Zoek.exe v5.0.0.1 Updated 31-December-2015 Tool run by Gebruiker on zo 24-01-2016 at 21:25:01,74. Microsoft Windows 8.1 6.3.9600 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Gebruiker\Desktop\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== System Restore Info ====================== 24-1-2016 21:25:56 Zoek.exe System Restore Point Created Successfully. ==== Empty Folders Check ====================== C:\Users\Gebruiker\AppData\Roaming\Media Player Classic deleted successfully C:\Users\Gebruiker\AppData\Local\PDFCreator deleted successfully C:\Users\Gebruiker\AppData\Local\Skype deleted successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== C:\PROGRA~2\SopCast deleted C:\PROGRA~3\Package Cache deleted C:\WINDOWS\SysWow64\AI_RecycleBin deleted "C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1d0ef17e4a2a46b.job" deleted "C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA1d0e1d141e67b33.job" deleted "C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA1d12eb1e445254a.job" deleted ==== Files Recently Created / Modified ====================== ====== C:\WINDOWS ==== ====== C:\Users\GEBRUI~1\AppData\Local\Temp ==== 2016-01-23 17:43:34 679D63D4D5C393DAFC6DB17D4C4E90E4 644704 ----a-w- C:\Users\Gebruiker\AppData\Local\Temp\jre-8u71-windows-au.exe ====== Java Cache ===== ====== C:\WINDOWS\SysWOW64 ===== 2016-01-13 10:46:02 EA1AE75952A134B916898F6ED711D0DF 4610560 ----a-w- C:\WINDOWS\SysWOW64\jscript9.dll 2016-01-13 10:46:02 0EB02F0E2D88391FA424ADE23DED4B26 20367360 ----a-w- C:\WINDOWS\SysWOW64\mshtml.dll 2016-01-13 10:46:01 FEC239DEA89529EA2F0A7EAD33035C7E 2011136 ----a-w- C:\WINDOWS\SysWOW64\wininet.dll 2016-01-13 10:46:01 C5C764DD432EFBFB696E57DA7FD1DCFC 12856320 ----a-w- C:\WINDOWS\SysWOW64\ieframe.dll 2016-01-13 10:46:01 BD9A366336173D9E802DA831FA1E862C 496640 ----a-w- C:\WINDOWS\SysWOW64\vbscript.dll 2016-01-13 10:46:00 A78B94FF06C52A229DC83D176963A960 687104 ----a-w- C:\WINDOWS\SysWOW64\msfeeds.dll 2016-01-13 10:46:00 9CB9B1CAD05BF9E534D284D3560BF7DC 880128 ----a-w- C:\WINDOWS\SysWOW64\inetcomm.dll 2016-01-13 10:46:00 86DF509512570AEB252C8A0FB4785569 663552 ----a-w- C:\WINDOWS\SysWOW64\jscript.dll 2016-01-13 10:46:00 701D71335226B378555AD172DA76B643 710144 ----a-w- C:\WINDOWS\SysWOW64\ieapfltr.dll 2016-01-13 10:46:00 1966606B40E38ED3680241CDB7345C5B 1311744 ----a-w- C:\WINDOWS\SysWOW64\urlmon.dll 2016-01-13 10:44:59 D4308B86A037A3F961AD8DC9453D13B0 1115640 ----a-w- C:\WINDOWS\SysWOW64\mfnetsrc.dll 2016-01-13 10:44:59 B82BB75B4109CB4E36F2080182C5FB96 561664 ----a-w- C:\WINDOWS\SysWOW64\qedit.dll 2016-01-13 10:44:59 77988DF39C0B03ECEC23D983828C551E 1484888 ----a-w- C:\WINDOWS\SysWOW64\msmpeg2adec.dll 2016-01-13 10:44:59 4947C613E6A3979B7532784BB1F1FF88 2528784 ----a-w- C:\WINDOWS\SysWOW64\WMVDECOD.DLL 2016-01-13 10:44:58 FB61563FE57A83FD47D106EFB1E0F9A9 183856 ----a-w- C:\WINDOWS\SysWOW64\VIDRESZR.DLL 2016-01-13 10:44:58 FA9C431BD37D08B3827920AAEC15BB79 1037680 ----a-w- C:\WINDOWS\SysWOW64\WMADMOD.DLL 2016-01-13 10:44:58 E8DAB63684F3E835DB238126A9EE7DE6 2447136 ----a-w- C:\WINDOWS\SysWOW64\WMVENCOD.DLL 2016-01-13 