Archief - Browser probleem

Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
P

Phoen!x

Legacy Member
Vroeger als ik bv. "ign" intypte in mijn firefox adresbalk werd ik automatisch doorverwezen naar http://ign.com, maar sinds kort krijg ik deze site te zien: http://search.yahoo.com/search?ei=utf-8&fr=megaup&p=ign
Idem met een website die niet geladen/gevonden kan worden.
Vroeger kreeg ik de normale error, nu krijg ik dit: http://www.megaclick.com/notfound/?l...ww.blablab.be/
Enig idee wat hier de oorzaak van kan zijn en hoe het op te lossen?

EDIT: Ik heb Vista Ultimate x64 en heb al gekeken bij programma's maar er is blijkbaar geen yahoo toolbar geinstalleerd.

Logfile of HijackThis v1.99.1
Scan saved at 16:52:11, on 15/07/2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Program Files (x86)\ESET\nod32kui.exe
C:\Program Files (x86)\Razer\Diamondback\razerhid.exe
C:\Program Files (x86)\Razer\Diamondback\razertra.exe
C:\Program Files (x86)\Razer\Diamondback\razerofa.exe
C:\Users\Jens\SetPoint\x86\SetPoint32.exe
C:\Windows\SysWOW64\conime.exe
C:\Program Files (x86)\MSN Messenger\msnmsgr.exe
C:\Users\Jens\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 125.135.87.117:2464
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files (x86)\FlashGet\jccatch.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~2\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GRA8E1~1.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files (x86)\FlashGet\getflash.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~2\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files (x86)\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Diamondback] "C:\Program Files (x86)\Razer\Diamondback\razerhid.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EA Link\Core.exe" -silent
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files (x86)\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files (x86)\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\FlashGet.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O15 - Trusted Zone: http://www.msi.com.tw
O17 - HKLM\System\CCS\Services\Tcpip\..\{938DDF45-1899-4BDE-A520-1FBA6B860165}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{938DDF45-1899-4BDE-A520-1FBA6B860165}: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{938DDF45-1899-4BDE-A520-1FBA6B860165}: NameServer = 192.168.1.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GR99D3~1.DLL
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files (x86)\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files (x86)\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files (x86)\Eset\nod32krn.exe
O23 - Service: O&O Defrag - Unknown owner - C:\Windows\system32\oodag.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

EDIT: al die files missing komt door registry cleaner me dunkt.
P

Phoen!x

Legacy Member
REGLOOKS
REGLOOKS logfile
version 0.971
zo 15/07/2007 19:30:51,41
running from: "C:\Users\Jens\Desktop"

--- SSODL regkeys ---

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
only standard or legit regkeys found


--- STS regkeys ---

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
only standard or legit regkeys found


--- USERINIT regkey ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
"Userinit"="userinit.exe"


--- SHELL regkey ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
"Shell"="explorer.exe"


--- SYSTEM regkey ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon


--- APPINIT_DLLS regkey ---

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows
"AppInit_DLLs"=""


--- NOTIFY regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
only standard or legit regkeys found


--- BOOTEXECUTE regkey ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
BootExecute= autocheck autochk *\0OODBS\0lsdelete\0\0


--- PENDINGFILERENAMEOPERATIONS regkey ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
Pendingfilerenameoperations= \??\C:\Users\Jens\Local Settings\temp\FXSAPIDebugLogFile.txt\0\0\??\C:\Users\Jens\Local Settings\temp\~DFAD6C.tmp\0\0\??\C:\Users\Jens\AppData\Local\Temp\67f199f1.1f0\\0\0\??\C:\Users\Jens\AppData\Local\Temp\ab93b200.21a\\0\0\??\C:\Config.Msi\17655ca.rbf\0\0\0


--- SHELLEXECUTEHOOKS regkey ---

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"="Groove GFS Stub Execution Hook"


--- HKLM\Run regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"SoundMAXPnP"="C:\\Program Files (x86)\\Analog Devices\\Core\\smax4pnp.exe"
"nod32kui"="\"C:\\Program Files (x86)\\Eset\\nod32kui.exe\" /WAITSERVICE"
"Diamondback"="\"C:\\Program Files (x86)\\Razer\\Diamondback\\razerhid.exe\""
"QuickTime Task"="\"C:\\Program Files (x86)\\QuickTime\\QTTask.exe\" -atboottime"
[Run\OptionalComponents]
@=""
[Run\OptionalComponents\IMAIL]
@=""
[Run\OptionalComponents\MAPI]
@=""
[Run\OptionalComponents\MSFS]
@=""


--- HKLM\RunOnce regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
no HKLM RunOnce keys found


--- HKLM\RunOnceEx regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
regkey does not exist


--- HKLM\RunServices regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
regkey does not exist


--- HKLM\RunServicesOnce regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
regkey does not exist


--- HKCU\Run regkeys ---

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"msnmsgr"="\"C:\\Program Files (x86)\\MSN Messenger\\msnmsgr.exe\" /background"
"ehTray.exe"="C:\\Windows\\ehome\\ehTray.exe"
"Sidebar"="C:\\Program Files\\Windows Sidebar\\sidebar.exe /autoRun"
"EA Core"="\"C:\\Program Files (x86)\\Electronic Arts\\EA Link\\Core.exe\" -silent"


--- HKCU\RunOnce regkeys ---

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
no HKCU RunOnce keys found


--- HKCU\RunOnceEx regkeys ---

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
regkey does not exist


--- HKCU\RunServices regkeys ---

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
regkey does not exist


--- HKCU\RunServicesOnce regkeys ---

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
regkey does not exist


--- HKU\.DEFAULT\Run regkeys ---

HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
no HKU\.DEFAULT\Run keys found


--- HKU\S-1-5-18\Run regkeys ---

HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
no HKU\S-1-5-18\Run keys found


--- HKU\S-1-5-19\Run regkeys ---

HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"Sidebar"=hex(2):25,50,72,6f,67,72,61,6d,46,69,6c,65,73,25,5c,57,69,6e,64,6f,\
77,73,20,53,69,64,65,62,61,72,5c,53,69,64,65,62,61,72,2e,65,78,65,20,2f,64,\
65,74,65,63,74,4d,65,6d,00
"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"


--- HKU\S-1-5-20\Run regkeys ---

HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"Sidebar"=hex(2):25,50,72,6f,67,72,61,6d,46,69,6c,65,73,25,5c,57,69,6e,64,6f,\
77,73,20,53,69,64,65,62,61,72,5c,53,69,64,65,62,61,72,2e,65,78,65,20,2f,64,\
65,74,65,63,74,4d,65,6d,00
"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"


--- HKLM\Explorer\Run regkeys ---

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
regkey does not exist


--- HKCU\Explorer\Run regkeys ---

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
regkey does not exist


--- Image File Execution regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
no debuggers found


--- BROWSER HELPER OBJECTS regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
"{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" regkey not found (ERROR)
"{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}" FILE ="C:\\Program Files (x86)\\FlashGet\\jccatch.dll"
"{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}" FILE ="C:\\PROGRA~2\\MEGAUP~1\\MEGAUP~1.DLL"
"{72853161-30C5-4D22-B7F9-0BBC1D38A37E}" FILE ="C:\\PROGRA~2\\MICROS~1\\Office12\\GRA8E1~1.DLL"
"{7E853D72-626A-48EC-A868-BA8D5E23E045}" regkey not found (ERROR)
"{F156768E-81EF-470C-9057-481BA8380DBA}" FILE ="C:\\Program Files (x86)\\FlashGet\\getflash.dll"


--- TOOLBAR regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
"{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}" FILE ="C:\\PROGRA~2\\MEGAUP~1\\MEGAUP~1.DLL"


--- URLSEARCHHOOKS regkeys ---

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks
only standard regkeys found


--- SRCEENSAVER regkey ---

HKEY_CURRENT_USER\Control Panel\Desktop
"SCRNSAVE.EXE"="C:\\Windows\\system32\\logon.scr"


