Zoek.exe v5.0.0.1 Updated 24-October-2017 Tool run by TAHER on Sun 12/10/2017 at 0:19:30.50. Microsoft Windows 8.1 Pro 6.3.9600 x64 Running in: Normal Mode No Internet Access Detected Launched: C:\Users\TAHER\Desktop\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== System Restore Info ====================== 10/12/2017 12:31:47 Õ Zoek.exe System Restore Point Created Successfully. ==== Running Processes ====================== C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe C:\Program Files (x86)\Internet Download Manager\IDMan.exe C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe C:\Program Files (x86)\Winamp\winamp.exe C:\Users\TAHER\Desktop\zoek.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe ==== Batch Command(s) Run By Tool====================== ==== System Specs ====================== Operating System: Microsoft Windows 8.1 Pro 6.3.9600 64-bit Manufacturer: Dell Inc. - Model: Latitude E6410 Install Date: 14/09/2015 02:15:50 Õ Last Boot: 07/12/2017 08:01:55 ã Processor: Intel(R) Core(TM) i5 CPU M 560 @ 2.67GHz Number of Processors: 4 Work Station Bootmode: Normal boot Total RAM: 3957 MB (free 2950 MB - 74) Computername: TITO Domain: WORKGROUP User: TAHER (Administrator account) Local Disk: C:\ - NTFS - 48 GB (free 15 GB) Local Disk: D:\ - NTFS - 48 GB (free 48 GB) Local Disk: E:\ - NTFS - 292 GB (free 30 GB) Local Disk: F:\ - NTFS - 259 GB (free 5 GB) Local Disk: G:\ - NTFS - 48 GB (free 48 GB) CD \ DVD Drive: H:\ Bootdevice: \Device\HarddiskVolume1 Windows update: Country: ê­© Language: ARE ==== System Specs (Software) ====================== Anti-Virus: Windows Defender On-access scanning disabled (Outdated) Anti-Virus: Malwarebytes On-access scanning disabled (Outdated) Anti-Virus: ESET Smart Security On-access scanning disabled (Outdated) Anti-Spyware: ESET Smart Security disabled (Outdated) Anti-Spyware: Malwarebytes disabled (Outdated) Anti-Spyware: Windows Defender disabled (Outdated) Firewall: ÌÏÇÑ ÇáÍãÇíÉ ÇáÔÎÕí ESET disabled Internet Explorer Version: 11.0.9600.18838 Opera Browser version: 49.0.2725.47 Google Chrome version: 63.0.3239.84 Flash Player version: 27.0.0.130 ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\TAHER\AppData\Local\Temp ==== 2017-12-07 18:06:25 D679DB6D337A40CD7593BB6661736430 259622 ----a-w- C:\Users\TAHER\AppData\Local\Temp\Uninstall.exe ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== ====== C:\Windows\Sysnative\drivers ===== 2017-12-08 15:57:06 7D0520A12B31E6858B3BB7E675AFA34E 77432 ----a-w- C:\Windows\Sysnative\drivers\mbae64.sys 2017-12-01 18:41:34 0D5A09B08568760AE85A801FCBC0F83D 28272 ----a-w- C:\Windows\Sysnative\drivers\TrueSight.sys 2017-11-16 09:29:30 9907FCC207E470F94B9DB6BD037E79C4 2013016 ----a-w- C:\Windows\Sysnative\drivers\ntfs.sys 2017-11-16 09:29:26 670E7F15CEEA22C34CED8F4D0EC161BF 1548624 ----a-w- C:\Windows\Sysnative\drivers\dxgkrnl.sys 2017-11-16 09:29:19 B0AF753AF28303BB69C67BD85F06FFC9 124416 ----a-w- C:\Windows\Sysnative\drivers\luafv.sys ====== C:\Windows\Tasks ====== 2017-12-07 14:44:08 E6E5EADEB1F998E30DA355D4735FCB19 3274 ----a-w- C:\Windows\Sysnative\Tasks\GoogleUpdateTaskMachineUA 2017-12-07 14:44:07 91DC39365D83C2AEC9A135D102A21005 3146 ----a-w- C:\Windows\Sysnative\Tasks\GoogleUpdateTaskMachineCore 2017-11-23 20:37:34 A9BE1405AD4306D15D7D5BD4861BE832 3838 ----a-w- C:\Windows\Sysnative\Tasks\Opera scheduled Autoupdate 1486325203 ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2017-12-05 02:55:54 -------- d-----w- C:\Program Files\EaseUS ======= C:\PROGRA~2 ===== ======= C: ===== 2017-12-02 12:22:42 B31483622D46EE4ED359C8B6C23751AF 901 ----a-w- C:\DelFix.txt ====== C:\Users\TAHER\AppData\Roaming ====== ====== C:\Users\TAHER ====== 2017-12-09 17:19:25 02EDBC3A7342EA8550DBFCF4E0727C82 26292032 ----a-w- C:\Users\TAHER\Desktop\ez_cd_audio_converter_setup_x64.exe 2017-12-08 15:55:46 -------- d-----w- C:\ProgramData\MB3CoreBackup 2017-12-07 15:36:59 94B394FAE64B43FCB5DB57C0C1E66607 1129816 ----a-w- C:\Users\TAHER\Desktop\ChromeSetup.exe 2017-12-07 15:33:42 BCF86DF0A683B600CA303D9D883A4315 1129816 ----a-w- C:\Users\TAHER\Downloads\ChromeSetup.exe 2017-12-05 02:58:11 -------- d-----w- C:\ProgramData\SystemAcCrux 2017-12-05 02:52:04 69F6A81A6CB85039271171EFE7E4CD19 32691824 ----a-w- C:\Users\TAHER\Downloads\drw_trial.exe 2017-12-03 02:54:19 42AE1FEA35A3090ECC62640FDEA4FE67 78346672 ----a-w- C:\Users\TAHER\Desktop\mb3-setup-consumer-3.3.1.2183.exe 2017-12-03 02:50:03 00ECDC8A3838754789FF156DF3F7D38A 2391552 ----a-w- C:\Users\TAHER\Desktop\FRST64.exe 2017-12-02 19:59:13 7101FF0673F62B340D6C082039CF4487 1622528 ----a-w- C:\Users\TAHER\Desktop\ResetBrowser.exe 2017-12-02 13:47:37 F5BA9AA13F43CCFAD352E186373E5994 8187336 ----a-w- C:\Users\TAHER\Desktop\adwcleaner_7.0.5.0.exe 2017-12-02 13:46:07 1B735149F7C796F9C2A3A47544E29AB0 2940288 ----a-w- C:\Users\TAHER\Desktop\ZHPDiag3.exe 2017-11-29 00:21:17 021EE04CBFE520214431EFBB44698C4F 5348656 ----a-w- C:\Users\TAHER\Desktop\avira_en_vpnb0_5a1dfd563454d__ws.exe ====== C: exe-files == 2017-12-09 17:19:25 02EDBC3A7342EA8550DBFCF4E0727C82 26292032 ----a-w- C:\Users\TAHER\Desktop\ez_cd_audio_converter_setup_x64.exe 2017-12-08 07:20:12 5F61D988B4179C1AC385ACA2BC139361 12928632 ----a-w- C:\Users\TAHER\AppData\Local\Google\Chrome\User Data\SwReporter\24.136.201\software_reporter_tool.exe 2017-12-07 18:06:25 D679DB6D337A40CD7593BB6661736430 259622 ----a-w- C:\Users\TAHER\AppData\Local\Temp\Uninstall.exe 2017-12-07 15:36:59 94B394FAE64B43FCB5DB57C0C1E66607 1129816 ----a-w- C:\Users\TAHER\Desktop\ChromeSetup.exe 2017-12-07 15:34:26 D053DA0E9B893FAAE08FE802C4F1F0FD 50731112 ----a-w- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\63.0.3239.84\63.0.3239.84_chrome_installer.exe 2017-12-07 15:33:42 BCF86DF0A683B600CA303D9D883A4315 1129816 ----a-w- C:\Users\TAHER\Downloads\ChromeSetup.exe 2017-12-07 14:50:07 B66AFE93F1027AB16B15BF73719305D4 96336 ----atw- C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleUpdateBroker.exe 2017-12-07 14:50:07 98E06E321C2802D5191955368FCC2C31 96336 ----atw- C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleUpdateWebPlugin.exe 2017-12-07 14:50:07 853ACA39E3B789C10CEC2443FE5A3999 96336 ----atw- C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleUpdateOnDemand.exe 2017-12-07 14:50:07 12195542F45536C8CE15C7582B9E2194 1129816 ----a-w- C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleUpdateSetup.exe 2017-12-07 14:49:58 F107219B133E7E574DA052C5C88FFBF3 366672 ----atw- C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe 2017-12-07 14:49:58 900236357482B00944826354EEC6B93F 288848 ----atw- C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe 2017-12-07 14:49:58 605CCC9CE1839BC5583017DF7CAE27A6 153168 ----atw- C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleUpdate.exe 2017-12-07 14:49:58 3A722EA9C93B76EECB85B8F185C95274 173648 ----atw- C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleUpdateComRegisterShell64.exe 2017-12-07 14:49:58 17AFF7E3C05658EE195DC5F0FA16B15E 601680 ----atw- C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleUpdateCore.exe 2017-12-07 14:49:54 12195542F45536C8CE15C7582B9E2194 1129816 ----a-w- C:\Program Files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.33.7\GoogleUpdateSetup.exe 2017-12-07 14:44:10 1B76B3E26D02B4AE08BD7B26A14B3286 46630504 ----atw- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\63.0.3239.84\chrome_installer.exe 2017-12-07 14:44:04 0545A3EB959CFA4790D267BFB8C1ACA4 153168 ----atw- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 2017-12-06 13:29:58 1ECD9F45F67A748C8F03426909CD09C0 32692536 ----a-w- C:\Users\TAHER\Downloads\EaseUS Data Recovery Wizard All Editions 11.8\drw_free.exe 2017-12-06 13:07:29 626E949BE9F39EE96C3A514EFA559610 816112 ----a-w- C:\Users\TAHER\Downloads\EaseUS Activation\EaseUS Activation.exe 2017-12-05 02:52:04 69F6A81A6CB85039271171EFE7E4CD19 32691824 ----a-w- C:\Users\TAHER\Downloads\drw_trial.exe 2017-12-03 02:54:19 42AE1FEA35A3090ECC62640FDEA4FE67 78346672 ----a-w- C:\Users\TAHER\Desktop\mb3-setup-consumer-3.3.1.2183.exe 2017-12-03 02:50:03 00ECDC8A3838754789FF156DF3F7D38A 2391552 ----a-w- C:\Users\TAHER\Desktop\FRST64.exe === C: other files == 2017-12-09 03:20:05 D7F0E665B2CA37924178DB704B2763DE 1113762 ----a-w- C:\Users\TAHER\AppData\Local\Temp\60DE.tmp.zip 2017-12-08 15:57:06 7D0520A12B31E6858B3BB7E675AFA34E 77432 ----a-w- C:\Windows\System32\drivers\mbae64.