Zoek.exe v5.0.0.1 Updated 31-December-2015 Tool run by van la Parra on di 19-04-2016 at 12:54:11,96. Microsoft Windows 10 Pro 10.0.10586 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\van la Parra\Downloads\zoek (2).exe [Scan all users] [Script inserted] ==== Older Logs ====================== C:\zoek-results2016-04-18-161756.log 111 bytes C:\zoek-results2016-04-18-170251.log 121001 bytes ==== Empty Folders Check ====================== C:\Users\van la Parra\AppData\Local\ActiveSync deleted successfully C:\Users\van la Parra\AppData\Local\PeerDistRepub deleted successfully C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistPub deleted successfully C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistRepub deleted successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KSS] ==== Deleting Files \ Folders ====================== C:\PROGRA~2\Kaspersky Lab deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira deleted C:\ProgramData\Avira deleted C:\Users\van la Parra\AppData\Roaming\Mozilla\Firefox\Profiles\K4lJpN0q.default\extensions\safesearchplus2@avira.com.xpi deleted "C:\Users\van la Parra\Downloads\avira_en_avpn0_57121c85074cc__ws.exe" deleted "C:\Users\van la Parra\Downloads\avira_pc_cleaner_de.exe" deleted "C:\Users\van la Parra\Downloads\avira_nl_av_570fd1bd72aa6__ws.exe" deleted "C:\WINDOWS\Installer\13069c4.msi" deleted "C:\PROGRA~2\Avira\Launcher\Avira.Acp.dll" deleted "C:\PROGRA~2\Avira\Launcher\Avira.FileDownloader.dll" deleted "C:\PROGRA~2\Avira\Launcher\Avira.Mixpanel.dll" deleted "C:\PROGRA~2\Avira\Launcher\Avira.OE.AvConnector.dll" deleted "C:\PROGRA~2\Avira\Launcher\Avira.OE.AvConnector.Interface.dll" deleted "C:\PROGRA~2\Avira\Launcher\Avira.OE.AvConnectorNative.dll" not deleted "C:\PROGRA~2\Avira\Launcher\Avira.OE.BrowserExtensionConnector.dll" deleted "C:\PROGRA~2\Avira\Launcher\Avira.OE.Communicator.dll" deleted "C:\PROGRA~2\Avira\Launcher\Avira.OE.Communicator.Interface.dll" deleted "C:\PROGRA~2\Avira\Launcher\Avira.OE.NativeCore.dll" not deleted "C:\PROGRA~2\Avira\Launcher\Avira.OE.SpeedupConnector.dll" deleted "C:\PROGRA~2\Avira\Launcher\Avira.OE.SpeedupConnector.Interface.dll" deleted "C:\PROGRA~2\Avira\Launcher\Avira.OE.WinCore.dll" not deleted "C:\PROGRA~2\Avira\Launcher\Avira.OE.WinCore.Interface.dll" not deleted "C:\PROGRA~2\Avira\Launcher\Avira.ServiceHost.exe" deleted "C:\PROGRA~2\Avira\Launcher\Interop.WUApiLib.dll" deleted "C:\PROGRA~2\Avira\Launcher\msvcp120.dll" deleted "C:\PROGRA~2\Avira\Launcher\msvcr120.dll" not deleted "C:\PROGRA~2\Avira\Launcher\NLog.dll" deleted "C:\PROGRA~2\Avira\Launcher\ServiceStack.Text.dll" deleted "C:\PROGRA~2\Avira\Launcher\WebSocket4Net.dll" deleted "C:\PROGRA~2\Avira" not deleted "C:\PROGRA~2\Avira\Launcher" not deleted ==== Firefox Extensions ====================== ProfilePath: C:\Users\VANLAP~1\AppData\Roaming\Mozilla\Firefox\Profiles\d84ozzgd.default-1449068176930 - Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi ProfilePath: C:\Users\VANLAP~1\AppData\Roaming\Mozilla\Firefox\Profiles\K4lJpN0q.default - Segurana do navegador Avira - %ProfilePath%\extensions\abs@avira.com.xpi AppDir: C:\Program Files (x86)\Mozilla Firefox - Undetermined - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi ==== Firefox Plugins ====================== Profilepath: C:\Users\van la Parra\AppData\Roaming\Mozilla\Firefox\Profiles\d84ozzgd.default-1449068176930 8CE35D76726DFC8C3848BB26B3C79A54 - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director 57C7E359ED8D049132EED23EFA444C63 - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll - Shockwave Flash AF8A94BCB98C299C49B28CC12EBC0ED2 - C:\Users\van la Parra\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll - Google Update 77B6DD23DCA19A217D5A4C4CAF962895 - C:\Users\van la Parra\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll - RocketLife Secure Plug-In Layer ==== Chromium Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions flliilndjeohchalpbbcdekjklbdgfkk - No path found[] ipmkfpcnmccejididiaagpgchgjfajgp - No path