--- CONTEXTMENUHANDLERS regkeys ---

HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers
"BriefcaseMenu" CLSID ={85BBD920-42A0-1069-A2E4-08002B30309D} FILE ="syncui.dll"
"NOD32 Context Menu Shell Extension" CLSID ={B089FE88-FB52-11D3-BDF1-0050DA34150D} FILE ="C:\\Program Files (x86)\\Eset\\nodshex.dll"
"Open With" CLSID ={09799AFB-AD67-11d1-ABCD-00C04FC30936} FILE =%SystemRoot%\system32\shell32.dll
"Open With EncryptionMenu" CLSID ={A470F8CF-A1E8-4f65-8335-227475AA5C46} FILE =%SystemRoot%\system32\shell32.dll
"Sharing" CLSID ={f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} FILE ="ntshrui.dll"
"WinRAR" CLSID ={B41DB860-64E4-11D2-9906-E49FADC173CA} FILE NOT FOUND
"WinRAR32" CLSID ={B41DB860-8EE4-11D2-9906-E49FADC173CA} FILE ="C:\\Program Files (x86)\\WinRAR\\rarext.dll"
"XXX Groove GFS Context Menu Handler XXX" CLSID ={6C467336-8281-4E60-8204-430CED96822D} FILE ="C:\\PROGRA~2\\MICROS~1\\Office12\\GRA8E1~1.DLL"
"{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}" Start Menu Pin FILE =%SystemRoot%\system32\shell32.dll

HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers
"EncryptionMenu" CLSID ={A470F8CF-A1E8-4f65-8335-227475AA5C46} FILE =%SystemRoot%\system32\shell32.dll
"Sharing" CLSID ={f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} FILE ="ntshrui.dll"
"WinRAR" CLSID ={B41DB860-64E4-11D2-9906-E49FADC173CA} FILE NOT FOUND
"WinRAR32" CLSID ={B41DB860-8EE4-11D2-9906-E49FADC173CA} FILE ="C:\\Program Files (x86)\\WinRAR\\rarext.dll"
"XXX Groove GFS Context Menu Handler XXX" CLSID ={6C467336-8281-4E60-8204-430CED96822D} FILE ="C:\\PROGRA~2\\MICROS~1\\Office12\\GRA8E1~1.DLL"

HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers
"BriefcaseMenu" CLSID ={85BBD920-42A0-1069-A2E4-08002B30309D} FILE ="syncui.dll"
"NOD32 Context Menu Shell Extension" CLSID ={B089FE88-FB52-11D3-BDF1-0050DA34150D} FILE ="C:\\Program Files (x86)\\Eset\\nodshex.dll"
"WinRAR" CLSID ={B41DB860-64E4-11D2-9906-E49FADC173CA} FILE NOT FOUND
"WinRAR32" CLSID ={B41DB860-8EE4-11D2-9906-E49FADC173CA} FILE ="C:\\Program Files (x86)\\WinRAR\\rarext.dll"
"XXX Groove GFS Context Menu Handler XXX" CLSID ={6C467336-8281-4E60-8204-430CED96822D} FILE ="C:\\PROGRA~2\\MICROS~1\\Office12\\GRA8E1~1.DLL"


--- ALTERNATESHELL regkey ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot
"AlternateShell"="cmd.exe"


--- SAFEBOOT MINIMAL SERVICES ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal
aawservice
AppInfo
KeyIso
NTDS
ProfSvc
sacsvr
SWPRV
TabletInputService
TBS
TrustedInstaller
volmgr.sys
volmgrx.sys
{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}
{D48179BE-EC20-11D1-B6B8-00C04FA372A7}
{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}


--- SAFEBOOT NETWORK SERVICES ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network
aawservice
AppInfo
BFE
bowser
dfsc
Dot3Svc
Eaphost
IKEEXT
KeyIso
MPSDrv
MPSSvc
mrxsmb
mrxsmb10
mrxsmb20
NativeWifiP
netprofm
NlaSvc
Nsi
nsiproxy.sys
NTDS
PolicyAgent
ProfSvc
rdbss
rdpencdd.sys
sacsvr
SCardSvr
SWPRV
TabletInputService
TBS
TrustedInstaller
VDS
volmgr.sys
volmgrx.sys
Wlansvc
{50DD5230-BA8A-11D1-BF5D-0000F805F530}
{533C5B84-EC70-11D2-9505-00C04F79DEAF}
{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}
{D48179BE-EC20-11D1-B6B8-00C04FA372A7}
{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}


--- SERVICES ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aawservice
"DisplayName"="Ad-Aware 2007 Service"
"C:\Program Files (x86)\Lavasoft\Ad-Aware 2007\aawservice.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ADIHdAudAddService
"DisplayName"="ADI UAA Function Driver for High Definition Audio Service"
system32\drivers\ADIHdAud.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\adsi
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AeLookupSvc
"DisplayName"="@%SystemRoot%\\system32\\aelupsvc.dll,-1"
%systemroot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Appinfo
"DisplayName"="@%systemroot%\\system32\\appinfo.dll,-100"
%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AsIO
"DisplayName"="AsIO"
SysWow64\drivers\AsIO.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AudioEndpointBuilder
"DisplayName"="@%SystemRoot%\\system32\\audiosrv.dll,-204"
%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
"DisplayName"="@%SystemRoot%\\system32\\bfe.dll,-1001"
%systemroot%\system32\svchost.exe -k LocalServiceNoNetwork

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bowser
"DisplayName"="Bowser"
system32\DRIVERS\bowser.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrFiltLo
"DisplayName"="Brother USB Mass-Storage Lower Filter Driver"
\SystemRoot\system32\drivers\brfiltlo.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrFiltUp
"DisplayName"="Brother USB Mass-Storage Upper Filter Driver"
\SystemRoot\system32\drivers\brfiltup.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrUsbSer
"DisplayName"="Brother MFC USB Serial WDM Driver"
\SystemRoot\system32\drivers\brusbser.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertPropSvc
"DisplayName"="@%SystemRoot%\\System32\\certprop.dll,-11"
%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CLFS
"DisplayName"="Common Log (CLFS)"
System32\CLFS.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\clr_optimization_v2.0.50727_64
"DisplayName"="Microsoft .NET Framework NGEN v2.0.50727_X64"
%systemroot%\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crcdisk
"DisplayName"="Crcdisk Filter Driver"
system32\drivers\crcdisk.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crypt32
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CSC
"DisplayName"="Offline Files Driver"
system32\drivers\csc.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CscService
"DisplayName"="@%systemroot%\\system32\\cscsvc.dll,-200"
%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DCLocator
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DfsC
"DisplayName"="Dfs Client Driver"
System32\Drivers\dfsc.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DFSR
"DisplayName"="@dfsrres.dll,-101"
%SystemRoot%\system32\DFSR.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dot3svc
"DisplayName"="@%systemroot%\\system32\\dot3svc.dll,-1102"
%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dump_wmimmc
"DisplayName"="dump_wmimmc"
\??\D:\Games\Games-Masters.com\CABAL Online (Europe)\GameGuard\dump_wmimmc.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DXGKrnl
"DisplayName"="LDDM Graphics Subsystem"
\SystemRoot\System32\drivers\dxgkrnl.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\E1G60
"DisplayName"="Intel(R) PRO/1000 NDIS 6 Adapter Driver"
system32\DRIVERS\E1G6032E.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EapHost
"DisplayName"="@%systemroot%\\system32\\eapsvc.dll,-1"
%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ecache
"DisplayName"="ReadyBoost Caching Driver"
System32\drivers\ecache.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehRecvr
"DisplayName"="@%SystemRoot%\\ehome\\ehrecvr.exe,-101"
%systemroot%\ehome\ehRecvr.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehSched
"DisplayName"="@%SystemRoot%\\ehome\\ehsched.exe,-101"
%systemroot%\ehome\ehsched.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehstart
"DisplayName"="@%SystemRoot%\\ehome\\ehstart.dll,-101"
%windir%\system32\svchost.exe -k LocalServiceNoNetwork

