Zoek.exe v5.0.0.0 Updated 07-March-2014 Tool run by Michael Sterk on wo 19/03/2014 at 10:10:10,04. Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x64 Running in: Normal Mode Internet Access Detected Launched: D:\DATA Michael Sterk\Desktop\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 19/03/2014 10:11:55 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~2\FirstRowSportApp.com deleted successfully C:\PROGRA~2\Visions deleted successfully C:\PROGRA~2\VS Revo Group deleted successfully C:\PROGRA~3\Artweaver deleted successfully C:\PROGRA~3\Malwarebytes' Anti-Malware (portable) deleted successfully C:\PROGRA~3\Oracle deleted successfully C:\Users\Michael Sterk\AppData\Roaming\DMCache deleted successfully C:\Users\Michael Sterk\AppData\Roaming\Lite deleted successfully C:\Users\Michael Sterk\AppData\Roaming\QuickScan deleted successfully C:\Users\Michael Sterk\AppData\Roaming\Twins deleted successfully C:\Users\Michael Sterk\AppData\Roaming\Windows Live Writer deleted successfully C:\Users\Michael Sterk\AppData\Local\Twins deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f999a48b-1950-4d81-9971-79018f807b4b} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-715885976-79302763-1823809542-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{f999a48b-1950-4d81-9971-79018f807b4b} deleted successfully HKEY_USERS\S-1-5-21-715885976-79302763-1823809542-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{f999a48b-1950-4d81-9971-79018f807b4b} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{f999a48b-1950-4d81-9971-79018f807b4b} deleted successfully ==== Deleting Services ====================== ==== FireFox Fix ====================== ProfilePath: C:\Users\MICHAE~1\AppData\Roaming\Mozilla\Firefox\Profiles\uylyp54s.default user.js not found ---- Lines CT2737658 removed from prefs.js ---- user_pref("CT2737658.1000082.isPlayDisplay", "true"); user_pref("CT2737658.1000082.state", "{\"state\":\"stopped\",\"text\":\"Classic R...\",\"description\":\"Classic Rock\",\"url\":\"http://www.gotradio. user_pref("CT2737658.2737658a129531115111807042000000paramsGK0", "{\"updateReqTime\":1345368083890,\"updateRespTime\":1345368084459,\"data\":{\"settin user_pref("CT2737658.CT2737658ads1", "%7B%22ads%22%3A%5B%7B%22aid%22%3A%2236662%22%2C%22title%22%3A%22*%20R%E9parez%20%2815%29%20erreurs%20PC%20*%22%2 user_pref("CT2737658.CT2737658current_term", ""); user_pref("CT2737658.CT2737658sdate", "19"); user_pref("CT2737658.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}"); user_pref("CT2737658.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}"); user_pref("CT2737658.FirstTime", "true"); user_pref("CT2737658.FirstTimeFF3", "true"); user_pref("CT2737658.RSS_Pub_Config", "{\"settings\":{\"icon\":\"http://storage.conduit.com/58/273/CT2737658/Sharing/temp/634442452362018829_24PX.png\ user_pref("CT2737658.RSSapp2737658a129531115111807042000000embeddedVersion", "2.5.0"); user_pref("CT2737658.RSSapp2737658a129531115111807042000000feedsObj", "%7B%22channels%22%3A%7B%22id%22%3A%22channels%22%2C%22type%22%3A%22rss%22%2C%22 user_pref("CT2737658.RSSapp2737658a129531115111807042000000lastReportTime", "1345368084465 "); user_pref("CT2737658.RSSapp2737658a129531115111807042000000newFeeds", "newFeeds"); user_pref("CT2737658.UserID", "UN90343487843422287"); user_pref("CT2737658.addressBarTakeOverEnabledInHidden", "true"); user_pref("CT2737658.autoDisableScopes", -1); user_pref("CT2737658.cbcountry_001", "BE"); user_pref("CT2737658.cbfirsttime", "Sun Aug 19 2012 11:21:24 GMT+0200 (Romance (zomertijd))"); user_pref("CT2737658.defaultSearch", "false"); user_pref("CT2737658.embeddedsData", "[{\"appId\":\"129258407936791975\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"get user_pref("CT2737658.enableAlerts", "false"); user_pref("CT2737658.enableSearchFromAddressBar", "true"); user_pref("CT2737658.firstTimeDialogOpened", "true"); user_pref("CT2737658.fixPageNotFoundError", "true"); user_pref("CT2737658.fixPageNotFoundErrorInHidden", "true"); user_pref("CT2737658.fixUrls", true); user_pref("CT2737658.installId", "ConduitNSISIntegration"); user_pref("CT2737658.installType", "ConduitNSISIntegration"); user_pref("CT2737658.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}"); user_pref("CT2737658.isNewTabEnabled", true); user_pref("CT2737658.isPerformedSmartBarTransition", "true"); user_pref("CT2737658.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}"); user_pref("CT2737658.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TOOLBAR_SUB_DOMAIN user_pref("CT2737658.openThankYouPage", "false"); user_pref("CT2737658.openUninstallPage", "true"); user_pref("CT2737658.search.searchAppId", "129258407936791975"); user_pref("CT2737658.search.searchCount", "0"); user_pref("CT2737658.searchInNewTabEnabledInHidden", "true"); user_pref("CT2737658.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}"); user_pref("CT2737658.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}"); user_pref("CT2737658.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"2\"}"); user_pref("CT2737658.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2737658\"}"); user_pref("CT2737658.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"http://FreeOnlineRadioPlayerRecorde user_pref("CT2737658.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"FreeOnlineRadioPlayerRecorder\"}"); user_pref("CT2737658.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}"); user_pref("CT2737658.serviceLayer_services_app.twitter.user-cnet_lastUpdate", "1345368083657"); user_pref("CT2737658.serviceLayer_services_app.twitter.user-cnnbrk_lastUpdate", "1345368083703"); user_pref("CT2737658.serviceLayer_services_app.twitter.user-computeractive_lastUpdate", "1345368083723"); user_pref("CT2737658.serviceLayer_services_app.twitter.user-dailymirror_lastUpdate", "1345368083764"); user_pref("CT2737658.serviceLayer_services_app.twitter.user-google_lastUpdate", "1345368083678"); user_pref("CT2737658.serviceLayer_services_app.twitter.user-techcrunch_lastUpdate", "1345368083632"); user_pref("CT2737658.serviceLayer_services_app.twitter.user-time_lastUpdate", "1345368083900"); user_pref("CT2737658.serviceLayer_services_app.twitter.user-wired_lastUpdate", "1345368083929"); user_pref("CT2737658.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1345368078094"); user_pref("CT2737658.serviceLayer_services_appTracking_lastUpdate", "1345368081371"); user_pref("CT2737658.serviceLayer_services_appsMetadata_lastUpdate", "1345368077559"); user_pref("CT2737658.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1345368079271"); user_pref("CT2737658.serviceLayer_services_login_10.10.20.14_lastUpdate", "1345368081544"); user_pref("CT2737658.serviceLayer_services_optimizer_lastUpdate", "1345368078982"); user_pref("CT2737658.