Logfile created: 3/06/2009 20:6:24
Lavasoft Ad-Aware version: 8.0.5
Extended engine version: 8.1
User performing scan: elyesa
*********************** Definitions database information ***********************
Lavasoft definition file: 148.44
Extended engine definition file: 8.1
******************************** Scan results: *********************************
Scan profile name: Slim. scan (ID: smart)
Objects scanned: 35835
Objects detected: 24
Type Detected
==========================
Processes.......: 0
Registry entries: 0
Hostfile entries: 0
Files...........: 0
Folders.........: 0
LSPs............: 0
Cookies.........: 24
Browser hijacks.: 0
MRU objects.....: 0
Removed items:
Description: *doubleclick* Family Name: Cookies Clean status: Success Item ID: 408875 Family ID: 0
Description: *.adtoma* Family Name: Cookies Clean status: Success Item ID: 409297 Family ID: 0
Description: *ad.yieldmanager* Family Name: Cookies Clean status: Success Item ID: 409172 Family ID: 0
Description: *apmebf* Family Name: Cookies Clean status: Success Item ID: 409163 Family ID: 0
Description: *atdmt* Family Name: Cookies Clean status: Success Item ID: 408910 Family ID: 0
Description: *casalemedia* Family Name: Cookies Clean status: Success Item ID: 409152 Family ID: 0
Description: *clickbank* Family Name: Cookies Clean status: Success Item ID: 408890 Family ID: 0
Description: *doubleclick* Family Name: Cookies Clean status: Success Item ID: 408875 Family ID: 0
Description: *fastclick* Family Name: Cookies Clean status: Success Item ID: 408869 Family ID: 0
Description: *kontera* Family Name: Cookies Clean status: Success Item ID: 409363 Family ID: 0
Description: *webtrends* Family Name: Cookies Clean status: Success Item ID: 599640 Family ID: 0
Description: *metriweb* Family Name: Cookies Clean status: Success Item ID: 408990 Family ID: 0
Description: *statcounter* Family Name: Cookies Clean status: Success Item ID: 409185 Family ID: 0
Description: *tribalfusion* Family Name: Cookies Clean status: Success Item ID: 408785 Family ID: 0
Description: *webads* Family Name: Cookies Clean status: Success Item ID: 408780 Family ID: 0
Description: *wunderloop* Family Name: Cookies Clean status: Success Item ID: 599639 Family ID: 0
Description: *adserv* Family Name: Cookies Clean status: Success Item ID: 408921 Family ID: 0
Description: *doubleclick* Family Name: Cookies Clean status: Success Item ID: 408875 Family ID: 0
Description: *metriweb* Family Name: Cookies Clean status: Success Item ID: 408990 Family ID: 0
Description: *.webmasterplan* Family Name: Cookies Clean status: Success Item ID: 409180 Family ID: 0
Description: *fastclick* Family Name: Cookies Clean status: Success Item ID: 408869 Family ID: 0
Description: *adultfriendfinder* Family Name: Cookies Clean status: Success Item ID: 409164 Family ID: 0
Description: *tradedoubler* Family Name: Cookies Clean status: Success Item ID: 408964 Family ID: 0
Description: *doubleclick* Family Name: Cookies Clean status: Success Item ID: 408875 Family ID: 0
Scan and cleaning complete: Finished correctly after 113 seconds
*********************************** Settings ***********************************
Scan profile:
ID: smart, enabled:1, value: Slim. scan
ID: scancriticalareas, enabled:1, value: true
ID: scanrunningapps, enabled:1, value: true
ID: scanregistry, enabled:1, value: true
ID: scanlsp, enabled:1, value: true
ID: scanads, enabled:1, value: false
ID: scanhostsfile, enabled:1, value: false
ID: scanmru, enabled:1, value: false
ID: scanbrowserhijacks, enabled:1, value: true
ID: scantrackingcookies, enabled:1, value: true
ID: closebrowsers, enabled:1, value: false
ID: folderstoscan, enabled:1, value:
ID: scanrootkits, enabled:1, value: true
ID: usespywareheuristics, enabled:1, value: true
ID: extendedengine, enabled:0, value: true
ID: useheuristics, enabled:0, value: true
ID: heuristicslevel, enabled:0, value: mild, domain: medium,mild,strict
ID: filescanningoptions, enabled:1
ID: archives, enabled:1, value: false
ID: onlyexecutables, enabled:1, value: true
ID: skiplargerthan, enabled:1, value: 20480
Scan global:
ID: global, enabled:1
ID: addtocontextmenu, enabled:1, value: true
