Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Slow laptop, many chrome.exe*32 processes running
Message
<blockquote data-quote="Mamabeanie" data-source="post: 435819" data-attributes="member: 42624"><p>Hi and thank you for taking the time to reply.</p><p></p><p>Zoek.exe v5.0.0.0 Updated 23-09-2015</p><p>Tool run by User on 25/09/2015 at 8:23:28.10.</p><p>Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64</p><p>Running in: Normal Mode Internet Access Detected</p><p>Launched: C:\Users\User\Downloads\zoek.exe [Scan all users] [Script inserted] </p><p></p><p>==== System Restore Info ======================</p><p></p><p>25/09/2015 08:28:48 Zoek.exe System Restore Point Created Successfully.</p><p></p><p>==== Empty Folders Check ======================</p><p></p><p>C:\PROGRA~2\iMesh Applications deleted successfully</p><p>C:\PROGRA~2\MSXML 4.0 deleted successfully</p><p>C:\PROGRA~2\COMMON~1\Symantec Shared deleted successfully</p><p>C:\Users\User\AppData\Roaming\HP Support Assistant deleted successfully</p><p>C:\Users\User\AppData\Local\calibre-cache deleted successfully</p><p></p><p>==== Deleting CLSID Registry Keys ======================</p><p></p><p>HKEY_USERS\S-1-5-21-3126409496-4131717126-2509159792-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully</p><p>HKEY_USERS\S-1-5-21-3126409496-4131717126-2509159792-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully</p><p>HKEY_USERS\S-1-5-21-3126409496-4131717126-2509159792-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully</p><p>HKEY_USERS\S-1-5-21-3126409496-4131717126-2509159792-1000\Software\Microsoft\Internet Explorer\SearchScopes\{F0CCE5DE-FC36-4BAB-9728-4DAE00D768DB} deleted successfully</p><p>HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully</p><p>HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully</p><p>HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{F0CCE5DE-FC36-4BAB-9728-4DAE00D768DB} deleted successfully</p><p>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F0CCE5DE-FC36-4BAB-9728-4DAE00D768DB} deleted successfully</p><p></p><p>==== Deleting CLSID Registry Values ======================</p><p></p><p>HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully</p><p></p><p>==== Deleting Services ======================</p><p></p><p>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\APNMCP deleted successfully</p><p>HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\APNMCP deleted successfully</p><p>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater18.8.0 deleted successfully</p><p>HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater18.8.0 deleted successfully</p><p></p><p>==== FireFox Fix ======================</p><p></p><p>ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\5mbvcekw.default</p><p></p><p>user.js not found</p><p>---- Lines mysearch removed from prefs.js ----</p><p>user_pref("browser.startup.homepage", "<a href="https://mysearch.avg.com?cid={22C7B757-8B36-4705-833F-551931B96263}&mid=540f4acbef9e47d2ab7cd16fd8c94f3d-1ce826" target="_blank">Search</a></p><p>---- Lines browser.startup.page removed from prefs.js ----</p><p>user_pref("browser.startup.page", 3);</p><p>---- FireFox user.js and prefs.js backups ---- </p><p></p><p>prefs_092015_0850_.backup</p><p></p><p>==== Batch Command(s) Run By Tool======================</p><p></p><p></p><p>Windows IP Configuration</p><p></p><p>Successfully flushed the DNS Resolver Cache.</p><p></p><p>==== Deleting Files \ Folders ======================</p><p></p><p>C:\PROGRA~2\iMesh Applications not found</p><p>C:\PROGRA~2\Windows Live SkyDrive deleted</p><p>C:\Users\User\AppData\Roaming\calibre deleted</p><p>C:\Users\User\.android deleted</p><p>C:\PROGRA~2\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml deleted</p><p>C:\PROGRA~2\AVG Security Toolbar deleted</p><p>C:\install.exe deleted</p><p>C:\PROGRA~3\AskPartnerNetwork deleted</p><p>C:\PROGRA~3\APN deleted</p><p>C:\PROGRA~3\hpqp.txt deleted</p><p>C:\PROGRA~3\Avg_Update_0215tb deleted</p><p>C:\PROGRA~3\Avg_Update_0414c deleted</p><p>C:\PROGRA~3\Avg_Update_0814tb deleted</p><p>C:\PROGRA~3\Avg_Update_1114tb deleted</p><p>C:\PROGRA~3\AVG Security Toolbar deleted</p><p>C:\PROGRA~3\AVG Secure Search deleted</p><p>C:\PROGRA~3\AVG SafeGuard toolbar deleted</p><p>C:\Users\User\AppData\Local\AVG SafeGuard toolbar deleted</p><p>C:\Users\User\AppData\Local\AskPartnerNetwork deleted</p><p>C:\Users\User\Downloads\avg_free_stb_all_2014_4355_cnet.exe deleted</p><p>C:\Users\User\Downloads\iMeshSetup-r1477-w-bc.exe deleted</p><p>C:\Users\User\AppData\LocalLow\AVG SafeGuard toolbar deleted</p><p>C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG SafeGuard toolbar deleted</p><p>C:\Windows\SysNative\config\systemprofile\Searches deleted</p><p>C:\Windows\SysWow64\AI_RecycleBin deleted</p><p>"C:\Windows\Installer\6e7983.msi" deleted</p><p>"C:\PROGRA~2\AVG SafeGuard toolbar\vprot.exe" deleted</p><p>"C:\PROGRA~2\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" deleted</p><p>"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\18.8.0\avgdttbx.dll" deleted</p><p>"C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller\18.8.0\SiteSafety.dll" deleted</p><p>"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\18.8.0\log4cplusU.dll" deleted</p><p>"C:\PROGRA~2\AskPartnerNetwork" deleted</p><p>"C:\PROGRA~2\AVG