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1345368079334"); user_pref("CT2737658.serviceLayer_services_searchAPI_lastUpdate", "1345368076495"); user_pref("CT2737658.serviceLayer_services_serviceMap_lastUpdate", "1345368076276"); user_pref("CT2737658.serviceLayer_services_toolbarContextMenu_lastUpdate", "1345368079387"); user_pref("CT2737658.serviceLayer_services_toolbarSettings_lastUpdate", "1345368076517"); user_pref("CT2737658.serviceLayer_services_translation_lastUpdate", "1345368078008"); user_pref("CT2737658.settingsINI", true); user_pref("CT2737658.shouldFirstTimeDialog", "false"); user_pref("CT2737658.smartbar.CTID", "CT2737658"); user_pref("CT2737658.smartbar.Uninstall", "0"); user_pref("CT2737658.smartbar.toolbarName", "FreeOnlineRadioPlayerRecorder "); user_pref("CT2737658.startPage", "false"); user_pref("CT2737658.toolbarBornServerTime", "19-8-2012"); user_pref("CT2737658.toolbarCurrentServerTime", "19-8-2012"); ---- Lines ask.com removed from prefs.js ---- user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WR user_pref("extensions.wrc.SearchRules.ask.com.url", "^http(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*"); ---- Lines Search-Results removed from prefs.js ---- user_pref("extensions.wrc.SearchRules.rambler.ru.style", ".WRCN {display:none} .search-results .title + .WRCN {display:inline url(\"IMAGE\") right no ---- Lines extensions.50c274dfe7e7b removed from prefs.js ---- user_pref("extensions.50c274dfe7e7b.epoch", "1359289608"); user_pref("extensions.50c274dfe7e7b.url", "http://extsync.info/sync/?ext=saveit&pid=2017&country=BE®d=121207225943&lsd=130126122247&ind=1064004690& ---- FireFox user.js and prefs.js backups ---- prefs_20141903_1038_.backup ==== Deleting Files \ Folders ====================== C:\PROGRA~3\Malwarebytes' Anti-Malware (portable) not found C:\PROGRA~2\GUT1D97.tmp deleted C:\PROGRA~2\GUM1D86.tmp deleted C:\PROGRA~2\FreeOnlineRadioPlayerRecorder deleted C:\PROGRA~2\MyFree Codec deleted C:\PROGRA~2\Conduit deleted C:\found.000 deleted C:\Users\Michael Sterk\AppData\Roaming\simplitec deleted C:\Users\Michael Sterk\AppData\Roaming\burnaware.ini deleted C:\PROGRA~3\simplitec deleted C:\Users\Michael Sterk\AppData\Local\CRE deleted C:\Users\Michael Sterk\AppData\Local\Conduit deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec deleted C:\Users\Michael Sterk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager deleted C:\Users\Michael Sterk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FirstRowSportApp.com deleted C:\Users\Public\sdelevURL.tmp deleted C:\Users\Michael Sterk\AppData\LocalLow\FreeOnlineRadioPlayerRecorder deleted C:\Users\Michael Sterk\AppData\LocalLow\PriceGong deleted C:\Users\Michael Sterk\AppData\LocalLow\Conduit deleted C:\Users\MICHAE~1\AppData\Roaming\Mozilla\Firefox\Profiles\uylyp54s.default\searchplugins\search-the-web.xml deleted C:\Users\MICHAE~1\AppData\Roaming\Mozilla\Firefox\Profiles\uylyp54s.default\jetpack deleted C:\Users\MICHAE~1\AppData\Roaming\Mozilla\Firefox\Profiles\uylyp54s.default\CT2737658 deleted C:\Users\MICHAE~1\AppData\Roaming\Mozilla\Firefox\Profiles\uylyp54s.default\FCTB deleted C:\Users\Michael Sterk\AppData\Local\mbr_rest.exe deleted C:\Users\MICHAE~1\AppData\Roaming\Mozilla\Firefox\Profiles\uylyp54s.default\smartbar deleted "C:\Users\Michael Sterk\AppData\Local\vstaldr" deleted "C:\Users\Michael Sterk\AppData\Local\{3DBEF549-BECC-4019-8A3D-43D5304F5C17}" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\MICHAE~1\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== 2014-03-13 08:21:22 22535A5C5F13BBA4F8D8FCA4F2593188 2382848 ----a-w- C:\Windows\SysWOW64\mshtml.tlb 2014-03-13 08:21:21 9709ECC60A792387BBCD6AE1910B0413 73216 ----a-w- C:\Windows\SysWOW64\mshtmled.dll 2014-03-13 08:21:20 487D42D589DA9BEB7B6B3C725AB35343 421376 ----a-w- C:\Windows\SysWOW64\vbscript.dll 2014-03-13 08:21:18 FEA5277475F3EFC35C4AA7E95F553D5E 176640 ----a-w- C:\Windows\SysWOW64\ieui.dll 2014-03-13 08:21:17 F9DDC41D5B745EBDC673706C0575A260 