ID: playsoundoninfection, enabled:1, value: false
ID: soundfile, enabled:0, value: *to be filled in automatically*\alert.wav
Scheduled scan settings:
<Empty>
Update settings:
ID: updates, enabled:1
ID: launchthreatworksafterscan, enabled:1, value: normal, domain: normal,off,silently
ID: displaystatus, enabled:1, value: false
ID: deffiles, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
ID: autodetectproxy, enabled:1, value: false
ID: useautoconfigscript, enabled:1, value: false
ID: autoconfigurl, enabled:0, value:
ID: useproxy, enabled:1, value: false
ID: proxyserver, enabled:0, value:
ID: softwareupdates, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
ID: licenseandinfo, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
ID: schedules, enabled:1, value: true
ID: updatedaily, enabled:1, value: Daily
ID: time, enabled:1, value: Thu May 28 13:29:00 2009
ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: false
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: false
ID: friday, enabled:1, value: false
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: false
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false
ID: updateweekly, enabled:1, value: Weekly
ID: time, enabled:1, value: Thu May 28 13:29:00 2009
ID: frequency, enabled:1, value: weekly, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: true
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: true
ID: friday, enabled:1, value: false
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: false
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false
Appearance settings:
ID: appearance, enabled:1
ID: skin, enabled:1, value: default.egl, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Resource
ID: showtrayicon, enabled:1, value: true
ID: language, enabled:1, value: nl, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Language
Realtime protection settings:
ID: realtime, enabled:1
ID: processprotection, enabled:1, value: true
ID: registryprotection, enabled:0, value: false
ID: networkprotection, enabled:0, value: false
ID: loadatstartup, enabled:1, value: true
ID: usespywareheuristics, enabled:0, value: true
ID: extendedengine, enabled:0, value: false
ID: useheuristics, enabled:0, value: false
ID: heuristicslevel, enabled:0, value: mild, domain: medium,mild,strict
ID: infomessages, enabled:1, value: onlyimportant, domain: display,dontnotify,onlyimportant
****************************** System information ******************************
Computer name: PC_VAN_ELYESA
Processor name: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
Processor identifier: x86 Family 6 Model 15 Stepping 13
Raw info: processorarchitecture 0, processortype 586, processorlevel 6, processor revision 3853, number of processors 2
Physical memory available: 1978986496 bytes
Physical memory total: 3145859072 bytes
Virtual memory available: 1968996352 bytes
Virtual memory total: 2147352576 bytes
Memory load: 37%
Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 1 (build 6001)
Windows startup mode:
Running processes:
PID: 564 name: C:\Windows\System32\smss.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 636 name: C:\Windows\System32\csrss.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 676 name: C:\Windows\System32\wininit.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 688 name: C:\Windows\System32\csrss.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 732 name: C:\Windows\System32\services.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 744 name: C:\Windows\System32\lsass.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 752 name: C:\Windows\System32\lsm.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 840 name: C:\Windows\System32\winlogon.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 992 name: C:\Windows\System32\svchost.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 1056 name: C:\Windows\System32\svchost.exe owner: NETWORK SERVICE domain: NT AUTHORITY
PID: 1104 name: C:\Windows\System32\svchost.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 1192 name: C:\Windows\System32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY
