835d 2015-06-30 10:12:14 4EF5798D01A583DD91106671EA69EC24 5808 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\48300697-179d1657 2015-06-30 10:12:06 F55E6020D2702EF1C07D960F99D8F1DD 4990 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\4b639a17-5488dc24 2015-06-30 10:12:13 1F4501A82AC541C7B4E5D734AC3ED4CB 5043 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\2d85f2d8-7f796807 2015-06-30 10:12:11 2A4C5F528A76AB53D2A126D1C0922133 687 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\74be0199-28a2cb72 2015-06-30 10:12:07 D1D276709F29A1A400D92DECACD9D013 4465 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\41be289a-14cc326f 2015-06-30 10:12:14 D12BDE0A8190A77D8EC41C7219026652 536 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\49a966db-139766f2 2015-06-30 10:12:07 129FA057A563638C33A1E8C941B49E1D 324 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\5e1c1f1b-1eb7ef8a 2015-06-30 10:12:51 9148EFA0300850843A28A779F9766016 1195 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\6c806a9b-6a9f2fe4 2015-06-30 10:12:14 3E5251E2851C617B1A12283C1503D775 5298 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\715d769b-672d7fef 2015-06-30 10:12:09 4BC1230AABAA9286C288A17F4BFACEE1 5587 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\380e2e5d-4fb997e0 2015-06-30 10:12:15 AFCBEAE1A40B1A970217BB5B587F2523 692 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\5ab4191d-53723c33 2015-06-30 10:12:09 D10ACDA8A9E4CF16F60A06CE7B8D7FB8 489 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\5bb4c8dd-7cfff441 2015-06-30 10:12:11 A95BE2178F7D1351473ACEAC198BFF72 3835 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\2f705643-38d25357 2015-06-30 10:12:16 23BCBFDA663122A815255E7EA77DDCAB 798 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\368f8383-5c3695fa 2015-06-30 10:12:11 7BCD9B0DAF1A6B5B8721836AACAEC006 5356 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30\511a101e-7a714c08 2015-06-30 10:12:15 BEABA76571E99C3B7A1E804FFD15F35E 514 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30\f3eb91e-483f2bc5 2015-06-30 10:12:10 58F8E1701FD71BD612666ABF83A486E8 446 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\17139aa1-4d8d73bb 2015-06-30 10:12:12 96F5FFB8CD8021465C63C27F0FAD5113 6000 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\bd1f061-54ff7174 2015-06-30 10:12:14 28333F62D650F92802855E6F30EC8D23 5794 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\1c85b962-29688e83 2015-06-30 10:12:10 7BAABEA16437709A60ACC3712883C30B 588 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\1e619e23-19c2b83d 2015-06-30 10:12:07 4B25A0F6539EA9E35D6BC6983CE32A97 3196 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\5c7beee3-25d7766c 2015-06-30 10:12:05 75FBDEA43BA8AC5ADBBD3CC198C9E807 4184 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\75319e3-67715f88 2015-06-30 10:12:05 66373198B8828FF7C5DD427A9243C9F3 342 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\2557e5e4-5a8de982 2015-06-30 10:12:05 BB5F8F083A009D1286F52A4651EA8A1D 12722 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\2a975e4-2a3604ff 2015-06-30 10:12:16 00C20A5531DD3038C9C0C3BFD5E16035 5384 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\348bdfa4-4952e972 2015-06-30 10:12:15 92626867B3F56963C80300A304213EAD 5474 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\4077e364-2719c53d 2015-06-30 10:12:06 471ADF115FCB284696816E4F83A42509 470 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\6efffbe5-48f8d147 2015-06-30 10:12:06 9EC3E6A3BF927024282762B629E08237 4941 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\30b4ce26-45c7cf21 2015-06-30 10:12:13 BDBC40AC7AD51DAD7BC76B3EA3FF8AC4 688 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\5514b666-711250da 2015-06-30 10:12:12 32A7F973124C39EFB02BC56AFD859727 5311 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\53462727-5f67430a 2015-06-30 10:12:07 BE5B98FBB0449D08E1B6F04F1E90A4DF 4836 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\74599aa7-43689a08 2015-06-30 10:12:10 BD2D7EAA0C43C25E23F01190B0BB3C78 28340 