Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by metak_000 on 17/06/2015 at 19:05:19.53.
Microsoft Windows 8.1 Pro 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\metak_000\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
17/06/2015 19:06:28 Zoek.exe System Restore Point Created Successfully.
==== Empty Folders Check ======================
C:\Windows\serviceprofiles\networkservice\AppData\Local\PeerDistPub deleted successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\PeerDistRepub deleted successfully
==== Deleting CLSID Registry Keys ======================
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Batch Command(s) Run By Tool======================
==== Deleting Files \ Folders ======================
C:\Users\metak_000\AppData\Roaming\LogFile.txt deleted
C:\PROGRA~3\Package Cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"
wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [20/05/2015 13:11]
==== Firefox Extensions ======================
ProfilePath: C:\Users\METAK_~1\AppData\Roaming\Mozilla\Firefox\Profiles\7ycjsaoc.default
- Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
- Flashblock - C:\Users\metak_000\AppData\Roaming\Mozilla\Firefox\Profiles\7ycjsaoc.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
- Flashblock - %ProfilePath%\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
- NoScript - %ProfilePath%\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi
==== Firefox Plugins ======================
Profilepath: C:\Users\metak_000\AppData\Roaming\Mozilla\Firefox\Profiles\7ycjsaoc.default
18CF51689186AEB9D1D149AEB0E92D03 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL - Microsoft Office 2013
9A77557E21CB7F86ECA830AF457DA9F5 - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1218158.dll - Shockwave for Director / Shockwave for Director
4174499E49FE276D9BDCE13364559080 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_160.dll - Shockwave Flash
==== Chromium Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
eofcbnmajmjmplflapaojjnihcjkigck - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx[20/05/2015 13:11]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[20/05/2015 13:11]
Avast Online Security - metak_000\AppData\Local\Chromium\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
==== Chromium Startpages ======================
C:\Users\metak_000\AppData\Local\Chromium\User Data\Default\Preferences
ne.co/",["
https://v.cdn.vine.co/",4.558179882436888]],["
https://vimeo.com/",["
https://i0.wp.com/",2.319614810014193,"
https://i1.wp.com/",3.202453282482282,"
https://i2.wp.com/",4.08529175495037,"
https://partner.googleadservices.com/",2.025335319191497,"
https://player.vimeo.com/",2.319614810014193,"
https://sb.scorecardresearch.com/",2.6138943008368893,"
https://secure.gravatar.com/",6.733807172354633,"
https://tpc.googlesyndication.com/",2.025335319191497,"
https://vimeo.com/",2.319614810014193,"
https://www.googletagservices.com/",2.319614810014193]],["
https://vine.co/",["
https://analytics.twitter.com/",1.2643005560014162,"
https://platform.twitter.com/",1.2643005560014162,"
https://stats.g.doubleclick.net/",1.6476314515194728,"
https://t.co/",1.2643005560014162,"
https://v.cdn.vine.co/",6.097837355453974,"
https://vine.co/",1.6476314515194728]],["
https://www.facebook.com/",["
https://fbcdn-profile-a.akamaihd.net/",2.619537390278462,"
https://fbstatic-a.akamaihd.net/",2.619537390278462]],["
https://www.gog.com/",["
https://bam.nr-data.net/",1.8950007376847426,"
https://images-1.gog.com/",10.035301667730199,"
https://images-2.gog.com/",8.280304715889331,"