PID: 1220 name: C:\Windows\System32\svchost.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 1252 name: C:\Windows\System32\svchost.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 1388 name: C:\Windows\System32\svchost.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 1408 name: C:\Windows\System32\SLsvc.exe owner: NETWORK SERVICE domain: NT AUTHORITY
PID: 1440 name: C:\Windows\System32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY
PID: 1604 name: C:\Windows\System32\svchost.exe owner: NETWORK SERVICE domain: NT AUTHORITY
PID: 1836 name: C:\Windows\System32\spoolsv.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 1864 name: C:\Windows\System32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY
PID: 2044 name: C:\Windows\System32\agrsmsvc.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 392 name: C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 376 name: C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 480 name: C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 580 name: C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 672 name: C:\Program Files\AVG\AVG8\avgrsx.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 724 name: C:\Program Files\Acer\Empowering Technology\Service\ETService.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 980 name: C:\PROGRA~1\AVG\AVG8\avgnsx.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 2104 name: C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 2116 name: C:\Program Files\Google\Update\GoogleUpdate.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 2224 name: C:\Program Files\Common Files\LightScribe\LSSrvc.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 2312 name: C:\ACER\Mobility Center\MobilityService.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 2372 name: C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 2468 name: C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 2500 name: C:\Windows\System32\svchost.exe owner: NETWORK SERVICE domain: NT AUTHORITY
PID: 2524 name: C:\Program Files\Cyberlink\Shared files\RichVideo.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 2560 name: C:\Windows\System32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY
PID: 2632 name: C:\Windows\System32\svchost.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 2692 name: C:\Windows\System32\SearchIndexer.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 2756 name: C:\PROGRA~1\AVG\AVG8\avgemc.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 3028 name: C:\Program Files\AVG\AVG8\avgcsrvx.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 3192 name: C:\Windows\System32\wbem\WmiPrvSE.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 3284 name: C:\Windows\System32\wbem\unsecapp.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 3972 name: C:\Windows\System32\taskeng.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 1892 name: C:\Windows\System32\taskeng.exe owner: elyesa domain: PC_van_elyesa
PID: 3524 name: C:\Windows\System32\dwm.exe owner: elyesa domain: PC_van_elyesa
PID: 3592 name: C:\Windows\explorer.exe owner: elyesa domain: PC_van_elyesa
PID: 728 name: C:\Program Files\Windows Media Player\wmpnetwk.exe owner: NETWORK SERVICE domain: NT AUTHORITY
PID: 4084 name: C:\Program Files\Java\jre6\bin\jusched.exe owner: elyesa domain: PC_van_elyesa
PID: 3812 name: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe owner: elyesa domain: PC_van_elyesa
PID: 3460 name: C:\Windows\PLFSetI.exe owner: elyesa domain: PC_van_elyesa
PID: 2428 name: C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe owner: elyesa domain: PC_van_elyesa
PID: 3956 name: C:\Windows\System32\igfxpers.exe owner: elyesa domain: PC_van_elyesa
PID: 4036 name: C:\Windows\System32\igfxsrvc.exe owner: elyesa domain: PC_van_elyesa
PID: 2868 name: C:\Windows\System32\igfxtray.exe owner: elyesa domain: PC_van_elyesa
PID: 3876 name: C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe owner: elyesa domain: PC_van_elyesa
PID: 3908 name: C:\Windows\System32\hkcmd.exe owner: elyesa domain: PC_van_elyesa
PID: 2956 name: C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe owner: elyesa domain: PC_van_elyesa
PID: 616 name: C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe owner: elyesa domain: PC_van_elyesa