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\74cc9627-248304f7 2015-06-30 10:12:13 6928ECEFFA136CB6CEB7368BF44DD239 6221 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\6062e2c4-6c6d146a 2015-06-30 10:12:06 28A5A1F27BFE24CF82CD427846141445 4904 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\6d105ac4-3beab152 2015-06-30 10:12:07 8125A8E7F9E158CF4E87124768725301 3992 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\7dfbe384-54ba1724 2015-06-30 10:12:11 930EEAE26E6D331E4ABB5E1DBA4E1566 539 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\14e83c68-3f5783e6 2015-06-30 10:12:10 199E7FCE434E801097B173D8FD713562 3839 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\1c968668-1b6c18fb 2015-06-30 10:12:13 BCABEF1E97A0C75226EF76F2F5C4F90B 533 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\20351629-3be634e5 2015-06-30 10:12:08 569CAA3AEA99D2DF5DA734FCB6E0CF2D 502 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\28c83429-3ce3cb15 2015-06-30 10:12:15 814FB4315C31BBF2C950185F25D89B8E 895 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\41e42969-4d2185c4 2015-06-30 10:12:12 C0E1F82352377C7C3AEFA19873D051DA 704 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\27fdef2a-7d5ac3f5 2015-06-30 10:12:05 A208095E22B28F46B219229DA285D47B 1309 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\68132d2a-7d81ec95 2015-06-30 10:12:12 2021C29C7157A0A8097BDC1F06E251B5 850 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\50eea7eb-1dcc993c 2015-06-30 10:12:15 AF26E7201FB150DE7BFAF7221A907665 4662 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\7577edeb-49b7ddb2 2015-06-30 10:12:11 39AFB9714659DCCDDE4FEA57ABA8F108 4520 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\490ee6d-64238e5c 2015-06-30 10:12:05 7CB850F134C090A7A53C56F7D30B871D 982 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\677d2ead-3ed8f315 2015-06-30 10:12:06 7CB850F134C090A7A53C56F7D30B871D 982 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\4cdf0aae-1030dee5 2015-06-30 10:12:13 58F8E1701FD71BD612666ABF83A486E8 446 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\62381f6e-41bae9ac 2015-06-30 10:12:06 03EEFA8A5964DCF07DF50F793AC35A6B 443 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\92b062e-49251579 2015-06-30 10:12:08 DDCDD19283986DAF3F8C2061DE78842F 903 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\e7f05ee-66256cc7 2015-06-30 10:12:05 47AAB3329FE17E2F3C90EA3744037517 3199 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\2440762f-444e26a4 2015-06-30 10:12:15 86CF3B422A18570816A42438E1C43B10 557 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\76d5bd6f-19f04f73 2015-06-30 10:12:07 FC94236C1AA27C61794EE265E71F0900 4028 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\1f917a70-10df6a9e 2015-06-30 10:12:05 0DCC6F5AD7329A97C7235ADAE1CCD78E 4899 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\65ca8ff0-5f6a8172 2015-06-30 10:12:15 36044C111C111E81C78CBBDC9BC3AEB1 3740 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\da0f930-71eafd18 2015-06-30 10:12:10 502B6D650CDA6DF522BDBD07B763A6E3 6093 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\1535ea05-340fbc86 2015-06-30 10:12:10 F6B2EA430DB24CE30B1B22A6BAD48BA0 4918 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\173edbc5-6da3acf8 2015-06-30 10:12:08 C8D52CDB43DA554703D79F16502DF8C7 4004 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\634a1985-230d25f6 2015-06-30 10:12:00 153B227AC441067B2A7A7128CA54395C 249966 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\6c542a85-51988744 2015-06-30 10:12:08 970BA351CE27D1B838C8422B07E9F9A8 4212 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\748f9b05-5f6745cd 2015-06-30 10:12:14 F75188333C70062E166E8B200B41F4D1 4630 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\7c74f605-55fc73f8 2015-06-30 10:12:08 7DFD1415F678B1EA8350FE42EBDDFC13 2901 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\272f3b72-488271f7 2015-06-30 10:12:12 BE6F588A8359BE98F9B2D7142EA34FA0 4860 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\36bbffb2-7cd02244 2015-06-30 