Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Help removing ADCHOICES
Message
<blockquote data-quote="Shuggie" data-source="post: 438319" data-attributes="member: 43034"><p>Sorry about for both not doing the script right and bumping. Thanks for your help.</p><p></p><p>Here are thew new results:</p><p></p><p></p><p>Zoek.exe v5.0.0.1 Updated 30-09-2015</p><p>Tool run by Shukhrat on Sun 10/04/2015 at 7:12:40.18.</p><p>Microsoft Windows 10 Pro 10.0.10240 x64</p><p>Running in: Normal Mode Internet Access Detected</p><p>Launched: C:\Users\Shukhrat\Desktop\zoek.exe [Scan all users] [Script inserted] </p><p></p><p>==== Older Logs ======================</p><p></p><p>C:\zoek-results2015-10-03-152546.log 57773 bytes</p><p></p><p>==== System Restore Info ======================</p><p></p><p>10/4/2015 7:13:10 AM Zoek.exe System Restore Point Created Successfully.</p><p></p><p>==== Empty Folders Check ======================</p><p></p><p>C:\Program Files\Google deleted successfully</p><p>C:\PROGRA~3\ALM deleted successfully</p><p>C:\PROGRA~3\Comms deleted successfully</p><p>C:\PROGRA~3\PCSettings deleted successfully</p><p>C:\PROGRA~3\SoftwareDistribution deleted successfully</p><p>C:\Users\QBDataServiceUser24\AppData\LocalLow deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\EmieBrowserModeList deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\EmieSiteList deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\EmieUserList deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\LogMeIn Rescue Applet deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\NetworkTiles deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\PeerDistRepub deleted successfully</p><p>C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistPub deleted successfully</p><p>C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistRepub deleted successfully</p><p></p><p>==== Deleting CLSID Registry Keys ======================</p><p></p><p></p><p>==== Deleting CLSID Registry Values ======================</p><p></p><p>HKEY_USERS\S-1-5-21-3881268226-3317070643-463687028-1001\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully</p><p>HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{F04D2D30-776C-4d02-8627-8E4385ECA58D} deleted successfully</p><p></p><p>==== Deleting Services ======================</p><p></p><p></p><p>==== Batch Command(s) Run By Tool======================</p><p></p><p></p><p>Windows IP Configuration</p><p></p><p>Successfully flushed the DNS Resolver Cache.</p><p></p><p>==== Deleting Files \ Folders ======================</p><p></p><p>C:\PROGRA~3\Package Cache deleted</p><p>C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted</p><p>C:\Users\Shukhrat\AppData\Roaming\Mozilla\Firefox\Profiles\60j4u87l.default\searchplugins\safesearch.xml deleted</p><p>C:\Users\Shukhrat\GeForce_Experience_v2.1.0.0.exe deleted</p><p>C:\Users\Shukhrat\vlc-2.1.3-win64.exe deleted</p><p>"C:\PROGRA~2\CyberPower PowerPanel Personal Edition\ppped.exe" deleted</p><p>"C:\PROGRA~2\CyberPower PowerPanel Personal Edition\pppeuser.exe" deleted</p><p>"C:\PROGRA~2\CyberPower PowerPanel Personal Edition" not deleted</p><p></p><p>==== Firefox Start and Search pages ======================</p><p></p><p>ProfilePath: C:\Users\Shukhrat\AppData\Roaming\Mozilla\Firefox\Profiles\60j4u87l.default</p><p>user_pref("browser.startup.homepage", "about:home");</p><p>user_pref("browser.search.defaultenginename.US", "Google");</p><p></p><p>==== Firefox Extensions Registry ======================</p><p></p><p>[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]</p><p>"{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.1.0.9\coFFPlgn" [10/03/2015 11:20 AM]</p><p></p><p>==== Firefox Extensions ======================</p><p></p><p>ProfilePath: C:\Users\Shukhrat\AppData\Roaming\Mozilla\Firefox\Profiles\60j4u87l.default</p><p>- Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.1.0.9\coFFPlgn</p><p></p><p>AppDir: C:\Program Files (x86)\Mozilla Firefox</p><p>- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}</p><p>- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi</p><p></p><p>==== Firefox Plugins ======================</p><p></p><p>Profilepath: C:\Users\Shukhrat\AppData\Roaming\Mozilla\Firefox\Profiles\60j4u87l.default</p><p>1A62BB86D17B8DC0D4339BACC8D60635 - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll - Shockwave Flash</p><p></p><p></p><p>==== Chromium Look ======================</p><p></p><p>Google Chrome Version: 45.0.2454.101</p><p></p><p>HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions</p><p>cjabmdjcfcfdmffimndhafhblfmpjdpe - C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.2.15\Exts\Chrome.crx[07/10/2015 12:03 AM]</p><p>iikflkcanblccfahdhdonehdalibjnif - No path found[]</p><p>lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[07/14/2014 