SafeGuard toolbar" deleted</p><p>"C:\PROGRA~2\COMMON~1\AVG Secure Search" deleted</p><p>"C:\PROGRA~2\AskPartnerNetwork\Toolbar" deleted</p><p>"C:\PROGRA~2\AskPartnerNetwork\Toolbar\Updater" deleted</p><p>"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller" deleted</p><p>"C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller" deleted</p><p>"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater" deleted</p><p>"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\18.8.0" deleted</p><p>"C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller\18.8.0" deleted</p><p>"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\18.8.0" deleted</p><p></p><p>==== Firefox Start and Search pages ======================</p><p></p><p>ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\5mbvcekw.default</p><p>user_pref("browser.search.defaultenginename", "AVG Secure Search");</p><p>user_pref("browser.search.selectedEngine", "AVG Secure Search");</p><p>user_pref("keyword.URL", "");</p><p></p><p>==== Firefox Extensions Registry ======================</p><p></p><p>[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]</p><p>"{F003DA68-8256-4b37-A6C4-350FA04494DF}"="C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt" [15/08/2014 05:47]</p><p></p><p>==== Firefox Extensions ======================</p><p></p><p>ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\5mbvcekw.default</p><p>- LF PQ Quiz - %ProfilePath%\extensions\lfpqquiz@example.net.xpi</p><p></p><p>AppDir: C:\Program Files (x86)\Mozilla Firefox</p><p>- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}</p><p>- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi</p><p></p><p>==== Firefox Plugins ======================</p><p></p><p></p><p>==== Chromium Look ======================</p><p></p><p>Google Chrome Version: 45.0.2454.99</p><p></p><p>HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions</p><p>aaaaaiabcopkplhgaedhbloeejhhankf - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx[]</p><p>lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[01/05/2015 11:17]</p><p></p><p>Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf</p><p>Angry Birds - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj</p><p>OneTab - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\chphlpgkkbolifaimnlloiipkdnihall</p><p>Logitech Smooth Scrolling - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk</p><p>Zen - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbmofjjidekmconddponmfdimclhnanj</p><p>Purple - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hleinhdbkhedipcodhkpdojjcnnlkjha</p><p>Eye Dropper - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmdcmlfkchdmnmnmheododdhjedfccka</p><p>Momentum - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\laookkfknpbbblfpciffpaejjkokdgca</p><p>Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg</p><p>AVG Secure Search - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof</p><p>Save to Pocket - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj</p><p>Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf</p><p>Momentum - User\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\laookkfknpbbblfpciffpaejjkokdgca</p><p>Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\lccekmodgklaepjeofjdjpbminllajkg</p><p>Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\lccekmodgklaepjeofjdjpbminllajkg</p><p>Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf</p><p>Leapforce - User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\belncckcaakhmonmcfmegbglccbjlebc</p><p>RaterAide - User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\bhlblfbajhmkflfamdiiccdohdkbdaon</p><p>Sunflowers - User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\iempnicmekabbnffhpbkdjkmelcpjlep</p><p>RaterAide PQ Search - User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ilobhiadnbcdmgnflkkdjaecmafmajcf</p><p>Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lccekmodgklaepjeofjdjpbminllajkg</p><p>Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf</p><p>Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lccekmodgklaepjeofjdjpbminllajkg</p><p>Skype Click to Call - User\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl</p><p>Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf</p><p>Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lccekmodgklaepjeofjdjpbminllajkg</p><p>Skype Click to Call - User\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl</p><p>Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf</p><p>Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\lccekmodgklaepjeofjdjpbminllajkg</p><p>Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf</p><p>Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\lccekmodgklaepjeofjdjpbminllajkg</p><p></p><p>==== Chromium Fix ======================</p><p></p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.azlyrics.com_0.localstorage" target="_blank">www.azlyrics.com_0.localstorage</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.azlyrics.com_0.localstorage-journal" target="_blank">www.azlyrics.