10:12:15 D73CC9BD58E872B9178CD0D6EE9213C8 532 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\38b28872-34882c5f 2015-06-30 10:12:11 148A4853257601D21043CFD987CCA129 3792 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\61c92133-6a121e58 2015-06-30 10:12:09 6B78E14EE52A8A1AA6BDFD0DBFAF71F3 362 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\17f1a1b4-25349a1a 2015-06-30 10:12:13 358647288757816D8A35891E9B551407 597 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\2f28b7f4-64931ce0 2015-06-30 10:12:05 02F2A537DEBAD3838B075576D9F9A481 357 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\3fe0b974-49a7e308 2015-06-30 10:12:09 8FE72BC0DF4733214052BE5409C2E926 4108 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\59dbcbf4-63a05d78 2015-06-30 10:12:12 40A8DD9848EDF29DCFF1378346AF8822 618 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\d6d9274-5b02fd7f 2015-06-30 10:12:14 6FA66133648D5B55DCBBA64C5C2BA1D6 362 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\6b4dde75-7afbcbe1 2015-06-30 10:12:14 D47A53D4D00BA636EFC886490A5AD904 464 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\72caa1f5-17743966 2015-06-30 10:12:08 D37ED873F3FD33B1F0C323B0BB744A86 409 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\4a9a0536-322d64fe 2015-06-30 10:12:08 7E7E6D583E13FD52F7A9F7A54CE24F7F 3533 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\55a88f6-7607923e 2015-06-30 10:12:05 EE9A56DD3B84133778ADEE3028726841 1411 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\5f001ff6-56dd39bb 2015-06-30 10:12:06 E1EFAF56F1608EA7E8FA1C254C6128EB 292 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\325a87b8-275563e3 2015-06-30 10:12:13 66AE4CDCFCA6694B2130D686C0BAC12C 674 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\756c31b8-291420af 2015-06-30 10:12:08 D6872F529DD4A5D8E47B530CCB2EF6D9 3732 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\c9c5ef8-1fc1c78b 2015-06-30 10:12:10 14BCBCD4E11189A8789CB0593C17F57F 587 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\18d01e39-3238342b 2015-06-30 10:12:07 271E4DF366D71C8C765D753CB66B82CE 767 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\435456f9-18e6e022 2015-06-30 10:12:14 8F2D181CC699564DFF0EFB0E61EEDF29 598 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\1e1c0aba-624ea654 2015-06-30 10:12:11 DD69C041A81BE145C3EFEA4BCCC4F97A 4278 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\6b92613a-534c4cfe 2015-06-30 10:12:13 8D5471D83B5C4806C091C032FE164406 591 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\7c4e4f3a-1abcba8d 2015-06-30 10:12:11 FAE55500FA5773CDAC76BF6856BD6C67 653 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\3cb46fb-3784e985 2015-06-30 10:12:08 ACB7C857D98AB338C869FDF6C53CD3BE 2895 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\48fdfe7b-6ac0f661 2015-06-30 10:12:07 D296AD267F619CE09C642AB0B8C2C6F0 5093 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\52783e7b-697e0597 2015-06-30 10:12:13 65878D2BAE05BA0F8D7BA16A8951AEB6 6060 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\73a78cbb-37bc359c 2015-06-30 10:12:11 B4455D24E69812887AA68B00AA57254A 5185 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\2302586-73d27bb2 2015-06-30 10:12:12 3BE9DA11B9C5AD189E637DCCF1E044F9 221 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\38142e86-213743c5 2015-06-30 10:12:12 BF9EC7F873A1526C53180F3982009F0F 533 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\3ab6d106-637e049e 2015-06-30 10:12:13 36B18FA071B56955EFD849B85E48169B 6171 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\7aa6bd86-38ca7e63 2015-06-30 10:12:15 71A1B75A8071309887EA0B98FF1A3927 5570 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\14e50efe-14a3b4e6 2015-06-30 10:12:07 BB3246ABAA3762D437620D3D71B4E6E3 1032 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\7f669a7e-33207f5f 2015-06-30 10:12:09 A80F0834F0673073814BA2B670F7E63D 6197 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\2fe0e63f-583b981b 2015-06-30 10:12:12 1B085BECEB36656D43C48FD40A40C465 4061 