https://images-3.gog.com/",6.703211564646029,"
https://images-4.gog.com/",10.357451793136603,"
https://js-agent.newrelic.com/",1.6545901963366785,"
https://www.gog.com/",2.1354112790328075,"
https://www.google-analytics.com/",2.3758218203808714,"
https://www4-static1.gog.com/",2.856642903077,"
https://www4-static4.gog.com/",3.6548059003525735]],["
https://www.testdriveunlimited2.com/",["
https://ssl.google-analytics.com/",1.5108756463767559,"
https://www.testdriveunlimited2.com/",30.54919305041611]],["
https://www.youtube.com/",["
https://bs.serving-sys.com/",3.2643407999999994,"
https://clients1.google.com/",2.2733802,"
https://gg.google.com/",2.2733802,"
https://googleads.g.doubleclick.net/",3.5946609999999994,"
https://i.ytimg.com/",6.214798615072092,"
https://pagead2.googlesyndication.com/",4.255301399999999,"
https://pubads.g.doubleclick.net/",2.2733802,"
https://s.ytimg.com/",18.813752191491684,"
https://www.gstatic.com/",2.2733802,"
https://www.youtube.com/",3.2643407999999994]],["
https://www4-static1.gog.com/",["
https://www4-static1.gog.com/",2.616232361728936]],["
https://www4-static2.gog.com/",["
https://www4-static2.gog.com/",3.3374639857731285]],["
https://www4-static4.gog.com/",["
https://www4-static4.gog.com/",3.3374639857731285]]],"startup_list":[1,"
https://ad.doubleclick.net/","
https://fonts.gstatic.com/","
https://pagead2.googlesyndication.com/","
https://r5---sn-aigllnld.googlevideo.com/","
https://r6---sn-cu-ciml.googlevideo.com/","
https://s.youtube.com/","
https://s.ytimg.com/","
https://www.youtube-nocookie.com/","
https://www.youtube.com/","
https://youtu.be/"]},"download":{"directory_upgrade":true},"extensions":{"alerts":{"initialized":true},"autoupdate":{"last_check":"13076700872560861","next_check":"13077243868475922"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"commands":{},"last_chrome_version":"45.0.2406.0"},"first_run_tabs":[""],"gcm":{"check_time":"13076704202728218"},"hotword":{"previous_language":"en-GB"},"http_original_content_length":"102994034","http_received_content_length":"102994034","intl":{"accept_languages":"en-GB,en-US,en"},"invalidator":{"client_id":"YqKw2c/F31IgXyBMpTCGkA=="},"media":{"device_id_salt":"7RTWkGw4SymP0PdmtvrInA=="},"net":{"http_server_properties":{"servers":{"accounts.google.com:443":{"supports_spdy":true},"ad.doubleclick.net:443":{"supports_spdy":true},"chrome.google.com:443":{"supports_spdy":true},"clients1.google.com:443":{"supports_spdy":true},"clients2.google.com:443":{"supports_spdy":true},"clients2.googleusercontent.com:443":{"supports_spdy":true},"clients4.google.com:443":{"supports_spdy":true},"content.googleapis.com:443":{"supports_spdy":true},"fonts.googleapis.com:443":{"supports_spdy":true},"fonts.gstatic.com:443":{"supports_spdy":true},"lh3.googleusercontent.com:443":{"supports_spdy":true},"pubads.g.doubleclick.net:443":{"supports_spdy":true},"ssl.google-analytics.com:443":{"supports_spdy":true},"ssl.gstatic.com:443":{"supports_spdy":true},"stats.g.doubleclick.net:443":{"supports_spdy":true},"
www.google-analytics.com:443":{"supports_spdy":true},"
www.google.com:443":{"supports_spdy":true},"
www.googletagmanager.com:443":{"supports_spdy":true},"
www.gstatic.com:443":{"supports_spdy":true},"
