Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Zakelijk - Estate Pl on di 14/07/2015 at 15:19:10.07.
Microsoft® Windows Vista™ Home Premium  6.0.6002 Service Pack 2 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Zakelijk - Estate Pl\Desktop\zoek.exe [Scan all users] [Script inserted] 

==== System Restore Info ======================

14/07/2015 15:22:31 Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\PROGRA~2\DAEMON Tools Toolbar deleted successfully
C:\PROGRA~2\DSPRobotics deleted successfully
C:\PROGRA~2\IObit deleted successfully
C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\PROGRA~2\Optimizer Pro deleted successfully
C:\PROGRA~2\Ubisoft deleted successfully
C:\PROGRA~2\VstPlugins deleted successfully
C:\PROGRA~2\WinZip Registry Optimizer deleted successfully
C:\PROGRA~2\COMMON~1\Symantec Shared deleted successfully
C:\Program Files\Image-Line deleted successfully
C:\Program Files\log deleted successfully
C:\Program Files\Soluto deleted successfully
C:\Program Files\Common Files\VST2 deleted successfully
C:\PROGRA~3\ALM deleted successfully
C:\PROGRA~3\PSPVC deleted successfully
C:\PROGRA~3\YTD Video Downloader deleted successfully
C:\PROGRA~3\ZoomBrowser deleted successfully
C:\PROGRA~3\{42E04EE4-AB57-407A-9691-3FFA8B8FEBBE} deleted successfully
C:\Users\Frederic\AppData\Roaming\FileMaker Pro deleted successfully
C:\Users\Frederic\AppData\Roaming\HPAppData deleted successfully
C:\Users\Frederic\AppData\Roaming\Lite deleted successfully
C:\Users\Frederic\AppData\Roaming\WinRAR deleted successfully
C:\Users\Gast\AppData\Roaming\HPAppData deleted successfully
C:\Users\Zakelijk - Estate Pl\AppData\Roaming\ATCBOXlive! deleted successfully
C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Lite deleted successfully
C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Nico Mak Computing deleted successfully
C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Systweak deleted successfully
C:\Users\Frederic\AppData\Local\ExactOnlineOffice deleted successfully
C:\Users\Frederic\AppData\Local\PackageAware deleted successfully
C:\Users\Gast\AppData\Local\FS Flight Keeper deleted successfully
C:\Users\Gast\AppData\Local\{C11C42FD-4775-4224-B4D3-72F4301352E0} deleted successfully
C:\Users\Zakelijk - Estate Pl\AppData\Local\Conduit deleted successfully
C:\Users\Zakelijk - Estate Pl\AppData\Local\CRE deleted successfully
C:\Users\Zakelijk - Estate Pl\AppData\Local\Downloader deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2883450986-3951649885-2188304626-1013\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
HKEY_USERS\S-1-5-21-2883450986-3951649885-2188304626-1013\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a90wism6 deleted successfully

==== FireFox Fix ======================

ProfilePath: C:\Users\Frederic\AppData\Roaming\Mozilla\Firefox\Profiles\mf9894hg.default

user.js not found
---- FireFox user.js and prefs.js backups ---- 

prefs_20151407_1550_.backup

ProfilePath: C:\Users\ZAKELI~1\AppData\Roaming\Mozilla\Firefox\Profiles\09qkd4zr.default

