Zoek.exe v5.0.0.1 Updated 31-December-2015
Tool run by Siebrand on wo 06-07-2016 at 17:36:09,94.
Microsoft Windows 10 Home 10.0.10586  x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Siebrand\Downloads\zoek.exe [Scan all users] [Script inserted] 

==== System Restore Info ======================

6-7-2016 17:38:03 Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\Program Files\mcafee deleted successfully
C:\PROGRA~3\Comms deleted successfully
C:\PROGRA~3\SoftwareDistribution deleted successfully
C:\Users\Siebrand\AppData\Local\ActiveSync deleted successfully
C:\Users\Siebrand\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Running Processes ======================

C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
D:\Tomtom\TomTom HOME 2\TomTomHOMEService.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Java\jre1.8.0_91\bin\javaw.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Users\Siebrand\Downloads\zoek.exe
C:\WINDOWS\SysWOW64\cmd.exe
C:\WINDOWS\SysWOW64\cmd.exe
C:\WINDOWS\SysWOW64\cmd.exe

==== Deleting Services ======================


==== Registry Fix Code x64 ======================

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] 
""=- 

==== Deleting Files \ Folders ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
"C:\windows\SysNative\drivers\mfehidk.sys" deleted
"C:\windows\SysNative\drivers\mfewfpk.sys" deleted
"C:\windows\SysNative\drivers\mfeavfk.sys" deleted
"C:\windows\SysNative\drivers\mfefirek.sys" deleted
"C:\windows\SysNative\DRIVERS\mfencbdc.sys" deleted
"C:\windows\SysNative\drivers\mfeelamk.sys" deleted
"C:\windows\SysNative\drivers\cfwids.sys" deleted
"C:\windows\SysNative\drivers\HipShieldK.sys" deleted
"C:\windows\SysNative\drivers\mfeapfk.sys" deleted
"C:\windows\SysNative\DRIVERS\mfencrk.sys" deleted
"C:\Program Files\Common Files\mcafee\AMCore\EMMain.dll" deleted
"C:\Program Files\Common Files\mcafee\AMCore\lua_lib.dll" deleted
"C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe" deleted
"C:\Program Files\Common Files\mcafee\AMCore\metro_repair.dll" deleted
"C:\Program Files\Common Files\mcafee\AMCore\mfeunzip.dll" deleted
"C:\Program Files\Common Files\mcafee\AMCore\mfezip.dll" deleted
"C:\Program Files\Common Files\mcafee\AMCore\MFE_CS.dll" deleted
"C:\Program Files\Common Files\mcafee\AMCore\MFE_DS.dll" deleted
"C:\Program Files\Common Files\mcafee\AMCore\ncapi.dll" deleted
"C:\Program Files\Common Files\mcafee\AMCore\quarantine.dll" deleted
"C:\Program Files\Common Files\mcafee\MHN\HomeNetSvc.dll" deleted
"C:\Program Files\Common Files\mcafee\Platform\mcutil.dll" deleted
"C:\Program Files\Common Files\mcafee\Platform\PlatformServiceFW.dll" deleted
"C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe" deleted
"C:\Program Files\Common Files\mcafee\systemcore\mfefwctl.dll" deleted
"C:\Program Files\Common Files\mcafee\systemcore\mfehida.dll" deleted
"C:\Program Files\Common Files\mcafee\systemcore\mfevtpa.dll" deleted
"C:\Program Files\Common Files\mcafee\AMContent\content\amcore\contain\1048.0\amcontain.dat" not deleted
"C:\Program Files\Common Files\mcafee\AMContent\content\amcore\content\0.5\amcontent.dat" not deleted
"C:\Program Files\Common Files\mcafee\AMContent\content\amcore\normal\1.13.186.1\x86_64\MCNormalizer.dat" deleted
"C:\Program Files\Common Files\mcafee\AMCore\EM\EMSystemWideDataStore_00.PTF" not deleted
"C:\Program Files\Common Files\mcafee\Platform\Core\mccoreps.dll" deleted
"C:\Program Files\Common Files\mcafee\Platform\McSvcHost\LogCntrl.dll" deleted
"C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe" deleted
"C:\Program Files\Common Files\mcafee" not deleted
"C:\Program Files\Common Files\mcafee\AMContent" not deleted
"C:\Program Files\Common Files\mcafee\AMCore" not deleted
"C:\Program Files\Common Files\mcafee\MHN" not deleted
"C:\Program Files\Common Files\mcafee\Platform" not deleted
"C:\Program Files\Common Files\mcafee\systemcore" not deleted
"C:\Program Files\Common Files\mcafee\AMContent\content" not deleted
"C:\Program Files\Common Files\mcafee\AMContent\content\amcore" not deleted
"C:\Program Files\Common Files\mcafee\AMContent\content\amcore\contain" not deleted
"C:\Program Files\Common Files\mcafee\AMContent\content\amcore\content" not deleted
"C:\Program Files\Common Files\mcafee\AMContent\content\amcore\normal" not deleted
"C:\Program Files\Common Files\mcafee\AMContent\content\amcore\contain\1048.0" not deleted
"C:\Program Files\Common Files\mcafee\AMContent\content\amcore\content\0.5" not deleted
"C:\Program Files\Common Files\mcafee\AMContent\content\amcore\normal\1.13.186.1" not deleted
"C:\Program Files\Common Files\mcafee\AMContent\content\amcore\normal\1.13.186.1\x86_64" not deleted
"C:\Program Files\Common Files\mcafee\AMCore\EM" not deleted
"C:\Program Files\Common Files\mcafee\Platform\Core" not deleted
"C:\Program Files\Common Files\mcafee\Platform\McSvcHost" not deleted

