Zoek.exe v5.0.0.1 Updated 31-December-2015 Tool run by Kyarah on 09/04/2016 at 8:14:16.60. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Kyarah\Documents\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== Older Logs ====================== C:\zoek-results2016-04-08-170133.log 3216 bytes ==== Empty Folders Check ====================== C:\PROGRA~3\Package Cache deleted successfully C:\Users\Kyarah\AppData\Local\VirtualStore deleted successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Registry Fix Code x64 ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "AVG-Secure-Search-Update_0913b"=- "Software Informer"=- [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] ""=- "vProt"=- ==== Deleting Files \ Folders ====================== C:\Users\Kyarah\AppData\Roaming\AVG 0913b Campaign not found C:\ProgramData\Avg_Update_0915tb not found C:\Users\Kyarah\AppData\Roaming\Kodi not found C:\ProgramData\{ff519d3a-ea21-d0d6-ff51-19d3aea274eb} not found C:\ProgramData\{43ecd34d-1021-25d2-43ec-cd34d1024d34} not found C:\ProgramData\{1dda8002-2f1d-bac0-1dda-a80022f10008} not found "C:\Windows\tasks\0915tbUpdateInfo.job" not found C:\Program Files (x86)\AVG Web TuneUp deleted C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater deleted C:\Users\Kyarah\AppData\Roaming\Software Informer deleted C:\PROGRA~2\COMMON~1\AVG Secure Search deleted "C:\Windows\Installer\69c1402.msi" deleted "C:\Users\Kyarah\AppData\Local\{EA557001-FF8B-43B7-B11D-EC9E97159EDA}" deleted "C:\Program Files\Software Informer\core.dll" deleted "C:\Program Files\Software Informer\impl.dll" deleted "C:\Program Files\Software Informer\msvcp120.dll" deleted "C:\Program Files\Software Informer\msvcr120.dll" not deleted "C:\Program Files\Software Informer\softinfo.exe" deleted "C:\Program Files\Software Informer\wbacommon.dll" deleted "C:\Program Files\Software Informer" not deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Kyarah\AppData\Local\Temp ==== 2016-04-07 16:36:03 845C94C35431FD2CD8DA3D770DE8E35B 179624 ----a-w- C:\Users\Kyarah\AppData\Local\Temp\avguirn_08508594191.exe ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== 2016-04-08 14:52:37 446734E63D58CB28A6FA5ACC828F22B3 97856 ----a-w- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== ====== C:\Windows\Sysnative\drivers ===== ====== C:\Windows\Tasks ====== 2016-04-04 19:04:29 B63AD96D5AB77552EFDB7D2277C3B0CB 3886 ----a-w- C:\Windows\Sysnative\Tasks\Adobe Acrobat Update Task ====== C:\Windows\Temp ====== ======= C:\Program Files ===== ======= C:\PROGRA~2 ===== ======= C: ===== ====== C:\Users\Kyarah\AppData\Roaming ====== 2016-04-08 14:52:54 -------- d-----w- C:\Users\Kyarah\AppData\Roaming\Sun 2016-04-08 14:50:14 -------- d-----w- C:\Users\Kyarah\AppData\Locallow\Oracle 2016-03-17 06:03:31 -------- d-----w- C:\Users\Kyarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox ====== C:\Users\Kyarah ====== 2016-04-08 21:34:17 -------- d-----w- C:\ProgramData\HP 2016-04-08 14:52:53 -------- d-----w- C:\Users\Kyarah\.oracle_jre_usage 2016-04-08 14:52:19 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-04-08 14:39:20 FE65F17EACB8C525B9224AC653E66640 734784 ----a-w- C:\Users\Kyarah\Downloads\JavaSetup8u77.exe 2016-04-07 19:33:32 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Kyarah\Downloads\RSITx64.exe 2016-04-04 19:40:28 E679FCF33FFB57BCABBC598AB5C18BE8 6868672 ----a-w- C:\Users\Kyarah\Downloads\ccsetup516.exe ====== C: exe-files == 2016-04-08 14:52:38 C31F1BDBB1902458FA15515BD0D8340B 0 ----a-we C:\Documents and Settings\All Users\Oracle\Java\javapath\java.exe 2016-04-08 14:52:38 C31F1BDBB1902458FA15515BD0D8340B 0 ----a-we C:\Documents and Settings\All Users\Application Data\Oracle\Java\javapath\java.exe 2016-04-08 14:52:38 C31F1BDBB1902458FA15515BD0D8340B 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Oracle\Java\javapath\java.exe 2016-04-08 14:52:38 C31F1BDBB1902458FA15515BD0D8340B 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Oracle\Java\javapath\java.exe 2016-04-08 14:52:38 C31F1BDBB1902458FA15515BD0D8340B 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\java.exe 2016-04-08 14:52:38 C31F1BDBB1902458FA15515BD0D8340B 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\java.exe 2016-04-08 14:52:38 C31F1BDBB1902458FA15515BD0D8340B 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\java.exe 2016-04-08 14:52:38 C31F1BDBB1902458FA15515BD0D8340B 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\java.exe 2016-04-08 14:52:38 C31F1BDBB1902458FA15515BD0D8340B 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\java.exe 2016-04-08 14:52:38 C31F1BDBB1902458FA15515BD0D8340B 