Zoek.exe v5.0.0.0 Updated 13-09-2015 Tool run by User1 on ma 14/09/2015 at 16:07:06,47. Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\User1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BLVJAHLJ\zoek[1].exe [Scan all users] [Script inserted] ==== Older Logs ====================== C:\zoek-results2015-09-11-060336.log 502 bytes C:\zoek-results2015-09-11-074626.log 25687 bytes C:\zoek-results2015-09-13-130642.log 27107 bytes C:\zoek-results2015-09-14-103124.log 13703 bytes ==== Folders Found ====================== 2015-09-11 07:29:32 2015-09-11 07:29:32 -------- d---a-w- C:\zoek_backup\C_Program Files (x86)_Microsoft Security Client 2015-09-14 10:17:14 2015-09-14 10:17:14 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Microsoft Security Client 2015-09-14 10:17:14 2015-09-14 10:17:14 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Microsoft Security Client 2015-09-14 10:17:14 2015-09-14 10:17:14 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_00e6e752 2015-09-14 10:17:14 2015-09-14 10:17:14 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_039ea69a 2015-09-14 10:17:14 2015-09-14 10:17:14 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_043ab183 2015-09-14 10:17:14 2015-09-14 10:17:15 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_048105ab 2015-09-14 10:17:15 2015-09-14 10:17:15 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0490f2c7 2015-09-14 10:17:15 2015-09-14 10:17:15 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0490fc29 2015-09-14 10:17:15 2015-09-14 10:17:15 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0498ce75 2015-09-14 10:17:15 2015-09-14 10:17:15 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_049d0962 2015-09-14 10:17:15 2015-09-14 10:17:15 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04a1054d 2015-09-14 10:17:15 2015-09-14 10:17:15 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04a4ce46 2015-09-14 10:17:15 2015-09-14 10:17:15 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04a508f5 2015-09-14 10:17:15 2015-09-14 10:17:15 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04a8d883 2015-09-14 10:17:15 2015-09-14 10:17:15 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04a8e149 2015-09-14 10:17:15 2015-09-14 10:17:15 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b0bedb 2015-09-14 10:17:15 2015-09-14 10:17:15 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b0d22c 2015-09-14 10:17:15 2015-09-14 10:17:16 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b16c68 2015-09-14 10:17:16 2015-09-14 10:17:16 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b17fd9 2015-09-14 10:17:16 2015-09-14 10:17:16 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b19349 2015-09-14 10:17:16 2015-09-14 10:17:16 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b1a69a 2015-09-14 10:17:16 2015-09-14 10:17:16 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b1e8f7 2015-09-14 10:17:16 2015-09-14 10:17:16 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b1fc77 2015-09-14 10:17:16 2015-09-14 10:17:16 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b4c995 2015-09-14 10:17:16 2015-09-14 10:17:16 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04bce2ef 2015-09-14 10:17:16 2015-09-14 10:17:16 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04c49e22 2015-09-14 10:17:16 2015-09-14 10:17:16 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04c4c8ba 2015-09-14 10:17:16 2015-09-14 10:17:16 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04c8e8d8 2015-09-14 10:17:16 2015-09-14 10:17:16 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_05769ebe 2015-09-14 10:17:16 2015-09-14 10:17:17 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0586a2e3 2015-09-14 10:17:17 2015-09-14 10:17:17 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_059696c2 2015-09-14 10:17:17 2015-09-14 10:17:17 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_05ae952d 2015-09-14 10:17:17 2015-09-14 10:17:17 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_061aba0b 2015-09-14 10:17:17 2015-09-14 10:17:17 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_07226759 2015-09-14 10:17:17 2015-09-14 10:17:17 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0786d077 2015-09-14 10:17:17 2015-09-14 10:17:17 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_08a68e1b 2015-09-14 10:17:17 2015-09-14 10:17:17 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_08be7b95 2015-09-14 10:17:17 2015-09-14 10:17:17 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_08c6a553 2015-09-14 10:17:17 2015-09-14 10:17:17 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_08dab7ba 