PID: 1248 name: C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe owner: elyesa domain: PC_van_elyesa
PID: 1300 name: C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe owner: elyesa domain: PC_van_elyesa
PID: 1316 name: C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe owner: elyesa domain: PC_van_elyesa
PID: 3320 name: C:\Program Files\Windows Media Player\wmpnscfg.exe owner: elyesa domain: PC_van_elyesa
PID: 1560 name: C:\Windows\RtHDVCpl.exe owner: elyesa domain: PC_van_elyesa
PID: 3008 name: C:\Windows\System32\wbem\unsecapp.exe owner: elyesa domain: PC_van_elyesa
PID: 2416 name: C:\Windows\ehome\ehtray.exe owner: elyesa domain: PC_van_elyesa
PID: 3488 name: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe owner: elyesa domain: PC_van_elyesa
PID: 4176 name: C:\Windows\ehome\ehmsas.exe owner: elyesa domain: PC_van_elyesa
PID: 4440 name: C:\Users\elyesa\AppData\Local\Temp\RtkBtMnt.exe owner: elyesa domain: PC_van_elyesa
PID: 5356 name: C:\Program Files\Synaptics\SynTP\SynTPHelper.exe owner: elyesa domain: PC_van_elyesa
PID: 4924 name: C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 4688 name: C:\Windows\System32\wbem\unsecapp.exe owner: SYSTEEM domain: NT AUTHORITY
PID: 4892 name: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe owner: elyesa domain: PC_van_elyesa
PID: 5684 name: C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe owner: elyesa domain: PC_van_elyesa
Startup items:
Name: msnmsgr
imagepath: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
Name: {8C7461EF-2B13-11d2-BE35-3078302C2030}
imagepath: Component Categories cache daemon
Name: WebCheck
imagepath: {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
Name: eRecoveryService
Name: BvtUtility
imagepath: C:\Program Files\BvT Grup\BvT Live Tv\BvtUtility.exe
Name: SunJavaUpdateSched
imagepath: "C:\Program Files\Java\jre6\bin\jusched.exe"
Name: QuickTime Task
imagepath: "C:\Program Files\QuickTime\QTTask.exe" -atboottime
Name: Ad-Watch
imagepath: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
Name: AVG8_TRAY
imagepath: C:\PROGRA~1\AVG\AVG8\avgtray.exe
Name: Windows Defender
imagepath: %ProgramFiles%\Windows Defender\MSASCui.exe -hide
Name: SynTPEnh
imagepath: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Name: ProductReg
imagepath: "C:\Program Files\Acer\WR_PopUp\ProductReg.exe"
Name: PLFSetI
imagepath: C:\Windows\PLFSetI.exe
Name: PlayMovie
imagepath: "C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
Name: Persistence
imagepath: C:\Windows\system32\igfxpers.exe
Name: LManager
imagepath: C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
Name: IgfxTray
imagepath: C:\Windows\system32\igfxtray.exe
Name: IAAnotif
imagepath: C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
Name: HotKeysCmds
imagepath: C:\Windows\system32\hkcmd.exe
Name: Google Desktop Search
imagepath: "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
Name: ePower_DMC
imagepath: C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
Name: eDataSecurity Loader
imagepath: C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
Name: CLMLServer
imagepath: "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"
Name: BkupTray
imagepath: "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
Name: ArcadeDeluxeAgent
imagepath: "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
Name: RtHDVCpl
imagepath: RtHDVCpl.exe
Name: Skytel
imagepath: Skytel.exe
Name:
imagepath: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
Bootexecute items:
Name:
imagepath: autocheck autochk *
Name:
imagepath: lsdelete
Running services:
Name: AeLookupSvc
displayname: Application Experience
Name: AgereModemAudio
displayname: Agere Modem Call Progress Audio
Name: Appinfo
displayname: Application Information
Name: AudioEndpointBuilder
displayname: Windows Audio Endpoint Builder
Name: Audiosrv
displayname: Windows Audio
Name: avg8emc
displayname: AVG Free8 E-mail Scanner
Name: avg8wd
displayname: AVG Free8 WatchDog
Name: BFE
displayname: Base Filtering Engine
Name: BITS
displayname: Background Intelligent Transfer Service
Name: Browser
displayname: Computer Browser
Name: BUNAgentSvc
displayname: NTI Backup Now 5 Agent Service
