Zoek.exe v5.0.0.2 Updated 03-May-2018(Online Version) Tool run by Van Alphen on zo 03-06-2018 at 20:29:14,79. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Van Alphen\Desktop\zoek.exe [Scan all users] [Script inserted] ==== Older Logs ====================== C:\zoek-results2018-06-03-162947.log 27208 bytes ==== Folders Found ====================== ==== Files Found ====================== --- C:\Users\Van Alphen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\01EIZ5WJ\yahoo_nl-NL_f_p_350x40[1].png --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 1564 Created time: 2018-06-03 11:05:14 Modified time: 2018-06-03 11:05:14 MD5: CB26F5DB5496D27ADAA9FA9BD647C0C1 SHA1: 61DF0073EED2B580F0B17C633F2C86140391B1FB --- C:\Users\Van Alphen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\162WAF6J\69943-yahoo[1].htm --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 265807 Created time: 2018-06-03 18:27:54 Modified time: 2018-06-03 18:27:55 MD5: E8FC184D8CD73BFF356BAFCC24E8634D SHA1: AC48896BD34B261680405C1EF0DE1CF8A1499E6C --- C:\Users\Van Alphen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KEL156J5\69943-yahoo[1].htm --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 266090 Created time: 2018-06-03 17:53:55 Modified time: 2018-06-03 17:53:55 MD5: 8710F83C4F8FD2B55E2F964407DFA50D SHA1: DDEAD470FDA95908FD73C36A700CBA61A1373CC3 --- C:\Users\Van Alphen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\KEL156J5\69943-yahoo[2].htm --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 266075 Created time: 2018-06-03 18:33:56 Modified time: 2018-06-03 18:33:56 MD5: C215852814D90823FEE8743E925ED28A SHA1: 6DD9469689409FFDBAEB968709657FB6AF2FC504 --- C:\Users\Van Alphen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\Y1VKJ0DZ\69943-yahoo[1].htm --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 203874 Created time: 2018-06-03 13:23:22 Modified time: 2018-06-03 13:23:22 MD5: 27DF078E39CEB6035927137BE7F3B817 SHA1: 46225917F0D5228471628322AF83B9195F3A9FD5 --- C:\Users\Van Alphen\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\HN5ZI96N\nl.search.yahoo[1].xml --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 13 Created time: 2018-06-02 15:19:28 Modified time: 2018-06-02 15:19:28 MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5 SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966 ==== Registry Search Results for "yahoo" ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK] "YahooMusicEngine.exe"=dword:00000001 [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Internet Explorer\Main] "Start Page"="https://nl.search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10454__180524__yaie" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\MSNMessenger\RetailDbgZoneLevels] "Zone_Yahoo"=dword:0000000a [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\MSNMessenger\RetailDbgZones] "Zone_Yahoo"=dword:00000000 [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.com.vn"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YA38FD~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.co.uk"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOOC~2.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.com.tw"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAB0F6~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.co.th"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YACB7D~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.com.sg"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAC50A~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.se"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOOS~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.pl"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOOP~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.com.ph"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOOC~3.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.co.nz"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YA186B~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.no"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOON~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.com.my"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YA0670~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.com.mx"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAEA08~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.co.kr"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOOC~4.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "ybb.ne.jp"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOOJ~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.it"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOOI~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.co.in"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YA8E91~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.ie"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOOI~2.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.co.id"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YA6C44~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.com.hk"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YA56AC~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.fr"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOOF~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.es"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOOE~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.dk"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOOH~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.de"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOOD~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.com.cn"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YA819F~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.co.jp"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YA40E5~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.ca"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YAHOOC~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.com.br"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YA6DAE~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.com.au"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YA02CD~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.com.ar"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YA81CD~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Office\12.0\Outlook\AutoDiscover] "yahoo.com"="C:\\PROGRA~2\\MICROS~2\\Office12\\OUTLOO~1\\YA531A~1.XML" [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\yahoo-analytics.net] [HKEY_USERS\S-1-5-21-3618103154-1282251522-2710838709-1000\Software\Nico Mak Computing\Common\Email\Services] @="gmail.comhotmail.*;live.*;msnhotmail.comyahoo.com;sbcglobal.comoutlook.com" ==== C:\zoek_backup content ====================== C:\zoek_backup (files=0 folders=0 0 bytes) ==== EOF on zo 03-06-2018 at 20:41:38,04 ======================