user.js not found
---- Lines CT2865317 removed from prefs.js ----
user_pref("CT2865317.1000234.TWC_TMP_city", "MECHELEN");
user_pref("CT2865317.1000234.TWC_TMP_country", "BE");
user_pref("CT2865317.1000234.TWC_country", "BELGIUM");
user_pref("CT2865317.1000234.TWC_locId", "BEXX0013");
user_pref("CT2865317.1000234.TWC_location", "Mechelen, VLG, Belgium");
user_pref("CT2865317.1000234.TWC_region", "OT");
user_pref("CT2865317.1000234.TWC_temp_dis", "c");
user_pref("CT2865317.1000234.TWC_wind_dis", "kmh");
user_pref("CT2865317.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2865317.FirstTime", "true");
user_pref("CT2865317.FirstTimeFF3", "true");
user_pref("CT2865317.RestartDialogFirstTime", "false");
user_pref("CT2865317.RestartDialogShouldDisplay", "false");
user_pref("CT2865317.UserID", "UN46753099987490671");
user_pref("CT2865317.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2865317.appOptions", "{}");
user_pref("CT2865317.browser.search.defaultthis.engineName", true);
user_pref("CT2865317.countryCode", "BE");
user_pref("CT2865317.dum", "2");
user_pref("CT2865317.firstTimeDialogOpened", "true");
user_pref("CT2865317.fixPageNotFoundErrorByUser", "TRUE");
user_pref("CT2865317.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2865317.fullUserID", "UN46753099987490671.UP.20130710180435");
user_pref("CT2865317.installType", "DirectDownload");
user_pref("CT2865317.isCheckedStartAsHidden", true);
user_pref("CT2865317.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2865317.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2865317.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2865317.keyword", true);
user_pref("CT2865317.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"http://www.trovigo.com/?gd=&ctid=CT2865317&octid=CT2865317&ISID=ISID_ID
user_pref("CT2865317.lastVersion", "10.37.0.508");
user_pref("CT2865317.mam_gk_installer_preapproved.enc", "RkFMU0U=");
user_pref("CT2865317.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2865317.originalHomepage", "chrome://branding/locale/browserconfig.properties");
user_pref("CT2865317.originalSearchAddressUrl", false);
user_pref("CT2865317.originalSearchEngine", "Google");
user_pref("CT2865317.originalSearchEngineName", "Google");
user_pref("CT2865317.performedDomainChangesMigration", "true");
user_pref("CT2865317.scriptSource.enc", "aHR0cDovLzEyNy4wLjAuMToxMDAwMC9ndWkv");
user_pref("CT2865317.search.searchAppId", "129363015615338104");
user_pref("CT2865317.search.searchCount", "0");
user_pref("CT2865317.searchFromAddressBarEnabledByUser", "true");
user_pref("CT2865317.searchInNewTabEnabledByUser", "true");
user_pref("CT2865317.searchInNewTabEnabledInHidden", "true");
user_pref("CT2865317.searchSuggestEnabledByUser", "True");
user_pref("CT2865317.searchUninstallUserMode", "1");
user_pref("CT2865317.searchUserMode", "1");
user_pref("CT2865317.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2865317.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2865317.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2865317.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2865317\"}");
user_pref("CT2865317.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2865317.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT2865317.serviceLayer_services_Configuration_lastUpdate", "1436608154464");
user_pref("CT2865317.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1436608154036");
user_pref("CT2865317.serviceLayer_services_appsMetadata_lastUpdate", "1436608153656");
user_pref("CT2865317.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1436011890835");
user_pref("CT2865317.serviceLayer_services_login_10.29.0.520_lastUpdate", "1399484870882");
user_pref("CT2865317.serviceLayer_services_login_10.30.1.502_lastUpdate", "1400688889104");
user_pref("CT2865317.serviceLayer_services_login_10.31.0.526_lastUpdate", "1404400310446");
user_pref("CT2865317.serviceLayer_services_login_10.33.0.505_lastUpdate", "1408789194869");
user_pref("CT2865317.serviceLayer_services_login_10.33.0.517_lastUpdate", "1412416027729");
user_pref("CT2865317.serviceLayer_services_login_10.34.0.503_lastUpdate", "1416276024280");
user_pref("CT2865317.serviceLayer_services_login_10.35.0.503_lastUpdate", "1424623007360");
user_pref("CT2865317.serviceLayer_services_login_10.37.0.508_lastUpdate", "1436608153731");
user_pref("CT2865317.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1436011890895");
user_pref("CT2865317.serviceLayer_services_searchAPI_lastUpdate", "1436608154471");
user_pref("CT2865317.serviceLayer_services_serviceMap_lastUpdate", "1436608154044");
user_pref("CT2865317.serviceLayer_services_setupAPI_lastUpdate", "1396806596776");
user_pref("CT2865317.serviceLayer_services_toolbarContextMenu_lastUpdate", "1436608153696");
user_pref("CT2865317.serviceLayer_services_toolbarSettings_lastUpdate", "1436608153629");
user_pref("CT2865317.serviceLayer_services_translation_lastUpdate", "1436608153673");
user_pref("CT2865317.settingsINI", true);
user_pref("CT2865317.showToolbarPermission", "false");
user_pref("CT2865317.toolbarBornServerTime", "26-1-2014");
user_pref("CT2865317.toolbarCurrentServerTime", "11-7-2015");
user_pref("CT2865317.toolbarInstallDate", "06-04-2014 19:49:56");
user_pref("CT2865317.toolbarLoginClientTime", "Sun Apr 06 2014 19:49:56 GMT+0200 (Romance Standard Time)");
user_pref("CT2865317_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1436608147428,\"isWithState\":\"\",\"timeFromStar
user_pref("valueApps.CT2865317./9B+7E+x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E,x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E-x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E.:2z527", "2423");
user_pref("valueApps.CT2865317./9B+7E.:2z527.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E.x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E/x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E06CG5EL8:", "6E6C716A6D71756F7677");
user_pref("valueApps.CT2865317./9B+7E06CG5EL8:.storedInFile", false);
user_pref("valueApps.CT2865317./9B+7E06CG5EL;8I:K", "247E2D2F226A7472777073777B757C7D242F4B49474F42357D5D5C3D");
user_pref("valueApps.CT2865317./9B+7E06CG5EL;8I:K.storedInFile", false);
user_pref("valueApps.CT2865317./9B+7E0x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E1x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E2x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E31;CJ7FK;KG#NCEP@MC+VKN.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E31;CJI?CH6?>L?@'RGJ.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E3x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E4x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E5x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E6x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E7x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E8x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E9x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E:x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E;x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E<x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E=x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E>x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E?x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7E@x305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7EAx305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7EBE3G=;D9N9=D", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
user_pref("valueApps.CT2865317./9B+7EBE3G=;D9N9=D.storedInFile", false);
user_pref("valueApps.CT2865317./9B+7EBx305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7ECx305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7EDx305.storedInFile", true);