==== System Specs ======================

Windows: Windows Version 6.2 (Build 9200)
Memory (RAM): 3980 MB
CPU Info: Intel(R) Core(TM) i3-2370M CPU @ 2.40GHz
CPU Speed: 2413,6 MHz
Sound Card: Luidsprekers (VIA HD Audio) | 
Display Adapters: Intel(R) HD Graphics 3000 | Intel(R) HD Graphics 3000
Monitors: 1x; Generic PnP Monitor | 
Screen Resolution: 1600 X 900 - 32 bit
Network: Network Present
Network Adapters: Qualcomm Atheros AR8161 PCI-E Gigabit Ethernet Controller (NDIS 6.30) | 802.11n Wireless LAN Card | Microsoft Wi-Fi Direct Virtual Adapter
CD / DVD Drives: 1x (E: | ) E:         HL-DT-ST DVDRAM
Ports: COM Ports NOT Present. LPT Port NOT Present. 
Mouse: 3 Button Wheel Mouse Present
Hard Disks: C:  185,5GB | D:  258,2GB
Hard Disks - Free: C:  126,8GB | D:  220,4GB
Manufacturer *: American Megatrends Inc.
BIOS Info: AT/AT COMPATIBLE |  | _ASUS_ - 1072009
Time Zone: West-Europa (standaardtijd)
Motherboard *: ASUSTeK COMPUTER INC. X75A
Country: Nederland 
Language: NLD 

==== System Specs (Software) ======================

Internet Explorer Version: 11.420.10586.0 
Adobe Reader version: 15.16.20045.188096
Sun Java version: 1.8.0_91 (32-bit) 
Sun Java version: 1.8.0_91 (64-bit) 