10:44:58 E620785DB51AD2B582DEAC1EC4A35621 1411584 ----a-w- C:\WINDOWS\SysWOW64\WMSPDMOE.DLL 2016-01-13 10:44:58 DCAE83B49A2CCB4C8C5AE303E336E5E4 2324744 ----a-w- C:\WINDOWS\SysWOW64\mfcore.dll 2016-01-13 10:44:58 D7A0EBA50D2614C7B59FE7D66D360E45 229272 ----a-w- C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL 2016-01-13 10:44:58 D6A832C6275332E6AFF9619816EC62BB 184912 ----a-w- C:\WINDOWS\SysWOW64\COLORCNV.DLL 2016-01-13 10:44:58 D0812E8C73FF954E8861B32C6189C758 81032 ----a-w- C:\WINDOWS\SysWOW64\devenum.dll 2016-01-13 10:44:58 C2A0E75716AB62945EE7A5424A191A85 399776 ----a-w- C:\WINDOWS\SysWOW64\mfsvr.dll 2016-01-13 10:44:58 AB783643CC9FC852AF4514C7EC956FB4 275312 ----a-w- C:\WINDOWS\SysWOW64\MPG4DECD.DLL 2016-01-13 10:44:58 A5AFCB657F36FEC0D02829FB55CADECC 887296 ----a-w- C:\WINDOWS\SysWOW64\WMSPDMOD.DLL 2016-01-13 10:44:58 9F10DB8E9D93D8099D1929C48BED33F5 1501184 ----a-w- C:\WINDOWS\SysWOW64\quartz.dll 2016-01-13 10:44:58 9EA85D39C2245DB6DB494BD0D01AC53A 519680 ----a-w- C:\WINDOWS\SysWOW64\qdvd.dll 2016-01-13 10:44:58 8F1DF01E797D4ED88AEA48A7318DAA34 110544 ----a-w- C:\WINDOWS\SysWOW64\mfps.dll 2016-01-13 10:44:58 8D59116B0DF2C6BBEB77FAE473132E07 463776 ----a-w- C:\WINDOWS\SysWOW64\MP4SDECD.DLL 2016-01-13 10:44:58 883785B6448CAEDFD23F243B812F76B6 914672 ----a-w- C:\WINDOWS\SysWOW64\WMADMOE.DLL 2016-01-13 10:44:58 7C37B256651C65EF36CDF8654094BB1E 492736 ----a-w- C:\WINDOWS\SysWOW64\WMVSDECD.DLL 2016-01-13 10:44:58 7AFC278792FA79B55417BAE8BA1C578D 736256 ----a-w- C:\WINDOWS\SysWOW64\WMVXENCD.DLL 2016-01-13 10:44:58 7543ADD28E5755173A900BB1E0CFFBC6 584656 ----a-w- C:\WINDOWS\SysWOW64\evr.dll 2016-01-13 10:44:58 635923C4DA0FD32A8AE4BAA6B62454E5 402432 ----a-w- C:\WINDOWS\SysWOW64\WMVSENCD.DLL 2016-01-13 10:44:58 4D6C13CA3E4D0869F911D88DE9BF2E3E 743936 ----a-w- C:\WINDOWS\SysWOW64\MFWMAAEC.DLL 2016-01-13 10:44:58 46721B442060DFD86AB13DB2C454E291 274280 ----a-w- C:\WINDOWS\SysWOW64\MP43DECD.DLL 2016-01-13 10:44:58 25054169C8980C26F1A000FDD89500EF 76936 ----a-w- C:\WINDOWS\SysWOW64\mfvdsp.dll 2016-01-13 10:44:58 246FAB0A3797CA09EB2784F56210460B 700360 ----a-w- C:\WINDOWS\SysWOW64\mfnetcore.dll 2016-01-13 10:44:58 1D057D45BDAE173989A8F57CB069BBDA 245760 ----a-w- C:\WINDOWS\SysWOW64\ksproxy.ax 2016-01-13 10:44:58 1C64686C98F54027247B67EA7EFFB6B7 99136 ----a-w- C:\WINDOWS\SysWOW64\MP3DMOD.DLL 2016-01-13 10:44:57 D1DA248D5FAA665D98279D400C3B1FED 357888 ----a-w- C:\WINDOWS\SysWOW64\schannel.dll 2016-01-13 10:44:57 C0878126EDA2BF4FC8FE79D668353457 324096 ----a-w- C:\WINDOWS\SysWOW64\certcli.dll 2016-01-13 10:44:57 8C702867BED37F9077231A0DA1599EF5 91416 ----a-w- C:\WINDOWS\SysWOW64\ncryptsslp.dll 2016-01-13 10:44:57 5F1F20AB31DC487CF70360653AF94A17 120376 ----a-w- C:\WINDOWS\SysWOW64\ncrypt.dll 2016-01-13 10:44:57 4119CA65855636E118942B09B4AA8852 340872 ----a-w- C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2016-01-13 10:44:56 F1D1E449FA396163F46459CF020A9B00 507176 ----a-w- C:\WINDOWS\SysWOW64\advapi32.dll 2016-01-13 10:44:55 54F82315BDF55BC8D0951E625B0FF71C 1097216 ----a-w- C:\WINDOWS\SysWOW64\gdi32.dll 2016-01-13 10:44:54 B0BCD3162B84852317209FE01FB8F3ED 