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EmdCache
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EMDMgmt
"DisplayName"="@%SystemRoot%\\system32\\emdmgmt.dll,-1000"
%systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ESENT
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fdPHost
"DisplayName"="@%systemroot%\\system32\\fdPHost.dll,-100"
%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FDResPub
"DisplayName"="@%systemroot%\\system32\\fdrespub.dll,-100"
%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FileInfo
"DisplayName"="File Information FS MiniFilter"
system32\drivers\fileinfo.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Filetrace
"DisplayName"="FileTrace"
system32\drivers\filetrace.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FontCache3.0.0.0
"DisplayName"="@%SystemRoot%\\system32\\PresentationHost.exe,-3309"
%systemroot%\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fvevol
"DisplayName"="BitLocker Drive Encryption Filter Driver"
System32\DRIVERS\fvevol.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gpsvc
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HdAudAddService
"DisplayName"="Microsoft 1.1 UAA Functiestuurprogramma voor High Definition Audio-service"
system32\drivers\HdAudio.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HDAudBus
"DisplayName"="Microsoft UAA Bus-stuurprogramma voor High Definition Audio"
system32\DRIVERS\HDAudBus.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HidUsb
"DisplayName"="Microsoft HID Class-stuurprogramma"
system32\DRIVERS\hidusb.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hkmsvc
"DisplayName"="@%SystemRoot%\\system32\\kmsvc.dll,-6"
%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IDriverT
"DisplayName"="InstallDriver Table Manager"
"C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\idsvc
"DisplayName"="@%systemroot%\\Microsoft.NET\\Framework64\\v3.0\\Windows Communication Foundation\\ServiceModelInstallRC.dll,-8193"
"%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IKEEXT
"DisplayName"="@%SystemRoot%\\system32\\ikeext.dll,-501"
%systemroot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\intelppm
"DisplayName"="Intel Processor Driver"
system32\DRIVERS\intelppm.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPBusEnum
"DisplayName"="@%systemroot%\\system32\\IPBusEnum.dll,-102"
%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iphlpsvc
"DisplayName"="@%SystemRoot%\\system32\\iphlpsvc.dll,-200"
%SystemRoot%\System32\svchost.exe -k NetSvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iPod Service
"DisplayName"="iPod-service"
"C:\Program Files (x86)\iPod\bin\iPodService.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iScsiPrt
"DisplayName"="iScsiPort-stuurprogramma"
system32\DRIVERS\msiscsi.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kbdhid
"DisplayName"="Stuurprogramma voor toetsenbord-HID"
system32\DRIVERS\kbdhid.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KeyIso
"DisplayName"="@keyiso.dll,-100"
%SystemRoot%\system32\lsass.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ksthunk
"DisplayName"="Kernel Streaming Thunks"
\SystemRoot\system32\drivers\ksthunk.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KtmRm
"DisplayName"="@comres.dll,-2946"
%SystemRoot%\System32\svchost.exe -k NetworkService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LHidFilt
"DisplayName"="Logitech SetPoint KMDF HID Filter Driver"
system32\DRIVERS\LHidFilt.Sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LHidKe
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lltdio
"DisplayName"="Link-Layer Topology Discovery Mapper I/O Driver"
system32\DRIVERS\lltdio.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lltdsvc
"DisplayName"="@%SystemRoot%\\system32\\lltdres.dll,-1"
%SystemRoot%\System32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lsa
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\luafv
"DisplayName"="UAC File Virtualization"
\SystemRoot\system32\drivers\luafv.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LUsbFilt
"DisplayName"="Logitech SetPoint KMDF USB Filter"
System32\Drivers\LUsbFilt.Sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Microsoft Office Groove Audit Service
"DisplayName"="Microsoft Office Groove Audit Service"
"C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MMCSS
"DisplayName"="@%systemroot%\\system32\\mmcss.dll,-100"
%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\monitor
"DisplayName"="Microsoft Monitor Class Function Driver-service"
system32\DRIVERS\monitor.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mouhid
"DisplayName"="Stuurprogramma voor muis-HID"
system32\DRIVERS\mouhid.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpsdrv
"DisplayName"="@%SystemRoot%\\system32\\FirewallAPI.dll,-23092"
System32\drivers\mpsdrv.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc
"DisplayName"="@%SystemRoot%\\system32\\FirewallAPI.dll,-23090"
%SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msisadrv
"DisplayName"="ISA/EISA Class-stuurprogramma"
system32\drivers\msisadrv.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSiSCSI
"DisplayName"="@%SystemRoot%\\system32\\iscsidsc.dll,-5000"
%systemroot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MsRPC
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSSCNTRS
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSTEE
"DisplayName"="Microsoft Streaming Tee/Sink-to-Sink-conversieprogramma"
system32\drivers\MSTEE.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MTsensor
"DisplayName"="ATK0110 ACPI UTILITY"
system32\DRIVERS\ASACPI.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\napagent
"DisplayName"="@%SystemRoot%\\system32\\qagentrt.dll,-6"
%SystemRoot%\System32\svchost.exe -k NetworkService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NativeWifiP
"DisplayName"="NativeWiFi Filter"
system32\DRIVERS\nwifi.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NBService
"DisplayName"="NBService"
C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netprofm
"DisplayName"="@%SystemRoot%\\system32\\netprof.dll,-246"
%SystemRoot%\System32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NOD32krn
"DisplayName"="NOD32 Kernel Service"
"C:\Program Files (x86)\Eset\nod32krn.exe"
Klik om te vergroten...

vervolg v REGLOOKS, zie volgende post...
P

Phoen!x

Legacy Member
vervolg REGLOOKS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NPPTNT2
"DisplayName"="NPPTNT2"
\??\C:\Windows\system32\npptNT2.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nsi
"DisplayName"="@%SystemRoot%\\system32\\nsisvc.dll,-200"
%systemroot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nsiproxy
"DisplayName"="NSI proxy service"
system32\drivers\nsiproxy.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\odserv
"DisplayName"="Microsoft Office Diagnostics Service"
"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OODBS
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2pimsvc
"DisplayName"="@%SystemRoot%\\system32\\p2psvc.dll,-8004"
%SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2psvc
"DisplayName"="@%SystemRoot%\\system32\\p2psvc.dll,-8006"
%SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PcaSvc
"DisplayName"="@%SystemRoot%\\system32\\pcasvc.dll,-1"
%systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PEAUTH
"DisplayName"="PEAUTH"
system32\drivers\peauth.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pla
"DisplayName"="@%systemroot%\\system32\\pla.dll,-500"
%SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPAutoReg
"DisplayName"="@%SystemRoot%\\system32\\p2psvc.dll,-8002"
%SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPsvc
"DisplayName"="@%SystemRoot%\\system32\\p2psvc.dll,-8000"
%SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PortProxy
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PROCMON10
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ProfSvc
"DisplayName"="@%systemroot%\\system32\\profsvc.dll,-300"
%systemroot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QWAVE
"DisplayName"="@%SystemRoot%\\system32\\qwave.dll,-1"
%windir%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QWAVEdrv
"DisplayName"="@%SystemRoot%\\system32\\drivers\\qwavedrv.sys,-1"
\SystemRoot\system32\drivers\qwavedrv.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Razerlow
"DisplayName"="Razer Pro|Solutions"
system32\drivers\Razerlow.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDPENCDD
"DisplayName"="RDP Encoder Mirror Driver"
system32\drivers\rdpencdd.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry
"DisplayName"="@regsvc.dll,-1"
%SystemRoot%\system32\svchost.exe -k regsvc

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RivaTuner64
"DisplayName"="RivaTuner64"
\??\C:\Program Files (x86)\RivaTuner v2.02\RivaTuner64.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rspndr
"DisplayName"="Link-Layer Topology Discovery Responder"
system32\DRIVERS\rspndr.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RTL8169
"DisplayName"="Realtek 8169 NT Driver"
system32\DRIVERS\Rtlh64.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCPolicySvc
"DisplayName"="@%SystemRoot%\\System32\\certprop.dll,-13"
%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SDRSVC
"DisplayName"="@%SystemRoot%\\system32\\sdrsvc.dll,-107"
%SystemRoot%\system32\svchost.exe -k SDRSVC