2015-09-14 10:17:17 2015-09-14 10:17:17 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_09baae19 2015-09-14 10:17:17 2015-09-14 10:17:17 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0ab2aabf 2015-09-14 10:17:17 2015-09-14 10:17:18 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0b6295d8 2015-09-14 10:17:18 2015-09-14 10:17:18 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0b728ee6 2015-09-14 10:17:18 2015-09-14 10:17:18 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0b828ae0 2015-09-14 10:17:18 2015-09-14 10:17:18 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0bc2a736 2015-09-14 10:17:18 2015-09-14 10:17:18 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0be6ba68 2015-09-14 10:17:18 2015-09-14 10:17:18 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0c2eae67 2015-09-14 10:17:18 2015-09-14 10:17:18 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0c46c541 2015-09-14 10:17:18 2015-09-14 10:17:18 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0cea90aa 2015-09-14 10:17:18 2015-09-14 10:17:18 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0db28d31 2015-09-14 10:17:18 2015-09-14 10:17:18 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0e06ce55 2015-09-14 10:17:18 2015-09-14 10:17:18 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0e269194 2015-09-14 10:17:18 2015-09-14 10:17:19 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0e82a7c3 2015-09-14 10:17:19 2015-09-14 10:17:19 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0e8e9b64 2015-09-14 10:17:19 2015-09-14 10:17:19 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0ea69819 2015-09-14 10:17:19 2015-09-14 10:17:19 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0f768545 2015-09-14 10:17:19 2015-09-14 10:17:19 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0fa29d19 2015-09-14 10:17:19 2015-09-14 10:17:19 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0fd2b691 2015-09-14 10:17:19 2015-09-14 10:17:19 -------- d---a-w- C:\zoek_backup\C_ProgramData_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0fdf09ee 2015-09-14 10:17:19 2015-09-14 10:17:19 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_00e6e752 2015-09-14 10:17:19 2015-09-14 10:17:19 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_039ea69a 2015-09-14 10:17:19 2015-09-14 10:17:19 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_043ab183 2015-09-14 10:17:19 2015-09-14 10:17:19 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_048105ab 2015-09-14 10:17:19 2015-09-14 10:17:19 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0490f2c7 2015-09-14 10:17:19 2015-09-14 10:17:20 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0490fc29 2015-09-14 10:17:20 2015-09-14 10:17:20 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0498ce75 2015-09-14 10:17:20 2015-09-14 10:17:20 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_049d0962 2015-09-14 10:17:20 2015-09-14 10:17:20 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04a1054d 2015-09-14 10:17:20 2015-09-14 10:17:20 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04a4ce46 2015-09-14 10:17:20 2015-09-14 10:17:20 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04a508f5 2015-09-14 10:17:20 2015-09-14 10:17:20 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04a8d883 2015-09-14 10:17:20 2015-09-14 10:17:20 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04a8e149 2015-09-14 10:17:20 2015-09-14 10:17:20 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b0bedb 2015-09-14 10:17:20 2015-09-14 10:17:20 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b0d22c 2015-09-14 10:17:20 2015-09-14 10:17:20 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b16c68 2015-09-14 10:17:20 2015-09-14 10:17:20 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b17fd9 2015-09-14 10:17:20 2015-09-14 10:17:21 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b19349 2015-09-14 10:17:21 2015-09-14 10:17:21 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b1a69a 2015-09-14 10:17:21 2015-09-14 10:17:21 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b1e8f7 2015-09-14 10:17:21 2015-09-14 10:17:21 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b1fc77 2015-09-14 10:17:21 2015-09-14 10:17:21 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04b4c995 2015-09-14 10:17:21 2015-09-14 10:17:21 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04bce2ef 2015-09-14 10:17:21 2015-09-14 10:17:21 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04c49e22 2015-09-14 10:17:21 2015-09-14 10:17:21 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04c4c8ba 2015-09-14 10:17:21 2015-09-14 10:17:21 