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\java.exe 2016-04-08 14:52:38 C31F1BDBB1902458FA15515BD0D8340B 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\java.exe 2016-04-08 14:52:38 C31F1BDBB1902458FA15515BD0D8340B 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\java.exe 2016-04-08 14:52:38 A5AECC1529B64CB123B1880D3AD0F1AE 0 ----a-we C:\Documents and Settings\All Users\Oracle\Java\javapath\javaws.exe 2016-04-08 14:52:38 A5AECC1529B64CB123B1880D3AD0F1AE 0 ----a-we C:\Documents and Settings\All Users\Application Data\Oracle\Java\javapath\javaws.exe 2016-04-08 14:52:38 A5AECC1529B64CB123B1880D3AD0F1AE 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Oracle\Java\javapath\javaws.exe 2016-04-08 14:52:38 A5AECC1529B64CB123B1880D3AD0F1AE 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaws.exe 2016-04-08 14:52:38 A5AECC1529B64CB123B1880D3AD0F1AE 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaws.exe 2016-04-08 14:52:38 A5AECC1529B64CB123B1880D3AD0F1AE 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaws.exe 2016-04-08 14:52:38 A5AECC1529B64CB123B1880D3AD0F1AE 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaws.exe 2016-04-08 14:52:38 A5AECC1529B64CB123B1880D3AD0F1AE 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaws.exe 2016-04-08 14:52:38 A5AECC1529B64CB123B1880D3AD0F1AE 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaws.exe 2016-04-08 14:52:38 A5AECC1529B64CB123B1880D3AD0F1AE 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaws.exe 2016-04-08 14:52:38 A5AECC1529B64CB123B1880D3AD0F1AE 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaws.exe 2016-04-08 14:52:38 A5AECC1529B64CB123B1880D3AD0F1AE 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaws.exe 2016-04-08 14:52:38 2AD9EFBB015490AA315707BAC2BFD816 0 ----a-we C:\Documents and Settings\All Users\Oracle\Java\javapath\javaw.exe 2016-04-08 14:52:38 2AD9EFBB015490AA315707BAC2BFD816 0 ----a-we C:\Documents and Settings\All Users\Application Data\Oracle\Java\javapath\javaw.exe 2016-04-08 14:52:38 2AD9EFBB015490AA315707BAC2BFD816 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Oracle\Java\javapath\javaw.exe 2016-04-08 14:52:38 2AD9EFBB015490AA315707BAC2BFD816 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaw.exe 2016-04-08 14:52:38 2AD9EFBB015490AA315707BAC2BFD816 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaw.exe 2016-04-08 14:52:38 2AD9EFBB015490AA315707BAC2BFD816 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaw.exe 2016-04-08 14:52:38 2AD9EFBB015490AA315707BAC2BFD816 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaw.exe 2016-04-08 14:52:38 2AD9EFBB015490AA315707BAC2BFD816 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaw.exe 2016-04-08 14:52:38 2AD9EFBB015490AA315707BAC2BFD816 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaw.exe 2016-04-08 14:52:38 2AD9EFBB015490AA315707BAC2BFD816 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaw.exe 2016-04-08 14:52:38 2AD9EFBB015490AA315707BAC2BFD816 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaw.exe 2016-04-08 14:52:38 2AD9EFBB015490AA315707BAC2BFD816 0 ----a-we C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath\javaw.exe 2016-04-08 14:39:20 FE65F17EACB8C525B9224AC653E66640 734784 ----a-w- C:\Documents and Settings\Kyarah\Downloads\JavaSetup8u77.exe 2016-04-08 14:39:15 E91EEED142D73059BF676088F5246D4A 9851 ----a-w- C:\Documents and Settings\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\J56OSI0J\JavaSetup8u77[1].exe 2016-04-07 19:33:32 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Documents and Settings\Kyarah\Downloads\RSITx64.exe 2016-04-07 16:36:03 845C94C35431FD2CD8DA3D770DE8E35B 179624 ----a-w- C:\Documents and Settings\Kyarah\AppData\Local\Temp\avguirn_08508594191.exe 2016-04-07 16:35:10 FF19A53E0AD1A970C8DAF17EBD147454 2289424 ----a-w- C:\Program Files (x86)\AVG\Setup\avgsetupwrkx.exe 2016-04-07 16:35:06 0C15B2AEBD3A5C3B7362873AFA8DB0AA 686352 ----a-w- C:\Program Files (x86)\AVG\Setup\avgntdumpx.exe 2016-04-07 16:35:05 8142BD628D72354ED23CB360767160E7 3205904 ----a-w- C:\Program Files (x86)\AVG\Setup\avgsetupx.exe 2016-04-04 19:40:28 E679FCF33FFB57BCABBC598AB5C18BE8 6868672 ----a-w- C:\Documents and Settings\Kyarah\Downloads\ccsetup516.exe 2016-04-04 09:03:47 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\6445\AdobeARMHelper.exe 2016-04-04 09:03:47 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\6445\AdobeARMHelper.exe 2016-04-04 09:03:47 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\6445\AdobeARMHelper.exe 2016-04-04 09:03:47 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\6445\AdobeARMHelper.exe 2016-04-04 