==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====
2016-06-15 06:58:24	E15BEB03592BA12C5C99E2BA46146BDD	4515264	----a-w-	C:\WINDOWS\explorer.exe
====== C:\Users\Siebrand\AppData\Local\Temp ====
====== Java Cache =====
====== C:\WINDOWS\SysWOW64 =====
====== C:\WINDOWS\SysWOW64\drivers =====
====== C:\WINDOWS\Sysnative =====
2016-07-03 20:39:51	3D7C1DFE052288F40AC9ABFB2A824B92	741480	------w-	C:\WINDOWS\Sysnative\HPDiscoPMAF11.dll
====== C:\WINDOWS\Sysnative\drivers =====
2016-06-15 06:58:43	3996DF4D52FD6273750C7033D1447C0A	31744	----a-w-	C:\WINDOWS\Sysnative\drivers\dumpsdport.sys
2016-06-15 06:58:20	8B83335B6A86F39785FC7C9DE5F5B29F	1996640	----a-w-	C:\WINDOWS\Sysnative\drivers\dxgkrnl.sys
2016-06-15 06:58:11	425CFD45BDF5B9F8B790BEB20E0A8721	161632	----a-w-	C:\WINDOWS\Sysnative\drivers\ksecpkg.sys
2016-06-15 06:58:09	2568B86F6A50D254324CB89022CA9EFC	690176	----a-w-	C:\WINDOWS\Sysnative\drivers\srv2.sys
2016-06-15 06:58:08	C03E926B0E7D66D68994067231DC3246	278528	----a-w-	C:\WINDOWS\Sysnative\drivers\netbt.sys
2016-06-15 06:58:07	CF78AF126B00C1B0A6FF45BD838E8EFE	331616	----a-w-	C:\WINDOWS\Sysnative\drivers\pci.sys
2016-06-15 06:58:02	BE88248427A6AA548A904FD867667F70	406528	----a-w-	C:\WINDOWS\Sysnative\drivers\srv.sys
2016-06-15 06:58:02	3F7C80D9F16B94367646CBF8B8C052F4	604928	----a-w-	C:\WINDOWS\Sysnative\drivers\cng.sys
2016-06-15 06:57:54	8E9E48E4BC6EACB811FE6066ADACC7A5	577376	----a-w-	C:\WINDOWS\Sysnative\drivers\dxgmms2.sys
2016-06-15 06:57:52	87B9ABB965F7AF987D52791F0DD1663D	211296	----a-w-	C:\WINDOWS\Sysnative\drivers\tpm.sys
2016-06-15 06:57:35	6E520D6B16EA8AE23D1F81C1194F00C8	237056	----a-w-	C:\WINDOWS\Sysnative\drivers\srvnet.sys
2016-06-15 06:57:07	D330D74B5F99309B5CCA30AE41C57CDE	118624	----a-w-	C:\WINDOWS\Sysnative\drivers\partmgr.sys
2016-06-15 06:56:51	05DD22294A4F3F89E52351C7721E6D2C	258912	----a-w-	C:\WINDOWS\Sysnative\drivers\ufx01000.sys
2016-06-15 06:56:45	883A36E2FF7FA3E1281CB575579FE3AF	124928	----a-w-	C:\WINDOWS\Sysnative\drivers\Ndu.sys
2016-06-15 06:56:43	020F3FD207AFEDAC8E05E4C567547A78	155136	----a-w-	C:\WINDOWS\Sysnative\drivers\hidclass.sys
====== C:\WINDOWS\Tasks ======
====== C:\WINDOWS\Temp ======
======= C:\Program Files =====
2016-07-04 09:47:01	--------	d-----w-	C:\Program Files\trend micro
2016-07-03 20:39:33	--------	d-----w-	C:\Program Files\HP
======= C:\PROGRA~2 =====
======= C: =====
====== C:\Users\Siebrand\AppData\Roaming ======
====== C:\Users\Siebrand ======
2016-07-04 09:44:05	8045ABB21A3BDD66A48E1ED5C0F0EF6A	1222144	----a-w-	C:\Users\Siebrand\Downloads\RSITx64.exe
2016-07-03 20:39:50	--------	d-----w-	C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