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_04c8e8d8 2015-09-14 10:17:21 2015-09-14 10:17:21 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_05769ebe 2015-09-14 10:17:21 2015-09-14 10:17:21 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0586a2e3 2015-09-14 10:17:21 2015-09-14 10:17:22 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_059696c2 2015-09-14 10:17:22 2015-09-14 10:17:22 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_05ae952d 2015-09-14 10:17:22 2015-09-14 10:17:22 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_061aba0b 2015-09-14 10:17:22 2015-09-14 10:17:22 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_07226759 2015-09-14 10:17:22 2015-09-14 10:17:22 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0786d077 2015-09-14 10:17:22 2015-09-14 10:17:22 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_08a68e1b 2015-09-14 10:17:22 2015-09-14 10:17:22 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_08be7b95 2015-09-14 10:17:22 2015-09-14 10:17:22 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_08c6a553 2015-09-14 10:17:22 2015-09-14 10:17:22 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_08dab7ba 2015-09-14 10:17:22 2015-09-14 10:17:22 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_09baae19 2015-09-14 10:17:22 2015-09-14 10:17:22 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0ab2aabf 2015-09-14 10:17:22 2015-09-14 10:17:22 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0b6295d8 2015-09-14 10:17:22 2015-09-14 10:17:23 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0b728ee6 2015-09-14 10:17:23 2015-09-14 10:17:23 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0b828ae0 2015-09-14 10:17:23 2015-09-14 10:17:23 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0bc2a736 2015-09-14 10:17:23 2015-09-14 10:17:23 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0be6ba68 2015-09-14 10:17:23 2015-09-14 10:17:23 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0c2eae67 2015-09-14 10:17:23 2015-09-14 10:17:23 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0c46c541 2015-09-14 10:17:23 2015-09-14 10:17:23 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0cea90aa 2015-09-14 10:17:23 2015-09-14 10:17:23 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0db28d31 2015-09-14 10:17:23 2015-09-14 10:17:23 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0e06ce55 2015-09-14 10:17:23 2015-09-14 10:17:23 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0e269194 2015-09-14 10:17:23 2015-09-14 10:17:23 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0e82a7c3 2015-09-14 10:17:23 2015-09-14 10:17:23 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0e8e9b64 2015-09-14 10:17:23 2015-09-14 10:17:24 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0ea69819 2015-09-14 10:17:24 2015-09-14 10:17:24 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0f768545 2015-09-14 10:17:24 2015-09-14 10:17:24 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0fa29d19 2015-09-14 10:17:24 2015-09-14 10:17:24 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0fd2b691 2015-09-14 10:17:24 2015-09-14 10:17:24 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Microsoft_Windows_WER_ReportArchive_AppHang_MBAMService_8c848a11c5173ff33b32a03e617e2bd9fceec85_0fdf09ee ==== Files Found ====================== --- C:\zoek_backup\C_Users_User1_AppData_Local_Google_Chrome_User Data_Default_Local Storage_https_www.avast.com_0.localstorage-journal.vir --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 3608 Created time: 2015-09-14 10:17:24 Modified time: 2015-01-24 08:19:11 MD5: 542F54146E1E9320725B1D5A3680DF80 SHA1: BDDC539324B3C7F7B9F363F36A854D1B554F62CB --- C:\zoek_backup\C_Users_User1_Downloads_avast_premier_antivirus_setup_online.exe.vir --- Company: AVAST Software File Description: avast! Antivirus Installer File Version: 10.0.2208.712 Product Name: Avast Antivirus Copyright: Copyright (c) 2014 AVAST Software Original Filename: SfxInst.exe File type: ----a-w- File size: 4978536 Created time: 2015-09-14 10:17:24 Modified time: 2015-01-24 08:24:08 MD5: DDCCF75551DA2D1A6E598AA2416A2135 SHA1: 8E30CA195762D47ABFAFA7F1294381553A3FC0A9 --- C:\zoek_backup\C_Users_User1_Downloads_mbam-setup-2.1.8.1057.exe.vir --- Company: Malwarebytes Corporation File Description: Malwarebytes Anti-Malware File Version: 2.1.8.1057 Product Name: Malwarebytes Anti-Malware Copyright: (c) Malwarebytes Corporation. All rights reserved. Original Filename: File type: ----a-w- File size: 24345872 Created time: 2015-09-14 10:17:24 Modified time: 2015-08-23 19:08:26 MD5: D3B6FA14CB7E12B7FBC0B3AA26235898 