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\4f7a003f-29045825 2015-06-30 10:12:14 504E29C27819B603870E59C0CF8DF917 452 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\5369267f-3fd9abf1 2015-06-30 10:12:05 265A9B9B723E62F219FC50039A989B46 159 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\28ab6787-71b002c4 2015-06-30 10:12:08 4974E1BE085AC302C24D716E7D74630C 3374 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\6ac06d47-20969048 2015-06-30 10:12:09 2663E957693FDFD2D6904C8C67E4B6BB 478 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\7d448407-24c64467 2015-06-30 10:12:09 7D181739142CFB035D5B09476868D4BB 3852 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\7bd76e88-3161204e 2015-06-30 10:12:09 6B78E14EE52A8A1AA6BDFD0DBFAF71F3 362 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\39846509-20be6085 2015-06-30 10:12:05 960BA73E5612EF22975CAF2BFCDB44F7 392 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\3dd4f49-31649685 2015-06-30 10:12:11 CF07DF957CA6911519475C197CA9EC3B 782 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\52bf2f49-618fd090 2015-06-30 10:12:08 AFCECF8D399A61DD0E8546EE797D339B 614 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\6530fbc9-677830e9 2015-06-30 10:12:14 6556B66CD38D274635965EE56C67FBD1 594 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\7e1fabc9-6cb2e397 ====== C:\Windows\system32 ===== 2015-07-02 17:24:51 07705817033CAB07E22FB8E4C8F1FAEC 448080 ----a-w- C:\Windows\System32\FNTCACHE.DAT ====== C:\Windows\system32\drivers ===== 2015-06-10 03:15:09 575DF237408CA735631F7A0DC423D873 54656 ----a-w- C:\Windows\System32\drivers\stream.sys 2015-06-10 03:14:35 3C9D9DFCF517103677D7B6255C727B48 67520 ----a-w- C:\Windows\System32\drivers\ksecdd.sys 2015-06-10 03:14:35 0DFC56491C8B56A35AD52EAF770752FE 137664 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys ====== C:\Windows\Tasks ====== 2015-06-27 08:59:00 ABA47C4B0A7A975E29B2AD82D7CE1E24 3226 ----a-w- C:\Windows\system32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3730078115-3281393171-2249441152-1000 2015-06-27 08:58:59 3C905734FE84E964429D6E2B8B99D291 3354 ----a-w- C:\Windows\system32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3730078115-3281393171-2249441152-1000 ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2015-07-03 06:56:31 -------- d-----w- C:\Program Files\trend micro 2015-07-01 12:45:17 -------- d-----w- C:\Program Files\HD Tune 2015-06-30 10:28:46 -------- d-----w- C:\Program Files\Speccy 2015-06-15 23:12:39 -------- d-----w- C:\Program Files\Common Files\Java 2015-06-13 07:44:31 -------- d-----w- C:\Program Files\Common Files\AV ======= C: ===== ====== C:\Users\francist\AppData\Roaming ====== 2015-07-02 17:26:29 E92318F23E91AFBFEFD5C094D7C0442B 124816 ----a-w- C:\Users\francist\AppData\Local\GDIPFONTCACHEV1.DAT 2015-06-27 08:58:56 -------- d-----w- C:\Users\francist\AppData\Roaming\RealNetworks 2015-06-27 08:57:34 -------- d-----w- C:\Users\francist\AppData\Local\Real 2015-06-17 05:10:01 -------- d-----w- C:\Users\francist\AppData\Local\GWX 2015-06-15 23:12:36 -------- d-----w- C:\Users\francist\AppData\Locallow\Oracle 2015-06-08 09:41:17 -------- d-----w- C:\Users\francist\AppData\Local\Windows Live Writer ====== C:\Users\francist ====== 2015-07-01 12:45:17 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune 2015-06-30 10:28:48 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy 2015-06-27 08:58:46 -------- d-----w- C:\ProgramData\RealNetworks ====== C: exe-files == 2015-07-03 06:56:31 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\francist.exe 2015-07-03 06:56:23 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\Users\francist\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XSKQ2G25\RSIT.exe 2015-07-01 12:45:17 F8FC2D14DF813CC920A39B3CB7E59CBC 401408 ----a-w- C:\Program Files\HD Tune\HDTune.exe 2015-07-01 12:45:17 CEFC20D14D9940D53505E9B9769139E7 682266 ----a-w- C:\Program Files\HD Tune\unins000.exe 2015-07-01 12:44:59 088812A121E0A9CEB40CE9C808C8A90C 642632 ----a-w- C:\Users\francist\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFGWKTPC\hdtune_255.exe 