wplatti1

Beste, Dit is de Malware schan/ Malwarebytes' Anti-Malware 1.40 Database versie: 2609 Windows 5.1.2600 Service Pack 3 15/08/2009 13:34:02 mbam-log-2009-08-15 (13-34-01).txt Scan type: Snelle Scan Objecten gescand: 136420 Verstreken tijd: 17 minute(s), 27 second(s) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 5 Registerwaarden geïnfecteerd: 1 Registerdata bestanden geïnfecteerd: 0 Mappen geïnfecteerd: 6 Bestanden geïnfecteerd: 208 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige items gevonden) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige items gevonden) Registersleutels geïnfecteerd: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4e7bd74f-2b8d-469e-86bd-fd60bb9aae3a} (Adware.OneToolBar) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2 (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2.1 (Adware.PopCap) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options (Security.Hijack) -> Quarantined and deleted successfully. Registerwaarden geïnfecteerd: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{4e7bd74f-2b8d-469e-86bd-fd60bb9aae3a} (Adware.OneToolBar) -> Quarantined and deleted successfully. Registerdata bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Mappen geïnfecteerd: C:\Documents and Settings\Gebruiker\Application Data\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\Logs (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350 (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Program Files\SH (Rogue.Spy.Heal) -> Quarantined and deleted successfully. C:\Program Files\SH\SpyHeal 2.9 (Rogue.Spy.Heal) -> Quarantined and deleted successfully. Bestanden geïnfecteerd: C:\Documents and Settings\Gebruiker\Application Data\RegTool\resultsw.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\Logs\2009-01-09 15-04-410.log (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\Logs\2009-01-09 15-09-370.log (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\Logs\2009-01-09 15-37-200.log (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\filelist.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-0.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-1.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-2.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-3.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-4.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-5.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-6.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-7.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-8.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-9.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-10.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-11.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-12.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-13.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-14.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-15.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-16.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-17.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-18.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-19.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-20.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-21.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-22.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-23.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-24.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-25.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-26.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-27.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-28.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-29.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-30.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-31.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-32.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-33.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-34.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-35.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-36.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-37.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-38.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-39.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-40.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-41.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-42.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-43.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-44.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-45.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-46.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-47.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-48.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-49.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-50.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-51.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-52.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-53.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-54.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-55.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-56.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-57.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-58.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-59.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-60.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-61.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-62.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-63.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-64.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-65.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-66.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-67.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-68.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-69.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-70.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-71.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-72.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-73.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-74.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-75.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-76.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-77.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-78.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-79.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-80.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-81.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-82.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-83.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-84.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-85.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-86.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-87.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-88.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-89.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-90.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-91.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-92.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-93.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-94.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-95.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-96.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-97.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-98.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-99.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-100.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-101.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-102.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-103.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-104.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-105.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-106.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-107.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-108.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-109.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-110.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-111.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-112.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-113.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-114.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-115.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-116.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-117.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-118.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-119.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-120.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-121.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-122.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-123.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-124.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-125.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-126.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-127.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-128.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-129.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-130.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-131.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-132.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-133.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-134.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-135.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-136.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-137.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-138.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-139.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-140.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-141.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-142.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-143.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-144.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-145.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-146.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-147.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-148.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-149.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-150.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-151.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-152.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-153.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-154.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-155.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-156.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-157.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-158.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-159.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-160.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-161.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-162.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-163.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-164.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-165.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-166.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-167.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-168.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-169.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-170.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-171.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-172.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-173.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-174.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-175.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-176.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-177.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-178.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-179.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-180.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-181.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-182.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-183.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-184.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-185.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-186.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-187.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-188.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-189.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-190.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-191.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-192.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-193.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-194.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-195.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-196.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-197.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\Gebruiker\Application Data\RegTool\QuarantineW\2009-01-09 15-07-350\regb-198.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Program Files\SH\SpyHeal 2.9\sq.ini (Rogue.Spy.Heal) -> Quarantined and deleted successfully. C:\_MSS.EXE (Trojan.Agent) -> Quarantined and deleted successfully. C:\System.dll (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\Tasks\RegTool Scan.job (Rogue.RegTool) -> Quarantined and deleted successfully.