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Serenum
"DisplayName"="Serenum Filter-stuurprogramma"
system32\DRIVERS\serenum.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ServiceModelEndpoint 3.0.0.0
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ServiceModelOperation 3.0.0.0
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ServiceModelService 3.0.0.0
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SessionEnv
"DisplayName"="@%SystemRoot%\\System32\\SessEnv.dll,-1026"
%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sffp_mmc
"DisplayName"="SFF Storage Protocol Driver for MMC"
\SystemRoot\system32\drivers\sffp_mmc.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sffp_sd
"DisplayName"="SFF Storage Protocol Driver for SDBus"
\SystemRoot\system32\drivers\sffp_sd.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\slsvc
"DisplayName"="@%SystemRoot%\\system32\\SLsvc.exe,-101"
%SystemRoot%\system32\SLsvc.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SLUINotify
"DisplayName"="@%SystemRoot%\\system32\\SLUINotify.dll,-103"
%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Smb
"DisplayName"="@%SystemRoot%\\system32\\tcpipcfg.dll,-50005"
system32\DRIVERS\smb.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMSvcHost 3.0.0.0
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMPTRAP
"DisplayName"="@%SystemRoot%\\system32\\snmptrap.exe,-3"
%SystemRoot%\System32\snmptrap.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\spldr
"DisplayName"="Security Processor Loader Driver"
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd
System32\Drivers\sptd.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysMain
"DisplayName"="@%SystemRoot%\\system32\\sysmain.dll,-1000"
%systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TabletInputService
"DisplayName"="@%SystemRoot%\\system32\\TabSvc.dll,-100"
%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TBS
"DisplayName"="@%SystemRoot%\\system32\\tbssvc.dll,-100"
%SystemRoot%\System32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tdx
"DisplayName"="@%SystemRoot%\\system32\\tcpipcfg.dll,-50004"
system32\DRIVERS\tdx.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\THREADORDER
"DisplayName"="@%systemroot%\\system32\\mmcss.dll,-102"
%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrustedInstaller
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tssecsrv
"DisplayName"="Terminal Services Security Filter Driver"
System32\DRIVERS\tssecsrv.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tunmp
"DisplayName"="Stuurprogramma voor Microsoft Tun Minipoort-adapter"
system32\DRIVERS\tunmp.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tunnel
"DisplayName"="Microsoft IPv6 Tunnel Miniport Adapterstuurprogramma"
system32\DRIVERS\tunnel.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\uagp35
"DisplayName"="Microsoft AGPv3.5 Filter"
\SystemRoot\system32\drivers\uagp35.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UGatherer
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UGTHRSVC
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UI0Detect
"DisplayName"="@%SystemRoot%\\system32\\ui0detect.exe,-101"
%SystemRoot%\system32\UI0Detect.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\uliagpkx
"DisplayName"="Uli AGP Bus Filter"
\SystemRoot\system32\drivers\uliagpkx.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\umbus
"DisplayName"="UMBus Enumerator-stuurprogramma"
system32\DRIVERS\umbus.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UmRdpService
"DisplayName"="@%SystemRoot%\\system32\\umrdp.dll,-1000"
%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usb
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbccgp
"DisplayName"="Microsoft algemeen hoofd-USB-stuurprogramma"
system32\DRIVERS\usbccgp.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usnjsvc
"DisplayName"="Messenger USN Journal Reader service voor Gedeelde mappen"
"C:\Program Files (x86)\MSN Messenger\usnsvc.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usprserv
"DisplayName"="User Privilege Service"
%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UxSms
"DisplayName"="@%SystemRoot%\\system32\\dwm.exe,-2000"
%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vds
"DisplayName"="@%SystemRoot%\\system32\\vds.exe,-100"
%SystemRoot%\System32\vds.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vga
system32\DRIVERS\vgapnp.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\volmgr
"DisplayName"="Stuurprogramma voor Volumebeheer"
system32\drivers\volmgr.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\volmgrx
"DisplayName"="Dynamic Volume Manager"
System32\drivers\volmgrx.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wbengine
"DisplayName"="@%systemroot%\\system32\\wbengine.exe,-104"
"%systemroot%\system32\wbengine.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wcncsvc
"DisplayName"="@%SystemRoot%\\system32\\wcncsvc.dll,-3"
%SystemRoot%\System32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WcsPlugInService
"DisplayName"="@%SystemRoot%\\system32\\WcsPlugInService.dll,-200"
%SystemRoot%\system32\svchost.exe -k wcssvc

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wdf01000
"DisplayName"="Kernel Mode Driver Frameworks service"
system32\drivers\Wdf01000.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdiServiceHost
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdiSystemHost
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WEBNTACCESS
"DisplayName"="WEBNTACCESS"
\??\C:\Windows\system32\NTACCESS.SYS

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc
"DisplayName"="@%SystemRoot%\\system32\\wecsvc.dll,-200"
%SystemRoot%\system32\svchost.exe -k NetworkService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wercplsupport
"DisplayName"="@%SystemRoot%\\System32\\wercplsupport.dll,-101"
%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WerSvc
"DisplayName"="@%SystemRoot%\\System32\\wersvc.dll,-100"
%SystemRoot%\System32\svchost.exe -k WerSvcGroup

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WimFltr
"DisplayName"="WimFltr"
system32\DRIVERS\wimfltr.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Windows Workflow Foundation 3.0.0.0
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinHttpAutoProxySvc
"DisplayName"="@%SystemRoot%\\system32\\winhttp.dll,-100"
%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM
"DisplayName"="@%Systemroot%\\system32\\wsmsvc.dll,-101"
%SystemRoot%\System32\svchost.exe -k NetworkService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wlansvc
"DisplayName"="@%SystemRoot%\\System32\\wlansvc.dll,-257"
%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WPCSvc
"DisplayName"="@%SystemRoot%\\system32\\wpcsvc.dll,-100"
%SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WPDBusEnum
"DisplayName"="@%SystemRoot%\\system32\\wpdbusenum.dll,-100"
%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSearch
"DisplayName"="@%systemroot%\\system32\\SearchIndexer.exe,-103"
%systemroot%\system32\SearchIndexer.exe /Embedding

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSearchIdxPi
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{938DDF45-1899-4BDE-A520-1FBA6B860165}
no imagepath value found


--- SECURITYPROVIDERS regkey ---

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders
"SecurityProviders"="credssp.dll"


--- SVCHOST regkey ---

HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost
LocalSystemNetworkRestricted: hidserv\0Netman\0AudioEndpointBuilder\0dot3svc\0WPDBusEnum\0wlansvc\0\0
termsvcs: TermService\0\0
LocalService: NSI\0SSDPSRV\0upnphost\0SCardSvr\0RemoteRegistry\0WinHttpAutoProxySvc\0TBS\0SLUINotify\0netprofm\0QWAVE\0WebClient\0\0
netsvcs: AeLookupSvc\0Themes\0CertPropSvc\0SCPolicySvc\0lanmanserver\0gpsvc\0AudioSrv\0FastUserSwitchingCompatibility\0Ias\0Irmon\0Nla\0Ntmssvc\0NWCWorkstation\0Nwsapagent\0Rasauto\0Rasman\0Remoteaccess\0SENS\0Sharedaccess\0SRService\0Tapisrv\0Wmi\0WmdmPmSp\0TermService\0wuauserv\0BITS\0ShellHWDetection\0LogonHours\0PCAudit\0helpsvc\0uploadmgr\0iphlpsvc\0msiscsi\0SessionEnv\0schedule\0winmgmt\0AppMgmt\0\0
rpcss: RpcSs\0\0
LocalServiceNetworkRestricted: AudioSrv\0LmHosts\0wscsvc\0p2pimsvc\0PNRPSvc\0p2psvc\0PnrpAutoReg\0WPCSvc\0\0
wcssvc: WcsPlugInService\0\0
DcomLaunch: PlugPlay\0DcomLaunch\0\0
NetworkService: DHCP\0TermService\0DNSCache\0NapAgent\0nlasvc\0WinRM\0WECSVC\0Tapisrv\0\0
imgsvc: StiSvc\0\0


--- WOW-CMDLINE regkeys ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WOW


--- STARTUP FOLDERS ---

C:\Users\Jens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk


--- TASK SCHEDULER JOBS ---

no .job files found


--- File associations ---

.BAT files: ("%1" %*)
.COM files: ("%1" %*)
.EXE files: ("%1" %*)
.HLP files: (%SystemRoot%\winhlp32.exe %1)
.INF files: (%SystemRoot%\system32\NOTEPAD.EXE %1)
.INI files: (%SystemRoot%\system32\NOTEPAD.EXE %1)
.JS files: (%SystemRoot%\System32\WScript.exe "%1" %*)
.PIF files: ("%1" %*)
.REG files: (regedit.exe "%1")
.SCR files: ("%1" /S)
.TXT files: (%SystemRoot%\system32\NOTEPAD.EXE %1)
.VBS files: ("%SystemRoot%\System32\WScript.exe" "%1" %*)


FINISHED
Klik om te vergroten...