====== C: exe-files ==
2016-07-05 17:30:22	4E95AB8BEB2C8FD53B348EF4AD5121C5	149184	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\2BD46CA8-C5A3-4959-8CD2-857936A80222\DismHost.exe
2016-07-04 09:47:01	9A2347903D6EDB84C10F288BC0578C1C	388608	----a-w-	C:\Program Files\trend micro\Siebrand.exe
2016-07-04 09:44:05	8045ABB21A3BDD66A48E1ED5C0F0EF6A	1222144	----a-w-	C:\Users\Siebrand\Downloads\RSITx64.exe
2016-07-03 20:45:56	4E95AB8BEB2C8FD53B348EF4AD5121C5	149184	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\944FD5B6-B022-43EC-842C-9EA2F8D8B076\DismHost.exe
2016-07-03 20:38:50	E48077AAE55A33AE3F8C59D293A88E6B	890272	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\7zS24F3\Toolbar\smartprintsetup.exe
2016-07-03 20:38:50	E0F71158825F5E0A94A6829D2BAF31B7	1719912	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\7zS24F3\Setup.exe
2016-07-03 20:38:50	BBC82E175B89511A97C69339D3E6E2E9	307304	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\7zS24F3\utils\x64\RemovePreinstalledDrivers.exe
2016-07-03 20:38:50	AE2A23229873B9CDC2E9E319BD692B20	1773672	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\7zS24F3\Optional\RLBootstrap.exe
2016-07-03 20:38:50	98FE94DC34015805C20DB7E0AF75A920	255592	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\7zS24F3\utils\x86\RemovePreinstalledDrivers.exe
2016-07-03 20:38:50	9195C8759A6D7D0B798F608C1CB9F660	325224	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\7zS24F3\utils\HPInstallLogCollector.exe
2016-07-03 20:38:50	38F2CDD6CA6988501825D7473073BCC4	2873232	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\7zS24F3\amd64\hpinkinsAF11.exe
2016-07-03 20:38:50	0A30836BCD754C2CED78706FDF69EC42	198248	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\7zS24F3\utils\hpUrlLauncher.exe
2016-07-03 20:38:50	098DBBEB2EB54F47A6E522356809DC63	2216336	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\7zS24F3\i386\hpinkinsAF11.exe
2016-07-03 20:38:49	BE215EB72965C7A198479085195C877D	5671192	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\7zS24F3\Toolbar\BingBarSetup.exe
2016-07-03 20:38:49	2A03C3ED11EE3B3029DE485A7250B0A1	11502184	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\7zS24F3\HP-DQEX5.exe
2016-07-03 20:31:49	4E95AB8BEB2C8FD53B348EF4AD5121C5	149184	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\708156EB-580D-4BF2-96AE-2AE005365D43\DismHost.exe
=== C: other files ==
2016-07-03 20:38:47	E5A66920DCD993EA66340D6D494CAF46	7288591	----a-w-	C:\Users\Siebrand\AppData\Local\Temp\7zS24F3\licensing\OpenSource\OpenSource.zip

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OneDriveSetup"="C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup"

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OneDriveSetup"="C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup"

[HKEY_USERS\S-1-5-21-688253611-67200311-1367995398-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TomTomHOME.exe"="D:\Tomtom\\TomTom HOME 2\TomTomHOMERunner.exe"
"OneDrive"="C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background"
"WUDFHost.exe"="C:\Users\Siebrand\AppData\Roaming\Windows Driver\WUDFHost.exe"
"HP Photosmart 6520 series (NET)"="C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe -deviceID CN2C7350T105XP:NW -scfn HP Photosmart 6520 series (NET) -AutoStart 1"

[HKEY_USERS\S-1-5-21-688253611-67200311-1367995398-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"="C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
"Uninstall C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"="C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"
"Uninstall C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"="C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUSPRP"="C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
"ASUSWebStorage"="C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.6.112\AsusWSPanel.exe /S"
"HDAudDeck"="C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r"
"RemoteControl10"="C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"mcpltui_exe"="C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey"
"AvgUi"="C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe /lps=fmw"
"AVG_UI"="C:\Program Files (x86)\AVG\Av\avuirunnerx.exe C:\Program Files (x86)\AVG\Av\avgui.exe"
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"HP Software Update"="C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"TomTomHOME.exe"="D:\Tomtom\\TomTom HOME 2\TomTomHOMERunner.exe"
"OneDrive"="C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background"
"WUDFHost.exe"="C:\Users\Siebrand\AppData\Roaming\Windows Driver\WUDFHost.exe"
"HP Photosmart 6520 series (NET)"="C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe -deviceID CN2C7350T105XP:NW -scfn HP Photosmart 6520 series (NET) -AutoStart 1"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"="C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
"Uninstall C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"="C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"
"Uninstall C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"="C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe"
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe"
"Persistence"="C:\WINDOWS\system32\igfxpers.exe"
"AuditSHD"="C:\windows\system32\oobe\auditshd.exe"
"ACMON"="C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"