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.lyricsfreak.com_0.localstorage" target="_blank">www.lyricsfreak.com_0.localstorage</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.lyricsfreak.com_0.localstorage-journal" target="_blank">www.lyricsfreak.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.lyricsmode.com_0.localstorage" target="_blank">www.lyricsmode.com_0.localstorage</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.lyricsmode.com_0.localstorage-journal" target="_blank">www.lyricsmode.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.lyricsty.com_0.localstorage" target="_blank">www.lyricsty.com_0.localstorage</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.lyricsty.com_0.localstorage-journal" target="_blank">www.lyricsty.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_<a href="http://www.azlyrics.com_0.localstorage" target="_blank">www.azlyrics.com_0.localstorage</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_<a href="http://www.azlyrics.com_0.localstorage-journal" target="_blank">www.azlyrics.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_<a href="http://www.lyrics.com_0.localstorage" target="_blank">www.lyrics.com_0.localstorage</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_<a href="http://www.lyrics.com_0.localstorage-journal" target="_blank">www.lyrics.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_<a href="http://www.metrolyrics.com_0.localstorage" target="_blank">www.metrolyrics.com_0.localstorage</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_<a href="http://www.metrolyrics.com_0.localstorage-journal" target="_blank">www.metrolyrics.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_homes.trovit.co.uk_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_homes.trovit.co.uk_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_wordfinder.yourdictionary.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_wordfinder.yourdictionary.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.e2save.com_0.localstorage" target="_blank">www.e2save.com_0.localstorage</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.e2save.com_0.localstorage-journal" target="_blank">www.e2save.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_static.audienceinsights.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_static.audienceinsights.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_static.cda.pl_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_static.cda.pl_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_static.olark.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 6\Local Storage\https_static.olark.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 6\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\https_static.olark.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 10\Local Storage\https_c.betrad.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 10\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_c.betrad.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_c.betrad.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_c.betrad.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\http_c.betrad.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\https_c.betrad.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\http_c.betrad.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d285jf08b4wonc.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d285jf08b4wonc.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d30ke5tqu2tkyx.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d30ke5tqu2tkyx.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d3b3ehuo35wzeh.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d3b3ehuo35wzeh.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d3l3lkinz3f56t.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d3l3lkinz3f56t.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d3mwhxgzltpnyp.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d3mwhxgzltpnyp.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_d30ke5tqu2tkyx.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_d30ke5tqu2tkyx.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_d3b3ehuo35wzeh.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_d3b3ehuo35wzeh.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\https_dsms0mj1bbhn4.cloudfront.net_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\https_dsms0mj1bbhn4.cloudfront.net_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_uk.ask.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_uk.ask.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.ask.com_0.localstorage" target="_blank">www.ask.com_0.localstorage</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.ask.com_0.localstorage-journal" target="_blank">www.ask.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_uk.ask.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_uk.ask.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_<a href="http://www.ask.com_0.localstorage" target="_blank">www.ask.com_0.localstorage</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_<a href="http://www.ask.com_0.localstorage-journal" target="_blank">www.ask.