www.youtube.com:443":{"supports_spdy":true}},"version":3}},"plugins":{"migrated_to_pepper_flash":true,"plugins_list":[],"removed_old_component_pepper_flash_settings":true},"profile":{"avatar_bubble_tutorial_shown":1,"avatar_index":26,"content_settings":{"exceptions":{"app_banner":{},"auto_select_certificate":{},"automatic_downloads":{},"cookies":{},"fullscreen":{},"geolocation":{},"images":{},"javascript":{},"media_stream":{},"media_stream_camera":{},"media_stream_mic":{},"metro_switch_to_desktop":{},"midi_sysex":{},"mixed_script":{},"mouselock":{},"notifications":{},"plugins":{},"popups":{},"ppapi_broker":{},"protocol_handlers":{},"push_messaging":{},"ssl_cert_decisions":{}},"pattern_pairs":{},"pref_version":1},"exit_type":"Normal","exited_cleanly":true,"icon_version":3,"managed_user_id":"","migrated_content_settings_exceptions":true,"migrated_default_content_settings":true,"migrated_default_media_stream_content_settings":true,"name":"Person 1","per_host_zoom_levels":{}},"protection":{"macs":{}},"safebrowsing":{"enabled":false},"search_provider_overrides_version":1,"session":{"restore_on_startup_migrated":true,"startup_urls_migration_time":"13076597750658415"},"translate_blocked_languages":["en"],"translate_whitelists":{}}
tive_permissions":{"api":["alarms","gcm","identity","metricsPrivate","notifications","storage","tabs","webstorePrivate"],"explicit_host":["*://*.google.com/*","*://*.gstatic.com/*","
https://*.googleapis.com/*","
https://*.googleusercontent.com/*"],"manifest_permissions":[]},"commands":{},"content_settings":[],"creation_flags":1,"events":["alarms.onAlarm","gcm.onMessage","identity.onSignInChanged","notifications.onButtonClicked","notifications.onClicked","notifications.onClosed","notifications.onPermissionLevelChanged","notifications.onShowSettings","runtime.onInstalled","runtime.onStartup","runtime.onSuspend","storage.onChanged"],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"initial_keybindings_set":true,"install_time":"13076597750683431","location":5,"manifest":{"background":{"persistent":false,"scripts":["utility.js","cards.js","background.js"]},"description":"Integrates Google Now into Chrome.","icons":{"128":"images/icon128.png","16":"images/icon16.png","48":"images/icon48.png"},"key":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhqJr32OFD/bMXW4Md7jMfd7LbwHXVc6x5bBQG5U+dloofoxrICDR20yur/40mQ8O//0sS1b8srvbab1CRlSrxoNCr9T80NAkfzx0gHyVS+p1Zow+1FzLMu9PiGwwFyN80HIB7GI/dIa0wC9K/2OrrzcHEhVH96DacTtWQqjfDVtZPjT7Xwv23dgoWcpbkRC86jMJot3dmX9xnn0KzoVc9gDOHSIkBLbkkr6Sp3LGXCCM4L0DJgxdFwaLr5WBzgC3y5x0/wwPIwN4PtIaK3BhH6njlksfnKwwIJ9iRT41V4BqbWu4mszO/7VJ3HJyw2DBpIc2grU9ZRRxrV3fRQG4wIDAQAB","manifest_version":2,"name":"Google Now","oauth2":{"auto_approve":true,"scopes":["
https://www.googleapis.com/auth/gcm","
https://www.googleapis.com/auth/googlenow"]},"optional_permissions":["background"],"permissions":["alarms","gcm","identity","metricsPrivate","notifications","storage","tabs","webstorePrivate","*://*.google.com/*","*://*.gstatic.com/*","
https://*.googleapis.com/chromenow/v1/*","
https://*.googleapis.com/gcm/*","
https://*.googleusercontent.com/*"],"version":"1.2.0.1"},"path":"C:\\Users\\metak_000\\AppData\\Local\\Chromium\\Application\\45.0.2406.0\\resources\\google_now","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":false,"was_installed_by_oem":false}}},"homepage":"
http://uk.yhs4.search.yahoo.com/yhs...e=wncy_dnldstr_15_21¶m1=1¶m2=f=1&b=IS Browser%26cc%3Dgb%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzutCtD0CtAyB0Bzy0EtBtCyDzzyDyDzytCtN0D0Tzu0StCtBtAyDtN1L2XzutAtFtCtDtFzytFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StByEzztAtAzyyCzytG0E0E0E0CtGtAyE0DzytG0EyDyCtBtGtDtCyD0Czz0E0D0FyCyC0E0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtBtB0FyEyD0BzztG0FyC0CyEtGyEzztByBtG0ByDyC0CtGyD0FyBtDtA0CyCyB0EyE0CtA2QtN0A0LzuyEtN1B2Z1V1T1S1NzuyByCtD%26cr%3D1716324987%26a%3Dwncy_dnldstr_15_21%26os%3DWindows 8.1 