user_pref("valueApps.CT2865317./9B+7Etx305.storedInFile", true);
user_pref("valueApps.CT2865317./9B-0?3G>D", "6D3E3B3F6C7241437A7744447720784A4A7825515021222A52542424592D5B5A5C5F5C32");
user_pref("valueApps.CT2865317./9B-0?3G>D.storedInFile", false);
user_pref("valueApps.CT2865317./9B-0?3G@6:5;", "");
user_pref("valueApps.CT2865317./9B-0?3G@6:5;.storedInFile", false);
user_pref("valueApps.CT2865317./9B-0?3GFA7EF", "2B2E2C3D");
user_pref("valueApps.CT2865317./9B-0?3GFA7EF.storedInFile", false);
user_pref("valueApps.CT2865317./9B-3=3ECCJA=F>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A23282E2E3132333435363B466068576C5E6857705A
user_pref("valueApps.CT2865317./9B-3=3ECCJA=F>.storedInFile", false);
user_pref("valueApps.CT2865317./9B/>01=9A6K6<IM;KRIE@PDAWM", "6A696B7273747576");
user_pref("valueApps.CT2865317./9B/>01=9A6K6<IM;KRIE@PDAWM.storedInFile", false);
user_pref("valueApps.CT2865317./9B3=>@44I48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F");
user_pref("valueApps.CT2865317./9B3=>@44I48?.storedInFile", false);
user_pref("valueApps.CT2865317./9B5BA==9CJAG", "6D3B716F6F6D6D6F7A714479727574484A777E4D4F");
user_pref("valueApps.CT2865317./9B5BA==9CJAG.storedInFile", false);
user_pref("valueApps.CT2865317./9B6B11G4C56B>F;P;ANR@P", "6E6C716A6D71756D7375727A79");
user_pref("valueApps.CT2865317./9B6B11G4C56B>F;P;ANR@P.storedInFile", false);
user_pref("valueApps.CT2865317./9B90E@.3C;7B=?OFB>>RHIQS", "393F352F3E");
user_pref("valueApps.CT2865317./9B90E@.3C;7B=?OFB>>RHIQS.storedInFile", false);
user_pref("valueApps.CT2865317./9B9643G3/9E", "6A");
user_pref("valueApps.CT2865317./9B9643G3/9E.storedInFile", false);
user_pref("valueApps.CT2865317./9B;45>:BI9I7IE", "2B2E2C3D");
user_pref("valueApps.CT2865317./9B;45>:BI9I7IE.storedInFile", false);
user_pref("valueApps.CT2865317./9B<:222H64<", "393F352F3E");
user_pref("valueApps.CT2865317./9B<:222H64<.storedInFile", false);
user_pref("valueApps.CT2865317./9B<:222H64<L8DAJ", "6D70706E7674747977732A797572787675207A");
user_pref("valueApps.CT2865317./9B<:222H64<L8DAJ.storedInFile", false);
user_pref("valueApps.CT2865317./9B=+03EH8H8J?:", "4443");
user_pref("valueApps.CT2865317./9B=+03EH8H8J?:.storedInFile", false);
user_pref("valueApps.CT2865317./9B?+E2A52D8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
user_pref("valueApps.CT2865317./9B?+E2A52D8.storedInFile", false);
user_pref("valueApps.CT2865317./9B?B0D:8AJ62<H", "6D");
user_pref("valueApps.CT2865317./9B?B0D:8AJ62<H.storedInFile", false);
user_pref("valueApps.CT2865317./9BA@0<0BI6A7GN:6@L?", "6C");
user_pref("valueApps.CT2865317./9BA@0<0BI6A7GN:6@L?.storedInFile", false);
user_pref("valueApps.CT2865317.PG_ENABLE", "74727565");
user_pref("valueApps.CT2865317.PG_ENABLE.storedInFile", false);
user_pref("valueApps.CT2865317.SF_JUST_INSTALLED", "46414C5345");
user_pref("valueApps.CT2865317.SF_JUST_INSTALLED.storedInFile", false);
user_pref("valueApps.CT2865317.SF_USER_ID", "6369645F31383932303133323031323233343236343638");
user_pref("valueApps.CT2865317.SF_USER_ID.storedInFile", false);
user_pref("valueApps.CT2865317._key_cl_active", "61656336646461642D363666382D343134662D626532352D373535396135353633323631");
user_pref("valueApps.CT2865317._key_cl_active.storedInFile", false);
user_pref("valueApps.CT2865317.cb_experience_000", "3431");
user_pref("valueApps.CT2865317.cb_experience_000.storedInFile", false);
user_pref("valueApps.CT2865317.cb_firstuse0100", "31");
user_pref("valueApps.CT2865317.cb_firstuse0100.storedInFile", false);
user_pref("valueApps.CT2865317.cb_user_id_000", "43423737303936373133353532355F313430373738313635363733375F46697265666F78");
user_pref("valueApps.CT2865317.cb_user_id_000.storedInFile", false);
user_pref("valueApps.CT2865317.cbfirsttime", "547565204F637420303220323031322032333A35303A323120474D542B303230302028526F6D616E6365204461796C6967687420
user_pref("valueApps.CT2865317.cbfirsttime.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_appStateReportTime", "31343038373839313938373331");
user_pref("valueApps.CT2865317.mam_gk_appStateReportTime.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_appState_Clarity_Active", "6F6E");
user_pref("valueApps.CT2865317.mam_gk_appState_Clarity_Active.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_appState_CouponBuddy", "6F6E");
user_pref("valueApps.CT2865317.mam_gk_appState_CouponBuddy.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_appState_Easytobook", "6F6E");
user_pref("valueApps.CT2865317.mam_gk_appState_Easytobook.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_appState_Easytobook_targeted", "6F6E");
user_pref("valueApps.CT2865317.mam_gk_appState_Easytobook_targeted.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_appState_PriceGong", "6F6E");
user_pref("valueApps.CT2865317.mam_gk_appState_PriceGong.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_appState_WindowShopper", "6F6E");
user_pref("valueApps.CT2865317.mam_gk_appState_WindowShopper.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_appsConfig.storedInFile", true);
user_pref("valueApps.CT2865317.mam_gk_appsDefaultEnabled", "6E756C6C");
user_pref("valueApps.CT2865317.mam_gk_appsDefaultEnabled.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_calledSetupService", "31");
user_pref("valueApps.CT2865317.mam_gk_calledSetupService.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_currentVersion", "312E31332E302E3137");
user_pref("valueApps.CT2865317.mam_gk_currentVersion.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_existingUsersRecoveryDone", "31");
user_pref("valueApps.CT2865317.mam_gk_existingUsersRecoveryDone.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_first_time", "31");
user_pref("valueApps.CT2865317.mam_gk_first_time.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_lastLoginTime", "31343038373839313938393938");
user_pref("valueApps.CT2865317.mam_gk_lastLoginTime.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_localization.storedInFile", true);
user_pref("valueApps.CT2865317.mam_gk_mamEnabled", "66616C7365");
user_pref("valueApps.CT2865317.mam_gk_mamEnabled.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_migrated_from_ls", "31");
user_pref("valueApps.CT2865317.mam_gk_migrated_from_ls.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_new_welcome_experience", "31");
user_pref("valueApps.CT2865317.mam_gk_new_welcome_experience.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_settings1.10.4.0.storedInFile", true);
user_pref("valueApps.CT2865317.mam_gk_settings1.12.0.5.storedInFile", true);
user_pref("valueApps.CT2865317.mam_gk_settings1.13.0.17.storedInFile", true);
user_pref("valueApps.CT2865317.mam_gk_showWelcomeGadget", "66616C7365");
user_pref("valueApps.CT2865317.mam_gk_showWelcomeGadget.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_stamp", "38345F30");
user_pref("valueApps.CT2865317.mam_gk_stamp.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_userBornDate", "4E2F41");
user_pref("valueApps.CT2865317.mam_gk_userBornDate.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_userId", "66303435623635302D653337322D343632662D613465332D343262393939376332373733");
user_pref("valueApps.CT2865317.mam_gk_userId.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_user_approval_interacted", "31");
user_pref("valueApps.CT2865317.mam_gk_user_approval_interacted.storedInFile", false);
user_pref("valueApps.CT2865317.mam_gk_welcomeDialogMode", "31");
user_pref("valueApps.CT2865317.mam_gk_welcomeDialogMode.storedInFile", false);
user_pref("valueApps.CT2865317.url_history0001.storedInFile", true);
---- FireFox user.js and prefs.js backups ---- 