06:22 PM]</p><p></p><p>HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions</p><p>lmjegmlicamnimmfhcmpkclmigmmcbeh - No path found[]</p><p></p><p>Floorplanner - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\abopacaefhbognnmeigicfpgnmpideag</p><p>Firebug Lite for Google Chrome™ - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench</p><p>Google Cast - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd</p><p>Videostream for Google Chromecast™ - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnciopoikihiagdjbjpnocolokfelagl</p><p>Tab Manager - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\coonecdghnepgiblpccbbihiahajndda</p><p>Calculator Widget - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpplagdendnkjkiaiaijfphiflaflinc</p><p>AdBlock - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom</p><p>Amazonia Right Click Search - Amazon Co UK - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpmkacpkcakamljkjdjfgmncbpfjacjl</p><p>XPath Helper - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgimnogjllphhhkhlmebbmlgjoejdpjl</p><p>DS Amazon Quick View mx - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\iphjnmlnfhakpddieemnfolejgbpjmcd</p><p>DS Amazon Quick View - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkompbllimaoekaogchhkmkdogpkhojg</p><p>Linkclump - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpjkncokllnfokkgpkobnkbkmelfefj</p><p>InvisibleHand - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\lghjfnfolmcikomdjmoiemllfnlmmoko</p><p>JSON Editor - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhkmoheomjbkfloacpgllgjcamhihfaj</p><p>ASIN Helper - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\lknlnfochnodlbdhbakjjgelgomhjigk</p><p>Google Drive App Launcher - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh</p><p>Session Manager - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\mghenlmbmjcpehccoangkdpagbcbkdpc</p><p>Keepa - Amazon Price Tracker - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\neebplgakaahbhdphmkckjjcegoiijjo</p><p>Context Menu Search - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocpcmghnefmdhljkoiapafejjohldoga</p><p>Chrome Apps & Extensions Developer Tool - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohmmkhmmmpcnpikjeljgnaoabkaalbgc</p><p>The Tracktor - Price History Tracker - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\onajjgekdldckfgodnmoallcmdmfcfom</p><p>Extract Asin Universal - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\pidkhbhaankobmkallidpgihcdcjdefn</p><p>Amazonia Right Click Search - Amazon.com - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkngfjindjkdikklhiiofondocdmdeep</p><p></p><p>==== Chromium Fix ======================</p><p></p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_shoppingcart.aliexpress.com_0.localstorage deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_shoppingcart.aliexpress.com_0.localstorage-journal deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.escapetheroomnyc.com_0.localstorage deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.escapetheroomnyc.com_0.localstorage-journal deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.shoefitr.com_0.localstorage deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.shoefitr.com_0.localstorage-journal deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d3b3ehuo35wzeh.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d3b3ehuo35wzeh.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d3l3lkinz3f56t.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d3l3lkinz3f56t.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_dew9ckzjyt2gn.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_dew9ckzjyt2gn.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.searchesinteractive.com_0.localstorage" target="_blank">www.searchesinteractive.com_0.localstorage</a> deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.searchesinteractive.com_0.localstorage-journal" target="_blank">www.searchesinteractive.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_deals.ebay.com_0.localstorage deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_deals.ebay.com_0.localstorage-journal deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_slickdeals.net_0.localstorage deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_slickdeals.net_0.localstorage-journal deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ebay-turbo-lister.en.softonic.com_0.localstorage deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ebay-turbo-lister.en.softonic.com_0.localstorage-journal deleted successfully</p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\pidkhbhaankobmkallidpgihcdcjdefn deleted successfully</p><p></p><p>==== Set IE to Default ======================</p><p></p><p>Old Values:</p><p>[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]</p><p>"Start Page"="<a href="http://www.google.com" target="_blank">Google</a>"</p><p>[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]</p><p>"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"</p><p></p><p>New Values:</p><p>[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]</p><p>"Start Page"="<a href="http://www.google.com" target="_blank">Google</a>"</p><p>[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]</p><p>"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"</p><p></p><p>==== All HKCU SearchScopes ======================</p><p></p><p>HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes</p><p>{012E1000-F331-11DB-8314-0800200C9A66} Google Url="<a href="http://www.google.com/search?q={searchTerms}" target="_blank">{searchTerms} - Google Search</a>"</p><p>{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="<a href="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" target="_blank">{searchTerms} - Bing</a>"</p><p>{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Unknown Url="Not_Found"</p><p></p><p>==== Deleting CLSID Registry Keys ======================</p><p></p><p>HKEY_USERS\S-1-5-21-3881268226-3317070643-463687028-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully</p><p>HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully</p><p>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully</p><p></p><p>==== Deleting CLSID Registry Values ======================</p><p></p><p></p><p>==== Empty IE Cache ======================</p><p></p><p>C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully</p><p>C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully</p><p>C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully</p><p>C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully</p><p>C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully</p><p>C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully</p><p>C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully</p><p>C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully</p><p>C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\IE\1B7WZRY1 will be deleted at reboot</p><p>C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\IE\6XS8ZGT0 will be deleted at reboot</p><p>C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\IE\V1J2YMB4 will be deleted at reboot</p><p></p><p>==== Empty FireFox Cache ======================</p><p></p><p>C:\Users\Shukhrat\AppData\Local\Mozilla\Firefox\Profiles\60j4u87l.default\cache2 emptied successfully</p><p></p><p>==== Empty Chrome Cache ======================</p><p></p><p>C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully</p><p></p><p>==== Empty All Flash Cache ======================</p><p></p><p>No Flash Cache Found</p><p></p><p>==== Empty All Java Cache ======================</p><p></p><p>Java Cache cleared successfully</p><p></p><p>==== C:\zoek_backup content ======================</p><p></p><p>C:\zoek_backup (files=173 folders=32 143557170 bytes)</p><p></p><p>==== Empty Temp Folders ======================</p><p></p><p>C:\WINDOWS\Temp will be emptied at reboot</p><p></p><p>==== After Reboot ======================</p><p></p><p>==== Empty Temp Folders ======================</p><p></p><p>C:\WINDOWS\Temp successfully emptied</p><p>C:\Users\Shukhrat\AppData\Local\Temp successfully emptied</p><p></p><p>==== Empty Recycle Bin ======================</p><p></p><p>C:\$RECYCLE.BIN successfully emptied</p><p></p><p>==== Deleting Files / Folders ======================</p><p></p><p>"C:\PROGRA~2\CyberPower PowerPanel Personal Edition" not found</p><p>"C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\IE\1B7WZRY1" not found</p><p>"C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\IE\6XS8ZGT0" not found</p><p>"C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\IE\V1J2YMB4" not found</p><p></p><p>==== EOF on Sun 10/04/2015 at 7:30:52.63 ======================</p></blockquote><p></p>
[QUOTE="Shuggie, post: 438319, member: 43034"] Sorry about for both not doing the script right and bumping. Thanks for your help. Here are thew new results: Zoek.exe v5.0.0.1 Updated 30-09-2015 Tool run by Shukhrat on Sun 10/04/2015 at 7:12:40.18. Microsoft Windows 10 Pro 10.0.10240 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Shukhrat\Desktop\zoek.exe [Scan all users] [Script inserted] ==== Older Logs ====================== C:\zoek-results2015-10-03-152546.log 57773 bytes ==== System Restore Info ====================== 10/4/2015 7:13:10 AM Zoek.exe System Restore Point Created Successfully. ==== Empty Folders Check ====================== C:\Program Files\Google deleted successfully C:\PROGRA~3\ALM deleted successfully C:\PROGRA~3\Comms deleted successfully C:\PROGRA~3\PCSettings