Zoek.exe v5.0.0.1 Updated 27-09-2015 Tool run by jeanpc on 05/06/2017 at 10:39:47.34. Microsoft Windows 10 Famille 10.0.14393 x64 Running in: Normal Mode No Internet Access Detected Launched: C:\Users\jeanpc\Downloads\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 05/06/2017 10:44:21 Zoek.exe System Restore Point Created Successfully. ==== Folders Found ====================== ==== Files Found ====================== --- C:\Documents and Settings\jeanpc\Downloads\ReimageRepair.exe --- Company: Reimage File Description: Reimage Downloader File Version: 1.539 Product Name: Reimage Repair Copyright: © Reimage 2016 Original Filename: File type: ----a-w- File size: 604928 Created time: 2017-06-04 15:31:26 Modified time: 2017-06-04 15:31:39 MD5: 5AB1619363CD6D32DEFD85F7A5973AB3 SHA1: 3617F2E61EC2DEB481A7AB96879E8AC8245452B6 --- C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.8241.57621.0_x64__8wekyb3d8bbwe\xaml\onenote\CaptureImageControl.xaml --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 1996 Created time: 2016-10-16 12:27:09 Modified time: 2016-10-16 12:28:49 MD5: 4B24F473A41F6027EDD87362E4BCB168 SHA1: 83DBD85227843B8FCAA47A7675853F6543E3EC20 --- C:\Recovery\OEM\BasicReset_BeforeImageApply.cmd --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 381 Created time: 2015-04-20 07:46:27 Modified time: 2015-08-14 02:37:17 MD5: 1987F4DF504E9D32EF9C66FF74642699 SHA1: 0F29A17814B2766F4CEB602E1A8FDF3F5A357C71 --- C:\System Volume Information\SystemRestore\AppxStaging\Program Files\WindowsApps\Microsoft.Office.OneNote_17.8067.57711.0_x64__8wekyb3d8bbwe\xaml\onenote\CaptureImageControl.xaml --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 1996 Created time: 2016-10-16 12:27:09 Modified time: 2016-10-16 12:28:49 MD5: 4B24F473A41F6027EDD87362E4BCB168 SHA1: 83DBD85227843B8FCAA47A7675853F6543E3EC20 --- C:\Users\jeanpc\Downloads\ReimageRepair.exe --- Company: Reimage File Description: Reimage Downloader File Version: 1.539 Product Name: Reimage Repair Copyright: © Reimage 2016 Original Filename: File type: ----a-w- File size: 604928 Created time: 2017-06-04 15:31:26 Modified time: 2017-06-04 15:31:39 MD5: 5AB1619363CD6D32DEFD85F7A5973AB3 SHA1: 3617F2E61EC2DEB481A7AB96879E8AC8245452B6 --- C:\Windows\Reimage.ini --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 99 Created time: 2017-06-04 15:31:44 Modified time: 2017-06-04 15:31:44 MD5: 41356F9DAB1BA4F13E7ECE2AB22B02BB SHA1: FC9AD95D32F7E9C70D609EE7B2AB86EAB92ED9DA --- C:\Windows\InfusedApps\Packages\Microsoft.Office.OneNote_17.6868.57981.0_x64__8wekyb3d8bbwe\xaml\onenote\CaptureImageControl.xaml --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 1922 Created time: 2016-07-16 22:50:13 Modified time: 2016-07-16 22:50:13 MD5: 023B43495839E036FCCD07B4F0596082 SHA1: 6089C3A917A1C68922CA26C1278B7052C54ED72C --- C:\Windows\Prefetch\REIMAGEREPAIR.EXE-889C5F17.pf --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 10611 Created time: 2017-06-04 15:31:54 Modified time: 2017-06-04 15:31:54 MD5: 3A8D28D4F9CAE93213442D2E6BC991EB SHA1: 036DB8F62F61821CAFB43C049682DCFC4E3313CF ==== Registry Search Results for "Reimage" ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Services.Store.StoreImage] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\CLSID\{f08eecac-d4dd-36ae-b361-dab007e000bf}] "ActivatableClassId"="Windows.Services.Store.StoreImage" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{081FD248-ADB4-4B64-A993-784789926ED5}] @="IStoreImage" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{081FD248-ADB4-4B64-A993-784789926ED5}] @="IStoreImage" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Power] "ResumeRestoreImageStartTimestamp"=dword:0000104a [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Power] "ResumeRestoreImageStartTimestamp"=dword:0000104a [HKEY_USERS\S-1-5-21-3660741450-2884722902-1360230632-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] "C:\\Users\\jeanpc\\Downloads\\ReimageRepair.exe"=hex:53,41,43,50,01,00,00,00,\ [HKEY_USERS\S-1-5-21-3660741450-2884722902-1360230632-1001\SOFTWARE\Piriform\CCleaner] "Exclude1"="REG|HKCU\\Software\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Compatibility Assistant\\Store|C:\\Users\\jeanpc\\Downloads\\ReimageRepair.exe" ==== C:\zoek_backup content ====================== C:\zoek_backup (files=0 folders=0 0 bytes) ==== EOF on 05/06/2017 at 10:50:54.04 ======================