prefs_20151407_1550_.backup

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Frederic^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^ch8l0.exe.lnk] 

==== Deleting Files \ Folders ======================

C:\PROGRA~2\DAEMON Tools Toolbar not found
C:\PROGRA~2\DSPRobotics not found
C:\PROGRA~2\IObit not found
C:\PROGRA~2\Optimizer Pro not found
C:\PROGRA~2\Ubisoft not found
C:\PROGRA~2\VstPlugins not found
C:\PROGRA~2\WinZip Registry Optimizer not found
C:\PROGRA~3\{42E04EE4-AB57-407A-9691-3FFA8B8FEBBE} not found
"C:\windows\SysNative\drivers\a90wism6.sys" not found
C:\Users\Zakelijk - Estate Pl\AppData\Roaming\freecorder deleted
C:\PROGRA~2\HiFiUninstaller deleted
C:\PROGRA~2\Freecorder extension deleted
C:\PROGRA~2\freecordertoolbar deleted
C:\makerwys.exe deleted
C:\Users\Frederic\AppData\Roaming\ZoomBrowser EX deleted
C:\Users\Frederic\AppData\Roaming\ActUpdate.log deleted
C:\Users\Frederic\AppData\Roaming\pdfforge deleted
C:\Users\Zakelijk - Estate Pl\AppData\Roaming\ActUpdate.log deleted
C:\Users\Zakelijk - Estate Pl\AppData\Roaming\ReplayMusicLog.log deleted
C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Registry Mechanic deleted
C:\PROGRA~3\PC Drivers HeadQuarters deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Frederic\AppData\Local\SIT26023.tmp deleted
C:\Users\Zakelijk - Estate Pl\AppData\Local\CrashRpt deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader deleted
C:\Users\Frederic\AppData\LocalLow\AVG Secure Search deleted
C:\Users\Zakelijk - Estate Pl\AppData\LocalLow\freecordertoolbar deleted
C:\Users\Zakelijk - Estate Pl\AppData\LocalLow\Conduit deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Application Updater deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted
C:\Users\Zakelijk - Estate Pl\Documents\Optimizer Pro deleted
C:\Users\Frederic\AppData\Roaming\Mozilla\Firefox\Profiles\mf9894hg.default\freecordertoolbar deleted
C:\Users\ZAKELI~1\AppData\Roaming\Mozilla\Firefox\Profiles\09qkd4zr.default\freecordertoolbar deleted
C:\Users\ZAKELI~1\AppData\Roaming\Mozilla\Firefox\Profiles\09qkd4zr.default\CT2865317 deleted
C:\Users\Frederic\AppData\Roaming\ACT2011Hotfix_SS.exe deleted
C:\Users\Frederic\AppData\Roaming\BitCoiMin.exe deleted
C:\Users\Frederic\AppData\Roaming\kill.exe deleted
C:\Users\Frederic\AppData\Roaming\killer.exe deleted
C:\Users\ZAKELI~1\AppData\Roaming\Mozilla\Firefox\Profiles\09qkd4zr.default\smartbar deleted
"C:\ProgramData\adobetmp000126699" deleted
"C:\PROGRA~2\Freecorder\FLVSrvc.exe" deleted
"C:\PROGRA~2\Windows Collaboration" deleted
"C:\PROGRA~2\Freecorder" deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====
2015-06-26 14:00:51	2169B4B1EFAA3453A4DA732F1F94C1E1	43112	----a-w-	C:\Windows\avastSS.scr
====== C:\Users\ZAKELI~1\AppData\Local\Temp ====
2015-07-14 10:29:33	1ED9BA48300F580255FC13A6E6B8CF74	18033640	----a-w-	C:\Users\Zakelijk - Estate Pl\AppData\Local\Temp\_ir_sf_temp_0\fccore.exe
2015-07-14 10:28:57	22E77744E8DB1DFF07098C7A8348A1AC	719712	----a-w-	C:\Users\Zakelijk - Estate Pl\AppData\Local\Temp\_ir_sf_temp_0\freecorder.chrome.exe
2015-07-14 10:28:56	BF17F5A77B6464F81533CE619FB5ED96	147384	----a-w-	C:\Users\Zakelijk - Estate Pl\AppData\Local\Temp\_ir_sf_temp_0\NativerHostInstall.exe
2015-07-14 10:28:52	430D868D21BAFA1BEE0FF3F1466F9585	651472	----a-w-	C:\Users\Zakelijk - Estate Pl\AppData\Local\Temp\_ir_sf_temp_0\freecorder.firefox.exe
2015-07-14 10:23:32	23CE0E60127E090894AD747E22F8BDF9	43008	----a-w-	C:\Users\Zakelijk - Estate Pl\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp7tokud.dll
2015-07-05 13:45:42	E4783742790B2084EFCBF6AE8968A73D	754688	----a-w-	C:\Users\Zakelijk - Estate Pl\AppData\Local\Temp\bbc41d82-0dbe-47e5-a241-21b090f23ba0\WebSetupExpanded\WebServices.dll
====== Java Cache =====
====== C:\Windows\SysWOW64 =====
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
====== C:\Windows\Sysnative\drivers =====
2015-07-14 11:17:39	60F5579B6B33F509C52200207F79B795	79064	----a-w-	C:\Windows\Sysnative\drivers\ooctmp.sys
2015-07-12 16:07:36	60F5579B6B33F509C52200207F79B795	79064	----a-w-	C:\Windows\Sysnative\drivers\fnksypv.sys
2015-07-12 10:31:19	902EEBC81CF2B944ACE35E26C9772A5D	55168	----a-w-	C:\Windows\Sysnative\drivers\lmymaadq.sys
2015-07-12 10:20:55	8F22037D3F5A6BB676525D825A1388B9	113880	----a-w-	C:\Windows\Sysnative\drivers\328E56B4.sys
2015-07-12 08:33:12	60F5579B6B33F509C52200207F79B795	79064	----a-w-	C:\Windows\Sysnative\drivers\rvid.sys
2015-07-11 13:59:00	8F22037D3F5A6BB676525D825A1388B9	113880	----a-w-	C:\Windows\Sysnative\drivers\MBAMSwissArmy.sys
2015-07-11 13:58:31	E681CE4AE5C09651D53CB4387CA3560E	109272	----a-w-	C:\Windows\Sysnative\drivers\mbamchameleon.sys
2015-07-11 13:58:31	A8D28D5B3E2A528D1EF0E338E44F2820	25816	----a-w-	C:\Windows\Sysnative\drivers\mbam.sys
2015-07-11 13:58:31	A26EE2D2D376107A78B9576BCB464996	64216	----a-w-	C:\Windows\Sysnative\drivers\mwac.sys
2015-06-26 14:35:44	5DF991B87EB1DEA6365AD6670360AC99	65224	----a-w-	C:\Windows\Sysnative\drivers\asw53C3.tmp
2015-06-26 14:35:43	A04F190FCD762E7BCC9BFC70563C52DB	442264	----a-w-	C:\Windows\Sysnative\drivers\asw4EC0.tmp
2015-06-26 14:35:43	91782404718C6352C26B3242BAC3F0F1	272248	----a-w-	C:\Windows\Sysnative\drivers\asw4F4D.tmp
2015-06-26 14:35:43	300CB8E510855189CAD0B72FFB5590CB	89944	----a-w-	C:\Windows\Sysnative\drivers\asw4DB4.tmp
2015-06-26 14:35:43	07E32DFCA422A2920482D762D01957EC	65736	----a-w-	C:\Windows\Sysnative\drivers\asw4E32.tmp
2015-06-26 14:35:42	B5B4C90E9F52DA8586F1E5461AD90A5D	29168	----a-w-	C:\Windows\Sysnative\drivers\asw4D26.tmp
2015-06-26 14:35:41	5DFE35E72BDAA0C7C6E87677A64FCC14	64712	----a-w-	C:\Windows\Sysnative\drivers\asw48FF.tmp
2015-06-26 14:35:41	3B4AC2DBFC86F7247C1FF1FAF2860530	1047320	----a-w-	C:\Windows\Sysnative\drivers\asw47B6.tmp
2015-06-26 14:02:00	B1368BE5F6BA529E0886F4DA2361BD2D	442264	----a-w-	C:\Windows\Sysnative\drivers\aswsp.sys.1435327483515
====== C:\Windows\Tasks ======
2015-06-26 14:04:22	22D88EEEFA287B8DA20E69DC4BDE0F51	3810	----a-w-	C:\Windows\Sysnative\Tasks\avast! Emergency Update
2015-06-17 17:02:35	0557C4AFFB57FF31C8922CB52EB21F13	4088	----a-w-	C:\Windows\Sysnative\Tasks\DropboxUpdateTaskUserS-1-5-21-2883450986-3951649885-2188304626-1013UA
2015-06-17 17:02:34	7E0CDF55FA0581C5F2380AA8383AEE1B	1084	----a-w-	C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2883450986-3951649885-2188304626-1013UA.job
2015-06-17 17:02:18	C36F0572135933D8841A6BC285ABDA59	3692	----a-w-	C:\Windows\Sysnative\Tasks\DropboxUpdateTaskUserS-1-5-21-2883450986-3951649885-2188304626-1013Core
2015-06-17 17:02:17	3F2957FEAD4172DF6F83F9B8C782315A	1032	----a-w-	C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2883450986-3951649885-2188304626-1013Core.job
====== C:\Windows\Temp ======
======= C:\Program Files =====
2015-07-14 10:29:26	--------	d-----w-	C:\Program Files\Freecorder extension
2015-07-11 11:53:38	--------	d-----w-	C:\Program Files\trend micro
======= C:\PROGRA~2 =====
2015-07-14 10:29:54	--------	d-----w-	C:\PROGRA~2\Applian Technologies
======= C: =====
====== C:\Users\Zakelijk - Estate Pl\AppData\Roaming ======
2015-07-14 10:41:26	--------	d-----w-	C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Freecorder 8 Audio
2015-07-14 10:41:24	--------	d-----w-	C:\Users\Zakelijk - Estate Pl\AppData\Local\Jaksta_Technologies_Pty_L
2015-07-11 07:09:18	--------	d-----w-	C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-06-26 18:29:18	--------	d-----w-	C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Avg2015
2015-06-26 18:22:23	--------	d-----w-	C:\Windows\SysNative\config\systemprofile\AppData\Local\Avg2015
2015-06-26 16:42:51	--------	d-----w-	C:\Users\Zakelijk - Estate Pl\AppData\Local\Avg2015
2015-06-20 18:29:37	87FA851BE2CE19FAD95A33FE59586D88	555208	----a-w-	C:\Windows\serviceprofiles\Localservice\AppData\Local\WPFFontCache_v0400-S-1-5-21-2883450986-3951649885-2188304626-1013-8192.dat
2015-06-20 11:41:13	--------	d-----w-	C:\Users\Zakelijk - Estate Pl\AppData\Local\Bluestacks
2015-06-20 08:57:50	--------	d-----w-	C:\Users\Zakelijk - Estate Pl\AppData\Local\HP
2015-06-17 17:02:13	--------	d-----w-	C:\Users\Zakelijk - Estate Pl\AppData\Local\Dropbox
====== C:\Users\Zakelijk - Estate Pl ======
2015-07-14 09:44:59	09B6F6FCCC35DBAFCB38CB3751FA7C2F	2248704	----a-w-	C:\Users\Zakelijk - Estate Pl\Desktop\adwcleaner_4.208.exe
2015-07-11 13:59:15	D3B6FA14CB7E12B7FBC0B3AA26235898	24345872	----a-w-	C:\Users\Zakelijk - Estate Pl\Desktop\mbam-setup-2.1.8.1057.exe
2015-07-11 11:53:11	8045ABB21A3BDD66A48E1ED5C0F0EF6A	1222144	----a-w-	C:\Users\Zakelijk - Estate Pl\Desktop\RSITx64.exe
2015-07-11 11:14:06	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-07-11 11:13:11	2ADF2AEBB99666F7A0F95AC504408E46	1586848	----a-w-	C:\Users\Zakelijk - Estate Pl\Desktop\cpu-z_1.72.1-en.exe
2015-06-26 18:26:19	--------	d-----w-	C:\ProgramData\AVG2015
2015-06-21 12:38:19	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Streamer
2015-06-20 16:36:36	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2015-06-17 17:12:40	--------	d--h--w-	C:\ProgramData\{698E0848-6D29-4305-80DC-E8D609260CE2}
2015-06-17 17:02:12	--------	d-----w-	C:\ProgramData\Dropbox

