Zoek.exe v5.0.0.1 Updated 31-December-2015
Tool run by Charlotte on ma 28/03/2016 at 14:17:27,92.
Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Charlotte\Downloads\zoek.exe [Scan all users] [Script inserted] 

==== System Restore Info ======================

28/03/2016 14:19:45 Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\PROGRA~2\COMMON~1\Apple deleted successfully
C:\Program Files\log deleted successfully
C:\PROGRA~3\PhotoStitch deleted successfully
C:\PROGRA~3\WinZip deleted successfully
C:\Users\Charlotte\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Charlotte\AppData\Local\EmieSiteList deleted successfully
C:\Users\Charlotte\AppData\Local\EmieUserList deleted successfully
C:\Users\Charlotte\AppData\Local\PDFC deleted successfully
C:\Users\Mounier\AppData\Local\CutePDF Writer deleted successfully
C:\Users\Mounier\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Mounier\AppData\Local\EmieSiteList deleted successfully
C:\Users\Mounier\AppData\Local\EmieUserList deleted successfully
C:\Users\Mounier\AppData\Local\PDFC deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-697365305-3729413489-3807942375-1000\Software\Microsoft\Internet Explorer\SearchScopes\{1CB685A8-6384-4BB5-B99F-72BABA4581F8} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~3\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF} deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Mounier\AppData\Local\Unity deleted
C:\Users\Mounier\AppData\LocalLow\Unity deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Users\Charlotte\Documents\Add-in Express deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====
====== C:\Users\CHARLO~1\AppData\Local\Temp ====
2016-03-21 20:18:09	2D6F0B10D099AB8E4CCD4FF5CA4718A9	70569968	----a-w-	C:\Users\Charlotte\AppData\Local\Temp\{AE25F140-1BAD-428D-8D90-EB07B204A6F5}-DropboxClient_3.16.1.exe
====== Java Cache =====
2016-03-10 20:12:07	9856A461FFC42B299485BA3D31B55135	14476	----a-w-	C:\Users\Charlotte\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\2a72c6c1-496ed320
2016-03-08 20:26:56	E04DC9B677A73E39CE8DFEB58733AAAC	2982	----a-w-	C:\Users\Charlotte\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\3a3d3f06-6b6892a5
====== C:\Windows\SysWOW64 =====
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
====== C:\Windows\Sysnative\drivers =====
2016-03-26 13:03:28	78488AF2AB2111D67B3C4044707A519B	192216	----a-w-	C:\Windows\Sysnative\drivers\MBAMSwissArmy.sys
2016-03-26 13:03:10	78BFF5425E044086E74E78650A359FBB	27008	----a-w-	C:\Windows\Sysnative\drivers\mbam.sys
2016-03-26 13:03:10	452ACB7A9914398D9E18CCCFFCF92208	64896	----a-w-	C:\Windows\Sysnative\drivers\mwac.sys
2016-03-26 13:03:10	1239597BAB7EED2BB16D035AF87E65D9	140672	----a-w-	C:\Windows\Sysnative\drivers\mbamchameleon.sys
2016-03-09 16:59:51	47B2D0B31BDC3EBE6090228E2BA3764D	1684416	----a-w-	C:\Windows\Sysnative\drivers\ntfs.sys
2016-03-09 16:59:17	D029DD09E22EB24318A8FC3D8138BA43	91648	----a-w-	C:\Windows\Sysnative\drivers\USBSTOR.SYS
2016-03-09 16:59:11	CC1B3B52F33CBC1CE60867DA4E23537C	154560	----a-w-	C:\Windows\Sysnative\drivers\ksecpkg.sys
2016-03-09 16:59:11	211A379BAAB812A7B437319BD85B2435	95680	----a-w-	C:\Windows\Sysnative\drivers\ksecdd.sys
2016-03-09 16:59:10	8D383CED28332B5F3894658857472F47	129024	----a-w-	C:\Windows\Sysnative\drivers\mrxsmb20.sys
2016-03-09 16:59:10	8856E45D23BFF4D977BF06D0543BCD96	290816	----a-w-	C:\Windows\Sysnative\drivers\mrxsmb10.sys
2016-03-09 16:59:10	07F8F6B0CAEC7ADD30EBD94940A315D7	159232	----a-w-	C:\Windows\Sysnative\drivers\mrxsmb.sys
====== C:\Windows\Tasks ======
====== C:\Windows\Temp ======
======= C:\Program Files =====
2016-03-24 19:42:04	--------	d-----w-	C:\Program Files\trend micro
======= C:\PROGRA~2 =====
======= C: =====
====== C:\Users\Charlotte\AppData\Roaming ======
2016-03-21 20:20:22	--------	d-----w-	C:\Users\Charlotte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-03-10 18:27:45	--------	d-----w-	C:\Users\Mounier\AppData\Local\Nico Mak Computing
2016-03-10 12:40:32	--------	d-----w-	C:\Users\Charlotte\AppData\Local\Nico Mak Computing
====== C:\Users\Charlotte ======
2016-03-26 13:01:49	52F4695C53B02ADA7D648F95F2E2F8B4	22851472	----a-w-	C:\Users\Charlotte\Downloads\mbam-setup-2.2.1.1043.exe
2016-03-26 12:42:59	086799C07332F3E3C1D29D7B7D6FD114	1530368	----a-w-	C:\Users\Charlotte\Downloads\adwcleaner_5.105.exe
2016-03-24 19:41:35	8045ABB21A3BDD66A48E1ED5C0F0EF6A	1222144	----a-w-	C:\Users\Charlotte\Downloads\RSITx64.exe
2016-03-10 12:39:19	--------	d-----w-	C:\ProgramData\UniqueId
2016-03-10 10:49:27	--------	d-----w-	C:\ProgramData\boost_interprocess