hijackThis
Logfile of HijackThis v1.99.1
Scan saved at 19:39:09, on 15/07/2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Program Files (x86)\ESET\nod32kui.exe
C:\Program Files (x86)\Razer\Diamondback\razerhid.exe
C:\Program Files (x86)\Razer\Diamondback\razertra.exe
C:\Program Files (x86)\Razer\Diamondback\razerofa.exe
C:\Users\Jens\SetPoint\x86\SetPoint32.exe
C:\Windows\SysWOW64\conime.exe
C:\Program Files (x86)\MSN Messenger\msnmsgr.exe
C:\Program Files (x86)\ASUS\AASP\1.00.25\aaCenter.exe
C:\Program Files (x86)\ASUS\AI Suite\AiNap\AiNap.exe
C:\Program Files (x86)\RivaTuner v2.02\RivaTuner.exe
C:\Program Files (x86)\RivaTuner v2.02\Tools\RivaTunerStatisticsServer\RivaTunerStatisticsServer.exe
C:\Program Files (x86)\ASUS\PC Probe II\Probe2.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Jens\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 125.135.87.117:2464
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files (x86)\FlashGet\jccatch.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~2\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GRA8E1~1.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files (x86)\FlashGet\getflash.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~2\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files (x86)\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Diamondback] "C:\Program Files (x86)\Razer\Diamondback\razerhid.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EA Link\Core.exe" -silent
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files (x86)\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files (x86)\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\FlashGet.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O15 - Trusted Zone: http://www.msi.com.tw
O17 - HKLM\System\CCS\Services\Tcpip\..\{938DDF45-1899-4BDE-A520-1FBA6B860165}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{938DDF45-1899-4BDE-A520-1FBA6B860165}: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{938DDF45-1899-4BDE-A520-1FBA6B860165}: NameServer = 192.168.1.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GR99D3~1.DLL
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files (x86)\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files (x86)\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files (x86)\Eset\nod32krn.exe
O23 - Service: O&O Defrag - Unknown owner - C:\Windows\system32\oodag.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)
Klik om te vergroten...
J

Jurgenv1

Legacy Member
Ik heb verkeerde instructies gegeven voor reglooks:

Klik rechts op reglooks.exe en kies voor "als administrator uitvoeren".
Je zult een melding krijgen van gebruikersaccountbeheer, sta dit toe (toestaan).

Doe verder niets en wacht tot er een logfile opent. Post de inhoud van deze logfile samen met een nieuw logje van Hijackthis.
P

Phoen!x

Legacy Member
Reglooks (als Administrator)
REGLOOKS logfile

version 0.971
zo 15/07/2007 20:48:03,76
running from: "C:\Users\Jens\Desktop"

--- SSODL regkeys ---

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
only standard or legit regkeys found


--- STS regkeys ---

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
only standard or legit regkeys found


--- USERINIT regkey ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
"Userinit"="userinit.exe"


--- SHELL regkey ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
"Shell"="explorer.exe"


--- SYSTEM regkey ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon


--- APPINIT_DLLS regkey ---

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows
"AppInit_DLLs"=""


--- NOTIFY regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
only standard or legit regkeys found


--- BOOTEXECUTE regkey ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
BootExecute= autocheck autochk *\0OODBS\0lsdelete\0\0


--- PENDINGFILERENAMEOPERATIONS regkey ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
Pendingfilerenameoperations= \??\C:\Users\Jens\Local Settings\temp\FXSAPIDebugLogFile.txt\0\0\??\C:\Users\Jens\Local Settings\temp\~DFAD6C.tmp\0\0\??\C:\Users\Jens\AppData\Local\Temp\67f199f1.1f0\\0\0\??\C:\Users\Jens\AppData\Local\Temp\ab93b200.21a\\0\0\??\C:\Config.Msi\17655ca.rbf\0\0\0


--- SHELLEXECUTEHOOKS regkey ---

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"="Groove GFS Stub Execution Hook"


--- HKLM\Run regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"SoundMAXPnP"="C:\\Program Files (x86)\\Analog Devices\\Core\\smax4pnp.exe"
"nod32kui"="\"C:\\Program Files (x86)\\Eset\\nod32kui.exe\" /WAITSERVICE"
"Diamondback"="\"C:\\Program Files (x86)\\Razer\\Diamondback\\razerhid.exe\""
"QuickTime Task"="\"C:\\Program Files (x86)\\QuickTime\\QTTask.exe\" -atboottime"
[Run\OptionalComponents]
@=""
[Run\OptionalComponents\IMAIL]
@=""
[Run\OptionalComponents\MAPI]
@=""
[Run\OptionalComponents\MSFS]
@=""


--- HKLM\RunOnce regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
no HKLM RunOnce keys found


--- HKLM\RunOnceEx regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
regkey does not exist


--- HKLM\RunServices regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
regkey does not exist


--- HKLM\RunServicesOnce regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
regkey does not exist


--- HKCU\Run regkeys ---

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"msnmsgr"="\"C:\\Program Files (x86)\\MSN Messenger\\msnmsgr.exe\" /background"
"ehTray.exe"="C:\\Windows\\ehome\\ehTray.exe"
"Sidebar"="C:\\Program Files\\Windows Sidebar\\sidebar.exe /autoRun"
"EA Core"="\"C:\\Program Files (x86)\\Electronic Arts\\EA Link\\Core.exe\" -silent"


--- HKCU\RunOnce regkeys ---

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
no HKCU RunOnce keys found


--- HKCU\RunOnceEx regkeys ---

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
regkey does not exist


--- HKCU\RunServices regkeys ---

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
regkey does not exist


--- HKCU\RunServicesOnce regkeys ---

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
regkey does not exist


--- HKU\.DEFAULT\Run regkeys ---

HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
no HKU\.DEFAULT\Run keys found


--- HKU\S-1-5-18\Run regkeys ---

HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
no HKU\S-1-5-18\Run keys found


--- HKU\S-1-5-19\Run regkeys ---

HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"Sidebar"=hex(2):25,50,72,6f,67,72,61,6d,46,69,6c,65,73,25,5c,57,69,6e,64,6f,\
77,73,20,53,69,64,65,62,61,72,5c,53,69,64,65,62,61,72,2e,65,78,65,20,2f,64,\
65,74,65,63,74,4d,65,6d,00
"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"


--- HKU\S-1-5-20\Run regkeys ---

HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"Sidebar"=hex(2):25,50,72,6f,67,72,61,6d,46,69,6c,65,73,25,5c,57,69,6e,64,6f,\
77,73,20,53,69,64,65,62,61,72,5c,53,69,64,65,62,61,72,2e,65,78,65,20,2f,64,\
65,74,65,63,74,4d,65,6d,00
"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"


--- HKLM\Explorer\Run regkeys ---

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
regkey does not exist


--- HKCU\Explorer\Run regkeys ---

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
regkey does not exist


--- Image File Execution regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
no debuggers found


--- BROWSER HELPER OBJECTS regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
"{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" regkey not found (ERROR)
"{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}" FILE ="C:\\Program Files (x86)\\FlashGet\\jccatch.dll"
"{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}" FILE ="C:\\PROGRA~2\\MEGAUP~1\\MEGAUP~1.DLL"
"{72853161-30C5-4D22-B7F9-0BBC1D38A37E}" FILE ="C:\\PROGRA~2\\MICROS~1\\Office12\\GRA8E1~1.DLL"
"{7E853D72-626A-48EC-A868-BA8D5E23E045}" regkey not found (ERROR)
"{F156768E-81EF-470C-9057-481BA8380DBA}" FILE ="C:\\Program Files (x86)\\FlashGet\\getflash.dll"


--- TOOLBAR regkeys ---

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
"{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}" FILE ="C:\\PROGRA~2\\MEGAUP~1\\MEGAUP~1.DLL"


--- URLSEARCHHOOKS regkeys ---

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks
only standard regkeys found


--- SRCEENSAVER regkey ---

HKEY_CURRENT_USER\Control Panel\Desktop
"SCRNSAVE.EXE"="C:\\Windows\\system32\\logon.scr"