====== C: exe-files ==
2015-07-14 10:31:08	506402611AB3A6B0F6ABB4493053215C	298090	----a-w-	C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\uninstall.exe
2015-07-14 10:30:55	169449B558F54EC767BB4119D3D4F797	24138752	----a-w-	C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Torrent\ffmpeg.exe
2015-07-14 10:30:40	169449B558F54EC767BB4119D3D4F797	24138752	----a-w-	C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Video\ffmpeg.exe
2015-07-14 10:30:27	169449B558F54EC767BB4119D3D4F797	24138752	----a-w-	C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Screen\ffmpeg.exe
2015-07-14 10:30:10	169449B558F54EC767BB4119D3D4F797	24138752	----a-w-	C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Audio\ffmpeg.exe
2015-07-14 10:29:57	169449B558F54EC767BB4119D3D4F797	24138752	----a-w-	C:\Program Files (x86)\Applian Technologies\Freecorder 8 Applications\Converter\ffmpeg.exe
2015-07-11 11:53:38	9A2347903D6EDB84C10F288BC0578C1C	388608	----a-w-	C:\Program Files\trend micro\Zakelijk - Estate Pl.exe
2015-07-11 10:45:31	240A3861152BD1DF38024DD6C29279C2	890368	------w-	C:\Program Files (x86)\InstallShield Installation Information\{1FC386C1-EA57-43DB-9860-FE327C143148}\4.15.0\setup.exe
2015-07-11 07:37:12	23C3ECCDA9F8A49FE7B5ED4518F4463F	2743376	----a-w-	C:\Program Files (x86)\Google\Update\Install\{BF0308B2-BC88-43DD-8B79-B643B4F11C3F}\43.0.2357.132_43.0.2357.130_chrome_updater.exe
2015-07-11 07:37:12	23C3ECCDA9F8A49FE7B5ED4518F4463F	2743376	----a-w-	C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\43.0.2357.132\43.0.2357.132_43.0.2357.130_chrome_updater.exe
2015-07-11 07:07:48	C4C34084384F081F03CFB0A0C321D4EF	50023688	----a-w-	C:\Users\Zakelijk - Estate Pl\AppData\Local\Dropbox\Update\Download\{CC46080E-4C33-4981-859A-BBA2F780F31E}\3.6.8\DropboxClient_3.6.8.exe
2015-07-11 07:06:08	876DB7A763F0E3B14B70E2BA7904A675	5900040	----a-w-	C:\ProgramData\NVIDIA\Updatus\Packages\000079d8\DAO.19750200.exe
2015-07-09 15:30:20	FFCB747BE700621965F81033E8A462DD	628664	----a-w-	C:\ProgramData\NVIDIA\Updatus\ApplicationOntology\NvOAWrapperCache.exe
2015-07-09 15:30:16	6ECC27CD8129ED471C86F6F26430B798	172984	----a-w-	C:\ProgramData\NVIDIA\Updatus\ApplicationOntology\OAWrapper.exe
=== C: other files ==