Pro%26uref%3Dchmm","homepage_is_newtabpage":false,"pinned_tabs":[],"protection":{"macs":{"browser":{"show_home_button":"7E99030D80842F6B31CFF7A701F51FDDE0C2D401D249ABEA6B2AE80DCC1EA5BA"},"default_search_provider":{"keyword":"42142BFC0323D5EF138C9ED2128F1DEB2FD3E3F7AF30AD930F60A1C5B87E5276","name":"D29ED831358AACE7408781A9A65FA083D8CBA1662ED7E0356AEB94734C60D047","search_url":"D02C7D9E52A3893EB51633C2C0CA63BB6AC27B4E406A7C47D6A896AF4042FDDE"},"default_search_provider_data":{"template_url_data":"575D258E47F940C6887685ABA99A5839CBFE4BA30863349DFE0D0C375AAB8816"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":"A634F7055977F36C81FF36D650F27DDC1C14F0D68FE8C97A1EA2FEB2B0B699B9","bepbmhgboaologfdajaanbcjmnhjmhfn":"8A21763201BA02BE4B6B57D100F2D16A45163FAF614511683823AC03AC93A582","eemcgdkfndhakfknompkggombfjjjeno":"3A8ED1345FD133E6F28AD4F36D2540FEB59A894802E7638D26FB101E29A681A7","ennkphjdgehloodpbhlhldgbnhmacadg":"CF8FFAB0E7B6466A3BE9F6672B60524F98983185E02403F502AA9FC8DC8143A1","eofcbnmajmjmplflapaojjnihcjkigck":"FFDC541991D4B3C9E5E715AA35FC992B11E3E5DF53CFD3A7C2825C60585CE698","gomekmidlodglbbmalcneegieacbdmki":"10C83E36D76193FCCFEF2A529746A36EC80DB5A8CEFEC700BD43F2471FC99C2C","kmendfapggjehodndflmmgagdbamhnfd":"11EA78B0CFF9AF3B0F2B4EC77183AD0536AB865E9D88EA718A69D279BDBEEEC3","lccekmodgklaepjeofjdjpbminllajkg":"C2A02065AC65F94079C7FE66EA2BC974D24A15E3C70C382107B28E0AD70765BD","mfehgcgbbipciphmccgaenjidiccnmng":"797FE6F763AA8873E0CEC13433B48EF3F8BED9A495CD58E6531D42D6ABB35F2A","mgndgikekgjfcpckkfioiadnlibdjbkf":"D30CD74438F93105B3D8326D5ADDE34F4C7403DADFAFDE1E43C8B8979BEC4648","mhjfbmdgcfjbbpaeojofohoefgiehjai":"A8D78EF040EAB83C8A254C406B05AA6E104606AEA7424DD92CB46BCE222F09DC","nbpagnldghgfoolbancepceaanlmhfmd":"A30766D15F7FE0944697CA13BC886E20D03DA2070E59BD6CD8976148EE47309D","nmmhkkegccagdldgiimedpiccmgmieda":"9630495C60A521BDC072963B0CE400D7E31058533CE3E1D3172A1EB328F2E2E2","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"2F2582C4B250C6166B12B20318C83260A8DF044F9E0AE57F1F0B0DB724552D37"}},"google":{"services":{"account_id":"E5B4CD7C5FA271A47D07D462465AFD63DBF6A8CDFAFEF4839D13F8F552131486","last_username":"24FCEF9BF7DF12A2935BE143E58951E09DBAA1D3E0E24430C0FF93009F5D6AFD","username":"D26BCA1B2F99EDF1D42826D14541328D9E374F4559553FC3BB7E76405AC31AE2"}},"homepage":"0064B4D7814FD93868E296A162864DBBCA57725EF6131F11C1586260333D40E2","homepage_is_newtabpage":"C77EA32F1872FF78A94FD3CF2AC2625671D07B6EC18468CE474F383FE0BAFEFA","pinned_tabs":"699F1AC92729A024B80605AFC3C63BFB2A35B70C4214581BBE108F851528E9E8","prefs":{"preference_reset_time":"95C909F3D0669D5931907B455F099C510E7770D9F0BA6FF13E4C76101B44F757"},"profile":{"reset_prompt_memento":"D4530CB53DD89D7863C8A6CB3762FD06DE5DBC9965D16D3A72FE1B19AD4A6C8F"},"safebrowsing":{"incidents_sent":"569707D9A4676B72F48BE92B740BE3EF895419C8A646F1AE1BA70BD9C3B41845"},"search_provider_overrides":"AEC08170DAF65A9D69621DC910574A958B5BFC4D2F1084DFB912EE0712001F95","session":{"restore_on_startup":"AB59F1A9CB391932F7B6047BDBE08DCCB63050B3A912DE5B810DA12B56F5E9D2","startup_urls":,]}}
C:\Users\metak_000\AppData\Local\Google\Chrome\User Data\Default\Preferences
d_old_component_pepper_flash_settings":true},"profile":{"avatar_bubble_tutorial_shown":1,"avatar_index":0,"content_settings":{"exceptions":{"app_banner":{},"auto_select_certificate":{},"automatic_downloads":{"[*.]
www.microsoft.com,*":{"setting":1}},"cookies":{},"fullscreen":{"[*.]forums.oneplus.net,*":{"setting":1},"[*.]isboxer.com,*":{"setting":1},"[*.]kotaku.com,*":{"setting":1},"[*.]
www.blizzpro.com,*":{"setting":1},"[*.]
www.edp24.co.uk,*":{"setting":1},"[*.]