--- CONTEXTMENUHANDLERS regkeys ---

HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers
"BriefcaseMenu" CLSID ={85BBD920-42A0-1069-A2E4-08002B30309D} FILE ="syncui.dll"
"NOD32 Context Menu Shell Extension" CLSID ={B089FE88-FB52-11D3-BDF1-0050DA34150D} FILE ="C:\\Program Files (x86)\\Eset\\nodshex.dll"
"Open With" CLSID ={09799AFB-AD67-11d1-ABCD-00C04FC30936} FILE =%SystemRoot%\system32\shell32.dll
"Open With EncryptionMenu" CLSID ={A470F8CF-A1E8-4f65-8335-227475AA5C46} FILE =%SystemRoot%\system32\shell32.dll
"Sharing" CLSID ={f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} FILE ="ntshrui.dll"
"WinRAR" CLSID ={B41DB860-64E4-11D2-9906-E49FADC173CA} FILE NOT FOUND
"WinRAR32" CLSID ={B41DB860-8EE4-11D2-9906-E49FADC173CA} FILE ="C:\\Program Files (x86)\\WinRAR\\rarext.dll"
"XXX Groove GFS Context Menu Handler XXX" CLSID ={6C467336-8281-4E60-8204-430CED96822D} FILE ="C:\\PROGRA~2\\MICROS~1\\Office12\\GRA8E1~1.DLL"
"{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}" Start Menu Pin FILE =%SystemRoot%\system32\shell32.dll

HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers
"EncryptionMenu" CLSID ={A470F8CF-A1E8-4f65-8335-227475AA5C46} FILE =%SystemRoot%\system32\shell32.dll
"Sharing" CLSID ={f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} FILE ="ntshrui.dll"
"WinRAR" CLSID ={B41DB860-64E4-11D2-9906-E49FADC173CA} FILE NOT FOUND
"WinRAR32" CLSID ={B41DB860-8EE4-11D2-9906-E49FADC173CA} FILE ="C:\\Program Files (x86)\\WinRAR\\rarext.dll"
"XXX Groove GFS Context Menu Handler XXX" CLSID ={6C467336-8281-4E60-8204-430CED96822D} FILE ="C:\\PROGRA~2\\MICROS~1\\Office12\\GRA8E1~1.DLL"

HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers
"BriefcaseMenu" CLSID ={85BBD920-42A0-1069-A2E4-08002B30309D} FILE ="syncui.dll"
"NOD32 Context Menu Shell Extension" CLSID ={B089FE88-FB52-11D3-BDF1-0050DA34150D} FILE ="C:\\Program Files (x86)\\Eset\\nodshex.dll"
"WinRAR" CLSID ={B41DB860-64E4-11D2-9906-E49FADC173CA} FILE NOT FOUND
"WinRAR32" CLSID ={B41DB860-8EE4-11D2-9906-E49FADC173CA} FILE ="C:\\Program Files (x86)\\WinRAR\\rarext.dll"
"XXX Groove GFS Context Menu Handler XXX" CLSID ={6C467336-8281-4E60-8204-430CED96822D} FILE ="C:\\PROGRA~2\\MICROS~1\\Office12\\GRA8E1~1.DLL"


--- ALTERNATESHELL regkey ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot
"AlternateShell"="cmd.exe"


--- SAFEBOOT MINIMAL SERVICES ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal
aawservice
AppInfo
KeyIso
NTDS
ProfSvc
sacsvr
SWPRV
TabletInputService
TBS
TrustedInstaller
volmgr.sys
volmgrx.sys
{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}
{D48179BE-EC20-11D1-B6B8-00C04FA372A7}
{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}


--- SAFEBOOT NETWORK SERVICES ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network
aawservice
AppInfo
BFE
bowser
dfsc
Dot3Svc
Eaphost
IKEEXT
KeyIso
MPSDrv
MPSSvc
mrxsmb
mrxsmb10
mrxsmb20
NativeWifiP
netprofm
NlaSvc
Nsi
nsiproxy.sys
NTDS
PolicyAgent
ProfSvc
rdbss
rdpencdd.sys
sacsvr
SCardSvr
SWPRV
TabletInputService
TBS
TrustedInstaller
VDS
volmgr.sys
volmgrx.sys
Wlansvc
{50DD5230-BA8A-11D1-BF5D-0000F805F530}
{533C5B84-EC70-11D2-9505-00C04F79DEAF}
{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}
{D48179BE-EC20-11D1-B6B8-00C04FA372A7}
{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}


--- SERVICES ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aawservice
"DisplayName"="Ad-Aware 2007 Service"
"C:\Program Files (x86)\Lavasoft\Ad-Aware 2007\aawservice.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ADIHdAudAddService
"DisplayName"="ADI UAA Function Driver for High Definition Audio Service"
system32\drivers\ADIHdAud.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\adsi
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AeLookupSvc
"DisplayName"="@%SystemRoot%\\system32\\aelupsvc.dll,-1"
%systemroot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Appinfo
"DisplayName"="@%systemroot%\\system32\\appinfo.dll,-100"
%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AsIO
"DisplayName"="AsIO"
SysWow64\drivers\AsIO.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AudioEndpointBuilder
"DisplayName"="@%SystemRoot%\\system32\\audiosrv.dll,-204"
%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
"DisplayName"="@%SystemRoot%\\system32\\bfe.dll,-1001"
%systemroot%\system32\svchost.exe -k LocalServiceNoNetwork

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bowser
"DisplayName"="Bowser"
system32\DRIVERS\bowser.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrFiltLo
"DisplayName"="Brother USB Mass-Storage Lower Filter Driver"
\SystemRoot\system32\drivers\brfiltlo.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrFiltUp
"DisplayName"="Brother USB Mass-Storage Upper Filter Driver"
\SystemRoot\system32\drivers\brfiltup.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrUsbSer
"DisplayName"="Brother MFC USB Serial WDM Driver"
\SystemRoot\system32\drivers\brusbser.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertPropSvc
"DisplayName"="@%SystemRoot%\\System32\\certprop.dll,-11"
%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CLFS
"DisplayName"="Common Log (CLFS)"
System32\CLFS.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\clr_optimization_v2.0.50727_64
"DisplayName"="Microsoft .NET Framework NGEN v2.0.50727_X64"
%systemroot%\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crcdisk
"DisplayName"="Crcdisk Filter Driver"
system32\drivers\crcdisk.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crypt32
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CSC
"DisplayName"="Offline Files Driver"
system32\drivers\csc.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CscService
"DisplayName"="@%systemroot%\\system32\\cscsvc.dll,-200"
%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DCLocator
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DfsC
"DisplayName"="Dfs Client Driver"
System32\Drivers\dfsc.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DFSR
"DisplayName"="@dfsrres.dll,-101"
%SystemRoot%\system32\DFSR.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dot3svc
"DisplayName"="@%systemroot%\\system32\\dot3svc.dll,-1102"
%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dump_wmimmc
"DisplayName"="dump_wmimmc"
\??\D:\Games\Games-Masters.com\CABAL Online (Europe)\GameGuard\dump_wmimmc.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DXGKrnl
"DisplayName"="LDDM Graphics Subsystem"
\SystemRoot\System32\drivers\dxgkrnl.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\E1G60
"DisplayName"="Intel(R) PRO/1000 NDIS 6 Adapter Driver"
system32\DRIVERS\E1G6032E.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EapHost
"DisplayName"="@%systemroot%\\system32\\eapsvc.dll,-1"
%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ecache
"DisplayName"="ReadyBoost Caching Driver"
System32\drivers\ecache.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehRecvr
"DisplayName"="@%SystemRoot%\\ehome\\ehrecvr.exe,-101"
%systemroot%\ehome\ehRecvr.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehSched
"DisplayName"="@%SystemRoot%\\ehome\\ehsched.exe,-101"
%systemroot%\ehome\ehsched.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehstart
"DisplayName"="@%SystemRoot%\\ehome\\ehstart.dll,-101"
%windir%\system32\svchost.exe -k LocalServiceNoNetwork