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_services.hearstmags.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_services.hearstmags.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sultan-domesticservices.co.uk_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sultan-domesticservices.co.uk_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.productsandservices.bt.com_0.localstorage" target="_blank">www.productsandservices.bt.com_0.localstorage</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.productsandservices.bt.com_0.localstorage-journal" target="_blank">www.productsandservices.bt.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_adservices02.picadmedia.com_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_adservices02.picadmedia.com_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_motorwayservicesonline.co.uk_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_motorwayservicesonline.co.uk_0.localstorage-journal deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\http_<a href="http://www.freelogoservices.com_0.localstorage" target="_blank">www.freelogoservices.com_0.localstorage</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\http_<a href="http://www.freelogoservices.com_0.localstorage-journal" target="_blank">www.freelogoservices.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.hotukdeals.com_0.localstorage" target="_blank">www.hotukdeals.com_0.localstorage</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_<a href="http://www.hotukdeals.com_0.localstorage-journal" target="_blank">www.hotukdeals.com_0.localstorage-journal</a> deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ndibdjnfmopecpmkdieinmbadjfpblof_0.localstorage deleted successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ndibdjnfmopecpmkdieinmbadjfpblof_0.localstorage-journal deleted successfully</p><p></p><p>==== Set IE to Default ======================</p><p></p><p>Old Values:</p><p>[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]</p><p>"Start Page"="<a href="https://mysearch.avg.com?cid={22C7B757-8B36-4705-833F-551931B96263}&mid=540f4acbef9e47d2ab7cd16fd8c94f3d-1ce8263ce4a102ba9838337cbad8db9f035cccf0&lang=en&ds=AVG&coid=avgtbavg&cmpid=1114tb&pr=fr&d=2014-04-20" target="_blank">Search</a> 12:55:50&v=18.8.0.179&pid=safeguard&sg=&sap=hp"</p><p>"Default_Page_URL"="<a href="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_GB&c=94&bd=Presario&pf=cnnb" target="_blank">AOL.co.uk | Breaking News, Sport, Features and Video</a>"</p><p></p><p>New Values:</p><p>[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]</p><p>"Default_Page_URL"="<a href="http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank">MSN.com - Hotmail, Outlook, Skype, Bing, Latest News, Photos & Videos</a>"</p><p>"Start Page"="<a href="http://www.google.com" target="_blank">Google</a>"</p><p></p><p>==== All HKCU SearchScopes ======================</p><p></p><p>HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes</p><p>"DefaultScope"="{8D110857-AB9A-43AE-96C2-C4192A77D4CF}"</p><p>{012E1000-F331-11DB-8314-0800200C9A66} Google Url="<a href="http://www.google.com/search?q={searchTerms}" target="_blank">{searchTerms} - Google Search</a>"</p><p>{316A4297-272D-47A2-9F74-8D0DAC2B09D2} Kelkoo Url="<a href="http://uk.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913936" target="_blank">http://uk.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913936</a>"</p><p>{8D110857-AB9A-43AE-96C2-C4192A77D4CF} AOL Search Url="<a href="http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1184&query={searchTerms}&invocationType=tb50hpcnnbie7-en-gb" target="_blank">%7BsearchTerms%7D - AOL Search results</a>"</p><p></p><p>==== Deleting Registry Keys ======================</p><p></p><p>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F405350054677A7A857BC02210 deleted successfully</p><p>HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully</p><p>HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully</p><p>HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar deleted successfully</p><p>HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C2201} deleted successfully</p><p>HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D2A425F405350054677A7A857BC02210 deleted successfully</p><p>HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper deleted successfully</p><p></p><p>==== Empty IE Cache ======================</p><p></p><p>C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully</p><p>C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3ZTI15MV will be deleted at reboot</p><p>C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T0C2I3RU will be deleted at reboot</p><p>C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V8SNTP5S will be deleted at reboot</p><p></p><p>==== Empty FireFox Cache ======================</p><p></p><p>C:\Users\User\AppData\Local\Mozilla\Firefox\Profiles\5mbvcekw.default\Cache will be emptied at reboot</p><p>C:\Users\User\AppData\Local\Mozilla\Firefox\Profiles\5mbvcekw.default\cache2 emptied successfully</p><p></p><p>==== Empty Chrome Cache ======================</p><p></p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Cache emptied successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 10\Cache emptied successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 11\Cache emptied successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Cache emptied successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Cache emptied successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 4\Cache emptied successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Cache emptied successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 6\Cache emptied successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Cache emptied successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 8\Cache emptied successfully</p><p>C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Cache emptied successfully</p><p></p><p>==== Empty All Flash Cache ======================</p><p></p><p>Flash Cache Emptied Successfully</p><p></p><p>==== Empty All Java Cache ======================</p><p></p><p>Java Cache cleared successfully</p><p></p><p>==== C:\zoek_backup content ======================</p><p></p><p>C:\zoek_backup (files=1944 folders=580 170687692 bytes)</p><p></p><p>==== Empty Temp Folders ======================</p><p></p><p>C:\Users\Default\AppData\Local\Temp emptied successfully</p><p>C:\Users\Default User\AppData\Local\Temp emptied successfully</p><p>C:\Users\User\AppData\Local\Temp will be emptied at reboot</p><p>C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot</p><p>C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully</p><p>C:\Windows\Temp will be emptied at reboot</p><p></p><p>==== After Reboot ======================</p><p></p><p>==== Empty Temp Folders ======================</p><p></p><p>C:\Windows\Temp successfully emptied</p><p>C:\Users\User\AppData\Local\Temp successfully emptied</p><p></p><p>==== Empty Recycle Bin ======================</p><p></p><p>C:\$RECYCLE.BIN successfully emptied</p><p></p><p>==== Deleting Files / Folders ======================</p><p></p><p>"C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3ZTI15MV" not found</p><p>"C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T0C2I3RU" not found</p><p>"C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V8SNTP5S" not found</p><p>"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted</p><p></p><p>==== EOF on 25/09/2015 at 9:13:29.46 ======================</p></blockquote><p></p>
[QUOTE="Mamabeanie, post: 435819, member: 42624"] Hi and thank you for taking the time to reply. Zoek.exe v5.0.0.0 Updated 23-09-2015 Tool run by User on 25/09/2015 at 8:23:28.10. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\User\Downloads\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 25/09/2015 08:28:48 Zoek.exe System Restore Point Created Successfully. ==== Empty Folders Check ====================== C:\PROGRA~2\iMesh Applications deleted successfully C:\PROGRA~2\MSXML 4.0 deleted successfully C:\PROGRA~2\COMMON~1\Symantec Shared deleted successfully C:\Users\User\AppData\Roaming\HP Support Assistant deleted successfully C:\Users\User\AppData\Local\calibre-cache deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-3126409496-4131717126-2509159792-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_USERS\S-1-5-21-3126409496-4131717126-2509159792-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_USERS\S-1-5-21-3126409496-4131717126-2509159792-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_USERS\S-1-5-21-3126409496-4131717126-2509159792-1000\Software\Microsoft\Internet Explorer\SearchScopes\{F0CCE5DE-FC36-4BAB-9728-4DAE00D768DB} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{F0CCE5DE-FC36-4BAB-9728-4DAE00D768DB} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F0CCE5DE-FC36-4BAB-9728-4DAE00D768DB} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\APNMCP deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\APNMCP deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater18.8.0 deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater18.8.0 deleted successfully ==== FireFox Fix ====================== ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\5mbvcekw.default user.js not found ---- Lines mysearch removed from prefs.js ---- user_pref("browser.startup.homepage", "[URL="https://mysearch.avg.com?cid={22C7B757-8B36-4705-833F-551931B96263}&mid=540f4acbef9e47d2ab7cd16fd8c94f3d-1ce826"]Search[/URL] ---- Lines browser.startup.page removed from prefs.js ---- user_pref("browser.startup.page", 3); ---- FireFox user.js and prefs.js backups ---- prefs_092015_0850_.backup ==== Batch Command(s) Run By Tool====================== Windows IP Configuration Successfully flushed the DNS Resolver Cache. ==== Deleting Files \ Folders ====================== C:\PROGRA~2\iMesh Applications not found C:\PROGRA~2\Windows Live SkyDrive deleted C:\Users\User\AppData\Roaming\calibre deleted C:\Users\User\.android deleted C:\PROGRA~2\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml deleted C:\PROGRA~2\AVG Security Toolbar deleted C:\install.exe deleted C:\PROGRA~3\AskPartnerNetwork deleted C:\PROGRA~3\APN deleted C:\PROGRA~3\hpqp.txt deleted C:\PROGRA~3\Avg_Update_0215tb deleted C:\PROGRA~3\Avg_Update_0414c deleted C:\PROGRA~3\Avg_Update_0814tb