09:03:47 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\6445\AdobeARMHelper.exe 2016-04-04 09:03:47 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\6445\AdobeARMHelper.exe 2016-04-04 09:03:47 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\6445\AdobeARMHelper.exe 2016-04-04 09:03:47 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\6445\AdobeARMHelper.exe 2016-04-04 09:03:47 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Adobe\ARM\S\6445\AdobeARMHelper.exe 2016-04-04 09:03:47 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Adobe\ARM\S\6445\AdobeARMHelper.exe 2016-04-04 09:03:47 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\S\6445\AdobeARMHelper.exe 2016-04-04 09:03:47 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Adobe\ARM\S\6445\AdobeARMHelper.exe 2016-04-03 08:41:09 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\14776\AdobeARMHelper.exe 2016-04-03 08:41:09 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\14776\AdobeARMHelper.exe 2016-04-03 08:41:09 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\14776\AdobeARMHelper.exe 2016-04-03 08:41:09 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\14776\AdobeARMHelper.exe 2016-04-03 08:41:09 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\14776\AdobeARMHelper.exe 2016-04-03 08:41:09 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\14776\AdobeARMHelper.exe 2016-04-03 08:41:09 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\14776\AdobeARMHelper.exe 2016-04-03 08:41:09 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\14776\AdobeARMHelper.exe 2016-04-03 08:41:09 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Adobe\ARM\S\14776\AdobeARMHelper.exe 2016-04-03 08:41:09 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Adobe\ARM\S\14776\AdobeARMHelper.exe 2016-04-03 08:41:09 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\S\14776\AdobeARMHelper.exe 2016-04-03 08:41:09 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Adobe\ARM\S\14776\AdobeARMHelper.exe 2016-04-03 07:09:25 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\29571\AdobeARMHelper.exe 2016-04-03 07:09:25 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\29571\AdobeARMHelper.exe 2016-04-03 07:09:25 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\29571\AdobeARMHelper.exe 2016-04-03 07:09:25 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\29571\AdobeARMHelper.exe 2016-04-03 07:09:25 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\29571\AdobeARMHelper.exe 2016-04-03 07:09:25 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\29571\AdobeARMHelper.exe 2016-04-03 07:09:25 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\29571\AdobeARMHelper.exe 2016-04-03 07:09:25 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\29571\AdobeARMHelper.exe 2016-04-03 07:09:25 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Adobe\ARM\S\29571\AdobeARMHelper.exe 2016-04-03 07:09:25 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Adobe\ARM\S\29571\AdobeARMHelper.exe 2016-04-03 07:09:25 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\S\29571\AdobeARMHelper.exe 2016-04-03 07:09:25 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Adobe\ARM\S\29571\AdobeARMHelper.exe 2016-04-02 09:11:58 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\812\AdobeARMHelper.exe 2016-04-02 09:11:58 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\812\AdobeARMHelper.exe 2016-04-02 09:11:58 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\812\AdobeARMHelper.exe 2016-04-02 09:11:58 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\812\AdobeARMHelper.exe 2016-04-02 09:11:58 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\812\AdobeARMHelper.exe 2016-04-02 09:11:58 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\812\AdobeARMHelper.exe 2016-04-02 09:11:58 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\812\AdobeARMHelper.exe 2016-04-02 09:11:58 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Adobe\ARM\S\812\AdobeARMHelper.exe 2016-04-02 09:11:58 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Adobe\ARM\S\812\AdobeARMHelper.exe 2016-04-02 09:11:58 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Adobe\ARM\S\812\AdobeARMHelper.exe 2016-04-02 09:11:58 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\S\812\AdobeARMHelper.exe 2016-04-02 09:11:58 31657ADA786863B73FAC28E5BD0753AD 382168 ----a-w- C:\Documents and Settings\All Users\Adobe\ARM\S\812\AdobeARMHelper.exe === C: other files == 2016-04-07 18:54:44 76149459D8FE2D76794DBCEF72332A3C 589252877 ----a-w- C:\Documents and Settings\Kyarah\Downloads\digitale-foto-d79562.zip ==== Orphaned Tasks deleted from Registry ====================== 0915tbUpdateInfo deleted DTReg deleted Norton Internet Security deleted Norton Internet Security\Norton Error Analyzer deleted Norton Internet Security\Norton Error Processor deleted Scheduled Update for Ask Toolbar deleted ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-120730179-43632052-1941440850-1001\Software\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" "ooVoo.exe"="C:\Program Files (x86)\ooVoo\oovoo.exe /minimized" "Facebook Update"="C:\Users\Kyarah\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" "FLV Player"="C:\Users\Kyarah\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" "Dropbox Update"="C:\Users\Kyarah\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c" "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "iCloud"="C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce] "iCloud"="C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" "FLxHCIm64"="C:\Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe" "HPQuickWebProxy"="C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe" "HPOSD"="C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" "HP CoolSense"="C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey" "Easybits Recovery"="C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe" "AVG_UI"="C:\Program Files (x86)\AVG\Av\avuirunnerx.exe C:\Program Files (x86)\AVG\Av\avgui.exe" "PMBVolumeWatcher"="C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe" "GrooveMonitor"="C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" "ZoneAlarm Installer"="C:\Program Files (x86)\CheckPoint\Install\Launcher.exe C:\Program Files (x86)\CheckPoint\Install\Install.exe /r install /c C:\Program Files (x86)\CheckPoint\Install\Install.xml" "HP Quick Launch"="C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" "YouCam Service6"="C:\Program Files (x86)\CyberLink\YouCam6\YouCamService6.exe /s" "HP Software Update"="C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe" "Magic Desktop for HP notification"="C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe" "AvgUi"="C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe /lps=fmw" "StartCCC"="C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe MSRun" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" "ooVoo.exe"="C:\Program Files (x86)\ooVoo\oovoo.exe /minimized" "Facebook Update"="C:\Users\Kyarah\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" "FLV Player"="C:\Users\Kyarah\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe" "Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun" "Dropbox Update"="C:\Users\Kyarah\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c" "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BTMTrayAgent"="rundll32.exe C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll,TrayApp" "SetDefault"="C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe" "IgfxTray"="C:\Windows\system32\igfxtray.exe" "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" "Persistence"="C:\Windows\system32\igfxpers.exe" "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe " "SysTrayApp"="C:\Program Files\IDT\WDM\sttray64.exe" ==== Startup Folders ====================== 2013-02-19 07:32:53 1139 ----a-w- C:\Users\Kyarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk 2014-07-06 17:30:52 1306 ----a-w- C:\Users\Kyarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Schermopname en Snel starten.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [21/07/2015 10:05] C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-120730179-43632052-1941440850-1001Core.job --a------ C:\Users\Kyarah\AppData\Local\Dropbox\Update\DropboxUpdate.exe [19/06/2015 09:04] C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-120730179-43632052-1941440850-1001UA.job --a------ C:\Users\Kyarah\AppData\Local\Dropbox\Update\DropboxUpdate.exe [19/06/2015 09:04] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-120730179-43632052-1941440850-1001Core.job --a------ [Undetermined Task] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-120730179-43632052-1941440850-1001UA.job --a------ C:\Users\Kyarah\AppData\Local\Facebook\Update\FacebookUpdate.exe [30/04/2013 18:21] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [29/08/2015 20:25] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [29/08/2015 20:25] C:\Windows\tasks\HPCeeScheduleForKyarah.job --a------ C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [16/06/2015 10:51] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Acrobat Update Task" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe] "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\DropboxUpdateTaskUserS-1-5-21-120730179-43632052-1941440850-1001Core" [C:\Users\Kyarah\AppData\Local\Dropbox\Update\DropboxUpdate.exe] "C:\Windows\SysNative\tasks\DropboxUpdateTaskUserS-1-5-21-120730179-43632052-1941440850-1001UA" [C:\Users\Kyarah\AppData\Local\Dropbox\Update\DropboxUpdate.