1499912 ----a-w- C:\WINDOWS\SysWOW64\ntdll.dll ====== C:\WINDOWS\SysWOW64\drivers ===== ====== C:\WINDOWS\Sysnative ===== 2016-01-13 10:46:03 FEEA59E7EF781F8F0A19960D507B69C4 25837568 ----a-w- C:\WINDOWS\Sysnative\mshtml.dll 2016-01-13 10:46:03 158E4BF96FC82F10569441A6CF216BE1 6051328 ----a-w- C:\WINDOWS\Sysnative\jscript9.dll 2016-01-13 10:46:01 F6C28491FB681CF9FB084E3FECB5E6D6 2487808 ----a-w- C:\WINDOWS\Sysnative\wininet.dll 2016-01-13 10:46:01 E65A0393F63880795EF1C96BECA7C752 571904 ----a-w- C:\WINDOWS\Sysnative\vbscript.dll 2016-01-13 10:46:01 221E80A7181BF64BCDA36BCB92056C8A 92160 ----a-w- C:\WINDOWS\Sysnative\mshtmled.dll 2016-01-13 10:46:01 11428DAC697C906F873A2B9BD28673A0 14456832 ----a-w- C:\WINDOWS\Sysnative\ieframe.dll 2016-01-13 10:46:00 E2D77066F93867FED970A2F9725FCF64 800768 ----a-w- C:\WINDOWS\Sysnative\ieapfltr.dll 2016-01-13 10:46:00 BC59C0EFF4016AB3764B210B4FF288C9 1032704 ----a-w- C:\WINDOWS\Sysnative\inetcomm.dll 2016-01-13 10:46:00 AC135AD2BE989724404B392158EFFE4A 1546752 ----a-w- C:\WINDOWS\Sysnative\urlmon.dll 2016-01-13 10:46:00 90D875B41701279FD3AA7ADA77577731 817664 ----a-w- C:\WINDOWS\Sysnative\jscript.dll 2016-01-13 10:46:00 38600FA640785ECA985D81A84D65CC42 798208 ----a-w- C:\WINDOWS\Sysnative\msfeeds.dll 2016-01-13 10:44:59 EDBCF020312B0A666D573F17E6C8F36E 1877504 ----a-w- C:\WINDOWS\Sysnative\msmpeg2adec.dll 2016-01-13 10:44:59 E57FA5C2293F9B68B8EE3F3347A8E467 2745184 ----a-w- C:\WINDOWS\Sysnative\WMVDECOD.DLL 2016-01-13 10:44:59 6CB2E641D5287ECB1AD661F94269244F 670208 ----a-w- C:\WINDOWS\Sysnative\qedit.dll 2016-01-13 10:44:59 49C90B7CA335B88256301BD7EC71922D 2334104 ----a-w- C:\WINDOWS\Sysnative\mfcore.dll 2016-01-13 10:44:58 FFED8E82FACEA3A98495AA51DAD39E47 246856 ----a-w- C:\WINDOWS\Sysnative\RESAMPLEDMO.DLL 2016-01-13 10:44:58 EB766AA7CA9736E8730DBCC5E24A11A8 299080 ----a-w- C:\WINDOWS\Sysnative\VIDRESZR.DLL 2016-01-13 10:44:58 E4A9005FDC43AB809745727DFD8B9733 1288128 ----a-w- C:\WINDOWS\Sysnative\mfnetsrc.dll 2016-01-13 10:44:58 CF43BD59243814D6C40906A0D958C13B 2450240 ----a-w- C:\WINDOWS\Sysnative\WMVENCOD.DLL 2016-01-13 10:44:58 CA5F2EBE9A37612EA870C9DABFA9322B 116720 ----a-w- C:\WINDOWS\Sysnative\MP3DMOD.DLL 2016-01-13 10:44:58 C4EB5199371188D73B6398BA9DA9336F 1664000 ----a-w- C:\WINDOWS\Sysnative\WMSPDMOE.DLL 2016-01-13 10:44:58 B8ED24CF601BBF02542A447E786C62CC 735496 ----a-w- C:\WINDOWS\Sysnative\evr.dll 2016-01-13 10:44:58 B6F66E58C282D8EBE679E79CF758246D 468480 ----a-w- C:\WINDOWS\Sysnative\MFWMAAEC.DLL 2016-01-13 10:44:58 AF86B829240BB1C86B729FF19523C405 451072 ----a-w- C:\WINDOWS\Sysnative\WMVSENCD.DLL 2016-01-13 10:44:58 AC0793654FDA191356F976F90020D442 289792 ----a-w- C:\WINDOWS\Sysnative\ksproxy.ax 2016-01-13 10:44:58 9F3F1690779AF925EF27E5AB3DC98971 557856 ----a-w- C:\WINDOWS\Sysnative\WMVSDECD.DLL 2016-01-13 10:44:58 9BD541409D98319F47A47E0EDDA0CD16 644608 ----a-w- C:\WINDOWS\Sysnative\WMVXENCD.DLL 2016-01-13 10:44:58 958BBFEC04E21D21E12FE942288CB62E 1150232 ----a-w- C:\WINDOWS\Sysnative\WMADMOE.DLL 2016-01-13 10:44:58 89B8BD9C6EC007F8B676523C64646019 90392 ----a-w- C:\WINDOWS\Sysnative\mfvdsp.dll 