deleted C:\PROGRA~3\Avg_Update_1114tb deleted C:\PROGRA~3\AVG Security Toolbar deleted C:\PROGRA~3\AVG Secure Search deleted C:\PROGRA~3\AVG SafeGuard toolbar deleted C:\Users\User\AppData\Local\AVG SafeGuard toolbar deleted C:\Users\User\AppData\Local\AskPartnerNetwork deleted C:\Users\User\Downloads\avg_free_stb_all_2014_4355_cnet.exe deleted C:\Users\User\Downloads\iMeshSetup-r1477-w-bc.exe deleted C:\Users\User\AppData\LocalLow\AVG SafeGuard toolbar deleted C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG SafeGuard toolbar deleted C:\Windows\SysNative\config\systemprofile\Searches deleted C:\Windows\SysWow64\AI_RecycleBin deleted "C:\Windows\Installer\6e7983.msi" deleted "C:\PROGRA~2\AVG SafeGuard toolbar\vprot.exe" deleted "C:\PROGRA~2\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\18.8.0\avgdttbx.dll" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller\18.8.0\SiteSafety.dll" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\18.8.0\log4cplusU.dll" deleted "C:\PROGRA~2\AskPartnerNetwork" deleted "C:\PROGRA~2\AVG SafeGuard toolbar" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search" deleted "C:\PROGRA~2\AskPartnerNetwork\Toolbar" deleted "C:\PROGRA~2\AskPartnerNetwork\Toolbar\Updater" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\18.8.0" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller\18.8.0" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\18.8.0" deleted ==== Firefox Start and Search pages ====================== ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\5mbvcekw.default user_pref("browser.search.defaultenginename", "AVG Secure Search"); user_pref("browser.search.selectedEngine", "AVG Secure Search"); user_pref("keyword.URL", ""); ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "{F003DA68-8256-4b37-A6C4-350FA04494DF}"="C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt" [15/08/2014 05:47] ==== Firefox Extensions ====================== ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\5mbvcekw.default - LF PQ Quiz - %ProfilePath%\extensions\lfpqquiz@example.net.xpi AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} - Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi ==== Firefox Plugins ====================== ==== Chromium Look ====================== Google Chrome Version: 45.0.2454.99 HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions aaaaaiabcopkplhgaedhbloeejhhankf - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx[] lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[01/05/2015 11:17] Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf Angry Birds - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj OneTab - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\chphlpgkkbolifaimnlloiipkdnihall Logitech Smooth Scrolling - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk Zen - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbmofjjidekmconddponmfdimclhnanj Purple - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hleinhdbkhedipcodhkpdojjcnnlkjha Eye Dropper - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmdcmlfkchdmnmnmheododdhjedfccka Momentum - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\laookkfknpbbblfpciffpaejjkokdgca Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg AVG Secure Search - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof Save to Pocket - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf Momentum - User\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\laookkfknpbbblfpciffpaejjkokdgca Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\lccekmodgklaepjeofjdjpbminllajkg Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\lccekmodgklaepjeofjdjpbminllajkg Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf Leapforce - User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\belncckcaakhmonmcfmegbglccbjlebc RaterAide - User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\bhlblfbajhmkflfamdiiccdohdkbdaon Sunflowers - User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\iempnicmekabbnffhpbkdjkmelcpjlep RaterAide PQ Search - User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ilobhiadnbcdmgnflkkdjaecmafmajcf Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lccekmodgklaepjeofjdjpbminllajkg Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lccekmodgklaepjeofjdjpbminllajkg Skype Click to Call - User\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lccekmodgklaepjeofjdjpbminllajkg Skype Click to Call - User\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\lccekmodgklaepjeofjdjpbminllajkg Search App By Ask v2 - User\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\lccekmodgklaepjeofjdjpbminllajkg ==== Chromium Fix ====================== C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.azlyrics.com_0.localstorage"]www.azlyrics.com_0.localstorage[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.azlyrics.com_0.localstorage-journal"]www.azlyrics.com_0.localstorage-journal[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.lyricsfreak.com_0.localstorage"]www.lyricsfreak.com_0.localstorage[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.lyricsfreak.com_0.localstorage-journal"]www.lyricsfreak.com_0.localstorage-journal[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.lyricsmode.com_0.localstorage"]www.lyricsmode.com_0.localstorage[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.lyricsmode.com_0.localstorage-journal"]www.lyricsmode.com_0.localstorage-journal[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.lyricsty.com_0.localstorage"]www.lyricsty.com_0.localstorage[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.lyricsty.com_0.localstorage-journal"]www.lyricsty.com_0.localstorage-journal[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_[URL="http://www.azlyrics.com_0.localstorage"]www.azlyrics.com_0.localstorage[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_[URL="http://www.azlyrics.com_0.localstorage-journal"]www.azlyrics.com_0.localstorage-journal[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_[URL="http://www.lyrics.com_0.localstorage"]www.lyrics.com_0.localstorage[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_[URL="http://www.lyrics.com_0.localstorage-journal"]www.lyrics.com_0.localstorage-journal[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_[URL="http://www.metrolyrics.com_0.localstorage"]www.metrolyrics.com_0.localstorage[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_[URL="http://www.metrolyrics.com_0.localstorage-journal"]www.metrolyrics.com_0.localstorage-journal[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_homes.trovit.co.uk_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_homes.trovit.co.uk_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_wordfinder.yourdictionary.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_wordfinder.yourdictionary.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.e2save.com_0.localstorage"]www.e2save.com_0.localstorage[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.e2save.com_0.localstorage-journal"]www.e2save.com_0.localstorage-journal[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_static.audienceinsights.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_static.audienceinsights.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_static.cda.pl_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_static.cda.pl_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_static.olark.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 6\Local Storage\https_static.olark.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 6\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\https_static.olark.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 10\Local Storage\https_c.betrad.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 10\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_c.betrad.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_c.betrad.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_c.betrad.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\http_c.betrad.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\https_c.betrad.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\http_c.betrad.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d285jf08b4wonc.cloudfront.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d285jf08b4wonc.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d30ke5tqu2tkyx.cloudfront.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d30ke5tqu2tkyx.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d3b3ehuo35wzeh.cloudfront.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d3b3ehuo35wzeh.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d3l3lkinz3f56t.cloudfront.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d3l3lkinz3f56t.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d3mwhxgzltpnyp.cloudfront.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_d3mwhxgzltpnyp.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_d30ke5tqu2tkyx.cloudfront.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\https_d30ke5tqu2tkyx.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_d16fk4ms6rqz1v.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_d3b3ehuo35wzeh.cloudfront.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Local Storage\https_d3b3ehuo35wzeh.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\https_dsms0mj1bbhn4.cloudfront.net_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\https_dsms0mj1bbhn4.cloudfront.net_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_uk.ask.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_uk.ask.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.ask.com_0.localstorage"]www.ask.com_0.localstorage[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.ask.com_0.localstorage-journal"]www.ask.com_0.localstorage-journal[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_uk.ask.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_uk.ask.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_[URL="http://www.ask.com_0.localstorage"]www.ask.com_0.localstorage[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_[URL="http://www.ask.com_0.localstorage-journal"]www.ask.com_0.localstorage-journal[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_services.hearstmags.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_services.hearstmags.