Zoek.exe v5.0.0.1 Updated 27-09-2015 Tool run by lionel on ma 13/02/2017 at 15:55:34,28. Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x86 Running in: Normal Mode No Internet Access Detected Launched: C:\Users\lionel\Downloads\zoek.exe [Scan all users] [Script inserted] ==== Older Logs ====================== C:\zoek-results2017-02-09-164854.log 39859 bytes C:\zoek-results2017-02-13-144922.log 10497 bytes ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32\(Default)] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32\(Default)] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Classes] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1609] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2500] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\1609] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\2500] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\1609] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\2500] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1609] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2500] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1609] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2500] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\shell] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\userinit] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\SOFTWARE] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys\HKEY_USERS] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Overwrite_Keys] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus\Scheduler] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira\Antivirus] [-HKEY_LOCAL_MACHINE\SOFTWARE\Avira] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\{34CE35A5-BC22-4045-9F05-6C411D3A74DB}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\{74d1ef14-dd39-4749-b051-e183a1e27f5e}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\{C1578C4F-5453-44FE-A172-01331906BF18}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\Avira.Systray.exe] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avira Antivirus] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{74d1ef14-dd39-4749-b051-e183a1e27f5e}] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AntiVirMailService] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AntiVirSchedulerService] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AntiVirService] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AntiVirWebService] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\avgntflt] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\avipbb] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\avkmgr] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\Avira Service Host] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirMailService] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirSchedulerService] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirService] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AntiVirWebService] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\avgntflt] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\avipbb] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\avkmgr] [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\Application\Avira Service Host] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirMailService] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirSchedulerService] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet1\Services\AntiVirService] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntiVirWebService] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avgntflt] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avipbb] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avkmgr] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Avira Service Host] [-HKEY_USERS\.DEFAULT\Software\Avira\Launcher] [-HKEY_USERS\.DEFAULT\Software\Avira] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cc6f4d12-8575-4cff-9455-cf5774aeb13b}\LocalServer32] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{66F54008-1EE3-43A7-95FD-C0D821EE1EFF}\1.0\0\win32] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{66F54008-1EE3-43A7-95FD-C0D821EE1EFF}\1.0\HELPDIR] [-HKEY_LOCAL_MACHINE\SOFTWARE\McAfee.com] [-HKEY_USERS\S-1-5-21-4210861826-744597554-2720867244-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\McAfee Security Scan Plus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Avira\\"=- [HKEY_LOCAL_MACHINE\SOFTWARE\X-AVCSD\Server\Antivirus] "Name"=- [HKEY_LOCAL_MACHINE\SOFTWARE\X-AVCSD\Server\Antivirus] "MasterKey"=- [HKEY_LOCAL_MACHINE\SOFTWARE\X-AVCSD\Workstation\Antivirus] "Name"=- [HKEY_LOCAL_MACHINE\SOFTWARE\X-AVCSD\Workstation\Antivirus] "MasterKey"=- [HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION] "Avira.Systray.exe"=- [HKEY_USERS\S-1-5-21-4210861826-744597554-2720867244-1000\Software\Piriform\CCleaner] "Exclude1"=- [HKEY_USERS\S-1-5-21-4210861826-744597554-2720867244-1000\Software\Piriform\CCleaner] "Exclude2"=- [HKEY_USERS\S-1-5-21-4210861826-744597554-2720867244-1000\Software\Piriform\CCleaner] "Exclude3"=- [HKEY_USERS\S-1-5-21-4210861826-744597554-2720867244-1000\Software\Piriform\CCleaner] "Exclude4"=- [HKEY_USERS\S-1-5-21-4210861826-744597554-2720867244-1000\Software\Piriform\CCleaner] "Exclude5"=- [HKEY_USERS\S-1-5-21-4210861826-744597554-2720867244-1000\Software\Piriform\CCleaner] "Exclude6"=- [HKEY_USERS\S-1-5-21-4210861826-744597554-2720867244-1000\Software\Piriform\CCleaner] "Exclude7"=- ==== Deleting Files \ Folders ====================== C:\Windows\System32\config\systemprofile\AppData\Roaming\Avira not found C:\Program Files\McAfee Security Scan not found C:\ProgramData\McAfee not found C:\ProgramData\McAfee Security Scan not found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus not found C:\Users\All Users\McAfee not found C:\Users\All Users\McAfee Security Scan not found C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus not found ==== C:\zoek_backup content ====================== C:\zoek_backup (files=22 folders=40 3199615 bytes) ==== EOF on ma 13/02/2017 at 15:56:18,46 ======================