Name: CLHNService
displayname: CLHNService
Name: CryptSvc
displayname: Cryptographic Services
Name: DcomLaunch
displayname: DCOM Server Process Launcher
Name: Dhcp
displayname: DHCP Client
Name: Dnscache
displayname: DNS Client
Name: DPS
displayname: Diagnostic Policy Service
Name: EapHost
displayname: Extensible Authentication Protocol
Name: eDataSecurity Service
displayname: eDataSecurity Service
Name: EMDMgmt
displayname: ReadyBoost
Name: ETService
displayname: Empowering Technology Service
Name: Eventlog
displayname: Windows Event Log
Name: EventSystem
displayname: COM+ Event System
Name: fdPHost
displayname: Function Discovery Provider Host
Name: FDResPub
displayname: Function Discovery Resource Publication
Name: gpsvc
displayname: Group Policy Client
Name: IAANTMON
displayname: Intel(R) Matrix Storage Event Monitor
Name: IKEEXT
displayname: IKE and AuthIP IPsec Keying Modules
Name: iphlpsvc
displayname: IP Helper
Name: KeyIso
displayname: CNG Key Isolation
Name: KtmRm
displayname: KtmRm for Distributed Transaction Coordinator
Name: LanmanServer
displayname: Server
Name: LanmanWorkstation
displayname: Workstation
Name: Lavasoft Ad-Aware Service
displayname: Lavasoft Ad-Aware Service
Name: LightScribeService
displayname: LightScribeService Direct Disc Labeling Service
Name: lmhosts
displayname: TCP/IP NetBIOS Helper
Name: MMCSS
displayname: Multimedia Class Scheduler
Name: MobilityService
displayname: MobilityService
Name: MpsSvc
displayname: Windows Firewall
Name: Netman
displayname: Network Connections
Name: netprofm
displayname: Network List-service
Name: NlaSvc
displayname: Network Location Awareness
Name: nsi
displayname: Network Store Interface-service
Name: NTIBackupSvc
displayname: NTI Backup Now 5 Backup Service
Name: NTISchedulerSvc
displayname: NTI Backup Now 5 Scheduler Service
Name: PcaSvc
displayname: Program Compatibility Assistant-service
Name: PlugPlay
displayname: Plug and Play
Name: PolicyAgent
displayname: IPsec Policy Agent
Name: ProfSvc
displayname: User Profile-service
Name: RasMan
displayname: Remote Access Connection Manager
Name: RichVideo
displayname: Cyberlink RichVideo Service(CRVS)
Name: RpcSs
displayname: Remote Procedure Call (RPC)
Name: SamSs
displayname: Security Accounts Manager
Name: Schedule
displayname: Task Scheduler
Name: seclogon
displayname: Secondary Logon
Name: SENS
displayname: System Event Notification-service
Name: ShellHWDetection
displayname: Shell Hardware Detection
Name: slsvc
displayname: Software Licensing
Name: Spooler
displayname: Print Spooler
Name: SSDPSRV
displayname: SSDP Discovery
Name: SstpSvc
displayname: SSTP-service (Secure Socket Tunneling Protocol)
Name: stisvc
displayname: WIA (Windows Image Acquisition)
Name: SysMain
displayname: Superfetch
Name: TabletInputService
displayname: Tablet PC Input-service
Name: TapiSrv
displayname: Telephony
Name: TermService
displayname: Terminal Services
Name: Themes
displayname: Themes
Name: TrkWks
displayname: Distributed Link Tracking Client
Name: upnphost
displayname: UPnP Device Host
Name: UxSms
displayname: Desktop Window Manager Session Manager
Name: W32Time
displayname: Windows Time
Name: WdiSystemHost
displayname: Diagnostic System Host
Name: WebClient
displayname: WebClient
Name: WerSvc
displayname: Windows Error Reporting-service
Name: WinDefend
displayname: Windows Defender
Name: WinHttpAutoProxySvc
displayname: WinHTTP Web Proxy Auto-Discovery-service
Name: Winmgmt
displayname: Windows Management Instrumentation
Name: Wlansvc
displayname: WLAN Auto Config
Name: WMPNetworkSvc
displayname: Windows Media Player Network Sharing-service
Name: WPDBusEnum
displayname: Portable Device Enumerator-service
Name: wscsvc
displayname: Security Center
Name: WSearch
displayname: Windows Search
Name: wuauserv
displayname: Windows Update
Name: wudfsvc
displayname: Windows Driver Foundation - User-mode Driver Framework
de bovenste is hjt en dit is ad aware ben het vergete bij te zette
sorry alvast en weeral bedankt
-1-5-21-290604711-6333423-4074240972-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced:Hidden Family Name: Win32.TrojanDownloader.Agent Clean status: Success Item ID: 414374 Family ID: 1001