2016-01-13 10:44:58 895C3C13EA0B2D1749C7E196BF4291A7 1798480 -c--a-w- C:\WINDOWS\Sysnative\WMALFXGFXDSP.dll 2016-01-13 10:44:58 74A9FAB8E52E574328167C954C291158 248432 ----a-w- C:\WINDOWS\Sysnative\MP43DECD.DLL 2016-01-13 10:44:58 73F79CFF87CCB6E05CC381A705A22ACF 850680 ----a-w- C:\WINDOWS\Sysnative\mfnetcore.dll 2016-01-13 10:44:58 6546BB2387558FC0B8A8960C6E64812B 250520 ----a-w- C:\WINDOWS\Sysnative\MPG4DECD.DLL 2016-01-13 10:44:58 512B361A9AAC27E32B49F4A853555127 340992 ----a-w- C:\WINDOWS\Sysnative\qdvd.dll 2016-01-13 10:44:58 4DE477B2C0E8C192F7E6081DDCF7E80E 498472 ----a-w- C:\WINDOWS\Sysnative\mfsvr.dll 2016-01-13 10:44:58 394AD52DCAD308ABD78E41D24FCEC274 1210200 ----a-w- C:\WINDOWS\Sysnative\WMADMOD.DLL 2016-01-13 10:44:58 37F68076C560C0FE274F63573945F3E5 90904 ----a-w- C:\WINDOWS\Sysnative\devenum.dll 2016-01-13 10:44:58 25A14A22A07E0CB798B64EEC4CCCADF5 629600 ----a-w- C:\WINDOWS\Sysnative\MP4SDECD.DLL 2016-01-13 10:44:58 2217E415DDFACE74E60801533106A233 378880 -c--a-w- C:\WINDOWS\Sysnative\SysFxUI.dll 2016-01-13 10:44:58 1E96347787177BE61A5B0E11D114ED41 244296 ----a-w- C:\WINDOWS\Sysnative\mfps.dll 2016-01-13 10:44:58 16409B63D29D0D5B9764D17DA6986EAC 1010688 ----a-w- C:\WINDOWS\Sysnative\WMSPDMOD.DLL 2016-01-13 10:44:58 12C3FD470C9563378F617EDC5C452B60 203016 ----a-w- C:\WINDOWS\Sysnative\COLORCNV.DLL 2016-01-13 10:44:58 0971A106909DD24FC95B64B466964D21 1697792 ----a-w- C:\WINDOWS\Sysnative\quartz.dll 2016-01-13 10:44:57 F7A892FD55475668240A1C059770C87F 1441280 ----a-w- C:\WINDOWS\Sysnative\lsasrv.dll 2016-01-13 10:44:57 F488EB4A942D4A1ABB67F4E9D21F34A1 137968 ----a-w- C:\WINDOWS\Sysnative\ncrypt.dll 2016-01-13 10:44:57 D8168652443B089D3A10B1B8A5E9027E 432128 ----a-w- C:\WINDOWS\Sysnative\schannel.dll 2016-01-13 10:44:57 33719C09E35F10AB8BCC8F7AC730937C 445440 ----a-w- C:\WINDOWS\Sysnative\certcli.dll 2016-01-13 10:44:56 98F7815A4F789AD06C758A848C6A2DBA 106960 ----a-w- C:\WINDOWS\Sysnative\ncryptsslp.dll 2016-01-13 10:44:56 8B78F99AFF5F8D9248AED6622B331CFC 397224 ----a-w- C:\WINDOWS\Sysnative\bcryptprimitives.dll 2016-01-13 10:44:56 1A3350C4ECB93F15839F5799E60E32FD 685432 ----a-w- C:\WINDOWS\Sysnative\advapi32.dll 2016-01-13 10:44:55 D71AD091DA54E72D6F679170980FF5F0 7453016 ----a-w- C:\WINDOWS\Sysnative\ntoskrnl.exe 2016-01-13 10:44:55 B15AB960663EEA2A824DACABEB4016E4 1380600 ----a-w- C:\WINDOWS\Sysnative\gdi32.dll 2016-01-13 10:44:54 C96B880CE00D71939A9E982307589029 210432 ----a-w- C:\WINDOWS\Sysnative\aepic.dll 2016-01-13 10:44:54 BB7CA975BD668E3F8DD895D683CE4322 705024 ----a-w- C:\WINDOWS\Sysnative\invagent.dll 2016-01-13 10:44:54 B0F0DF4375DF40FE563797F709453530 505344 ----a-w- C:\WINDOWS\Sysnative\devinv.dll 2016-01-13 10:44:54 977921D0AA83A8FCFE30730E3F57F35E 33456 ----a-w- C:\WINDOWS\Sysnative\CompatTelRunner.exe 2016-01-13 10:44:54 652EDF1C0800FF7D468C49FFFE9F128F 1380864 ----a-w- C:\WINDOWS\Sysnative\appraiser.dll 2016-01-13 10:44:54 6213E00B1EDD2C93A35F5A335E741FDE 1164800 ----a-w- C:\WINDOWS\Sysnative\aeinv.dll 2016-01-13 10:44:54 31A196B4A2D4F5424BA76B1EE9432492 76800 ----a-w- C:\WINDOWS\Sysnative\acmigration.dll 