==== Task Scheduler Jobs ======================

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a-------- C:\6C:\ProgramC:FilesC:x86\Google\Update\GoogleUpdate.exe []
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [27-02-2016 21:51]

==== Other Scheduled Tasks ======================

"C:\WINDOWS\SysNative\tasks\Adobe Acrobat Update Task" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe]
"C:\WINDOWS\SysNative\tasks\ASUS InstantOn Config" [C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe]
"C:\WINDOWS\SysNative\tasks\ASUS Live Update1" [C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe]
"C:\WINDOWS\SysNative\tasks\ASUS Live Update2" [C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe]
"C:\WINDOWS\SysNative\tasks\ASUS P4G" [C:\Program Files\ASUS\P4G\BatteryLife.exe]
"C:\WINDOWS\SysNative\tasks\ASUS Smart Gesture Launcher" [C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe]
"C:\WINDOWS\SysNative\tasks\ASUS USB Charger Plus" ["C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"]
"C:\WINDOWS\SysNative\tasks\AutoPico Daily Restart" ["D:\Downloads\KMSpico\AutoPico.exe"]
"C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\WINDOWS\SysNative\tasks\Update Checker" [C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe]
"C:\WINDOWS\SysNative\tasks\User_Feed_Synchronization-{86FA4D5E-0DE7-418D-A028-59038E3FCB20}" [C:\WINDOWS\system32\msfeedssync.exe]
"C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report" [C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe]
"C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater" [C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Siebrand\AppData\Roaming\TomTom\HOME\Profiles\c136u3jj.default
- Map status indicator - D:\Tomtom\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com
- TomTom HOME default theme - D:\Tomtom\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com

==== Firefox Plugins ======================


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.nl/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.nl/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
HKCU\SearchScopes "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

==== HijackThis Entries ======================

F2 - REG:system.ini: UserInit=
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll
O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.6.112\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [mcpltui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\Av\avuirunnerx.exe" C:\Program Files (x86)\AVG\Av\avgui.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "D:\Tomtom\\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [WUDFHost.exe] C:\Users\Siebrand\AppData\Roaming\Windows Driver\WUDFHost.exe
O4 - HKCU\..\Run: [HP Photosmart 6520 series (NET)] "C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2C7350T105XP:NW" -scfn "HP Photosmart 6520 series (NET)" -AutoStart 1
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Siebrand\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe
O4 - Global Startup: Universal Media Server.lnk = D:\mediaspeler\Universal Media Server\UMS.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\Program Files\Microsoft Office\Office16\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: AvgAMPS - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgamps.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgfwsa.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: McAfee Home Network (HomeNetSvc) - Unknown owner - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - Unknown owner - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (file missing)
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - Unknown owner - C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe (file missing)
O23 - Service: McAfee Platform Services (mcpltsvc) - Unknown owner - C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe (file missing)
O23 - Service: McAfee Proxy Service (McProxy) - Unknown owner - C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe (file missing)
O23 - Service: McAfee Anti-Malware Core (mfecore) - Unknown owner - C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe (file missing)
O23 - Service: McAfee Firewall Core Service (mfefire) - Unknown owner - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe (file missing)
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\WINDOWS\system32\mfevtps.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - Unknown owner - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: TomTomHOMEService - TomTom - D:\Tomtom\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @oem19.inf,%ViaKaraokeSrv.SvcDesc%;VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\WINDOWS\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Siebrand\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Siebrand\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Siebrand\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Siebrand\AppData\Local\Microsoft\Windows\INetCache\IE\AIIQB7RL will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=409 folders=241 204328033 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\Siebrand\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Program Files\Common Files\mcafee\AMContent\content\amcore\contain\1048.0\amcontain.dat"  not found
"C:\Program Files\Common Files\mcafee\AMContent\content\amcore\content\0.5\amcontent.dat"  not found
"C:\Program Files\Common Files\mcafee\AMCore\EM\EMSystemWideDataStore_00.PTF"  not found
"C:\Program Files\Common Files\mcafee"  not found
"C:\Users\Siebrand\AppData\Local\Microsoft\Windows\INetCache\IE\AIIQB7RL" deleted

==== EOF on wo 06-07-2016 at 18:28:01,32 ======================