142848 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe 2014-03-13 08:21:16 B9714A9ED8BAA0106DDE60537B4CE710 65536 ----a-w- C:\Windows\SysWOW64\jsproxy.dll 2014-03-13 08:21:16 5A6F0A2EAB066E5E3C578076623FEBF8 231936 ----a-w- C:\Windows\SysWOW64\url.dll 2014-03-13 08:21:14 1E5DF19A5F053345430D7AF87943C47A 1129472 ----a-w- C:\Windows\SysWOW64\wininet.dll 2014-03-13 08:21:13 8232228138E4859F3738DD1E4A8C692C 1105408 ----a-w- C:\Windows\SysWOW64\urlmon.dll 2014-03-13 08:21:12 D198BE229744F2E87743BB82D4C29A18 1427968 ----a-w- C:\Windows\SysWOW64\inetcpl.cpl 2014-03-13 08:21:11 C6B18D484DE84DCB479F25A393054B1F 607744 ----a-w- C:\Windows\SysWOW64\msfeeds.dll 2014-03-13 08:21:09 E6BB9F479A08B2588D2704FA288777B7 717824 ----a-w- C:\Windows\SysWOW64\jscript.dll 2014-03-13 08:21:09 0763D2835B7EF92E1DB630AB1BBA0D0F 1806848 ----a-w- C:\Windows\SysWOW64\jscript9.dll 2014-03-13 08:21:07 6B6879BE739279EDD2E4E28ED9911DBF 1796096 ----a-w- C:\Windows\SysWOW64\iertutil.dll 2014-03-13 08:21:02 4F23BB46E26DC87F01563B8A96526075 12347904 ----a-w- C:\Windows\SysWOW64\mshtml.dll 2014-03-13 08:20:57 AC7811B550AC49013C9D83D998C8C740 9739264 ----a-w- C:\Windows\SysWOW64\ieframe.dll 2014-03-12 05:35:24 E66587751D859A88FA61149C9CC2C15C 876032 ----a-w- C:\Windows\SysWOW64\wer.dll 2014-03-12 05:35:13 0E0C8EC771F8336845579798557769A5 2048 ----a-w- C:\Windows\SysWOW64\tzres.dll 2014-03-12 05:35:03 16508EACF164C1B9E032667EA4A601F3 505344 ----a-w- C:\Windows\SysWOW64\qedit.dll ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2014-03-13 08:21:22 7BC068843151589894C6475B0C33D179 2382848 ----a-w- C:\Windows\Sysnative\mshtml.tlb 2014-03-13 08:21:22 4A4B8AE11B4EECF330D9687835A82E30 96768 ----a-w- C:\Windows\Sysnative\mshtmled.dll 2014-03-13 08:21:17 D762E4BDF31A2449FC657A8AD3AE7CD7 86016 ----a-w- C:\Windows\Sysnative\jsproxy.dll 2014-03-13 08:21:17 CF22085D15EF70BC3FA58A8AA2FDE037 173056 ----a-w- C:\Windows\Sysnative\ieUnatt.exe 2014-03-13 08:21:17 5802031742C28289D97DE555CF5D260B 248320 ----a-w- C:\Windows\Sysnative\ieui.dll 2014-03-13 08:21:16 7A4303D1520C3B930AF895121E44847D 237056 ----a-w- C:\Windows\Sysnative\url.dll 2014-03-13 08:21:14 20A8C401F2C878AE572D4794336B892C 1392128 ----a-w- C:\Windows\Sysnative\wininet.dll 2014-03-13 08:21:12 FCB7B9EDD0F439625E26BE32EB1A07D4 1347072 ----a-w- C:\Windows\Sysnative\urlmon.dll 2014-03-13 08:21:12 D16E555C83B1C35851F8E9D1EF723959 1494528 ----a-w- C:\Windows\Sysnative\inetcpl.cpl 2014-03-13 08:21:12 87B5D5F6348F271F6A9B6A555E6056C8 729088 ----a-w- C:\Windows\Sysnative\msfeeds.dll 2014-03-13 08:21:10 41564D83873D66CD63007DD30B913284 2334720 ----a-w- C:\Windows\Sysnative\jscript9.dll 2014-03-13 08:21:09 F14F285897B7BDD13EE8EE7CB74B1500 599040 ----a-w- C:\Windows\Sysnative\vbscript.dll 2014-03-13 08:21:08 A71CE68FFB17E31C7FBF49A2A640C498 816640 ----a-w- C:\Windows\Sysnative\jscript.dll 2014-03-13 08:21:07 A53DCF7D6057D9B0E3523358C28955D5 2147840 ----a-w- C:\Windows\Sysnative\iertutil.dll 2014-03-13 08:21:01 BFDAB6AA9DAAA114BF3D2EA64C50A903 17847808 ----a-w- C:\Windows\Sysnative\mshtml.dll 2014-03-13 08:20:59 52B97C4ECC089D9E037437FE37328341 10926592 ----a-w- C:\Windows\Sysnative\ieframe.dll 2014-03-12 05:35:26 265F44FAB3B659FFF48C365BDFF95B2E 1111040 ----a-w- C:\Windows\Sysnative\wer.dll 2014-03-12 05:35:13 511D46AA778E25A0B1F70A06DC7F8C6E 2048 ----a-w- C:\Windows\Sysnative\tzres.dll 2014-03-12 05:35:03 380D12A115B12F1120396E01AF78368E 619008 ----a-w- C:\Windows\Sysnative\qedit.dll 2014-03-12 05:33:01 FB64BF7E3AC31132912657E22F2B5C6E 2776064 ----a-w- C:\Windows\Sysnative\win32k.sys ====== C:\Windows\Sysnative\drivers ===== 2014-03-18 14:15:40 F24BD06AE917F57408999F79E91FD6BC 119000 ----a-w- C:\Windows\Sysnative\drivers\MBAMSwissArmy.sys 2014-03-18 14:15:00 CD51E1D0D638F1E07A6EDC98CD7F5DDA 91352 ----a-w- C:\Windows\Sysnative\drivers\mbamchameleon.