deleted successfully C:\PROGRA~3\SoftwareDistribution deleted successfully C:\Users\QBDataServiceUser24\AppData\LocalLow deleted successfully C:\Users\Shukhrat\AppData\Local\EmieBrowserModeList deleted successfully C:\Users\Shukhrat\AppData\Local\EmieSiteList deleted successfully C:\Users\Shukhrat\AppData\Local\EmieUserList deleted successfully C:\Users\Shukhrat\AppData\Local\LogMeIn Rescue Applet deleted successfully C:\Users\Shukhrat\AppData\Local\NetworkTiles deleted successfully C:\Users\Shukhrat\AppData\Local\PeerDistRepub deleted successfully C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistPub deleted successfully C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistRepub deleted successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-3881268226-3317070643-463687028-1001\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{F04D2D30-776C-4d02-8627-8E4385ECA58D} deleted successfully ==== Deleting Services ====================== ==== Batch Command(s) Run By Tool====================== Windows IP Configuration Successfully flushed the DNS Resolver Cache. ==== Deleting Files \ Folders ====================== C:\PROGRA~3\Package Cache deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted C:\Users\Shukhrat\AppData\Roaming\Mozilla\Firefox\Profiles\60j4u87l.default\searchplugins\safesearch.xml deleted C:\Users\Shukhrat\GeForce_Experience_v2.1.0.0.exe deleted C:\Users\Shukhrat\vlc-2.1.3-win64.exe deleted "C:\PROGRA~2\CyberPower PowerPanel Personal Edition\ppped.exe" deleted "C:\PROGRA~2\CyberPower PowerPanel Personal Edition\pppeuser.exe" deleted "C:\PROGRA~2\CyberPower PowerPanel Personal Edition" not deleted ==== Firefox Start and Search pages ====================== ProfilePath: C:\Users\Shukhrat\AppData\Roaming\Mozilla\Firefox\Profiles\60j4u87l.default user_pref("browser.startup.homepage", "about:home"); user_pref("browser.search.defaultenginename.US", "Google"); ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.1.0.9\coFFPlgn" [10/03/2015 11:20 AM] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Shukhrat\AppData\Roaming\Mozilla\Firefox\Profiles\60j4u87l.default - Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.1.0.9\coFFPlgn AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} - Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi ==== Firefox Plugins ====================== Profilepath: C:\Users\Shukhrat\AppData\Roaming\Mozilla\Firefox\Profiles\60j4u87l.default 1A62BB86D17B8DC0D4339BACC8D60635 - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll - Shockwave Flash ==== Chromium Look ====================== Google Chrome Version: 45.0.2454.101 HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions cjabmdjcfcfdmffimndhafhblfmpjdpe - C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.2.15\Exts\Chrome.crx[07/10/2015 12:03 AM] iikflkcanblccfahdhdonehdalibjnif - No path found[] lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[07/14/2014 06:22 PM] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions lmjegmlicamnimmfhcmpkclmigmmcbeh - No path found[] Floorplanner - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\abopacaefhbognnmeigicfpgnmpideag Firebug Lite for Google Chrome™ - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench Google Cast - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd Videostream for Google Chromecast™ - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnciopoikihiagdjbjpnocolokfelagl Tab Manager - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\coonecdghnepgiblpccbbihiahajndda Calculator Widget - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpplagdendnkjkiaiaijfphiflaflinc AdBlock - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom Amazonia Right Click Search - Amazon Co UK - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpmkacpkcakamljkjdjfgmncbpfjacjl XPath Helper - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgimnogjllphhhkhlmebbmlgjoejdpjl DS Amazon Quick View mx - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\iphjnmlnfhakpddieemnfolejgbpjmcd DS Amazon Quick View - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkompbllimaoekaogchhkmkdogpkhojg Linkclump - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfpjkncokllnfokkgpkobnkbkmelfefj InvisibleHand - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\lghjfnfolmcikomdjmoiemllfnlmmoko JSON Editor - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhkmoheomjbkfloacpgllgjcamhihfaj ASIN Helper - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\lknlnfochnodlbdhbakjjgelgomhjigk Google Drive App Launcher - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh Session Manager - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\mghenlmbmjcpehccoangkdpagbcbkdpc Keepa - Amazon Price Tracker - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\neebplgakaahbhdphmkckjjcegoiijjo Context Menu Search - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocpcmghnefmdhljkoiapafejjohldoga Chrome Apps & Extensions Developer Tool - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohmmkhmmmpcnpikjeljgnaoabkaalbgc The Tracktor - Price History Tracker - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\onajjgekdldckfgodnmoallcmdmfcfom Extract Asin Universal - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\pidkhbhaankobmkallidpgihcdcjdefn Amazonia Right Click Search - Amazon.com - Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkngfjindjkdikklhiiofondocdmdeep ==== Chromium Fix ====================== C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_shoppingcart.aliexpress.com_0.localstorage deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_shoppingcart.aliexpress.com_0.localstorage-journal deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.escapetheroomnyc.com_0.localstorage deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.escapetheroomnyc.com_0.localstorage-journal deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.shoefitr.com_0.localstorage deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.shoefitr.com_0.localstorage-journal deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d3b3ehuo35wzeh.cloudfront.net_0.localstorage deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d3b3ehuo35wzeh.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d3l3lkinz3f56t.cloudfront.net_0.localstorage deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d3l3lkinz3f56t.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_dew9ckzjyt2gn.cloudfront.net_0.localstorage deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_dew9ckzjyt2gn.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.searchesinteractive.com_0.localstorage"]www.searchesinteractive.com_0.localstorage[/URL] deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.searchesinteractive.com_0.localstorage-journal"]www.searchesinteractive.com_0.localstorage-journal[/URL] deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_deals.ebay.com_0.localstorage deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_deals.ebay.com_0.localstorage-journal deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_slickdeals.net_0.localstorage deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_slickdeals.net_0.localstorage-journal deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ebay-turbo-lister.en.softonic.com_0.localstorage deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ebay-turbo-lister.en.softonic.com_0.localstorage-journal deleted successfully C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Extensions\pidkhbhaankobmkallidpgihcdcjdefn deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="[URL="http://www.google.com"]Google[/URL]" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="[URL="http://www.google.com"]Google[/URL]" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {012E1000-F331-11DB-8314-0800200C9A66} Google Url="[URL="http://www.google.com/search?q={searchTerms}"]{searchTerms} - Google Search[/URL]" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="[URL="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"]{searchTerms} - Bing[/URL]" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Unknown Url="Not_Found" ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-3881268226-3317070643-463687028-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Empty IE Cache ====================== C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\IE\1B7WZRY1 will be deleted at reboot C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\IE\6XS8ZGT0 will be deleted at reboot C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\IE\V1J2YMB4 will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\Shukhrat\AppData\Local\Mozilla\Firefox\Profiles\60j4u87l.default\cache2 emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Shukhrat\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== No Flash Cache Found ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=173 folders=32 143557170 bytes) ==== Empty Temp Folders ====================== C:\WINDOWS\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\WINDOWS\Temp successfully emptied C:\Users\Shukhrat\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\PROGRA~2\CyberPower PowerPanel Personal Edition" not found "C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\IE\1B7WZRY1" not found "C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\IE\6XS8ZGT0" not found "C:\Users\Shukhrat\AppData\Local\Microsoft\Windows\INetCache\IE\V1J2YMB4" not found ==== EOF on Sun 10/04/2015 at 7:30:52.63 ====================== [/QUOTE]
Insert quotes…
Verification
Post reply
Top