Zoek.exe Version 4.0.0.5 Updated 17-October-2013
Tool run by admin on zo 20/10/2013 at 17:40:53,03.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\admin\Documents\zoek\zoek.com [script inserted] [Checkboxes used]
==== Older Logs ======================
C:\zoek-results2013-10-09-164707.log 49411 bytes
C:\zoek-results2013-10-11-201738.log 64011 bytes
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-779995794-2056842348-1647886699-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{10000000-1000-1000-1000-100000000000} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util LemurLeap deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Util LemurLeap deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Util LemurLeap deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Util LemurLeap deleted successfully
==== FireFox Fix ======================
Deleted from C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.symbaloo.com/");
user_pref("browser.search.defaultengine", "Ask Search");
user_pref("browser.search.order.1", "Ask Search");
user_pref("extensions.APN_TB.first-previous-keyword-url", "");
user_pref("extensions.CME-V7.my-keyword-url", "\"\"");
user_pref("extensions.CME-V7.previous-keyword-url", "\"\"");
user_pref("browser.search.useDBForOrder", "false");
Added to C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("extensions.APN_TB.first-previous-keyword-url", "");
user_pref("extensions.CME-V7.my-keyword-url", "\"\"");
user_pref("extensions.CME-V7.previous-keyword-url", "\"\"");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);
Deleted from C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\r10fm3x1.default\prefs.js:
Added to C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\r10fm3x1.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);
==== Registry Fix Code ======================
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=-
==== Deleting Files \ Folders ======================
C:\Program Files\MyPC Backup deleted
C:\Users\admin\AppData\Roaming\Systweak deleted
C:\Program Files\Toolbar Cleaner deleted
C:\Users\admin\Downloads\DownloadManagerSetup.exe deleted
C:\Windows\system32\tasks\BitGuard deleted
C:\Windows\system32\roboot.exe deleted
C:\Users\Public\Desktop\Free YouTube Downloader.lnk deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\chrome.manifest" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\install.rdf" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\firefox@lemurleap.info\chrome.manifest" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\firefox@lemurleap.info\icon.png" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\firefox@lemurleap.info\install.rdf" deleted
"C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP\WiseCustomCall.dll" deleted
"C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP\WiseCustomCalla.dll" deleted
"C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP\WiseCustomCalla17.dll" deleted
"C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP\WiseCustomCalla18.exe" deleted
"C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP\WiseCustomCalla19.dll" deleted
"C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP\WiseCustomCalla2.dll" deleted
"C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP\WiseCustomCalla20.dll" deleted
"C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP\WiseCustomCalla21.dll" deleted
"C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP\WiseCustomCalla21.exe" deleted
"C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP\WiseData.ini" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\chrome\isreaditlater.jar" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components\RILAPIRequest.js" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components\RILAPIRequest.xpt" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components\RILassetManager.js" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components\RILassetManager.xpt" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components\RILdelegate.js" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components\RILlist.js" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components\RILofflineQueue.js" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components\RILprefs.js" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components\RILsync.js" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components\RILtextDownloader.js" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components\RILtextDownloader.xpt" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components\RILwebDownloader.js" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components\RILwebDownloader.xpt" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\defaults\preferences\prefs.js" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\firefox@lemurleap.info\META-INF\manifest.mf" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\firefox@lemurleap.info\META-INF\zigbert.rsa" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\firefox@lemurleap.info\META-INF\zigbert.sf" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\firefox@lemurleap.info\chrome\content\overlay.js" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\firefox@lemurleap.info\chrome\content\overlay.xul" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\firefox@lemurleap.info" deleted
"C:\Windows\DB847E94446B49E0AC5DC5627EC8B0C0.TMP" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\chrome" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\components" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\defaults" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\isreaditlater@ideashower.com\defaults\preferences" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\firefox@lemurleap.info\chrome" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\firefox@lemurleap.info\META-INF" deleted
"C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default\extensions\firefox@lemurleap.info\chrome\content" deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"belgiumeid@eid.belgium.be"="C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be" [17/09/2013 21:17]
==== Firefox Extensions ======================
ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default
- Belgium eID - C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be
- LemurLeap - %ProfilePath%\extensions\firefox@lemurleap.info.xpi
- Thumbnail Zoom Plus - %ProfilePath%\extensions\thumbnailZoom@dadler.github.com.xpi
- Google Translator for Firefox - %ProfilePath%\extensions\translator@zoli.bod.xpi
- Picture Zoom Plus - %ProfilePath%\extensions\xxcessl0gycs@gmail.com.xpi
- ImTranslator - %ProfilePath%\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi
ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\r10fm3x1.default
- LemurLeap - %ProfilePath%\extensions\firefox@lemurleap.info.xpi
- Pocket - %ProfilePath%\extensions\isreaditlater@ideashower.com.xpi
- ImTranslator - %ProfilePath%\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi
AppDir: C:\Program Files\Mozilla Firefox
- Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
==== Firefox Plugins ======================
Profilepath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\hkky9amf.default