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-2422561113-3094125170-2170945475-1001\Software\Microsoft\Windows\CurrentVersion\Run] "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR" "IDMan"="C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR" "IDMan"="C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "egui"="C:\Program Files\ESET\ESET Smart Security\ecmdS.exe /launch /hide" ==== Startup Registry Disabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeAAMUpdater-1.0] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CCleaner Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GUDelayStartup] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Malwarebytes TrayApp] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ultracopier] ==== Startup Folders ====================== 2017-10-19 15:09:59 2051 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SnagIt 8.lnk ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Acrobat Update Task" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe] "C:\Windows\SysNative\tasks\Adobe Flash Player PPAPI Notifier" [C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_130_pepper.exe] "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\Opera scheduled Autoupdate 1486325203" [C:\Program Files (x86)\Opera\launcher.exe] "C:\Windows\SysNative\tasks\User_Feed_Synchronization-{9EF4CA9D-8A4B-4D65-904A-E9E4C19D26D5}" [C:\Windows\system32\msfeedssync.exe] ==== Firefox Extensions Registry ====================== [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "mozilla_cc2@internetdownloadmanager.com"="C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi" [01/26/2017 12:35 PM] ==== Firefox Extensions ====================== ProfilePath: C:\Users\TAHER\AppData\Roaming\Mozilla\Firefox\Profiles\9p5cqg9n.default-1508462493704 - ZenMate Security Privacy amp; Unblock VPN - %ProfilePath%\extensions\firefox@zenmate.com.xpi - Undetermined - %ProfilePath%\extensions\{bee8b1f2-823a-424c-959c-f8f76c8b2306}.xpi AppDir: C:\Program Files\Mozilla Firefox - Undetermined - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi ==== Firefox Plugins ====================== ==== Chromium Look ====================== Slides - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek Docs - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf Poper Blocker - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkkbcggnhapdmkeljlodobbkopceiche YouTube - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo ZenMate VPN - Best Cyber Security Unblock - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdcgdnkidjaadafnichfpabhfomcebme Sheets - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap Google Docs Offline - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi 4.3.0 - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd Emoji Keyboard (2016) by EmojiOne™ - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipdjnhgkpapgippgcgkfcbpdpcgifncb InstaG Downloader - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnkdcmgmnegofdddphijckfagibepdlb IDM Integration Module - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek Chrome Web Store Payments - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Test - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnjjahlikiabnchcpehcpkdeckfgnohf Gmail - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia Chrome Media Router - TAHER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm AdBlock - TAHER\AppData\Roaming\Opera Software\Opera Stable\Extensions\aobdicepooefnbaeokijohmhjlleamfj 8.0.0.34 - TAHER\AppData\Roaming\Opera Software\Opera Stable\Extensions\bbkekonodcdmedgffkkbgmnnekbainbg Translator - TAHER\AppData\Roaming\Opera Software\Opera Stable\Extensions\cnbpedcoekjafichoehopgaaldogogch ZenMate VPN - Best Cyber Security Unblock - TAHER\AppData\Roaming\Opera Software\Opera Stable\Extensions\cnhbkkedmelfmalgjpkngiaoifpdfcnl SurfEasy Proxy an Opera Software Company - TAHER\AppData\Roaming\Opera Software\Opera Stable\Extensions\ebpielhlnnpkiddeeacoephkilopgblc 4.1.45 - TAHER\AppData\Roaming\Opera Software\Opera Stable\Extensions\hnjalnkldgigidggphhmacmimbdlafdo History Eraser - TAHER\AppData\Roaming\Opera Software\Opera Stable\Extensions\lfpoajlbkhlfoeeokbppmecpplmieedm IDM Integration Module - TAHER\AppData\Roaming\Opera Software\Opera Stable\Extensions\ngpampappnmepgilojfohadhhmbhlaek ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" ==== All HKLM and HKCU SearchScopes ====================== HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC HKLM\Wow6432Node\SearchScopes\{67C334C0-408D-4E6D-B5A7-0ADD6AFFA252} - http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?} HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 HKCU\SearchScopes\{67C334C0-408D-4E6D-B5A7-0ADD6AFFA252} - http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?} ==== Reset Google Chrome ====================== C:\Users\TAHER\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Users\TAHER\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully C:\Users\TAHER\AppData\Roaming\Opera Software\Opera Stable\Preferences was reset successfully C:\Users\TAHER\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully C:\Users\TAHER\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully C:\Users\TAHER\AppData\Roaming\Opera Software\Opera Stable\Web Data was reset successfully C:\Users\TAHER\AppData\Roaming\Opera Software\Opera Stable\Web Data-journal was reset successfully ==== HijackThis Entries ====================== R3 - Default URLSearchHook is missing F2 - REG:system.ini: UserInit=C:\Windows\SYSWOW64\userinit.exe, O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\Microsoft Office\Office12\GrooveShellExtensions.dll O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\SnagIt 8\SnagItIEAddin.dll O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR O4 - HKCU\..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot O4 - Global Startup: SnagIt 8.lnk = C:\Program Files (x86)\TechSmith\SnagIt 8\SnagIt32.exe O8 - Extra context menu item: &ÊÕÏíÑ Åáì Microsoft Excel - res://C:\PROGRA~2\Microsoft Office\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: AntDM Download All - C:\Program Files (x86)\Ant Download Manager\antIE\IEDownloadAll.html O8 - Extra context menu item: AntDM Download Link - C:\Program Files (x86)\Ant Download Manager\antIE\IEDownloadLink.html O8 - Extra context menu item: AntDM Download Selected - C:\Program Files (x86)\Ant Download Manager\antIE\IEDownloadSelected.html O8 - Extra context menu item: Ê&ÕÏíÑ Åáì Microsoft Excel - res://C:\PROGRA~2\Microsoft Office\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: ÊÍãíá Çáßá ÈæÇÓØÉ Internet Download Manager - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm O8 - Extra context menu item: ÊÍãíá ÈæÇÓØÉ Internet Download Manager - C:\Program Files (x86)\Internet Download Manager\IEExt.htm O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: http://help.eset.com (HKLM) O15 - Trusted Zone: http://cache.tv.qq.com (HKLM) O15 - Trusted Zone: http://qqlivecaption.qq.com (HKLM) O15 - Trusted Zone: http://qqlivehabit.qq.com (HKLM) O15 - Trusted Zone: http://qqlivesearch.qq.com (HKLM) O15 - Trusted Zone: http://video_1.qq.com (HKLM) O15 - ESC Trusted Zone: http://help.eset.com (HKLM) O17 - HKLM\System\CCS\Services\Tcpip\..\{62857839-62F3-4A1A-A628-07796BA66EB4}: NameServer = 8.8.8.8,8.8.4.4 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\Microsoft Office\Office12\GrooveSystemServices.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Foxit Reader Service (FoxitReaderService) - Foxit Software Inc. - C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe O23 - Service: ÎÏãÉ Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: ÎÏãÉ Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\TAHER\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\TAHER\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully ==== Empty FireFox Cache ====================== C:\Users\TAHER\AppData\Local\Mozilla\Firefox\Profiles\9p5cqg9n.default-1508462493704\cache2 emptied successfully ==== Empty Chrome Cache ====================== C:\Users\TAHER\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully C:\Users\TAHER\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== No Flash Cache Found ==== Empty All Java Cache ====================== No Java Cache Found ==== C:\zoek_backup content ====================== C:\zoek_backup (files=0 folders=0 0 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\TAHER\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\TAHER\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on Sun 12/10/2017 at 0:45:33.22 ======================