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-21-2883450986-3951649885-2188304626-1012\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"
"swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
"Spotify"="C:\users\frederic\appdata\roaming\spotify\spotify.exe /uri spotify:autostart"
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-21-2883450986-3951649885-2188304626-1013\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"
"swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
"ABIT uGuruIII"="F:\U-ABIT\uGuru\LaunchuGuru.exe"
"Speech Recognition"="C:\Windows\Speech\Common\sapisvr.exe -SpeechUX -Startup"
"Hobbyist Software VLC Streamer"="F:\VLC Streamer\VLC Streamer Configuration.exe /startup"
"Spotify Web Helper"="C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
"Spotify"="C:\users\frederic\AppData\Roaming\Spotify\spotify.exe -autostart -minimized"
"Dropbox Update"="C:\Users\Zakelijk - Estate Pl\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"="C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_117_ActiveX.exe -update activex"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"="C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_117_ActiveX.exe -update activex"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CertificateRegistration"="aetcrss1.exe"
"LogitechCommunicationsManager"="C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
"Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"Adobe Acrobat Speed Launcher"="F:\Adobe CS4 Master Collection\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
"Adobe_ID0ENQBO"="C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE"
"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"Freecorder FLV Service"="C:\Program Files (x86)\Freecorder\FLVSrvc.exe /run"
"SSDMonitor"="C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe"
"ControlCenter3"="C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun"
"SSBkgdUpdate"="C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot"
"JMB36X IDE Setup"="C:\Windows\RaidTool\xInsIDE.exe"
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware (cleanup)"="C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"
"swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
"ABIT uGuruIII"="F:\U-ABIT\uGuru\LaunchuGuru.exe"
"Speech Recognition"="C:\Windows\Speech\Common\sapisvr.exe -SpeechUX -Startup"
"Hobbyist Software VLC Streamer"="F:\VLC Streamer\VLC Streamer Configuration.exe /startup"
"Spotify Web Helper"="C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
"Spotify"="C:\users\frederic\AppData\Roaming\Spotify\spotify.exe -autostart -minimized"
"Dropbox Update"="C:\Users\Zakelijk - Estate Pl\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\Windows\\Jaksta\\AC\\x86\\jaudcap.dll"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ProfilerU"="C:\Program Files\Saitek\SD6\Software\ProfilerU.exe"
"SaiMfd"="C:\Program Files\Saitek\SD6\Software\SaiMfd.exe"
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE"
"Nvtmru"="C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe"
"MSC"="C:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\Windows\\Jaksta\\AC\\x64\\jaudcap.dll"