6768C724599214E4F9ADD9F8FF5097EB - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java Platform SE 7 U45
F1CD6E22E5AE5CEEB7712E546A5FC853 - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.450.18
CFAF7B67C78D09D79688AEDCA3D090E2 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll - Google Update
4BF70B35B943BD73BD6E13EB7C1BA4B3 - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll - Shockwave Flash
D1DC265C3FF7F92B4A75A55B3749D48C - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin
BE501CBC29B2025A263D80D399F1797A - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll - Silverlight Plug-In
04ACC61B47857E779CD92D1D88770BF1 - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat
77B09C2C6F407531447DA75E3ACD1C5B - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat
7550FC1ADE982582D5920BEA6430E3D4 - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin
BC601425BC360C12DF2277992C6D83D5 - C:\Program Files\QuickTime\Plugins\npqtplugin6.dll - QuickTime Plug-in 7.7.4
7B64C498A4E0958967EBD9439EE93DB4 - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.4
309817C5A02434365B0091021FD70610 - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.4
A0D9A846578582064F3D066B23CD2E55 - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.4
2871984886154973C810DAF2A9294510 - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.4
61EA5261198FD2431A4DD088569ED8D4 - C:\Program Files\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.7.4
270EE43CC00609B9937AAF94E1E970D4 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll - iTunes Application Detector
C548328E9DE5EB73350EF292D7140662 - C:\Program Files\Google\Picasa3\npPicasa3.dll - Picasa
C517E5EA7CEE783F3681F62D2A362E5B - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live? Photo Gallery
B27CCB1168B1960AEC6E9D3E0E0F0D2A - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrlui.dll - Microsoft® Silverlight
Profilepath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\r10fm3x1.default
04ACC61B47857E779CD92D1D88770BF1 - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat
77B09C2C6F407531447DA75E3ACD1C5B - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat
D1DC265C3FF7F92B4A75A55B3749D48C - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin
BC601425BC360C12DF2277992C6D83D5 - C:\Program Files\QuickTime\Plugins\npqtplugin6.dll - QuickTime Plug-in 7.7.4
7B64C498A4E0958967EBD9439EE93DB4 - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.4
309817C5A02434365B0091021FD70610 - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.4
A0D9A846578582064F3D066B23CD2E55 - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.4
2871984886154973C810DAF2A9294510 - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.4
61EA5261198FD2431A4DD088569ED8D4 - C:\Program Files\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.7.4
270EE43CC00609B9937AAF94E1E970D4 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll - iTunes Application Detector
D0DA6B2FB50A0667CF4BACC2AEFEA009 - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll - Java Platform SE 7 U5
C548328E9DE5EB73350EF292D7140662 - C:\Program Files\Google\Picasa3\npPicasa3.dll - Picasa
C517E5EA7CEE783F3681F62D2A362E5B - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live? Photo Gallery
7550FC1ADE982582D5920BEA6430E3D4 - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Backup.Old.Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}] not found
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Backup.Old.Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{03051086-C7A4-0250-3C2A-1C3F4CACF451} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
{80c554b9-c7f8-4a21-9471-06d606da78a2} Bing Url="http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE"
{F6909F06-51FF-4A24-92CD-9C55E832950B} Google Url="http://www.google.co.uk/search?hl=en&q={searchTerms}&meta=&rlz=1I7AURU_nlBE498"
==== Reset Google Chrome ======================
Nothing found to reset
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{616385A7-700D-6782-9795-9C85285802D4} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{77412A48-A069-8D8A-6F58-6F7EF7A01B82} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{815C1ABA-8375-8F64-6491-9433EF432C51} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} deleted successfully
==== HijackThis Entries ======================
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [updateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [RemoteControl9] "C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe"
O4 - HKLM\..\Run: [PDVD9LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD9\Language\Language.exe"
O4 - HKLM\..\Run: [bDRegion] C:\Program Files\Cyberlink\Shared Files\brs.exe
O4 - HKLM\..\Run: [updatePPShortCut] "C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerProducer" UpdateWithCreateOnce "Software\CyberLink\PowerProducer\5.0"
O4 - HKLM\..\Run: [updatePSTShortCut] "C:\Program Files\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Blu-ray Disc Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [VMware hqtray] "C:\Program Files\VMware\VMware Player\hqtray.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [PixelPlanet PdfPrinter-Monitor] "C:\Program Files\Common Files\PixelPlanet\PdfPrinter 6\PdfPrinterMonitor.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [obkagent] "C:\Program Files\Bitdefender\Bitdefender Safepay\obkagent.exe"
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Dictionary .NET] "C:\Users\admin\AppData\Local\Temp\Temp1_DictionaryNet.zip\Dictionary.exe" -c
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\admin\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WiFi Guard] "C:\Program Files\SoftPerfect WiFi Guard\WiFiGuard.exe" /hide
O4 - HKCU\..\Run: [sDP] C:\Users\admin\AppData\Local\FilesFrog Update Checker\update_checker.exe /auto
O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Dropbox.lnk = admin\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: NETGEAR WG111v3 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware player\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware player\vsocklib.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.belfius.be
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{25832E89-2212-4801-9B56-C58DB9542B63}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{EEEDD743-E308-45AF-BC29-2D4D26515907}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Safepay Service Agent (OBKSvc) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender Safepay\OBKSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\VMware\VMware Player\vmware-ufad.exe
O23 - Service: Bitdefender Safepay Update Service (UPDATESRV_SAFEPAY) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender Safepay\updatesrv.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Player\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe
==== Empty IE Cache ======================
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\hkky9amf.default\Cache emptied successfully
==== Empty Chrome Cache ======================
No Chrome Cache found
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\admin\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on zo 20/10/2013 at 17:56:53,71 ======================