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EmdCache
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EMDMgmt
"DisplayName"="@%SystemRoot%\\system32\\emdmgmt.dll,-1000"
%systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ESENT
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fdPHost
"DisplayName"="@%systemroot%\\system32\\fdPHost.dll,-100"
%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FDResPub
"DisplayName"="@%systemroot%\\system32\\fdrespub.dll,-100"
%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FileInfo
"DisplayName"="File Information FS MiniFilter"
system32\drivers\fileinfo.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Filetrace
"DisplayName"="FileTrace"
system32\drivers\filetrace.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FontCache3.0.0.0
"DisplayName"="@%SystemRoot%\\system32\\PresentationHost.exe,-3309"
%systemroot%\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fvevol
"DisplayName"="BitLocker Drive Encryption Filter Driver"
System32\DRIVERS\fvevol.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gpsvc
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HdAudAddService
"DisplayName"="Microsoft 1.1 UAA Functiestuurprogramma voor High Definition Audio-service"
system32\drivers\HdAudio.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HDAudBus
"DisplayName"="Microsoft UAA Bus-stuurprogramma voor High Definition Audio"
system32\DRIVERS\HDAudBus.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HidUsb
"DisplayName"="Microsoft HID Class-stuurprogramma"
system32\DRIVERS\hidusb.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hkmsvc
"DisplayName"="@%SystemRoot%\\system32\\kmsvc.dll,-6"
%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IDriverT
"DisplayName"="InstallDriver Table Manager"
"C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\idsvc
"DisplayName"="@%systemroot%\\Microsoft.NET\\Framework64\\v3.0\\Windows Communication Foundation\\ServiceModelInstallRC.dll,-8193"
"%systemroot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IKEEXT
"DisplayName"="@%SystemRoot%\\system32\\ikeext.dll,-501"
%systemroot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\intelppm
"DisplayName"="Intel Processor Driver"
system32\DRIVERS\intelppm.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPBusEnum
"DisplayName"="@%systemroot%\\system32\\IPBusEnum.dll,-102"
%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iphlpsvc
"DisplayName"="@%SystemRoot%\\system32\\iphlpsvc.dll,-200"
%SystemRoot%\System32\svchost.exe -k NetSvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iPod Service
"DisplayName"="iPod-service"
"C:\Program Files (x86)\iPod\bin\iPodService.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iScsiPrt
"DisplayName"="iScsiPort-stuurprogramma"
system32\DRIVERS\msiscsi.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kbdhid
"DisplayName"="Stuurprogramma voor toetsenbord-HID"
system32\DRIVERS\kbdhid.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KeyIso
"DisplayName"="@keyiso.dll,-100"
%SystemRoot%\system32\lsass.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ksthunk
"DisplayName"="Kernel Streaming Thunks"
\SystemRoot\system32\drivers\ksthunk.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KtmRm
"DisplayName"="@comres.dll,-2946"
%SystemRoot%\System32\svchost.exe -k NetworkService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LHidFilt
"DisplayName"="Logitech SetPoint KMDF HID Filter Driver"
system32\DRIVERS\LHidFilt.Sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LHidKe
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lltdio
"DisplayName"="Link-Layer Topology Discovery Mapper I/O Driver"
system32\DRIVERS\lltdio.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lltdsvc
"DisplayName"="@%SystemRoot%\\system32\\lltdres.dll,-1"
%SystemRoot%\System32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lsa
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\luafv
"DisplayName"="UAC File Virtualization"
\SystemRoot\system32\drivers\luafv.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LUsbFilt
"DisplayName"="Logitech SetPoint KMDF USB Filter"
System32\Drivers\LUsbFilt.Sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Microsoft Office Groove Audit Service
"DisplayName"="Microsoft Office Groove Audit Service"
"C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MMCSS
"DisplayName"="@%systemroot%\\system32\\mmcss.dll,-100"
%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\monitor
"DisplayName"="Microsoft Monitor Class Function Driver-service"
system32\DRIVERS\monitor.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mouhid
"DisplayName"="Stuurprogramma voor muis-HID"
system32\DRIVERS\mouhid.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpsdrv
"DisplayName"="@%SystemRoot%\\system32\\FirewallAPI.dll,-23092"
System32\drivers\mpsdrv.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc
"DisplayName"="@%SystemRoot%\\system32\\FirewallAPI.dll,-23090"
%SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msisadrv
"DisplayName"="ISA/EISA Class-stuurprogramma"
system32\drivers\msisadrv.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSiSCSI
"DisplayName"="@%SystemRoot%\\system32\\iscsidsc.dll,-5000"
%systemroot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MsRPC
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSSCNTRS
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSTEE
"DisplayName"="Microsoft Streaming Tee/Sink-to-Sink-conversieprogramma"
system32\drivers\MSTEE.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MTsensor
"DisplayName"="ATK0110 ACPI UTILITY"
system32\DRIVERS\ASACPI.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\napagent
"DisplayName"="@%SystemRoot%\\system32\\qagentrt.dll,-6"
%SystemRoot%\System32\svchost.exe -k NetworkService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NativeWifiP
"DisplayName"="NativeWiFi Filter"
system32\DRIVERS\nwifi.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NBService
"DisplayName"="NBService"
C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netprofm
"DisplayName"="@%SystemRoot%\\system32\\netprof.dll,-246"
%SystemRoot%\System32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NOD32krn
"DisplayName"="NOD32 Kernel Service"
"C:\Program Files (x86)\Eset\nod32krn.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NPPTNT2
"DisplayName"="NPPTNT2"
\??\C:\Windows\system32\npptNT2.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nsi
"DisplayName"="@%SystemRoot%\\system32\\nsisvc.dll,-200"
%systemroot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nsiproxy
"DisplayName"="NSI proxy service"
system32\drivers\nsiproxy.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\odserv
"DisplayName"="Microsoft Office Diagnostics Service"
"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE"
Klik om te vergroten...
vervolg v REGLOOKS, zie volgende post...
P

Phoen!x

Legacy Member
Vervolg REGLOOKS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OODBS
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2pimsvc
"DisplayName"="@%SystemRoot%\\system32\\p2psvc.dll,-8004"
%SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2psvc
"DisplayName"="@%SystemRoot%\\system32\\p2psvc.dll,-8006"
%SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PcaSvc
"DisplayName"="@%SystemRoot%\\system32\\pcasvc.dll,-1"
%systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PEAUTH
"DisplayName"="PEAUTH"
system32\drivers\peauth.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pla
"DisplayName"="@%systemroot%\\system32\\pla.dll,-500"
%SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPAutoReg
"DisplayName"="@%SystemRoot%\\system32\\p2psvc.dll,-8002"
%SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPsvc
"DisplayName"="@%SystemRoot%\\system32\\p2psvc.dll,-8000"
%SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PortProxy
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PROCMON10
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ProfSvc
"DisplayName"="@%systemroot%\\system32\\profsvc.dll,-300"
%systemroot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QWAVE
"DisplayName"="@%SystemRoot%\\system32\\qwave.dll,-1"
%windir%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QWAVEdrv
"DisplayName"="@%SystemRoot%\\system32\\drivers\\qwavedrv.sys,-1"
\SystemRoot\system32\drivers\qwavedrv.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Razerlow
"DisplayName"="Razer Pro|Solutions"
system32\drivers\Razerlow.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDPENCDD
"DisplayName"="RDP Encoder Mirror Driver"
system32\drivers\rdpencdd.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry
"DisplayName"="@regsvc.dll,-1"
%SystemRoot%\system32\svchost.exe -k regsvc

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RivaTuner64
"DisplayName"="RivaTuner64"
\??\C:\Program Files (x86)\RivaTuner v2.02\RivaTuner64.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\rspndr
"DisplayName"="Link-Layer Topology Discovery Responder"
system32\DRIVERS\rspndr.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RTL8169
"DisplayName"="Realtek 8169 NT Driver"
system32\DRIVERS\Rtlh64.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCPolicySvc
"DisplayName"="@%SystemRoot%\\System32\\certprop.dll,-13"
%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SDRSVC
"DisplayName"="@%SystemRoot%\\system32\\sdrsvc.dll,-107"
%SystemRoot%\system32\svchost.exe -k SDRSVC