2016-01-13 10:44:54 3039DE51900B7EA1F30603402D8A800F 1735000 ----a-w- C:\WINDOWS\Sysnative\ntdll.dll 2016-01-13 10:44:54 066AA02D3D8463D758568CE1981D4394 792064 ----a-w- C:\WINDOWS\Sysnative\generaltel.dll ====== C:\WINDOWS\Sysnative\drivers ===== 2016-01-13 10:44:57 D5EB16B7A8FBD925E5A4F27A653E38C9 202240 ----a-w- C:\WINDOWS\Sysnative\drivers\mrxsmb20.sys 2016-01-13 10:44:56 C9ACE28CDCD5FF473033A01AA510A184 561952 ----a-w- C:\WINDOWS\Sysnative\drivers\cng.sys 2016-01-13 10:44:56 A950AB512ED2BD847789FAAD3E967AFA 177488 ----a-w- C:\WINDOWS\Sysnative\drivers\ksecpkg.sys 2016-01-13 10:44:56 767087A3646D01EBA4E8DDD903920BD0 401920 ----a-w- C:\WINDOWS\Sysnative\drivers\mrxsmb.sys 2015-12-27 18:27:59 D812362E8AF615B521AD4DF19A93BD5A 205456 ----a-w- C:\WINDOWS\Sysnative\drivers\nvhda64v.sys 2015-12-27 18:27:58 506692268C5B1052B37528B5EAE4B967 12334200 ----a-w- C:\WINDOWS\Sysnative\drivers\nvlddmkm.sys ====== C:\WINDOWS\Tasks ====== ====== C:\WINDOWS\Temp ====== ======= C:\Program Files ===== ======= C:\PROGRA~2 ===== 2016-01-23 17:44:33 -------- d-----w- C:\PROGRA~2\COMMON~1\Java 2016-01-18 18:14:24 -------- d-----w- C:\PROGRA~2\Word Password Unlocker ======= C: ===== ====== C:\Users\Gebruiker\AppData\Roaming ====== 2015-12-28 08:08:59 -------- d-----w- C:\Users\Gebruiker\AppData\Local\CrashDumps 2015-12-27 13:56:11 -------- d-----w- C:\Users\Gebruiker\AppData\Roaming\Ubisoft ====== C:\Users\Gebruiker ====== 2016-01-24 16:49:03 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Gebruiker\Desktop\RSITx64.exe 2016-01-18 21:17:18 -------- d-----w- C:\Users\Gebruiker\.editix 2015-12-27 13:56:03 -------- d-----w- C:\ProgramData\Ubisoft ====== C: exe-files == 2016-01-24 16:49:03 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Gebruiker\Desktop\RSITx64.exe 2016-01-23 17:44:01 F64E8F84D184DB9E1DAA06C468A96564 50784 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssvagent.exe 2016-01-23 17:44:01 E1CCCE3EF4323A08240442EE6D8F9F23 76896 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2launcher.exe 2016-01-23 17:44:01 DFF3A99FE7DF7896A952B758A534364D 15968 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\rmiregistry.exe 2016-01-23 17:44:01 D2702A2D5C98EB6E2524251099856954 15968 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\servertool.exe 2016-01-23 17:44:01 B562AA86D55096C033BD0CE39BAEE6E7 16480 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\tnameserv.exe 2016-01-23 17:44:01 A12B125D9D3CF87944E7E7A1BA0ED2A3 15968 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\policytool.exe 2016-01-23 17:44:01 8F6A3DF8AEC9E79BF83472783C3EE86F 15968 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\rmid.exe 2016-01-23 17:44:01 7E18299A2B425FB60E47E11DF13CD43E 159328 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\unpack200.exe 2016-01-23 17:44:01 72A41AFF0F7041FEA03914E157C2E22E 15968 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\pack200.exe 2016-01-23 17:44:01 6F93569D77CB789727C4E0F33F934741 15968 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\jjs.exe 2016-01-23 17:44:01 5684DB15C4FDDD66CB41A238586C229E 