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Acrobat Assistant 8.0]
"command"="\"F:\\Adobe CS4 Master Collection\\Acrobat 9.0\\Acrobat\\Acrotray.exe\""
"hkey"="HKLM"
"item"="Acrobat Assistant 8.0"
"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Act! Preloader]
"command"="\"F:\\ACT\\ActSage.exe\" -preload"
"hkey"="HKLM"
"item"="Act! Preloader"
"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Act.Outlook.Service]
"command"="\"F:\\ACT\\Act.Outlook.Service.exe\""
"hkey"="HKLM"
"item"="Act.Outlook.Service"
"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeCS4ServiceManager]
"command"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe\" -launchedbylogin"
"hkey"="HKLM"
"item"="AdobeCS4ServiceManager"
"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\APSDaemon]
"command"="\"C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\""
"hkey"="HKLM"
"item"="APSDaemon"
"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BCSSync]
"command"="\"C:\\Program Files (x86)\\Microsoft Office\\Office14\\BCSSync.exe\" /DelayServices"
"hkey"="HKLM"
"item"="BCSSync"
"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BingDesktop]
"command"="C:\\Program Files (x86)\\Microsoft\\BingDesktop\\BingDesktop.exe /fromkey"
"hkey"="HKLM"
"item"="BingDesktop"
"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BrMfcWnd]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="BrMfcWnd"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Brother\\Brmfcmon\\BrMfcWnd.exe\" /AUTORUN"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DAEMON Tools Lite]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="DAEMON Tools Lite"
"hkey"="HKCU"
"command"="\"C:\\Program Files (x86)\\DAEMON Tools Lite\\DTLite.exe\" -autorun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DriverMax]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="DriverMax"
"hkey"="HKCU"
"command"="\"F:\\DriverMax\\drivermax.exe\" -agent"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Google Quick Search Box]
"command"="\"C:\\Program Files (x86)\\Google\\Quick Search Box\\GoogleQuickSearchBox.exe\"  /autorun"
"hkey"="HKLM"
"item"="Google Quick Search Box"
"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IndexSearch]
"command"="\"C:\\Program Files (x86)\\ScanSoft\\PaperPort\\IndexSearch.exe\""
"hkey"="HKLM"
"item"="IndexSearch"
"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\iTunesHelper]
"key"="Software\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="iTunesHelper"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LifeCam]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="LifeCam"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Microsoft LifeCam\\LifeExp.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LVCOMSX]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="LVCOMSX"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Common Files\\LogiShrd\\LComMgr\\LVComSX.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MSCRM]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="MSCRM"
"hkey"="HKLM"
"command"="\"F:\\Microsoft Dynamics CRM\\Client\\ConfigWizard\\CrmForOutlookInstaller.exe\" /activateaddin"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NBAgent]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="NBAgent"
"hkey"="HKLM"
"command"="\"F:\\Nero 10\\Nero BackItUp\\NBAgent.exe\" /WinStart"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PaperPort PTD]
"command"="\"C:\\Program Files (x86)\\ScanSoft\\PaperPort\\pptd40nt.exe\""
"hkey"="HKLM"
"item"="PaperPort PTD"
"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PPort11reminder]
"command"="c:\\program files (x86)\\scansoft\\paperport\\ereg\\ereg.exe\" -r \"c:\\programdata\\scansoft\\paperport\\11\\config\\ereg\\ereg.ini"
"hkey"="HKLM"
"item"="PPort11reminder"
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task]
"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="QuickTime Task"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\QuickTime\\QTTask.exe\" -atboottime"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Skype]
"key"="Software\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Skype"
"hkey"="HKCU"
"command"="\"C:\\Program Files (x86)\\Skype\\Phone\\Skype.exe\" /minimized /regrun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Skytel]
"command"="Skytel.exe"
"hkey"="HKLM"
"item"="Skytel"
"key"="Software\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify]
"key"="Software\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Spotify"
"hkey"="HKCU"
"command"="\"C:\\users\\frederic\\appdata\\roaming\\spotify\\spotify.exe\" /uri spotify:autostart"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify Web Helper]
"command"="\"C:\\Users\\Zakelijk - Estate Pl\\AppData\\Roaming\\Spotify\\SpotifyWebHelper.exe\""
"hkey"="HKCU"
"item"="Spotify Web Helper"
"key"="Software\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Steam]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Steam"
"hkey"="HKCU"
"command"="\"C:\\Program Files (x86)\\Steam\\Steam.exe\" -silent"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TkBellExe]
"command"="\"C:\\Program Files (x86)\\Real\\RealPlayer\\update\\realsched.exe\"  -osboot"
"hkey"="HKLM"
"item"="TkBellExe"
"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\VX1000]
"command"="C:\\Windows\\vVX1000.exe"
"hkey"="HKLM"
"item"="VX1000"
"key"="Software\\Microsoft\\Windows\\CurrentVersion\\Run"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\HP Digital Imaging Monitor.lnk"
"backup"="C:\\Windows\\pss\\HP Digital Imaging Monitor.lnk.CommonStartup"
"backupExtension"=".CommonStartup"
"command"="C:\\PROGRA~2\\HP\\DIGITA~1\\bin\\hpqtra08.exe "
"item"="HP Digital Imaging Monitor"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Polar WebSync.lnk]
"backup"="C:\\Windows\\pss\\Polar WebSync.lnkCommon Startup"
"command"="C:\\Windows\\Installer\\{1A1F27A2-599F-46BC-B904-1053B3A4CFEB}\\WebSync.exe2_4B58E052B1C94BE0AC42D7A472F5A651.exe "
"item"="Polar WebSync"
"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Polar WebSync.lnk"
"backupExtension"="Common Startup"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Sage ACT! Outlook Sync.lnk]
"backup"="C:\\Windows\\pss\\Sage ACT! Outlook Sync.lnkCommon Startup"
"command"="F:\\ACT\\Act.Outlook.Sync.exe D"
"item"="Sage ACT! Outlook Sync"
"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Sage ACT! Outlook Sync.lnk"
"backupExtension"="Common Startup"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\WinZip Quick Pick.lnk"
"backup"="C:\\Windows\\pss\\WinZip Quick Pick.lnk.CommonStartup"
"backupExtension"=".CommonStartup"
"command"="C:\\PROGRA~2\\WinZip\\WZQKPICK.EXE "
"item"="WinZip Quick Pick"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Frederic^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^ch8l0.exe.lnk]
"path"="C:\\Users\\Frederic\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ch8l0.exe.lnk"
"backup"="C:\\Windows\\pss\\ch8l0.exe.lnk.Startup"
"backupExtension"=".Startup"
"command"="C:\\Windows\\System32\\rundll32.exe C:\\Users\\Frederic\\AppData\\Local\\Temp\\ch8l0.exe,NameFunEx"
"item"="ch8l0.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Frederic^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
"path"="C:\\Users\\Frederic\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Dropbox.lnk"
"backup"="C:\\Windows\\pss\\Dropbox.lnk.Startup"
"backupExtension"=".Startup"
"command"="C:\\Users\\Frederic\\AppData\\Roaming\\Dropbox\\bin\\Dropbox.exe "
"item"="Dropbox"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Zakelijk - Estate Pl^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^EvernoteClipper.lnk]
"backup"="C:\\Windows\\pss\\EvernoteClipper.lnkStartup"
"command"="C:\\Program Files (x86)\\Evernote\\Evernote\\EvernoteClipper.exe "
"item"="EvernoteClipper"
"path"="C:\\Users\\Zakelijk - Estate Pl\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\EvernoteClipper.lnk"
"backupExtension"="Startup"