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sultan-domesticservices.co.uk_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_sultan-domesticservices.co.uk_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.productsandservices.bt.com_0.localstorage"]www.productsandservices.bt.com_0.localstorage[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.productsandservices.bt.com_0.localstorage-journal"]www.productsandservices.bt.com_0.localstorage-journal[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_adservices02.picadmedia.com_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_adservices02.picadmedia.com_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_motorwayservicesonline.co.uk_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Local Storage\http_motorwayservicesonline.co.uk_0.localstorage-journal deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\http_[URL="http://www.freelogoservices.com_0.localstorage"]www.freelogoservices.com_0.localstorage[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Local Storage\http_[URL="http://www.freelogoservices.com_0.localstorage-journal"]www.freelogoservices.com_0.localstorage-journal[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.hotukdeals.com_0.localstorage"]www.hotukdeals.com_0.localstorage[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_[URL="http://www.hotukdeals.com_0.localstorage-journal"]www.hotukdeals.com_0.localstorage-journal[/URL] deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ndibdjnfmopecpmkdieinmbadjfpblof_0.localstorage deleted successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ndibdjnfmopecpmkdieinmbadjfpblof_0.localstorage-journal deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="[URL="https://mysearch.avg.com?cid={22C7B757-8B36-4705-833F-551931B96263}&mid=540f4acbef9e47d2ab7cd16fd8c94f3d-1ce8263ce4a102ba9838337cbad8db9f035cccf0&lang=en&ds=AVG&coid=avgtbavg&cmpid=1114tb&pr=fr&d=2014-04-20"]Search[/URL] 12:55:50&v=18.8.0.179&pid=safeguard&sg=&sap=hp" "Default_Page_URL"="[URL="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_GB&c=94&bd=Presario&pf=cnnb"]AOL.co.uk | Breaking News, Sport, Features and Video[/URL]" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="[URL="http://go.microsoft.com/fwlink/?LinkId=69157"]MSN.com - Hotmail, Outlook, Skype, Bing, Latest News, Photos & Videos[/URL]" "Start Page"="[URL="http://www.google.com"]Google[/URL]" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{8D110857-AB9A-43AE-96C2-C4192A77D4CF}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="[URL="http://www.google.com/search?q={searchTerms}"]{searchTerms} - Google Search[/URL]" {316A4297-272D-47A2-9F74-8D0DAC2B09D2} Kelkoo Url="[URL]http://uk.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913936[/URL]" {8D110857-AB9A-43AE-96C2-C4192A77D4CF} AOL Search Url="[URL="http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1184&query={searchTerms}&invocationType=tb50hpcnnbie7-en-gb"]%7BsearchTerms%7D - AOL Search results[/URL]" ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F405350054677A7A857BC02210 deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C2201} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D2A425F405350054677A7A857BC02210 deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3ZTI15MV will be deleted at reboot C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T0C2I3RU will be deleted at reboot C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V8SNTP5S will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\User\AppData\Local\Mozilla\Firefox\Profiles\5mbvcekw.default\Cache will be emptied at reboot C:\Users\User\AppData\Local\Mozilla\Firefox\Profiles\5mbvcekw.default\cache2 emptied successfully ==== Empty Chrome Cache ====================== C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Cache emptied successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 10\Cache emptied successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 11\Cache emptied successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Cache emptied successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Cache emptied successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 4\Cache emptied successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 5\Cache emptied successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 6\Cache emptied successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 7\Cache emptied successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 8\Cache emptied successfully C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 9\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=1944 folders=580 170687692 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\User\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\User\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3ZTI15MV" not found "C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T0C2I3RU" not found "C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V8SNTP5S" not found "C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted ==== EOF on 25/09/2015 at 9:13:29.46 ====================== [/QUOTE]
Insert quotes…
Verification
Post reply
Top