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== ======= C:\PROGRA~2 ===== 2014-03-18 11:52:49 -------- d-----w- C:\PROGRA~2\trend micro ======= C: ===== ====== C:\Users\Michael Sterk\AppData\Roaming ====== ====== C:\Users\Michael Sterk ====== ====== C: exe-files == 2014-03-18 11:52:49 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files (x86)\trend micro\Michael Sterk.exe 2014-03-15 16:20:48 E677174AA15D1B9D9E0B0F1C8DB8CC56 892120 ----a-w- C:\Users\Michael Sterk\AppData\Local\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\33.0.1750.154\33.0.1750.154_33.0.1750.146_chrome_updater.exe 2014-03-13 23:23:22 D6D0EB77C43224ABC8E137FACDAED88E 64384 ----a-w- C:\Users\Michael Sterk\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe 2014-03-13 08:21:17 F9DDC41D5B745EBDC673706C0575A260 142848 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe 2014-03-13 08:21:17 CF22085D15EF70BC3FA58A8AA2FDE037 173056 ----a-w- C:\Windows\System32\ieUnatt.exe 2014-03-13 08:21:16 390914F89AFA344319B9CF59306FF9A9 763632 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe 2014-03-13 08:21:16 10EB5C0E376727E21198B14E2F1637F7 757488 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe 2014-03-13 08:21:15 5FCF80E143622A45ED09423A4EB31EA0 468480 ----a-w- C:\Program Files (x86)\Internet Explorer\ieinstal.exe 2014-03-13 08:21:14 332380969C0807BCB6031D98A3E71194 482816 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe === C: other files == 2014-03-18 14:15:40 F24BD06AE917F57408999F79E91FD6BC 119000 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys 2014-03-18 14:15:00 CD51E1D0D638F1E07A6EDC98CD7F5DDA 91352 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_USERS\S-1-5-21-715885976-79302763-1823809542-1000\Software\Microsoft\Windows\CurrentVersion\Run] "LightScribe Control Panel"="C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden" "MobileDocuments"="C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe" "Google Update"="C:\Users\Michael Sterk\AppData\Local\Google\Update\GoogleUpdate.exe /c" @="C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run" "F.lux"="C:\Users\Michael Sterk\AppData\Local\FluxSoftware\Flux\flux.exe /noshow" "KiesAirMessage"="C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup" "Spotify"="C:\Users\Michael Sterk\AppData\Roaming\Spotify\Spotify.exe /uri spotify:autostart" "Spotify Web Helper"="C:\Users\Michael Sterk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [HKEY_USERS\S-1-5-21-715885976-79302763-1823809542-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "QlbCtrl.exe"="C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start" "WirelessAssistant"="C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" "APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" "DVDAgent"="C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe" "KiesTrayAgent"="C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe" "iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime" "AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "LightScribe Control Panel"="C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden" "MobileDocuments"="C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe" "Google Update"="C:\Users\Michael Sterk\AppData\Local\Google\Update\GoogleUpdate.exe /c" @="C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run" "F.lux"="C:\Users\Michael