www.eventhubs.com,*":{"setting":1},"[*.]
www.eveonlinetutors.com,*":{"setting":1},"[*.]
www.hearthpwn.com,*":{"setting":1},"[*.]
www.iflscience.com,*":{"setting":1},"[*.]
www.leanhybridmuscle.com,*":{"setting":1},"[*.]
www.lolking.net,*":{"setting":1},"[*.]
www.realmodscene.com,*":{"setting":1},"[*.]
www.saiyanplanet.com,*":{"setting":1},"[*.]
www.scan.co.uk,*":{"setting":1},"[*.]
www.youtube.com,*":{"setting":1},"
http://files.futureleap.com:80,http://files.futureleap.com:80":{"setting":1},"
http://www.suitdirect.co.uk:80,http://www.suitdirect.co.uk:80":{"setting":1},"
https://[*.]rabb.it:443,*":{"setting":1}},"geolocation":{},"images":{},"javascript":{},"media_stream":{},"media_stream_camera":{},"media_stream_mic":{},"metro_switch_to_desktop":{},"midi_sysex":{},"mixed_script":{},"mouselock":{},"notifications":{},"plugins":{"[*.]java.com,*":{"setting":1},"[*.]
www.video2mp3.net,*":{"setting":1},"
https://[*.]itunes.apple.com:443,*":{"setting":1}},"popups":{"[*.]content.course-source.net,*":{"setting":1},"[*.]
www.tfl.gov.uk,*":{"setting":1},"[*.]
www.xbox360iso.com,*":{"setting":1},"[*.]www2.learndirect-business.com,*":{"setting":1}},"ppapi_broker":{},"protocol_handlers":{},"push_messaging":{},"ssl_cert_decisions":{}},"pattern_pairs":{"[*.]content.course-source.net,*":{"popups":1},"[*.]forums.oneplus.net,*":{"fullscreen":1},"[*.]isboxer.com,*":{"fullscreen":1},"[*.]java.com,*":{"plugins":1},"[*.]kotaku.com,*":{"fullscreen":1},"[*.]
www.blizzpro.com,*":{"fullscreen":1},"[*.]
www.edp24.co.uk,*":{"fullscreen":1},"[*.]
www.eventhubs.com,*":{"fullscreen":1},"[*.]
www.eveonlinetutors.com,*":{"fullscreen":1},"[*.]
www.hearthpwn.com,*":{"fullscreen":1},"[*.]
www.iflscience.com,*":{"fullscreen":1},"[*.]
www.leanhybridmuscle.com,*":{"fullscreen":1},"[*.]
www.lolking.net,*":{"fullscreen":1},"[*.]
www.microsoft.com,*":{"multiple-automatic-downloads":1},"[*.]
www.realmodscene.com,*":{"fullscreen":1},"[*.]
www.saiyanplanet.com,*":{"fullscreen":1},"[*.]
www.scan.co.uk,*":{"fullscreen":1},"[*.]
www.tfl.gov.uk,*":{"popups":1},"[*.]
www.video2mp3.net,*":{"plugins":1},"[*.]
www.xbox360iso.com,*":{"popups":1},"[*.]