====== C: exe-files ==
2016-03-26 13:01:49	52F4695C53B02ADA7D648F95F2E2F8B4	22851472	----a-w-	C:\Users\Charlotte\Downloads\mbam-setup-2.2.1.1043.exe
2016-03-26 12:42:59	086799C07332F3E3C1D29D7B7D6FD114	1530368	----a-w-	C:\Users\Charlotte\Downloads\adwcleaner_5.105.exe
2016-03-24 19:42:05	9A2347903D6EDB84C10F288BC0578C1C	388608	----a-w-	C:\Program Files\trend micro\Charlotte.exe
2016-03-24 19:41:35	8045ABB21A3BDD66A48E1ED5C0F0EF6A	1222144	----a-w-	C:\Users\Charlotte\Downloads\RSITx64.exe
2016-03-21 20:20:15	E43AA745F344781FB6327217A403CE11	173032	----a-w-	C:\Users\Charlotte\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe
2016-03-21 20:20:14	96929028E3465F942244D65E5CC5E4F2	25577864	----a-w-	C:\Users\Charlotte\AppData\Roaming\Dropbox\bin\Dropbox.exe
2016-03-21 20:20:14	4FBC7F8467B13B972AA551A7B8C898C8	29992	----a-w-	C:\Users\Charlotte\AppData\Roaming\Dropbox\bin\driver_amd64\dbxsvc.exe
2016-03-21 20:20:14	11C0FD048F0B27643EAB1EB95C4FB236	29480	----a-w-	C:\Users\Charlotte\AppData\Roaming\Dropbox\bin\driver_x86\dbxsvc.exe
2016-03-21 20:19:44	2D6F0B10D099AB8E4CCD4FF5CA4718A9	70569968	----a-w-	C:\Users\Charlotte\AppData\Local\Dropbox\Update\Download\{CC46080E-4C33-4981-859A-BBA2F780F31E}\3.16.1\DropboxClient_3.16.1.exe
2016-03-21 20:18:09	2D6F0B10D099AB8E4CCD4FF5CA4718A9	70569968	----a-w-	C:\Users\Charlotte\AppData\Local\Temp\{AE25F140-1BAD-428D-8D90-EB07B204A6F5}-DropboxClient_3.16.1.exe
=== C: other files ==
2016-03-28 12:13:40	DE0983FE4B830699312D35A990B3AE1B	1945	----a-w-	C:\Users\Charlotte\AppData\Local\Temp\_MEI44762\resources\chrome_ext\nknebiagdodnminbdpflhpkgfpeijdbf_live.crx
2016-03-28 12:13:40	82F5C942549405F61A8808D0EA0FA9E2	25575	----a-w-	C:\Users\Charlotte\AppData\Local\Temp\_MEI44762\resources\chrome_ext\apdfllckaahabafndbhieahigkjlhalf_live.crx
2016-03-26 13:03:28	78488AF2AB2111D67B3C4044707A519B	192216	----a-w-	C:\Windows\System32\drivers\MBAMSwissArmy.sys
2016-03-26 13:03:10	78BFF5425E044086E74E78650A359FBB	27008	----a-w-	C:\Windows\System32\drivers\mbam.sys
2016-03-26 13:03:10	452ACB7A9914398D9E18CCCFFCF92208	64896	----a-w-	C:\Windows\System32\drivers\mwac.sys
2016-03-26 13:03:10	1239597BAB7EED2BB16D035AF87E65D9	140672	----a-w-	C:\Windows\System32\drivers\mbamchameleon.sys
2016-03-26 12:49:05	F857866154D29A3594BC4EAEBF7BA42C	435	----a-w-	C:\Users\Charlotte\AppData\Local\Temp\DeleteOnReboot.bat
2016-03-24 18:25:37	F503705652032457BDC5986A457C37E2	2664523	----a-w-	C:\Users\Charlotte\Downloads\berichten134326.zip