SHA1: 7783C2A681393DBAE743E830C255420483A38F7D --- C:\zoek_backup\C_Windows_Prefetch_MBAM.EXE-2FB6D924.pf.vir --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 114752 Created time: 2015-09-14 10:17:25 Modified time: 2015-09-08 10:37:43 MD5: A70BF20F9767E4EAF1085C34D39E733D SHA1: 87CC0C5167D8A3DDEC0AF834F4624B22DEF0DB28 --- C:\zoek_backup\C_Windows_Prefetch_MBAMSCHEDULER.EXE-E854CD0F.pf.vir --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 40886 Created time: 2015-09-14 10:17:25 Modified time: 2015-09-08 06:31:54 MD5: B467006C53B475AAA6E840398CBAD233 SHA1: 1759CF5ACA53ADA9ED6435B29C9F90D93DEB5E6F --- C:\zoek_backup\C_Windows_Prefetch_MBAMSERVICE.EXE-351A0DC9.pf.vir --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 44036 Created time: 2015-09-14 10:17:25 Modified time: 2015-09-08 10:20:55 MD5: 886F8C6A4D7DF9A9759009FAF22EB8CE SHA1: DF38B45CA1F9784E5EE8887C3B24D9FB09ACEC99 ==== Registry Search Results for "Microsoft Security Client" ====================== No instances of string "Microsoft Security Client" found. ==== Registry Search Results for "avast" ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Google\No Chrome Offer Until] "AVAST Software"=dword:013379c4 [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AvastPersistentStorage] ==== Registry Search Results for "mbam" ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION] "mbam.exe"=dword:000022b8 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WARN_ON_SEC_CERT_REV_FAILED] "mbam.exe"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MBAMPROTECTOR] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MBAMPROTECTOR\0000] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MBAMPROTECTOR\0000] "Service"="MBAMProtector" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MBAMPROTECTOR\0000] "DeviceDesc"="MBAMProtector" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MBAMSWISSARMY] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MBAMSWISSARMY\0000] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MBAMSWISSARMY\0000] "Service"="MBAMSwissArmy" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MBAMSWISSARMY\0000] "DeviceDesc"="MBAMSwissArmy" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MBAMWEBACCESSCONTROL] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MBAMWEBACCESSCONTROL\0000] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MBAMWEBACCESSCONTROL\0000] "Service"="MBAMWebAccessControl" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MBAMWEBACCESSCONTROL\0000] "DeviceDesc"="MBAMWebAccessControl" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMProtector] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMProtector\Instances] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMProtector\Instances] "DefaultInstance"="MBAMProtector Instance" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMProtector\Instances\MBAMProtector Instance] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMProtector\Parameters] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMProtector\Parameters] "PassThruFile"="mbampt.exe" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMProtector\Enum] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMProtector\Enum] "0"="Root\\LEGACY_MBAMPROTECTOR\\0000" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMSwissArmy] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMSwissArmy] "DisplayName"="MBAMSwissArmy" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMSwissArmy\Instances] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMSwissArmy\Instances] "DefaultInstance"="MBAMSwissArmy Instance" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMSwissArmy\Instances\MBAMSwissArmy Instance] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMSwissArmy\Enum] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMSwissArmy\Enum] "0"="Root\\LEGACY_MBAMSWISSARMY\\0000" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMWebAccessControl] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMWebAccessControl\Enum] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MBAMWebAccessControl\Enum] "0"="Root\\LEGACY_MBAMWEBACCESSCONTROL\\0000" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MBAMPROTECTOR] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MBAMPROTECTOR\0000] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MBAMPROTECTOR\0000] "Service"="MBAMProtector" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MBAMPROTECTOR\0000] "DeviceDesc"="MBAMProtector" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MBAMSWISSARMY] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MBAMSWISSARMY\0000] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