Sterk\AppData\Local\FluxSoftware\Flux\flux.exe /noshow" "KiesAirMessage"="C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup" "Spotify"="C:\Users\Michael Sterk\AppData\Roaming\Spotify\Spotify.exe /uri spotify:autostart" "Spotify Web Helper"="C:\Users\Michael Sterk\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\amd64" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64" "Uninstall C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627"="C:\Windows\system32\cmd.exe /q /c rmdir /s /q C:\Users\Michael Sterk\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "NvCplDaemon"="RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup" "EvtMgr6"="C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming" "Windows Defender"="%ProgramFiles%\Windows Defender\MSASCui.exe -hide" "SysTrayApp"="C:\Program Files\IDT\WDM\sttray64.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "NCPluginUpdater"="C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe Update" ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [13/03/2014 10:50] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [05/11/2012 19:13] C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-715885976-79302763-1823809542-1000Core.job --a------ C:\Users\Michael Sterk\AppData\Local\Google\Update\GoogleUpdate.exe [06/07/2012 20:52] C:\Windows\tasks\User_Feed_Synchronization-{FAD367E8-6B06-459F-879D-347243E769FE}.job --ah----- C:\Windows\system32\msfeedssync.exe [17/05/2011 17:12] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\0" [c:\program files (x86)\internet explorer\iexplore.exe] "C:\Windows\SysNative\tasks\4779" [wscript.exe C:\Users\MICHAE~1\AppData\Local\Temp\launchie.vbs //B] "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-715885976-79302763-1823809542-1000Core" [C:\Users\Michael Sterk\AppData\Local\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-715885976-79302763-1823809542-1000UA" [C:\Users\Michael Sterk\AppData\Local\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\User_Feed_Synchronization-{FAD367E8-6B06-459F-879D-347243E769FE}" [C:\Windows\system32\msfeedssync.exe] "C:\Windows\SysNative\tasks\{D6725178-6B24-46D1-B127-B440A4993B5D}" [C:\Program Files (x86)\Skype\\Phone\Skype.exe] "C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Total Care Tune-Up" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPTuneUp.exe] "C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask" [C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe] "C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe] "C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [07/02/2014 02:28] ==== Firefox Extensions ====================== ProfilePath: C:\Users\MICHAE~1\AppData\Roaming\Mozilla\Firefox\Profiles\uylyp54s.default - Real-Debrid Plugin - C:\Users\Michael Sterk\AppData\Roaming\Mozilla\Firefox\Profiles\uylyp54s.default\extensions\real@debrid - HP Detect - C:\Users\Michael Sterk\AppData\Roaming\Mozilla\Firefox\Profiles\uylyp54s.default\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2} - avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF - Real-Debrid Plugin - %ProfilePath%\extensions\real@debrid - Microsoft .NET Framework Assistant - %ProfilePath%\extensions\{20a82645-c095-46ed-80e3-08825760534b} - HP Detect - %ProfilePath%\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2} - SaveIt - %ProfilePath%\extensions\50c274dfe7dce@50c274dfe7e08.com.xpi - Adblock Plus Pop-up Addon - %ProfilePath%\extensions\adblockpopups@jessehakanen.net.xpi - anonymoX - %ProfilePath%\extensions\client@anonymox.net.xpi - Webmail Ad Blocker - %ProfilePath%\extensions\gmailnoads@mywebber.com.xpi - Outlook Button - %ProfilePath%\extensions\outlookbutton@outlook.invalid.xpi - TimeLineRemove.Com - %ProfilePath%\extensions\tl_r@jetpack.xpi - PageTweak - %ProfilePath%\extensions\{15312e9a-4905-48da-aae4-15b24bdc2a24}.xpi - Ads no more - %ProfilePath%\extensions\{a3a5c777-f583-4fef-9380-ab4add1bc2a2}.xpi - Easy YouTube Video Downloader - %ProfilePath%\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Michael Sterk\AppData\Roaming\Mozilla\Firefox\Profiles\uylyp54s.default 7EFF79934842F1C28992638AF19BF9CD - C:\Users\Michael Sterk\AppData\Roaming\Mozilla\plugins\npo1d.dll - Google Talk Plugin Video Renderer F87D7EB5573C0A84D8D460C54CBC5585 - C:\Users\Michael Sterk\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll - Google Talk Plugin F65284ABAC78410D561587F7C66043BA - C:\Users\Michael Sterk\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player 6846D2CA7E1D5937AEE3F99BB7F5464B - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll - Shockwave for Director / Shockwave for Director 5CB2C74F632F47F39071AD7487B0F825 - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director AB87EEFFD18F2BAAFC274E7075EA6C67 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation ==== Deleted Firefox Extensions ====================== C:\Users\MICHAE~1\AppData\Roaming\Mozilla\Firefox\Profiles\uylyp54s.default\extensions\50c274dfe7dce@50c274dfe7e08.com.xpi deleted ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions pmcmflmkceipgecmhoddphflfndnfbbe - C:\Users\Michael Sterk\AppData\Local\CRE\pmcmflmkceipgecmhoddphflfndnfbbe.crx[] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions pmcmflmkceipgecmhoddphflfndnfbbe - C:\Users\Michael Sterk\AppData\Local\CRE\pmcmflmkceipgecmhoddphflfndnfbbe.crx[] FreeOnlineRadioPlayerRecorder - Michael Sterk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmcmflmkceipgecmhoddphflfndnfbbe ==== Chrome Fix ====================== C:\Users\Michael Sterk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmcmflmkceipgecmhoddphflfndnfbbe deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.bing.com" "Search Bar"="http://www.bing.com" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://www.bing.com" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{227CDC19-C355-48FD-9275-13E829F4B143}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Unknown Url="Not_Found" {227CDC19-C355-48FD-9275-13E829F4B143} Bing Url="http://www.bing.com/search?FORM=BB07DF&PC=BB07&q={searchTerms}&src=IE-SearchBox" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-715885976-79302763-1823809542-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\pmcmflmkceipgecmhoddphflfndnfbbe deleted successfully HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\pmcmflmkceipgecmhoddphflfndnfbbe deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Michael Sterk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Michael Sterk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Cache found ==== Empty Chrome Cache ====================== C:\Users\Michael Sterk\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=1024 folders=198 147505373 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Michael Sterk\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\MICHAE~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Michael Sterk\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found "C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found "C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found ==== EOF on wo 19/03/2014 at 10:57:57,51 ======================