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-120730179-43632052-1941440850-1001Core" [C:\Users\Kyarah\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-120730179-43632052-1941440850-1001UA" [C:\Users\Kyarah\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\HPCeeScheduleForKyarah" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe] "C:\Windows\SysNative\tasks\HPCustParticipation HP Deskjet 1050 J410 series" ["C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPCustPartic.exe"] "C:\Windows\SysNative\tasks\MirageAgent" [C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe] "C:\Windows\SysNative\tasks\Norton WSC Integration" ["C:\Program Files (x86)\Norton Internet Security\Engine\19.9.0.9\WSCStub.exe"] "C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe] "C:\Windows\SysNative\tasks\SoftwareInformerService" ["C:\Program Files\Software Informer\softinfo.exe"] "C:\Windows\SysNative\tasks\User_Feed_Synchronization-{B252E8E9-AFC7-49D1-BD51-A0DAE53F91EE}" [C:\Windows\system32\msfeedssync.exe] "C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe] "C:\Windows\SysNative\tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA)" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe] "C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe] "C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe] "C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report" [C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe] "C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater" [C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe] "C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe] "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Fake Chromium Profiles Check ====================== Fake profile C:\Users\TEMP\AppData\Local\Google\Chrome deleted Fake profile C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome deleted ==== Chromium Look ====================== Google Chrome Version: 46.0.2490.86 HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions debkinhcgejcbfgjiaalomcmkedjmiaa - C:\Program Files (x86)\HP SimplePass 2012\tschrome.crx[25/08/2011 05:41] lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[08/01/2016 11:47] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions chfdnecihphmhljaaejmgoiahnihplgn - No path found[] GeoGebra - Kyarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnbaboaihhkjoaolfnfoablhllahjnee AVG Web TuneUp - Kyarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn Website Logon - Kyarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\debkinhcgejcbfgjiaalomcmkedjmiaa Grammarly Spell Checker & Grammar Checker - Kyarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen Skype - Kyarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl MyWebFace - Kyarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\njienacjggibaeolcbbjfnigbojkcggj Chrome Web Store Payments - Kyarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Google Docs - Kyarah\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Kyarah\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Kyarah\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo AVG Web TuneUp - Kyarah\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\chfdnecihphmhljaaejmgoiahnihplgn Google Search - Kyarah\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Website Logon - Kyarah\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\debkinhcgejcbfgjiaalomcmkedjmiaa Google Docs Offline - Kyarah\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi Skype - Kyarah\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl Chrome Web Store Payments - Kyarah\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - Kyarah\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Chromium Fix ====================== C:\Users\Kyarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully C:\Users\Kyarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully C:\Users\Kyarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage deleted successfully C:\Users\Kyarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully C:\Users\Kyarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn deleted successfully C:\Users\Kyarah\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\chfdnecihphmhljaaejmgoiahnihplgn deleted successfully