MBAMSWISSARMY\0000] "Service"="MBAMSwissArmy" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MBAMSWISSARMY\0000] "DeviceDesc"="MBAMSwissArmy" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MBAMWEBACCESSCONTROL] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MBAMWEBACCESSCONTROL\0000] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MBAMWEBACCESSCONTROL\0000] "Service"="MBAMWebAccessControl" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MBAMWEBACCESSCONTROL\0000] "DeviceDesc"="MBAMWebAccessControl" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\MBAMProtector] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\MBAMProtector\Instances] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\MBAMProtector\Instances] "DefaultInstance"="MBAMProtector Instance" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\MBAMProtector\Instances\MBAMProtector Instance] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\MBAMProtector\Parameters] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\MBAMProtector\Parameters] "PassThruFile"="mbampt.exe" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\MBAMSwissArmy] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\MBAMSwissArmy] "DisplayName"="MBAMSwissArmy" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\MBAMSwissArmy\Instances] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\MBAMSwissArmy\Instances] "DefaultInstance"="MBAMSwissArmy Instance" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\MBAMSwissArmy\Instances\MBAMSwissArmy Instance] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\MBAMWebAccessControl] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MBAMPROTECTOR] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MBAMPROTECTOR\0000] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MBAMPROTECTOR\0000] "Service"="MBAMProtector" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MBAMPROTECTOR\0000] "DeviceDesc"="MBAMProtector" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MBAMSWISSARMY] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MBAMSWISSARMY\0000] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MBAMSWISSARMY\0000] "Service"="MBAMSwissArmy" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MBAMSWISSARMY\0000] "DeviceDesc"="MBAMSwissArmy" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MBAMWEBACCESSCONTROL] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MBAMWEBACCESSCONTROL\0000] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MBAMWEBACCESSCONTROL\0000] "Service"="MBAMWebAccessControl" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MBAMWEBACCESSCONTROL\0000] "DeviceDesc"="MBAMWebAccessControl" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMProtector] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMProtector\Instances] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMProtector\Instances] "DefaultInstance"="MBAMProtector Instance" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMProtector\Instances\MBAMProtector Instance] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMProtector\Parameters] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMProtector\Parameters] "PassThruFile"="mbampt.exe" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMProtector\Enum] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMProtector\Enum] "0"="Root\\LEGACY_MBAMPROTECTOR\\0000" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMSwissArmy] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMSwissArmy] "DisplayName"="MBAMSwissArmy" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMSwissArmy\Instances] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMSwissArmy\Instances] "DefaultInstance"="MBAMSwissArmy Instance" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMSwissArmy\Instances\MBAMSwissArmy Instance] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMSwissArmy\Enum] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMSwissArmy\Enum] "0"="Root\\LEGACY_MBAMSWISSARMY\\0000" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMWebAccessControl] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMWebAccessControl\Enum] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MBAMWebAccessControl\Enum] "0"="Root\\LEGACY_MBAMWEBACCESSCONTROL\\0000" [HKEY_USERS\S-1-5-21-1701775280-1332481620-2837527582-1000\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted] "C:\\Users\\User1\\Downloads\\mbam-setup-2.1.8.1057.exe"=dword:00000001 ==== C:\zoek_backup content ====================== C:\zoek_backup (files=141 folders=129 32519132 bytes) ==== EOF on ma 14/09/2015 at 16:15:00,54 ======================