2015-06-30 10:28:09 678AB0E8665345E72D11149A36F965BE 5127432 ----a-w- C:\Users\francist\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XSKQ2G25\spsetup128.exe === C: other files == 2015-07-02 04:56:38 DD1B8AD35CA5A61E480D452CD03D1A5C 726298 ----a-w- C:\Users\francist\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XSKQ2G25\Waterpretkiekjes.zip ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Windows\CurrentVersion\Run] "HydraVisionDesktopManager"="C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe" "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner.exe /MONITOR" "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe /background" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BCSSync"="C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices" "AVG_UI"="C:\Program Files\AVG\AVG2015\avgui.exe /TRAYONLY" "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe MSRun" "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s" "TkBellExe"="C:\Program Files\Real\RealPlayer\update\realsched.exe -osboot" "Wondershare Helper Compact.exe"="C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe" "SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe" "RealDownloader"="C:\Program Files\RealNetworks\RealDownloader\downloader2.exe" "Windows Mobile-based device management"="%WINDIR%\WindowsMobile\wmdcBase.exe " [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "HydraVisionDesktopManager"="C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe" "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner.exe /MONITOR" "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe /background" ==== Startup Registry Disabled ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Bonus.SSR.FR10] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Bonus.SSR.FR10" "hkey"="HKLM" "command"="\"C:\\Program Files\\ABBYY FineReader 10\\Bonus.ScreenshotReader.exe\" /autorun" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NeroCheck] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NeroCheck" "hkey"="HKLM" "command"="C:\\Windows\\system32\\NeroCheck.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RtHDVCpl] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="RtHDVCpl" "hkey"="HKLM" "command"="C:\\Program Files\\Realtek\\Audio\\HDA\\RtHDVCpl.exe -s" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TkBellExe] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="TkBellExe" "hkey"="HKLM" "command"="\"C:\\Program Files\\Real\\RealPlayer\\Update\\realsched.exe\" -osboot" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\RealPlayer Cloud Service] ==== Startup Folders ====================== 2013-09-12 16:56:47 1270 ----a-w- C:\Users\francist\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Schermopname en Snel starten.lnk 2013-09-18 13:12:21 1197 ----a-w- C:\Users\francist\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk 2014-12-10 17:45:42 1210 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk 2015-06-27 08:57:41 1210 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk 2014-12-08 10:49:01 1108 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Snagit 11.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [02/07/2015 19:27] ==== Other Scheduled Tasks ====================== "C:\Windows\system32\tasks\Adobe Acrobat Update Task" [C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe] "C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\system32\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\system32\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\system32\tasks\Opera scheduled Autoupdate 1378240423" [C:\Program Files\Opera\launcher.exe] "C:\Windows\system32\tasks\RealDownloader Update Check" [C:\Program Files\RealNetworks\RealDownloader\downloader2.exe] "C:\Windows\system32\tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3730078115-3281393171-2249441152-1000" [C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe] "C:\Windows\system32\tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3730078115-3281393171-2249441152-1000" [C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe] "C:\Windows\system32\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3730078115-3281393171-2249441152-1000" [C:\Program