found[] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions bbjllphbppobebmjpjcijfbakobcheof - No path found[] fkkcgfbgohboipdhliafmacjnhjbhmim - No path found[] Comodo Drag&Drop Service - van la Parra\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aneodkojaglhnkkdbbdnmmmgimlcaogo Rapport - van la Parra\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bbjllphbppobebmjpjcijfbakobcheof Comodo Web Inspector - van la Parra\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdngekjahnmlkinegnhdmmbcfnmbclnn Comodo Media Downloader - van la Parra\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dihmnpngfonlhjmgkflpnibiaaliendo IBA Opt-out (by Google) - van la Parra\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb Google Analytics Debugger - van la Parra\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jnkmfdileelhofjcijamephohjechhna Comodo Dragon Browser Light Theme - van la Parra\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kglppafajjeikfgmjjegogphhkjnnmgc Ad Sanitizer - van la Parra\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mbklemiimcpdblemkogjenikmcfhpnib Fixer for Java - van la Parra\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocoiokalhgfiblapcgelblmeakhidmle Rapport - van la Parra\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjllphbppobebmjpjcijfbakobcheof IBA Opt-out (by Google) - van la Parra\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb Google Analytics Debugger - van la Parra\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnkmfdileelhofjcijamephohjechhna Fixer for Java - van la Parra\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocoiokalhgfiblapcgelblmeakhidmle ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE03&ocid=UE03DHP" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE03&ocid=UE03DHP" ==== All HKLM and HKCU SearchScopes ====================== HKLM\SearchScopes "DefaultScope"="" HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC HKLM\Wow6432Node\SearchScopes "DefaultScope"="" HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms} HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04 ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5A53EC4322CB5404F950C614D1A347BD deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{34CE35A5-BC22-4045-9F05-6C411D3A74DB} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\5A53EC4322CB5404F950C614D1A347BD deleted successfully ==== Empty IE Cache ====================== C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\van la Parra\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\van la Parra\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\Users\Default User\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\Users\van la Parra\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\Users\van la Parra\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully ==== Empty FireFox Cache ====================== C:\Users\van la Parra\AppData\Local\Mozilla\Firefox\Profiles\d84ozzgd.default-1449068176930\cache2 emptied successfully ==== Empty Chrome Cache ====================== C:\Users\van la Parra\AppData\Local\Comodo\Dragon\User Data\Default\Cache emptied successfully C:\Users\van la Parra\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== No Flash Cache Found ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=319 folders=96 93067521 bytes) ==== Empty Temp Folders ====================== C:\Users\van la Parra\AppData\Temp emptied successfully C:\WINDOWS\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\WINDOWS\Temp successfully emptied C:\Users\VANLAP~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\PROGRA~2\Avira\Launcher\Avira.OE.AvConnectorNative.dll" not found "C:\PROGRA~2\Avira\Launcher\Avira.OE.NativeCore.dll" not found "C:\PROGRA~2\Avira\Launcher\Avira.OE.WinCore.dll" not found "C:\PROGRA~2\Avira\Launcher\Avira.OE.WinCore.Interface.dll" not found "C:\PROGRA~2\Avira\Launcher\msvcr120.dll" not found "C:\PROGRA~2\Avira" not found ==== EOF on di 19-04-2016 at 16:32:40,22 ======================