15968 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\klist.exe 2016-01-23 17:44:01 51FDBC4B82654F534D8AF5F39AE249DD 15968 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\keytool.exe 2016-01-23 17:44:01 4A94B0D6D2322581E0D8C6749AA5EA35 16480 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\orbd.exe 2016-01-23 17:44:01 3B25D8E78E7DC350FF489E814C8302FE 15968 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\kinit.exe 2016-01-23 17:44:01 041F2531B37C13CE5211B860DF5EFC64 15968 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\ktab.exe 2016-01-23 17:44:00 F9B4CC285D23A3CC144C5E2EB89413A9 68192 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\javacpl.exe 2016-01-23 17:44:00 D317A632CFEE0ED03AAAF884B503421A 15968 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\java-rmi.exe 2016-01-23 17:44:00 C1A4EED6CE27B89E3CF63839DDE14D98 278624 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\javaws.exe 2016-01-23 17:44:00 7F39A458F3F444973AF0EEE1035D533A 30816 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\jabswitch.exe 2016-01-23 17:44:00 3C30DF6FF0EEA713F1F4D251696B93A7 191584 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\javaw.exe 2016-01-23 17:44:00 099E74EDE92C0B07E85AF3EE6A0C1248 191072 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\bin\java.exe 2016-01-23 17:43:34 679D63D4D5C393DAFC6DB17D4C4E90E4 644704 ----a-w- C:\Users\Gebruiker\AppData\Local\Temp\jre-8u71-windows-au.exe 2016-01-21 14:07:43 1987CF6CCEC2B6FC35CBFD09B41596DC 7130224 ----a-w- C:\Users\Gebruiker\AppData\Local\NVIDIA\NvBackend\Packages\0000853f\DAO.20362321.exe 2016-01-21 12:35:54 114255B24038B8E92D5F8A9CAD0F8F58 630200 ----a-w- C:\Users\Gebruiker\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe 2016-01-21 12:35:52 B33DD155BB433058B93834802BF14207 172984 ----a-w- C:\Users\Gebruiker\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\OAWrapper.exe 2016-01-19 00:38:38 475EA155D9EC206AEB39C63AC218159D 50622080 ----a-r- C:\Program Files (x86)\Skype\Phone\Skype.exe === C: other files == 2016-01-23 22:11:34 4491E6C0821417FB1DE3AE65F28A11A4 10285525 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Kodi\addons\packages\plugin.video.phstreams-2.7.9.zip 2016-01-23 20:14:46 A3E7E7A465282FFA9A8FD9C09DB17420 60164 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Kodi\userdata\addon_data\service.subtitles.subscene\temp\6b825ca1-f177-435a-b1f4-c5754236d86d\subscene.zip 2016-01-23 17:44:01 61351FF4B83204E6477FBBCB7107B919 14130 ----a-w- C:\Program Files (x86)\Java\jre1.8.0_71\lib\deploy\ffjcext.zip 2016-01-22 18:53:25 D82E7366F0DD83E57E206BA3238BB133 113139 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Kodi\addons\packages\service.xbmc.versioncheck-0.3.16.zip 2016-01-22 18:53:25 A7D662583F81B0E1FCC30B9AF27A5985 57394 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Kodi\addons\packages\service.subtitles.nlondertitels-1.0.3.zip 2016-01-22 18:53:13 7172C93F7D57AD8367219DBE6672832C 364734 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Kodi\addons\packages\script.module.urlresolver-2.10.10.zip 2016-01-22 18:53:13 