Files\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\system32\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3730078115-3281393171-2249441152-1000" [C:\Program Files\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\system32\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe] "C:\Windows\system32\tasks\NCH Software\VideoPadSevenDays" [C:\Program Files\NCH Software\VideoPad\VideoPad.exe] "C:\Windows\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Start and Search pages ====================== ProfilePath: C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\u38188c5.default-1422026848436 user_pref("browser.startup.homepage", "www.google.be"); user_pref("browser.search.selectedEngine", "AVG Secure Search"); ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "{ABDE892B-13A8-4d1b-88E6-365A6E755758}"="C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext" [] [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "mozilla_cc@internetdownloadmanager.com"="C:\Users\francist\AppData\Roaming\IDM\idmmzcc5" [07/12/2014 12:12] ==== Firefox Extensions ====================== ProfilePath: C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\u38188c5.default-1422026848436 - Video DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi AppDir: C:\Program Files\Mozilla Firefox - Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\u38188c5.default-1422026848436 DC26A2A219E08DE10320E8B7D5433690 - C:\Program Files\Adobe\Reader 11.0\Reader\browser\nppdf32.dll - Adobe Acrobat E42650C972D21F334EB0D3264941DCD7 - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll - Adobe Acrobat 0CA4180B21C6B728578F3B0433BB740E - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin 395D6E04316D52388F2B844EAB23651F - c:\program files\real\realplayer\Netscape6\nprpplugin.dll - RealTimes Download Plugin 50DF3015C2D9AA042A6C1264ADE371F2 - c:\program files\real\realplayer\Netscape6\nppl3260.dll - RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) F0E80E561C3F715DB01ACCC97B72463A - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Photo Gallery CA808688B28D12B368F9A511FC5E3697 - C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll - Java(TM) Platform SE 8 U45 B28862688B70415A3C0C5DCC8B242388 - C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 8.0.450.15 6A6E27C9BFC56CBA188DE251F291273D - C:\Program Files\Google\Picasa3\npPicasa3.dll - Picasa A3386FD12A0D65B2AA12784C9C6B7391 - C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_198.dll - Shockwave Flash D2B5242013356AF422A42B9FAA4056C2 - C:\Users\francist\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.2\npVascoCardReaderPlugin.dll - VASCO Card Reader Plugin 83949CA2E938F744F6D344A90A5C2EC3 - C:\Program Files\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll - Foxit PhantomPDF Plugin for Mozilla ==== Chromium Look ====================== Google Docs - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Google Wallet - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Bitdefender QuickScan - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie Gmail - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.be/" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="res://ieframe.dll/tabswelcome.htm" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.be/" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="about:newtab" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{9D4AB4E7-2DBE-40C8-A9AF-7E4C8923C1DE}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {4030B667-69E0-4F21-ABDF-AF858A436EC6} (www.google.com) Google Url="https://www.google.com/search?q={searchTerms}" {9D4AB4E7-2DBE-40C8-A9AF-7E4C8923C1DE} (www.google.com) Google Url="https://www.google.com/search?q={searchTerms}" ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\{ABDE892B-13A8-4d1b-88E6-365A6E755758} deleted successfully ==== shortcuts on All Users Desktop ====================== C:\Users\Public\Desktop\Adobe Reader