2016-03-24 09:33:37	F871CE85AF64D81A9CB6C361CF797144	185184	----a-w-	C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\dumpsd.sys
2016-03-24 09:33:36	70165A0A2653FB8AFDE3D85000727F29	277856	----a-w-	C:\$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\drivers\sdbus.sys
2016-03-23 14:19:36	DB44DCD36644B8738720E7146DD796D7	181561	----a-w-	C:\Users\Charlotte\Downloads\berichten127892.zip
2016-03-21 20:20:14	99EE4E194F003E3F8A4821ED753DFF42	58992	----a-w-	C:\Users\Charlotte\AppData\Roaming\Dropbox\bin\driver_amd64\dbx-stable.sys
2016-03-21 20:20:14	99EE4E194F003E3F8A4821ED753DFF42	58992	----a-w-	C:\Users\Charlotte\AppData\Roaming\Dropbox\bin\driver_amd64\dbx-dev.sys
2016-03-21 20:20:14	99EE4E194F003E3F8A4821ED753DFF42	58992	----a-w-	C:\Users\Charlotte\AppData\Roaming\Dropbox\bin\driver_amd64\dbx-canary.sys
2016-03-21 20:20:14	53D529D2E3555EB95745D32ABCB76775	49264	----a-w-	C:\Users\Charlotte\AppData\Roaming\Dropbox\bin\driver_x86\dbx-stable.sys
2016-03-21 20:20:14	53D529D2E3555EB95745D32ABCB76775	49264	----a-w-	C:\Users\Charlotte\AppData\Roaming\Dropbox\bin\driver_x86\dbx-dev.sys
2016-03-21 20:20:14	53D529D2E3555EB95745D32ABCB76775	49264	----a-w-	C:\Users\Charlotte\AppData\Roaming\Dropbox\bin\driver_x86\dbx-canary.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-697365305-3729413489-3807942375-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"GoogleDriveSync"="C:\Program Files (x86)\Google\Drive\googledrivesync.exe /autostart"
"Dropbox Update"="C:\Users\Charlotte\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c"
"Spotify Web Helper"="C:\Users\Charlotte\AppData\Roaming\Spotify\SpotifyWebHelper.exe"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:http://go.microsoft.com/fwlink/?LinkID=122915 /build:7601"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:http://go.microsoft.com/fwlink/?LinkID=122915 /build:7601"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"
"IAStorIcon"="C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"HP Software Update"="c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe"
"Wondershare Helper Compact.exe"="C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe"
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"Magic Desktop for HP notification"="C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GoogleDriveSync"="C:\Program Files (x86)\Google\Drive\googledrivesync.exe /autostart"
"Dropbox Update"="C:\Users\Charlotte\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c"
"Spotify Web Helper"="C:\Users\Charlotte\AppData\Roaming\Spotify\SpotifyWebHelper.exe"