C:\Users\Kyarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\njienacjggibaeolcbbjfnigbojkcggj deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="https://mysearch.avg.com/?cid={0C09A996-D622-4F7E-A37B-76B2C71FCDAC}&mid=48f342c61d6c47d0a1b39da204baeccf-a68cfaf925b4696d1357f5fd2c1c84ccae305a28&lang=nl&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-11-12 16:59:43&v=4.2.4.155&pid=wtu&sg=&sap=hp" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="res://ieframe.dll/tabswelcome.htm" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs] "Tabs"="res://ieframe.dll/tabswelcome.htm" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="about:newtab" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs] "Tabs"="about:newtab" ==== All HKLM and HKCU SearchScopes ====================== HKLM\SearchScopes "DefaultScope"="" HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox HKLM\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} - http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 HKLM\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC} - http://rover.ebay.com/rover/1/1553-111073-34115-5/4?mpre=http://www.benl.ebay.be/sch/i.html?_nkw={searchTerms} HKLM\Wow6432Node\SearchScopes "DefaultScope"="" HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC HKLM\Wow6432Node\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} - http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 HKLM\Wow6432Node\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC} - http://rover.ebay.com/rover/1/1553-111073-34115-5/4?mpre=http://www.benl.ebay.be/sch/i.html?_nkw={searchTerms} HKCU\SearchScopes "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms} HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox HKCU\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} - https://www.google.com/search?q={searchTerms}&rlz=1I7AURU_nlBE499 HKCU\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC} - http://rover.ebay.com/rover/1/1553-111073-34115-5/4?mpre=http://www.benl.ebay.be/sch/i.html?_nkw={searchTerms} HKCU\SearchScopes\{DD10FCBC-4C1D-4894-A337-65BDCFFDDF71} - http://search.zonealarm.com/search?Source=Browser&oemCode=ZLN116030558530516-1001&toolbarId=base&affiliateId=1001&Lan=en&utid=32b389660000000000004ceb425e0539&q={searchTerms}&r=795 HKCU\Wow6432Node\SearchScopes "DefaultScope"="" HKCU\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC HKCU\Wow6432Node\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\69A9FA1138D6B3C4D8BC61AEA253E8F3 deleted successfully HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\chfdnecihphmhljaaejmgoiahnihplgn deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Web TuneUp deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{11AF9A96-6D83-4C3B-8DCB-16EA2A358E3F} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\69A9FA1138D6B3C4D8BC61AEA253E8F3 deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BVMYSBM will be deleted at reboot C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4LYF7AZT will be deleted at reboot C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C89XGGS9 will be deleted at reboot C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FDV16TI0 will be deleted at reboot C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEWD2GT2 will be deleted at reboot C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3LKKC8S will be deleted at reboot C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UI08HT7X will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\Kyarah\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\Users\Kyarah\AppData\Local\Google\Chrome\User Data\Profile 1\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=10020 folders=1172 1936359867 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Kyarah\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Kyarah\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Program Files\Software Informer\msvcr120.dll" not found "C:\Program Files\Software Informer" not found "C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BVMYSBM" not found "C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4LYF7AZT" not found "C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C89XGGS9" not found "C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FDV16TI0" not found "C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEWD2GT2" not found "C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q3LKKC8S" not found "C:\Users\Kyarah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UI08HT7X" not found "C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted ==== EOF on 09/04/2016 at 9:42:21.06 ======================