www.youtube.com,*":{"fullscreen":1},"[*.]www2.learndirect-business.com,*":{"popups":1},"
http://en.parkopedia.co.uk:80,http://en.parkopedia.co.uk:80":{"geolocation":1},"
http://files.futureleap.com:80,http://files.futureleap.com:80":{"fullscreen":1},"
http://play.pokemonshowdown.com:80,*":{"last_used":{"notifications":1422836141.488311},"notifications":1},"
http://play.pokemonshowdown.com:80,http://play.pokemonshowdown.com:80":{"last_used":{"notifications":1422836141.488311}},"
http://takeaway-finder.co.uk:80,http://takeaway-finder.co.uk:80":{"geolocation":1},"
http://tinychat.com:80,*":{"media-stream-camera":1,"media-stream-mic":1},"
http://www.midomi.com:80,*":{"media-stream-camera":1,"media-stream-mic":1},"
http://www.suitdirect.co.uk:80,http://www.suitdirect.co.uk:80":{"fullscreen":1},"
http://www.three.co.uk:80,http://www.three.co.uk:80":{"geolocation":1},"
http://www.youtube.com:80,*":{"media-stream-camera":2,"media-stream-mic":2,"ppapi-broker":1},"
https://[*.]itunes.apple.com:443,*":{"plugins":1},"
https://[*.]rabb.it:443,*":{"fullscreen":1},"
https://play.google.com:443,*":{"last_used":{"notifications":1416256913.15314},"notifications":1},"
https://play.google.com:443,https://play.google.com:443":{"last_used":{"notifications":1416256913.15514}},"
https://rabb.it:443,*":{"last_used":{"media-stream-camera":1422052296.008445,"media-stream-mic":1422052296.008445},"media-stream-camera":1,"media-stream-mic":1,"notifications":2},"
https://uk.webuy.com:443,https://uk.webuy.com:443":{"geolocation":1},"
https://www.google.co.uk:443,*":{"media-stream-mic":1},"
https://www.huntersnorth.co.uk:443,https://www.huntersnorth.co.uk:443":{"ssl-cert-decisions":{"cert_exceptions_map":{"4294967096T9UHelZy6mUUbtb2mTrkub5xUVyUqZyqN0jixR39404=":2},"version":1}}},"pref_version":1},"exit_type":"Crashed","exited_cleanly":true,"gaia_info_picture_url":"
https://lh3.googleusercontent.com/-XdUIqdMkCWA/AAAAAAAAAAI/AAAAAAAAAAA/4252rscbv5M/s256-c/photo.jpg","gaia_info_update_time":"13078753200662095","icon_version":3,"managed_user_id":"","managed_users":{},"migrated_content_settings_exceptions":true,"migrated_default_content_settings":true,"migrated_default_media_stream_content_settings":true,"name":"First user","per_host_zoom_levels":{}},"protection":{"macs":{}},"reverse_autologin":{"enabled":false},"savefile":{"default_directory":"F:\\Downloads"},"selectfile":{"last_directory":"C:\\Windows\\System32"},"session":{"restore_on_startup_migrated":true,"startup_urls_migration_time":"13076598121906485"},"signin":{"signedin_time":"13078753199964208"},"sync":{"session_sync_guid":"session_syncp6c6/Up2whPfEmntvJMTpA==","suppress_start":false},"sync_promo":{"startup_count":3},"translate_accepted_count":{"ar":0,"de":1,"el":0,"en":1,"es":0,"fr":0,"hr":0,"hu":0,"it":0,"ja":5,"ko":2,"mt":0,"nl":0,"pl":0,"pt":1,"ru":3,"th":1,"tr":0,"zh-CN":0},"translate_blocked_languages":["en"],"translate_denied_count":{"ar":1,"de":0,"el":14,"en":0,"es":2,"fr":20,"hr":1,"hu":1,"it":2,"ja":0,"ko":0,"mt":1,"nl":1,"pl":2,"pt":0,"ru":0,"th":0,"tr":1,"zh-CN":4},"translate_site_blacklist":[],"translate_too_often_denied":true,"translate_whitelists":{},"zerosuggest":{"cachedresults":""}}
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Old Start Page"="
http://www.google.com"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Old Start Page"="
http://go.microsoft.com/fwlink/?LinkId=69157"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="
http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="
http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{2f23ab71-4ac6-41f2-a955-ea576e553146} Bing Url="
http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02"
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\metak_000\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\metak_000\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\metak_000\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\metak_000\AppData\Local\Microsoft\Windows\INetCache\IE\4GKZTWCT will be deleted at reboot
C:\Users\metak_000\AppData\Local\Microsoft\Windows\INetCache\IE\4QGH0VM1 will be deleted at reboot
C:\Users\metak_000\AppData\Local\Microsoft\Windows\INetCache\IE\Y58PZX4Z will be deleted at reboot
==== Empty FireFox Cache ======================
C:\Users\metak_000\AppData\Local\Mozilla\Firefox\Profiles\7ycjsaoc.default\cache2 emptied successfully
==== Empty Chrome Cache ======================
C:\Users\metak_000\AppData\Local\Chromium\User Data\Default\Cache emptied successfully
C:\Users\metak_000\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=16 folders=16 14105647 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\metak_000\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\METAK_~1\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\metak_000\AppData\Local\Microsoft\Windows\INetCache\IE\4GKZTWCT" not found
"C:\Users\metak_000\AppData\Local\Microsoft\Windows\INetCache\IE\4QGH0VM1" not found
"C:\Users\metak_000\AppData\Local\Microsoft\Windows\INetCache\IE\Y58PZX4Z" not found
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted
==== EOF on 17/06/2015 at 19:57:57.25 ======================