Zoek.exe v5.0.0.0 Updated 19-10-2014
Tool run by Owner on Wed 10/22/2014 at 8:37:17.40.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Owner\Downloads\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
10/22/2014 8:39:57 AM Zoek.exe System Restore Point Created Succesfully.
==== Deleting CLSID Registry Keys ======================
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Batch Command(s) Run By Tool======================
==== Deleting Files \ Folders ======================
C:\PROGRA~3\hddebpnfofdplfjgiblahcjipanhphdd deleted
C:\PROGRA~3\plaffjnghbmknicpbpmdpileedkiodgb deleted
C:\Users\Owner\AppData\LocalLow\{1A9FDB0B-6B9E-ADF7-5725-26B0CCB2148C} deleted
C:\Users\Owner\AppData\LocalLow\{298A4080-3F2D-B8BD-1FEA-0D7D88E20F66} deleted
C:\Users\Owner\AppData\LocalLow\{89EB0DBA-07F2-3660-7850-89CD7DB1EB0D} deleted
C:\Users\Owner\AppData\LocalLow\{A05F7535-8BE2-3D7A-7219-908BCDCA55FF} deleted
C:\Users\Owner\AppData\LocalLow\{F53F0C4E-EF54-61F5-19C0-1164366362EB} deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\{226A52A9-8F91-C8EB-A43A-D27AE6802D80} deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\{3016B028-F97F-C82E-037C-4D33BB3B78D2} deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\{456A8F60-E620-32B8-5C32-658E80FDAD5C} deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\{9C608EB7-8620-83C9-A11B-2CFA2294329E} deleted
C:\Users\Owner\AppData\Local\Packages\windows_ie_ac_001\AC\{1A9FDB0B-6B9E-ADF7-5725-26B0CCB2148C} deleted
C:\Users\Owner\AppData\Local\Packages\windows_ie_ac_001\AC\{298A4080-3F2D-B8BD-1FEA-0D7D88E20F66} deleted
C:\Users\Owner\AppData\Local\Packages\windows_ie_ac_001\AC\{89EB0DBA-07F2-3660-7850-89CD7DB1EB0D} deleted
C:\Users\Owner\AppData\Local\Packages\windows_ie_ac_001\AC\{A05F7535-8BE2-3D7A-7219-908BCDCA55FF} deleted
C:\Users\Owner\AppData\Local\Packages\windows_ie_ac_001\AC\{F53F0C4E-EF54-61F5-19C0-1164366362EB} deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\Packages\windows_ie_ac_001\AC\{226A52A9-8F91-C8EB-A43A-D27AE6802D80} deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\Packages\windows_ie_ac_001\AC\{3016B028-F97F-C82E-037C-4D33BB3B78D2} deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\Packages\windows_ie_ac_001\AC\{456A8F60-E620-32B8-5C32-658E80FDAD5C} deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\Packages\windows_ie_ac_001\AC\{9C608EB7-8620-83C9-A11B-2CFA2294329E} deleted
C:\PROGRA~3\5fd2209321ea4ae9 deleted
C:\PROGRA~3\AlllSaeveer deleted
C:\PROGRA~2\AlllSaeveer deleted
C:\Users\Owner\86B3F2D6AC2B00148AE1F2F77F781B0C.TMP deleted
C:\PROGRA~3\RoboSaVoeR deleted
C:\PROGRA~3\InstallMate deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\GPT.INI deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted
C:\Users\Owner\Downloads\JUNKWARE REMOVAL TOOL DOWNLOAD LINK.exe deleted
"C:\PROGRA~3\ambnffimpilgelcdoenlbppkedcaojpo\ambnffimpilgelcdoenlbppkedcaojpo.crx" deleted
"C:\PROGRA~3\ambnffimpilgelcdoenlbppkedcaojpo\update.xml" deleted
"C:\PROGRA~3\ambnffimpilgelcdoenlbppkedcaojpo" deleted
==== Chromium Look ======================
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
apdfllckaahabafndbhieahigkjlhalf - C:\Users\Owner\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx[04/30/2014 06:17 PM]
Google Voice Search Hotword (Beta) - Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn
WattcHItNOAds - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\ambnffimpilgelcdoenlbppkedcaojpo
==== Chromium Startpages ======================
C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "
http://search.gboxapp.com/",
"startup_urls": [ "
http://search.gboxapp.com/" ],
==== Chromium Fix ======================
C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_
www.superfish.com_0.localstorage deleted successfully
C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_
www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_
www.specsavers.com.au_0.localstorage deleted successfully
C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_
www.specsavers.com.au_0.localstorage-journal deleted successfully
C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_
www.ask.com_0.localstorage deleted successfully
C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_
www.ask.com_0.localstorage-journal deleted successfully
C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_onlineservices.ato.gov.au_0.localstorage deleted successfully
C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_onlineservices.ato.gov.au_0.localstorage-journal deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\ambnffimpilgelcdoenlbppkedcaojpo deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ambnffimpilgelcdoenlbppkedcaojpo_0.localstorage deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ambnffimpilgelcdoenlbppkedcaojpo_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="
http://www.google.com"
"Search Page"="
http://www.google.com"
"Search Bar"="
http://www.google.com/ie"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="
http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="
http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="
http://www.google.com/search/?q=%s"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="
http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="
http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="
http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="
http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="
http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="
http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="
http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="
http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="
http://www.google.com/search?q={sea...putEncoding}&oe={outputEncoding}&sourceid=ie7"
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\7d169fbd-0938-4d95-831b-0b80555bb062 deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3A5DCCC0-8B93-599E-CE28-F5840D65AFBD} deleted successfully
HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ETDWare deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Owner\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Owner\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=106 folders=35 4269549 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Owner\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Owner\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on Wed 10/22/2014 at 16:59:32.76 ======================