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:10:54, on 11/08/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Norman\Npm\Bin\Zanda.exe C:\Program Files\Norman\npm\bin\nvoy.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Acer\Empowering Technology\admServ.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Acer\Acer Arcade\PCMService.exe C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\acer\Empowering Technology\ePower\epm-dm.exe C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE C:\Acer\Empowering Technology\admtray.exe C:\Program Files\Norman\Npm\Bin\ZLH.EXE C:\Program Files\Windows Live\Family Safety\fsui.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe C:\Acer\Empowering Technology\eRecovery\Monitor.exe C:\Program Files\Windows Live\Family Safety\fsssvc.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\igfxext.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\igfxsrvc.exe C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Samsung\Digimax Viewer 2.1\STImgBrowser.exe C:\Program Files\Norman\Npm\Bin\scheduler.exe C:\Program Files\Norman\Npm\Bin\Njeeves.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [LaunchApp] Alaunch O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [synTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" O4 - HKLM\..\Run: [synTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer\Acer Arcade\PCMService.exe" O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [eDataSecurity Loader] "C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" O4 - HKLM\..\Run: [EPM-DM] c:\acer\Empowering Technology\ePower\epm-dm.exe O4 - HKLM\..\Run: [Acer ePower Management] "C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe" boot O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE O4 - HKLM\..\Run: [eRecoveryService] "C:\Acer\Empowering Technology\eRecovery\Monitor.exe" O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe" O4 - HKLM\..\Run: [Norman ZANDA] "C:\Program Files\Norman\Npm\Bin\ZLH.EXE" /LOAD /SPLASH O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide O4 - HKLM\..\Run: [PHIME2002ASync] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /SYNC O4 - HKLM\..\Run: [PHIME2002A] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /IMEName O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [MSPY2002] "C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [uniblue RegistryBooster 2009] C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe /S O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: hpoddt01.exe.lnk = ? O4 - Global Startup: hp psc 1000 series.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Digimax Viewer 2.1.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: Add to Windows &Live Favorites - Sign In O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Openen in een nieuwe achtergrondtab - res://C:\Program Files\Windows Live Toolbar\Components\nl-nl\msntabres.dll.mui/229?0524fae676104cf9b4202c07e8e6001e O8 - Extra context menu item: Openen in een nieuwe voorgrondtab - res://C:\Program Files\Windows Live Toolbar\Components\nl-nl\msntabres.dll.mui/230?0524fae676104cf9b4202c07e8e6001e O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} (PhotoboxPhotowaysUploader5 Control) - http://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20090518074158 O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.be/SnapfishActivia.cab O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.3.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.spector.be/DesktopModules/SpectorAlbum/ImageUploader5.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1157048602453 O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.extrafilm.nl/ImageUploader4.cab O16 - DPF: {7CCAD6DD-DD0B-440B-91FF-7670F5AADC21} (SpinTop Games Launcher) - Big Fish Games | A New Free Game Download Every Day O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game11.zylom.com/activex/zylomgamesplayer.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {DAF94F73-2AA6-44D8-A562-A28831820D34} (Pixum EasyUploadX Control) - http://www.pixum.de/int/EasyUpload/ImgUploader.cab O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30155.www3.hp.com/ediags/hpfix/aio/nl/check/qdiagh.cab?326 O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Norman NJeeves - Norman ASA - C:\Program Files\Norman\Npm\Bin\Njeeves.exe O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Unknown owner - C:\Program Files\Norman\Npm\Bin\Nvcsched.exe (file missing) O23 - Service: Norman Resource Provider (NVOY) - Norman ASA - C:\Program Files\Norman\npm\bin\nvoy.exe O23 - Service: PavPrSrv - Unknown owner - (no file) O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe O23 - Service: Norman Scheduler Service (Scheduler) - Norman ASA - C:\Program Files\Norman\Npm\Bin\scheduler.exe -- End of file - 13991 bytes

Sinds vorige week heb ik computerproblemen. Ik krijg de foutmelding MSNChatHook.dll kan niet worden gevonden. Ik kan combofix niet installeren want dan krijg ik de melding dat mijn laptop niet draait onder Win XP terwijl dit toch wel zo is. Mijn office werkt ook niet naar behoren. Wanneer ik vb word wil opstarten krijg ik telkens een windows installer bericht. Wie kan me helpen?