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Serenum
"DisplayName"="Serenum Filter-stuurprogramma"
system32\DRIVERS\serenum.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ServiceModelEndpoint 3.0.0.0
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ServiceModelOperation 3.0.0.0
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ServiceModelService 3.0.0.0
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SessionEnv
"DisplayName"="@%SystemRoot%\\System32\\SessEnv.dll,-1026"
%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sffp_mmc
"DisplayName"="SFF Storage Protocol Driver for MMC"
\SystemRoot\system32\drivers\sffp_mmc.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sffp_sd
"DisplayName"="SFF Storage Protocol Driver for SDBus"
\SystemRoot\system32\drivers\sffp_sd.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\slsvc
"DisplayName"="@%SystemRoot%\\system32\\SLsvc.exe,-101"
%SystemRoot%\system32\SLsvc.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SLUINotify
"DisplayName"="@%SystemRoot%\\system32\\SLUINotify.dll,-103"
%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Smb
"DisplayName"="@%SystemRoot%\\system32\\tcpipcfg.dll,-50005"
system32\DRIVERS\smb.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMSvcHost 3.0.0.0
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMPTRAP
"DisplayName"="@%SystemRoot%\\system32\\snmptrap.exe,-3"
%SystemRoot%\System32\snmptrap.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\spldr
"DisplayName"="Security Processor Loader Driver"
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd
System32\Drivers\sptd.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysMain
"DisplayName"="@%SystemRoot%\\system32\\sysmain.dll,-1000"
%systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TabletInputService
"DisplayName"="@%SystemRoot%\\system32\\TabSvc.dll,-100"
%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TBS
"DisplayName"="@%SystemRoot%\\system32\\tbssvc.dll,-100"
%SystemRoot%\System32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tdx
"DisplayName"="@%SystemRoot%\\system32\\tcpipcfg.dll,-50004"
system32\DRIVERS\tdx.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\THREADORDER
"DisplayName"="@%systemroot%\\system32\\mmcss.dll,-102"
%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrustedInstaller
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tssecsrv
"DisplayName"="Terminal Services Security Filter Driver"
System32\DRIVERS\tssecsrv.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tunmp
"DisplayName"="Stuurprogramma voor Microsoft Tun Minipoort-adapter"
system32\DRIVERS\tunmp.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tunnel
"DisplayName"="Microsoft IPv6 Tunnel Miniport Adapterstuurprogramma"
system32\DRIVERS\tunnel.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\uagp35
"DisplayName"="Microsoft AGPv3.5 Filter"
\SystemRoot\system32\drivers\uagp35.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UGatherer
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UGTHRSVC
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UI0Detect
"DisplayName"="@%SystemRoot%\\system32\\ui0detect.exe,-101"
%SystemRoot%\system32\UI0Detect.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\uliagpkx
"DisplayName"="Uli AGP Bus Filter"
\SystemRoot\system32\drivers\uliagpkx.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\umbus
"DisplayName"="UMBus Enumerator-stuurprogramma"
system32\DRIVERS\umbus.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UmRdpService
"DisplayName"="@%SystemRoot%\\system32\\umrdp.dll,-1000"
%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usb
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbccgp
"DisplayName"="Microsoft algemeen hoofd-USB-stuurprogramma"
system32\DRIVERS\usbccgp.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usnjsvc
"DisplayName"="Messenger USN Journal Reader service voor Gedeelde mappen"
"C:\Program Files (x86)\MSN Messenger\usnsvc.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usprserv
"DisplayName"="User Privilege Service"
%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UxSms
"DisplayName"="@%SystemRoot%\\system32\\dwm.exe,-2000"
%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vds
"DisplayName"="@%SystemRoot%\\system32\\vds.exe,-100"
%SystemRoot%\System32\vds.exe

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vga
system32\DRIVERS\vgapnp.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\volmgr
"DisplayName"="Stuurprogramma voor Volumebeheer"
system32\drivers\volmgr.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\volmgrx
"DisplayName"="Dynamic Volume Manager"
System32\drivers\volmgrx.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wbengine
"DisplayName"="@%systemroot%\\system32\\wbengine.exe,-104"
"%systemroot%\system32\wbengine.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wcncsvc
"DisplayName"="@%SystemRoot%\\system32\\wcncsvc.dll,-3"
%SystemRoot%\System32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WcsPlugInService
"DisplayName"="@%SystemRoot%\\system32\\WcsPlugInService.dll,-200"
%SystemRoot%\system32\svchost.exe -k wcssvc

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wdf01000
"DisplayName"="Kernel Mode Driver Frameworks service"
system32\drivers\Wdf01000.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdiServiceHost
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdiSystemHost
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WEBNTACCESS
"DisplayName"="WEBNTACCESS"
\??\C:\Windows\system32\NTACCESS.SYS

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc
"DisplayName"="@%SystemRoot%\\system32\\wecsvc.dll,-200"
%SystemRoot%\system32\svchost.exe -k NetworkService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wercplsupport
"DisplayName"="@%SystemRoot%\\System32\\wercplsupport.dll,-101"
%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WerSvc
"DisplayName"="@%SystemRoot%\\System32\\wersvc.dll,-100"
%SystemRoot%\System32\svchost.exe -k WerSvcGroup

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WimFltr
"DisplayName"="WimFltr"
system32\DRIVERS\wimfltr.sys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Windows Workflow Foundation 3.0.0.0
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinHttpAutoProxySvc
"DisplayName"="@%SystemRoot%\\system32\\winhttp.dll,-100"
%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM
"DisplayName"="@%Systemroot%\\system32\\wsmsvc.dll,-101"
%SystemRoot%\System32\svchost.exe -k NetworkService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wlansvc
"DisplayName"="@%SystemRoot%\\System32\\wlansvc.dll,-257"
%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WPCSvc
"DisplayName"="@%SystemRoot%\\system32\\wpcsvc.dll,-100"
%SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WPDBusEnum
"DisplayName"="@%SystemRoot%\\system32\\wpdbusenum.dll,-100"
%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSearch
"DisplayName"="@%systemroot%\\system32\\SearchIndexer.exe,-103"
%systemroot%\system32\SearchIndexer.exe /Embedding

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSearchIdxPi
no imagepath value found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{938DDF45-1899-4BDE-A520-1FBA6B860165}
no imagepath value found


--- SECURITYPROVIDERS regkey ---

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders
"SecurityProviders"="credssp.dll"


--- SVCHOST regkey ---

HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost
LocalSystemNetworkRestricted: hidserv\0Netman\0AudioEndpointBuilder\0dot3svc\0WPDBusEnum\0wlansvc\0\0
termsvcs: TermService\0\0
LocalService: NSI\0SSDPSRV\0upnphost\0SCardSvr\0RemoteRegistry\0WinHttpAutoProxySvc\0TBS\0SLUINotify\0netprofm\0QWAVE\0WebClient\0\0
netsvcs: AeLookupSvc\0Themes\0CertPropSvc\0SCPolicySvc\0lanmanserver\0gpsvc\0AudioSrv\0FastUserSwitchingCompatibility\0Ias\0Irmon\0Nla\0Ntmssvc\0NWCWorkstation\0Nwsapagent\0Rasauto\0Rasman\0Remoteaccess\0SENS\0Sharedaccess\0SRService\0Tapisrv\0Wmi\0WmdmPmSp\0TermService\0wuauserv\0BITS\0ShellHWDetection\0LogonHours\0PCAudit\0helpsvc\0uploadmgr\0iphlpsvc\0msiscsi\0SessionEnv\0schedule\0winmgmt\0AppMgmt\0\0
rpcss: RpcSs\0\0
LocalServiceNetworkRestricted: AudioSrv\0LmHosts\0wscsvc\0p2pimsvc\0PNRPSvc\0p2psvc\0PnrpAutoReg\0WPCSvc\0\0
wcssvc: WcsPlugInService\0\0
DcomLaunch: PlugPlay\0DcomLaunch\0\0
NetworkService: DHCP\0TermService\0DNSCache\0NapAgent\0nlasvc\0WinRM\0WECSVC\0Tapisrv\0\0
imgsvc: StiSvc\0\0


--- WOW-CMDLINE regkeys ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WOW


--- STARTUP FOLDERS ---

C:\Users\Jens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk


--- TASK SCHEDULER JOBS ---

no .job files found


--- File associations ---

.BAT files: ("%1" %*)
.COM files: ("%1" %*)
.EXE files: ("%1" %*)
.HLP files: (%SystemRoot%\winhlp32.exe %1)
.INF files: (%SystemRoot%\system32\NOTEPAD.EXE %1)
.INI files: (%SystemRoot%\system32\NOTEPAD.EXE %1)
.JS files: (%SystemRoot%\System32\WScript.exe "%1" %*)
.PIF files: ("%1" %*)
.REG files: (regedit.exe "%1")
.SCR files: ("%1" /S)
.TXT files: (%SystemRoot%\system32\NOTEPAD.EXE %1)
.VBS files: ("%SystemRoot%\System32\WScript.exe" "%1" %*)


FINISHED
Klik om te vergroten...
P

Phoen!x

Legacy Member
Noppes, heb al Yahoo verwijderd bij zoekmachines in Firefox ook (rechtsboven)
In Internet Explorer lukt het wel. (Yahoo verwijderd, Live search als standaard gezet)
Maar het is nog altijd niet als vroeger, stomme zoekmachines...
Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
Terug
Bovenaan