114FAB6EAC1706A7D00D62B14A4088D2 97769 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Kodi\addons\packages\service.subtitles.argenteam-0.9.1.zip 2016-01-22 18:53:12 D20B7D632AAD68150D740C95A74533DD 57321 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Kodi\addons\packages\script.common.plugin.cache-2.5.6.zip 2016-01-22 18:53:12 01FEE006851652970E91088525AF7525 833808 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Kodi\addons\packages\repository.BlazeRepo-3.1.zip 2016-01-22 18:53:11 F706F46B0C1907B3F4E34E981AADF8FD 10001867 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Kodi\addons\packages\plugin.video.phstreams-2.7.8.zip 2016-01-22 18:53:11 B52C6EFFF27A7A303881849F07D27DDB 367530 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Kodi\addons\packages\plugin.video.playlistLoader-1.0.9.zip ==== Orphaned Tasks deleted from Registry ====================== ESET Windows 10 upgrade - Refresh settings deleted GoogleUpdateTaskMachineCore1cf49d72e1d3fef deleted GoogleUpdateTaskMachineCore1d042484fe5016c deleted GoogleUpdateTaskMachineCore1d08fb76ada949f deleted GoogleUpdateTaskMachineUA1cedc5cf1887728 deleted GoogleUpdateTaskMachineUA1cf6baa6c4600e3 deleted GoogleUpdateTaskMachineUA1cf8ca154aa0f9a deleted Norton Product Installer deleted ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-3940446575-3519434917-2141644587-1001\Software\Microsoft\Windows\CurrentVersion\Run] "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AdobeCS6ServiceManager"="C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe -launchedbylogin" "WTClient"="WTClient.exe" "BCSSync"="C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe /DelayServices" "ControlCenter4"="C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun" "BrStsMon00"="C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe /hide /waitservice" "NvBackend"="C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" "ShadowPlay"="C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart" ==== Task Scheduler Jobs ====================== C:\WINDOWS\tasks\Norton Product InstallerIdle.job --ah------- C:\Windows\SysWOW64\Adobe\Shockwave 12\SymInstallStub.exe [] ==== Other Scheduled Tasks ====================== "C:\WINDOWS\SysNative\tasks\Adobe Acrobat Update Task" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe] "C:\WINDOWS\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\WINDOWS\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\BrowserChoice\browserchoice.exe] "C:\WINDOWS\SysNative\tasks\FileAdvisorCheck" ["C:\Program Files (x86)\File Type Advisor\file-type-advisor.exe"] "C:\WINDOWS\SysNative\tasks\FileAdvisorUpdate" ["C:\Program Files (x86)\File Type Advisor\fileadvisor.exe"] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineCore1ce4d7421ed69e6" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineUA1cec58ea3b720fa" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineUA1d0e1d141e67b33" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineUA1d12eb1e445254a" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\WINDOWS\SysNative\tasks\Norton Product