used Farbar:
Fix resultaat van Farbar Recovery Scan Tool (x64) Versie:07-11-2015
Gestart door Luchinger Architects (2015-11-10 16:34:37) Run:1
Gestart vanaf C:\Users\Luchinger Architects\Desktop
Geladen Profielen: Luchinger Architects (Beschikbare Profielen: Luchinger Architects)
Boot Modus: Normal
==============================================
fixlist inhoud:
*****************
CreateRestorePoint:
FF user.js: detected! => C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\user.js [2013-07-30]
C:\ProgramData\mstdq.exe
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers
*****************
Herstelpunt is succesfol gemaakt.
C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\user.js => is succesvol verplaatst.
"C:\ProgramData\mstdq.exe" => niet gevonden.
========= reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========
De bewerking is voltooid.
========= Eind van Reg: =========
========= reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========
De bewerking is voltooid.
========= Eind van Reg: =========
========= RemoveProxy: =========
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => waarde is succesvol verwijderd.
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => waarde is succesvol verwijderd.
HKU\S-1-5-21-979398501-2959105234-253529528-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => waarde is succesvol verwijderd.
HKU\S-1-5-21-979398501-2959105234-253529528-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => waarde is succesvol verwijderd.
========= Eind van RemoveProxy: =========
========= bitsadmin /reset /allusers =========
BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.
BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.
0 out of 0 jobs canceled.
========= Eind van CMD: =========
EmptyTemp: => 3.6 GB tijdelijke gegevens verwijderd.
Het systeem moest herstart worden.
==== Eind van Fixlog 16:36:06 ====
then used adwcleaner:
# AdwCleaner v5.019 - Logbestand aangemaakt 10/11/2015 op 16:51:22
# Laatste update 08/11/2015 door Xplode
# Database : 2015-11-09.1 [Server]
# Besturingssysteem : Windows 7 Professional Service Pack 1 (x64)
# Gebruikersnaam : Luchinger Architects - LUCHINGERARCHIT
# Gestart vanuit : C:\Users\Luchinger Architects\Desktop\AdwCleaner.exe
# Optie : Verwijderen
# Ondersteuning :
http://toolslib.net/forum***** [ Services ] *****
***** [ Mappen ] *****
[-] Map Verwijderd : C:\Program Files\FileViewPro
[-] Map Verwijderd : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileViewPro
[-] Map Verwijderd : C:\Users\Luchinger Architects\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf
[-] Map Verwijderd : C:\Users\Luchinger Architects\AppData\LocalLow\Softonic
***** [ Bestanden ] *****
[-] Bestand Verwijderd : C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\searchplugins\softonic.xml
***** [ DLLs ] *****
***** [ Snelkoppelingen ] *****
***** [ geplande taken ] *****
***** [ Register ] *****
[-] Sleutel Verwijderd : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec
[-] Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}
[-] Sleutel Verwijderd : HKLM\SOFTWARE\dt soft\daemon tools toolbar
[-] Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}
[-] Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileViewPro_is1
[-] Gegevens Hersteld : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7ACB43AA-99D1-4C8C-AFB3-2C164E357E82}
[-] Gegevens Hersteld : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
***** [ Internetbrowsers ] *****
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.admin", false);
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.aflt", "SD");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.appId", "{7ABBFE1C-E485-44AA-8F36-353751B4124D}");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.autoRvrt", "false");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.dfltLng", "nl");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.dfltSrch", true);
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.dnsErr", true);
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.excTlbr", false);
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.ffxUnstlRst", false);
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.hmpg", true);
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00378/tb_v1?SearchSource=13&cc=&mi=688ec99c000000000000485b398924b0");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.id", "688ec99c000000000000485b398924b0");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.instlDay", "15916");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.instlRef", "MOY00378");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.newTab", true);
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.newTabUrl", "hxxp://search.softonic.com/MOY00378/tb_v1/?SearchSource=15&cc=&mi=688ec99c000000000000485b398924b0");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.prdct", "Softonic");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.prtnrId", "softonic");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.rvrt", "false");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.smplGrp", "none");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.srchPrvdr", "Search the web (Softonic)");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.tlbrId", "2013desingbrand");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MOY00378/tb_v1?SearchSource=1&cc=&mi=688ec99c000000000000485b398924b0&q=");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.vrsn", "1.8.21.14");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.vrsnTs", "1.8.21.1414:10:18");
[-] [C:\Users\Luchinger Architects\AppData\Roaming\Mozilla\Firefox\Profiles\8zktyq8z.default\prefs.js] [Preference] Verwijderd : user_pref("extensions.Softonic.vrsni", "1.8.21.14");
*************************
:: "Tracing" sleutels verwijderd
:: Winsock instellingen gereset
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [8475 bytes] ##########