XI.lnk - C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe C:\Users\Public\Desktop\AVG 2015.lnk - C:\Program Files\AVG\AVG2015\avgui.exe C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner.exe C:\Users\Public\Desktop\eID Viewer.lnk - C:\Program Files\Belgium Identity Card\EidViewer\eID Viewer.exe C:\Users\Public\Desktop\Foxit PhantomPDF Advanced Editor.lnk - C:\Program Files\Foxit Software\Foxit PhantomPDF\Advanced Editor\Advanced Editor.exe C:\Users\Public\Desktop\Foxit PhantomPDF.lnk - C:\Program Files\Foxit Software\Foxit PhantomPDF\Foxit PhantomPDF.exe C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\Public\Desktop\honestech VHS to DVD 2.0 SE.lnk - C:\Program Files\honestech VHS to DVD 2.0 SE\VHStoDVDAdv.exe C:\Users\Public\Desktop\Internetbrowser selecteren.lnk - C:\Windows\System32\browserchoice.exe /launch C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk - C:\Program Files\Malwarebytes Anti-Malware\mbam.exe C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe C:\Users\Public\Desktop\Opera.lnk - C:\Program Files\Opera\launcher.exe C:\Users\Public\Desktop\Picasa 3.lnk - C:\Program Files\Google\Picasa3\Picasa3.exe C:\Users\Public\Desktop\RealTimes (RealPlayer).lnk - C:\program files\real\realplayer\RealPlay.exe /launch:desktop C:\Users\Public\Desktop\Speccy.lnk - C:\Program Files\Speccy\Speccy.exe C:\Users\Public\Desktop\StreamTransport.lnk - C:\Program Files\StreamTransport\StreamTransport.exe C:\Users\Public\Desktop\VLC media player.lnk - C:\Program Files\VideoLAN\VLC\vlc.exe C:\Users\Public\Desktop\E Dev\E-Peek 1.9.9.0.lnk - C:\Program Files\E Dev\E-Peek\E-Peek 1.9.9.0.exe C:\Users\Public\Desktop\E Dev\UninstallE-Peek.lnk - C:\Windows\System32\msiexec.exe /x {1CA0A028-0070-4E39-9450-9E7672FA3451} ==== shortcuts in All Users Start Menu ====================== C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk - C:\Windows\Installer\{AC76BA86-7AD7-1043-7B44-AB0000000001}\SC_Reader.ico C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk - C:\Program Files\Windows Live\Photo Gallery\MovieMaker.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk - C:\Program Files\Windows Live\Mail\wlmail.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk - C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG\AVG 2015.lnk - C:\Program Files\AVG\AVG2015\avgui.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune\HD Tune Manual.lnk - C:\Program Files\HD Tune\hdtune.html C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune\HD Tune on the Web.lnk - C:\Program Files\HD Tune\HDTune.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune\HD Tune.lnk - C:\Program Files\HD Tune\HDTune.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune\Uninstall HD Tune.lnk - C:\Program Files\HD Tune\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk - C:\Program Files\Java\jre1.8.0_45\bin\javacpl.exe -tab about C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk - C:\Program Files\Java\jre1.8.0_45\bin\javacpl.exe -tab update C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk - C:\Program Files\Java\jre1.8.0_45\bin\javacpl.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Get Help.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visit Java.com.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks\RealTimes (RealPlayer).lnk - C:\Program Files\Real\RealPlayer\realplay.exe /launch:start_menu C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks\RealTimes Converter.lnk - C:\Program Files\Real\RealPlayer\realconverter.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks\RealTimes Downloader.lnk - C:\Windows\Installer\{9F3B20DF-76F2-47F4-9372-F0F56485A58D}\recordingmanager.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks\RealTimes Trimmer.lnk - C:\Program Files\Real\RealPlayer\realtrimmer.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy\Speccy.lnk - C:\Program Files\Speccy\Speccy.