Zoek.exe v5.0.0.1 Updated 05-November-2015 Tool run by User on za 07-11-2015 at 14:23:41,85. Microsoft Windows 8.1 6.3.9600 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\User\Desktop\zoek.exe [Scan all users] [Script inserted] ==== Older Logs ====================== C:\zoek-results2015-11-04-140651.log 66082 bytes C:\zoek-results2015-11-04-165216.log 58549 bytes C:\zoek-results2015-11-04-191044.log 2974 bytes ==== Empty Folders Check ====================== C:\Users\User\AppData\Roaming\QuickScan deleted successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\\WINDOWS\\SysWOW64\\nvinit.dll" ==== Deleting Files \ Folders ====================== C:\Program Files (x86)\Popcorn Time not found C:\ProgramData\Zitenop not found C:\Program Files (x86)\KMSPico 10.0.6 not found C:\Program Files\KMSpico deleted ==== Folders Found ====================== 2012-08-17 00:53:15 2014-11-12 17:22:46 -------- d-----w- C:\ProgramData\McAfee 2012-08-17 00:53:15 2014-11-12 17:22:46 -------- d-----w- C:\Users\All Users\McAfee 2015-11-04 14:00:43 2015-11-04 14:00:43 -------- d---a-w- C:\zoek_backup\C_Program Files (x86)_KMSPico 10.0.6 2015-11-07 13:32:26 2015-11-07 13:32:26 -------- d---a-w- C:\zoek_backup\C_Program Files_KMSpico ==== Files Found ====================== --- C:\Windows\Log\McAfee64_Win8.log --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 129 Created time: 2012-07-04 09:57:11 Modified time: 2012-08-03 21:32:42 MD5: 810EEFD70CB5A7F026E3BD1072B26523 SHA1: 297D011C8A218975C53F762F50619B98B1DB8B01 --- C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\McAfee HIPS Driver.cat --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: --s-a-w- File size: 9582 Created time: 2012-08-17 00:54:08 Modified time: 2012-06-15 09:25:38 MD5: D4438AC22ED289FE5E08529DFAAC765B SHA1: 92F3A4C2FD7322565A21BF8E33ECD9EDAE54E5FA --- C:\Users\User\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\Zitenop.exe.log --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 128 Created time: 2015-11-03 07:57:57 Modified time: 2015-11-03 07:58:04 MD5: DCE9F32BCED4AAB2734405A025A06295 SHA1: E1E783CC8FF9623D3CCDCCE212FB06498B782FDD ==== Registry Search Results for "mcafee" ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1FCCD250-A453-4348-86C1-E5EA9B76FADB}] "AppPath"="C:\\Program Files (x86)\\McAfee\\VirusScan" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8F94DF3-F6C6-422a-8BFC-7EE0F60A8609}] "AppPath"="C:\\Program Files (x86)\\McAfee\\VirusScan" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\Mskoladd.MskOLAddIn] "Description"="McAfee AddIn" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\Mskoladd.MskOLAddIn] "FriendlyName"="McAfee AddIn" [HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Thunderbird\Extensions] "msktbird@mcafee.com"="C:\\Program Files\\McAfee\\MSK" [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10] [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10] "ProductName"="McAfee Total Protection" [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10] "Version"="McAfee Inc." [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10] "Description"="McAfee Total Protection MIME Plugin" [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10] "Path"="C:\\Program Files (x86)\\McAfee\\msc\\npMcSnFFPl.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10\MimeTypes] [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10\MimeTypes\application/x-mfe-ipt] [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10\MimeTypes\application/x-mfe-ipt] "Description"="McAfee Update" [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10\Suffixes] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NaiAnn.McVsAnn] @="McAfee VirusScan Announcer Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NaiAnn.McVsAnn.1] @="McAfee VirusScan Announcer Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NaiAnn.McVsAnnAdmin] @="McAfee VirusScan Announcer Administrative Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NaiAnn.McVsAnnAdmin.1] @="McAfee VirusScan Announcer Administrative Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NaiAnn.McVSOASAlert] @="McAfee VirusScan Announcer Alerter Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\NaiAnn.McVSOASAlert.1] @="McAfee VirusScan Announcer Alerter Class" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Application\mclogevent] "EventMessageFile"="C:\\Program Files\\Common Files\\McAfee\\SystemCore\\\\naievent.dll" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HipShieldK] "DisplayName"="McAfee Inc. HipShieldK" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mferkdet] "DisplayName"="McAfee Inc. mferkdet" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mferkdet] "InstallReference.WSS11.6_OAS"="C:\\Program Files\\Common Files\\McAfee\\VSCore\\mfehidin.exe" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\mclogevent] "EventMessageFile"="C:\\Program Files\\Common Files\\McAfee\\SystemCore\\\\naievent.