InstallerIdle" [C:\Windows\SysWOW64\Adobe\Shockwave 12\SymInstallStub.exe] "C:\WINDOWS\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Extensions ====================== ==== Firefox Plugins ====================== ==== Chromium Look ====================== Google Chrome Version: 46.0.2490.86 HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[08-01-2016 10:47] Google Slides - Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek Google Docs - Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Google Sheets - Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap Google Docs Offline - Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi Skype - Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl Chrome Web Store Payments - Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" ==== All HKLM and HKCU SearchScopes ====================== HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms} HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 HKCU\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} - http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} ==== Reset Google Chrome ====================== C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Preferences was reset successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Secure Preferences was reset successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Web Data was reset successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Web Data-journal was reset successfully ==== Empty IE Cache ====================== C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Administrator\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\Administrator\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\IE\08VC2DDX will be deleted at reboot C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\IE\6AJO7ZCQ will be deleted at reboot C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\IE\T14PMAGV will be deleted at reboot C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\IE\T180KBHZ will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Cache found ==== Empty Chrome Cache ====================== C:\Users\Gebruiker\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Profile 2\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=116 folders=35 28089632 bytes) ==== Empty Temp Folders ====================== C:\Users\Administrator\AppData\Local\Temp emptied successfully C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Gebruiker\AppData\Local\Temp will be emptied at reboot C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\WINDOWS\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\WINDOWS\Temp successfully emptied C:\Users\GEBRUI~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\IE\08VC2DDX" not found "C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\IE\6AJO7ZCQ" not found "C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\IE\T14PMAGV" not found "C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\INetCache\IE\T180KBHZ" not found "C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted ==== EOF on zo 24-01-2016 at 21:37:06,01 ======================