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk - C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live\Windows Live Family Safety.lnk - C:\Windows\Installer\{C74DCAC0-DDB3-4135-A70C-0553BF9490BC}\fssicon.ico C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live\Windows Live Writer.lnk - C:\Program Files\Windows Live\Writer\WindowsLiveWriter.exe ==== shortcuts in Quick Launch ====================== C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - ==== HijackThis Entries ====================== R3 - Default URLSearchHook is missing O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2015\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe" MSRun O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [RealDownloader] C:\Program Files\RealNetworks\RealDownloader\downloader2.exe O4 - HKLM\..\Run: [Windows Mobile-based device management] %WINDIR%\WindowsMobile\wmdcBase.exe O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe" O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - Startup: OneNote 2010 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE O4 - Startup: OpenOffice.org 3.4.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe O4 - Global Startup: RealPlayer Cloud Service UI.lnk = C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe O4 - Global Startup: RealTimes.lnk = C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe O4 - Global Startup: Snagit 11.lnk = C:\Program Files\TechSmith\Snagit 11\Snagit32.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: Download alle links met IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm O8 - Extra context menu item: Download met IDM - C:\Program Files\Internet Download Manager\IEExt.htm O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: ABBYY FineReader 10 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.10.0) - ABBYY - C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgwdsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: OKI OPHC DCS Loader - Oki Data Corporation - C:\Windows\system32\spool\DRIVERS\W32X86\3\OPHCLDCS.EXE O23 - Service: Print Job Accounting (OkiJaSvc) - Oki Data Corporation - C:\Program Files\Okidata\Print Job Accounting\oklogsvc.exe O23 - Service: Print Job Accounting Watch Service (OkiWchSvc) - Oki Data Corporation - C:\Program Files\Okidata\Print Job Accounting\okwchsvc.exe O23 - Service: Print Job Accounting opja0004 (opja0004) - Oki Data Corporation - C:\Program Files\Okidata\Print Job Accounting\opja0004.exe O23 - Service: OKI Local Port Manager (OpLclSrv) - Oki Data Corporation - C:\Program Files\Okidata\Common\Extend3\portmgrsrv.exe O23 - Service: RealPlayer Update Service (RealPlayerUpdateSvc) - Unknown owner - C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe O23 - Service: RealTimes Desktop Service - RealNetworks, Inc. - c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe ==== Empty IE Cache ====================== C:\Users\francist\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\francist\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFGWKTPC will be deleted at reboot C:\Users\francist\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XSKQ2G25 will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\francist\AppData\Local\Mozilla\Firefox\Profiles\u38188c5.default-1422026848436\cache2 emptied successfully ==== Empty Chrome Cache ====================== C:\Users\francist\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=1387 folders=218 187984926 bytes) ==== Empty Temp Folders ====================== C:\Users\Administrator\AppData\Local\temp emptied successfully C:\Users\Default\AppData\Local\temp emptied successfully C:\Users\Default User\AppData\Local\temp emptied successfully C:\Users\francist\AppData\Local\Temp will be emptied at reboot C:\Users\Gast\AppData\Local\temp emptied successfully C:\Users\HomeGroupUser$\AppData\Local\temp emptied successfully C:\Users\Public\AppData\Local\temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\francist\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\francist\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFGWKTPC" deleted "C:\Users\francist\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XSKQ2G25" deleted ==== EOF on zo 05/07/2015 at 1:06:27,00 ======================