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\hpsysdrv]
"command"="c:\\program files (x86)\\hewlett-packard\\HP odometer\\hpsysdrv.exe"
"hkey"="HKLM"
"item"="hpsysdrv"
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SmartMenu]
"command"="C:\\Program Files\\Hewlett-Packard\\HP MediaSmart\\SmartMenu.exe /background"
"hkey"="HKLM"
"item"="SmartMenu"
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched]
"command"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\""
"hkey"="HKLM"
"item"="SunJavaUpdateSched"
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"


==== Startup Folders ======================

2015-10-01 06:06:13	1149	----a-w-	C:\Users\Charlotte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
2014-08-04 07:21:42	1135	----a-w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageBrowser EX Agent.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [25/03/2016 10:11]
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-697365305-3729413489-3807942375-1000Core.job --a------ [Undetermined Task]
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-697365305-3729413489-3807942375-1000UA.job --a------ C:\Users\Charlotte\AppData\Local\Dropbox\Update\DropboxUpdate.exe [19/06/2015 17:54]
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [27/08/2015 18:54]
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [27/08/2015 18:54]
C:\Windows\tasks\GoogleUpdateTaskMachineUA1d06b873cfac649.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [27/08/2015 18:54]
C:\Windows\tasks\HPCeeScheduleForCharlotte.job --a------ C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [05/01/2010 12:53]
C:\Windows\tasks\HPCeeScheduleForMounier.job --a------ C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [05/01/2010 12:53]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Acrobat Update Task" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe]
"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\Windows\SysNative\tasks\DropboxUpdateTaskUserS-1-5-21-697365305-3729413489-3807942375-1000Core" [C:\Users\Charlotte\AppData\Local\Dropbox\Update\DropboxUpdate.exe]
"C:\Windows\SysNative\tasks\DropboxUpdateTaskUserS-1-5-21-697365305-3729413489-3807942375-1000UA" [C:\Users\Charlotte\AppData\Local\Dropbox\Update\DropboxUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA1d06b873cfac649" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\HPCeeScheduleForCharlotte" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe]
"C:\Windows\SysNative\tasks\HPCeeScheduleForMounier" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe]
"C:\Windows\SysNative\tasks\RecoveryCDWin7" ["C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe"]
"C:\Windows\SysNative\tasks\ServicePlan" ["C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe"]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask" [C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe]
"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe]
"C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Mounier\AppData\Roaming\Mozilla\Firefox\Profiles\4m0nx03j.default-1411753880827
user_pref("browser.search.selectedEngine", "Beveiligd zoeken");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"="C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi" [29/12/2015 13:20]
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"belgiumeid@eid.belgium.be"="C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be" []
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"{e4f94d1e-2f53-401e-8885-681602c0ddd8}"="C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi" [04/04/2014 12:36]

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Charlotte\AppData\Roaming\Mozilla\Firefox\Profiles\3nqgqq6u.default
18CF51689186AEB9D1D149AEB0E92D03	- C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL -	Microsoft Office 2013
88C9284589B5AEEF93AAF8016BA1290D	- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll -	Microsoft Office 2013


==== Chromium Look ======================

Google Chrome Version: 46.0.2490.86

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
fheoggkfdfchfphceeifdbepaooicaho - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx[21/03/2016 13:15]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
apdfllckaahabafndbhieahigkjlhalf - C:\Users\CHARLO~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx[27/09/2014 12:25]
lmjegmlicamnimmfhcmpkclmigmmcbeh - No path found[]

SiteAdvisor - Charlotte\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
SiteAdvisor - Mounier\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho

==== Chromium Fix ======================

C:\Users\Mounier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage deleted successfully
C:\Users\Mounier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage-journal deleted successfully
C:\Users\Charlotte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.360yield.com_0.localstorage deleted successfully
C:\Users\Charlotte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.360yield.com_0.localstorage-journal deleted successfully
C:\Users\Mounier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.360yield.com_0.localstorage deleted successfully
C:\Users\Mounier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.360yield.com_0.localstorage-journal deleted successfully
C:\Users\Mounier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adsomenoise.cdn01.rambla.be_0.localstorage deleted successfully
C:\Users\Mounier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adsomenoise.cdn01.rambla.be_0.localstorage-journal deleted successfully
C:\Users\Charlotte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage deleted successfully
C:\Users\Charlotte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully
C:\Users\Charlotte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully
C:\Users\Charlotte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully
C:\Users\Mounier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage deleted successfully
C:\Users\Mounier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully
C:\Users\Mounier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully
C:\Users\Mounier\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully
C:\Users\Charlotte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.medianewtabsearch.com_0.localstorage deleted successfully
C:\Users\Charlotte\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.medianewtabsearch.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.be/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{1CB685A8-6384-4BB5-B99F-72BABA4581F8}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1CB685A8-6384-4BB5-B99F-72BABA4581F8}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.be/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\SearchScopes\{7F558494-F7B3-4B38-BF84-50A8732F799C} - http://nl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
HKLM\SearchScopes\{A8A89CAF-5B6B-4485-BE7D-BA21AD4FEC0D} - http://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
HKCU\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} - http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Charlotte\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Charlotte\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Mounier\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Mounier\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Charlotte\AppData\Local\Mozilla\Firefox\Profiles\3nqgqq6u.default\cache2 emptied successfully
C:\Users\Mounier\AppData\Local\Mozilla\Firefox\Profiles\4m0nx03j.default-1411753880827\cache2 emptied successfully
C:\Users\Mounier\AppData\Local\Mozilla\Firefox\Profiles\ur1dpi4u.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Charlotte\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Mounier\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=37 folders=16 53135091 bytes)

==== Empty Temp Folders ======================

C:\Users\Charlotte\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Mounier\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\CHARLO~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on ma 28/03/2016 at 14:56:49,32 ======================