==== Startup Folders ======================

2015-07-11 07:10:24	1082	----a-w-	C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
2014-03-17 20:16:33	932	----a-w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BrytonBridge2.lnk
2008-10-18 13:58:01	2214	----a-w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech Desktop Messenger.lnk
2008-10-18 14:21:16	1695	----a-w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Ad-Aware Update (Daily 1).job --a------ C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe []
C:\Windows\tasks\Ad-Aware Update (Daily 2).job --a------ C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe []
C:\Windows\tasks\Ad-Aware Update (Daily 3).job --a------ [Undetermined Task]
C:\Windows\tasks\Ad-Aware Update (Daily 4).job --a------ C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe []
C:\Windows\tasks\Ad-Aware Update (Weekly).job --a------ C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe []
C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [11/07/2015 10:24]
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-2883450986-3951649885-2188304626-1013Core.job --a------ C:\Users\Zakelijk - Estate Pl\AppData\Local\Dropbox\Update\DropboxUpdate.exe [17/06/2015 19:02]
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-2883450986-3951649885-2188304626-1013UA.job --a------ C:\Users\Zakelijk - Estate Pl\AppData\Local\Dropbox\Update\DropboxUpdate.exe [17/06/2015 19:02]
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [19/10/2014 03:01]
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [19/10/2014 03:01]
C:\Windows\tasks\RMSchedule.job --a------ C:\PC Tools Registry Mechanic\RegMech.exe []

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Ad-Aware Update (Daily 1)" [C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe]
"C:\Windows\SysNative\tasks\Ad-Aware Update (Daily 2)" [C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe]
"C:\Windows\SysNative\tasks\Ad-Aware Update (Daily 3)" [C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe]
"C:\Windows\SysNative\tasks\Ad-Aware Update (Daily 4)" [C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe]
"C:\Windows\SysNative\tasks\Ad-Aware Update (Weekly)" [C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe]
"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe]
"C:\Windows\SysNative\tasks\DropboxUpdateTaskUserS-1-5-21-2883450986-3951649885-2188304626-1013Core" [C:\Users\Zakelijk - Estate Pl\AppData\Local\Dropbox\Update\DropboxUpdate.exe]
"C:\Windows\SysNative\tasks\DropboxUpdateTaskUserS-1-5-21-2883450986-3951649885-2188304626-1013UA" [C:\Users\Zakelijk - Estate Pl\AppData\Local\Dropbox\Update\DropboxUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\RealUpgradeLogonTaskS-1-5-21-2883450986-3951649885-2188304626-1013" [C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe]
"C:\Windows\SysNative\tasks\RealUpgradeScheduledTaskS-1-5-21-2883450986-3951649885-2188304626-1013" [C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe]
"C:\Windows\SysNative\tasks\RMSchedule" [F:\PC Tools Registry Mechanic\RegMech.exe]
"C:\Windows\SysNative\tasks\RMSmartUpdate" ["F:\PC Tools Registry Mechanic\update.exe"]
"C:\Windows\SysNative\tasks\Start Evernote Client" [C:\Program Files (x86)\Evernote\Evernote\Evernote.exe]
"C:\Windows\SysNative\tasks\{10881387-E95C-476C-B6C9-BA6BC0732604}" [C:\Program Files (x86)\Skype\Phone\Skype.exe]
"C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe]
"C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"belgiumeid@eid.belgium.be"="C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be" []

==== Firefox Extensions ======================

ProfilePath: C:\Users\Frederic\AppData\Roaming\Mozilla\Firefox\Profiles\mf9894hg.default
- Undetermined - %ProfilePath%\extensions\{70dd86e8-b5bc-4e4a-9d5c-b6234c24323c}

ProfilePath: C:\Users\ZAKELI~1\AppData\Roaming\Mozilla\Firefox\Profiles\09qkd4zr.default
- Betfair Everywhere - %ProfilePath%\extensions\betfair-everywhere@betfair.com.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Zakelijk - Estate Pl\AppData\Roaming\Mozilla\Firefox\Profiles\09qkd4zr.default
10ECFD4DAC5151CB787FFA77B0CDB2B2	- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_191.dll -	Shockwave Flash
AE84791D996D1F05A2446B0C447D937A	- F:\Adobe CS4 Master Collection\Acrobat 9.0\Acrobat\Air\nppdf32.dll -	Adobe Acrobat
6A03609A79D8C5ACECB66EED53F3A0AB	- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll -	RealNetworks(tm) Chrome Background Extension Plug-In (32-bit)
70677064555D2EB816249ABB0150951F	- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll -	RealPlayer(tm) HTML5VideoShim Plug-In (32-bit)
3D3CAF586124C4E8102764C8B3063BB6	- C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll -	Shockwave for Director / Shockwave for Director
AB87EEFFD18F2BAAFC274E7075EA6C67	- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll -	Windows Presentation Foundation / Windows Presentation Foundation


==== Fake Chromium Profiles Check ======================

Fake profile C:\Users\Gast\AppData\Local\Google\Chrome deleted

==== Chromium Look ======================

Google Chrome Version: 43.0.2357.132

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
jfmjfhklogoienhpfnppmbcbjfjnkonk - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx[28/07/2012 21:23]

Default - Frederic\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkacjpbfdknhflllbcmjibkdeoafencn
RealPlayer HTML5Video Downloader Extension - Zakelijk - Estate Pl\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk

==== Chromium Startpages ======================

C:\Users\Frederic\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "http://www.hln.be/",


==== Chromium Fix ======================

C:\Users\Zakelijk - Estate Pl\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\Zakelijk - Estate Pl\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.ak.facebook.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.hln.be/"
"Start Page Restore"="http://www.hln.be/"
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Start Page Redirect Cache"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Start Page Redirect Cache"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.hln.be/"
"Start Page Restore"="http://www.hln.be/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page Redirect Cache"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page Redirect Cache"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
{012E1000-F331-11DB-8314-0800200C9A66} Google  Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{67C334C0-408D-4E6D-B5A7-0ADD6AFFA252} Google  Url="https://www.google.com/search?q={searchTerms}"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GPTB_en"

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{DBA1BF66-8930-4DC5-937D-AB92522956B4} deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverMax deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSCRM deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Frederic\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Frederic\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Frederic\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Gast\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Zakelijk - Estate Pl\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Zakelijk - Estate Pl\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Frederic\AppData\Local\Mozilla\Firefox\Profiles\mf9894hg.default\Cache emptied successfully
C:\Users\Zakelijk - Estate Pl\AppData\Local\Mozilla\Firefox\Profiles\09qkd4zr.default\Cache emptied successfully
C:\Users\Zakelijk - Estate Pl\AppData\Local\Mozilla\Firefox\Profiles\09qkd4zr.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Frederic\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Zakelijk - Estate Pl\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=85 folders=108 55148345 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Frederic\AppData\Local\Temp emptied successfully
C:\Users\Gast\AppData\Local\Temp emptied successfully
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Users\Zakelijk - Estate Pl\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Deleting Files / Folders ======================

"C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Users\Zakelijk - Estate Pl\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" deleted
"C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" deleted

==== EOF on di 14/07/2015 at 16:16:58.41 ======================