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HipShieldK] "DisplayName"="McAfee Inc. HipShieldK" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mferkdet] "DisplayName"="McAfee Inc. mferkdet" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mferkdet] "InstallReference.WSS11.6_OAS"="C:\\Program Files\\Common Files\\McAfee\\VSCore\\mfehidin.exe" [HKEY_USERS\.DEFAULT\Software\McAfee] [HKEY_USERS\.DEFAULT\Software\McAfee\MSC] [HKEY_USERS\.DEFAULT\Software\McAfee\MSC\Settings] [HKEY_USERS\.DEFAULT\Software\McAfee\MSC\Settings\McProMgr] [HKEY_USERS\.DEFAULT\Software\McAfee\RuntimeMUI] [HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\McAfee Trust] [HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\McAfee Trust\Certificates] [HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\McAfee Trust\CRLs] [HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\McAfee Trust\CTLs] [HKEY_USERS\S-1-5-21-2053507290-4217072742-2159287795-1002\Software\McAfee] [HKEY_USERS\S-1-5-21-2053507290-4217072742-2159287795-1002\Software\McAfee\MSC] [HKEY_USERS\S-1-5-21-2053507290-4217072742-2159287795-1002\Software\McAfee\MSC\Settings] [HKEY_USERS\S-1-5-21-2053507290-4217072742-2159287795-1002\Software\McAfee\MSC\Settings\McProMgr] [HKEY_USERS\S-1-5-21-2053507290-4217072742-2159287795-1002\Software\McAfee\RuntimeMUI] [HKEY_USERS\S-1-5-21-2053507290-4217072742-2159287795-1002\Software\McAfee\VirusScan] [HKEY_USERS\S-1-5-18\Software\McAfee] [HKEY_USERS\S-1-5-18\Software\McAfee\MSC] [HKEY_USERS\S-1-5-18\Software\McAfee\MSC\Settings] [HKEY_USERS\S-1-5-18\Software\McAfee\MSC\Settings\McProMgr] [HKEY_USERS\S-1-5-18\Software\McAfee\RuntimeMUI] [HKEY_USERS\S-1-5-18\Software\Microsoft\SystemCertificates\McAfee Trust] [HKEY_USERS\S-1-5-18\Software\Microsoft\SystemCertificates\McAfee Trust\Certificates] [HKEY_USERS\S-1-5-18\Software\Microsoft\SystemCertificates\McAfee Trust\CRLs] [HKEY_USERS\S-1-5-18\Software\Microsoft\SystemCertificates\McAfee Trust\CTLs] ==== Registry Search Results for "KMSPico" ====================== [HKEY_USERS\S-1-5-21-2053507290-4217072742-2159287795-1002\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\d7533fa_0] @="{2}.\\\\?\\hdaudio#func_01&ven_10ec&dev_0269&subsys_104310bc&rev_1001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\\singlelineouttopo/00010001|\\Device\\HarddiskVolume4\\Program Files\\KMSpico\\AutoPico.exe%b{00000000-0000-0000-0000-000000000000}" ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "bdwteff@bitdefender.com"="C:\Program Files\Bitdefender\Bitdefender 2016\bdwteff" [02-11-2015 16:00] [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "bdwteff@bitdefender.com"="C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff" [02-11-2015 16:00] [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "DSE"="true" [] ==== Firefox Extensions ====================== ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ngvi4rr.default-1446543442242 - Undetermined - %ProfilePath%\extensions\uBlock0@raymondhill.net.xpi - Adblock Edge - %ProfilePath%\extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ngvi4rr.default-1446543442242 30F232783820C8146F8A050F9E2F5D1D - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1220162.dll - Shockwave for Director / Shockwave for Director 863AF0003392FEBC2667A8A790DED955 - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll - Shockwave Flash ==== Chromium Look ====================== Google Chrome Version: 46.0.2490.80 HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions dhhejlifdlcgcmogbggeomfodgklfaem - No path found[] AdBlock - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {CD76A34F-CDFE-4B5C-957A-361536AA1493} Bing Url="http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE" ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== shortcuts on Users Desktops ====================== C:\Users\User\Desktop\Backup.lnk - D:\Backup\062467243_D3N0CJ88698010D\062467243.1.exe C:\Users\User\Desktop\µTorrent.lnk - ==== shortcuts on All Users Desktop ====================== C:\Users\Public\Desktop\Bitdefender 2016.lnk - C:\Program Files (x86)\Bitdefender\Bitdefender 2016\bdagent.exe /seccenter C:\Users\Public\Desktop\Media Go.lnk - C:\Program Files (x86)\Sony\Media Go\MediaGo.exe C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Users\Public\Desktop\Origin.lnk - D:\Origin\Origin.exe C:\Users\Public\Desktop\Popcorn Time.lnk - C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe --no-proxy-server C:\Users\Public\Desktop\Skype.lnk - C:\WINDOWS\Installer\{6A0549A9-1B96-498C-ACBC-3943001FEB19}\SkypeIcon.exe C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe ==== shortcuts in Users Start Menu ====================== C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe %SNP% ==== shortcuts in All Users Start Menu ====================== C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk - C:\WINDOWS\Installer\{AC76BA86-7AD7-1043-7B44-AB0000000001}\SC_Reader.ico C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe %SNF% C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS\ASUS On-Screen Display.lnk - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSDMgr.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2016\Bitdefender 2016.lnk - C:\Program Files (x86)\Bitdefender\Bitdefender 2016\bdagent.exe /seccenter C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2016\Bitdefender Safepay.lnk - C:\Program Files (x86)\Bitdefender\Bitdefender 2016\antispam32\obk.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2016\Herstellen of de-installeren.lnk - C:\Program Files (x86)\Common Files\Bitdefender\SetupInformation\{09FE2C2E-BB0D-4848-A706-AA244FA25FEA}\installer.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe %SNP% C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Access 2013.lnk - C:\WINDOWS\Installer\{91150000-0011-0000-0000-0000000FF1CE}\accicons.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Excel 2013.lnk - C:\WINDOWS\Installer\{91150000-0011-0000-0000-0000000FF1CE}\xlicons.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\OneDrive voor Bedrijven 2013.lnk - C:\WINDOWS\Installer\{91150000-0011-0000-0000-0000000FF1CE}\grv_icons.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\OneNote 2013.lnk - C:\WINDOWS\Installer\{91150000-0011-0000-0000-0000000FF1CE}\joticon.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Outlook 2013.lnk - C:\WINDOWS\Installer\{91150000-0011-0000-0000-0000000FF1CE}\outicon.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\PowerPoint 2013.lnk - C:\WINDOWS\Installer\{91150000-0011-0000-0000-0000000FF1CE}\pptico.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Publisher 2013.lnk - C:\WINDOWS\Installer\{91150000-0011-0000-0000-0000000FF1CE}\pubs.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Skype for Business 2015.lnk - C:\WINDOWS\Installer\{91150000-0011-0000-0000-0000000FF1CE}\lyncicon.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Verzenden naar OneNote 2013.lnk - C:\WINDOWS\Installer\{91150000-0011-0000-0000-0000000FF1CE}\joticon.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Word 2013.lnk - C:\WINDOWS\Installer\{91150000-0011-0000-0000-0000000FF1CE}\wordicon.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Hulpprogramma's van Office 2013\Lync opnamebeheer.lnk - C:\WINDOWS\Installer\{91150000-0011-0000-0000-0000000FF1CE}\lyncicon.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk - C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\Silverlight.Configuration.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk - C:\Program Files (x86)\Skype\Phone\Skype.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Alternate Start.lnk - C:\Program Files\SUPERAntiSpyware\RUNSAS.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Free Edition.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Registration-Activation.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe /register C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Ninja\System Ninja.lnk - C:\Program Files (x86)\System Ninja\System Ninja.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Ninja\Uninstall System Ninja.lnk - C:\Program Files (x86)\System Ninja\unins000.exe ==== shortcuts in Quick Launch ====================== C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe %SNP% C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe %SNP% C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk - C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.EXE /recycle C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Control Panel.lnk - C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk - C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe %SNP% C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe %SNF% C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\SUPERAntiSpyware Free Edition.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe ==== shortcuts After Repair ====================== C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==== Empty IE Cache ====================== C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\User\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\User\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully ==== Empty FireFox Cache ====================== C:\Users\User\AppData\Local\Mozilla\Firefox\Profiles\3ngvi4rr.default-1446543442242\cache2 emptied successfully ==== Empty Chrome Cache ====================== C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== No Java Cache Found ==== C:\zoek_backup content ====================== C:\zoek_backup (files=1171 folders=177 230334390 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully C:\Users\User\AppData\Local\Temp will be emptied at reboot C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\WINDOWS\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\WINDOWS\Temp successfully emptied C:\Users\User\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on za 07-11-2015 at 15:14:23,41 ======================