Malwarebytes' Anti-Malware 1.44
Database versie: 3576
Windows 6.0.6001 Service Pack 1
Internet Explorer 7.0.6001.18000

16/01/2010 17:38:14
mbam-log-2010-01-16 (17-38-14).txt

Scan type: Snelle Scan
Objecten gescand: 118317
Verstreken tijd: 9 minute(s), 27 second(s)

Geheugenprocessen geïnfecteerd: 1
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 1
Registerwaarden geïnfecteerd: 1
Registerdata bestanden geïnfecteerd: 1
Mappen geïnfecteerd: 2
Bestanden geïnfecteerd: 3

Geheugenprocessen geïnfecteerd:
C:\Windows\rndll.exe (BackdoorBot) -> Unloaded process successfully.

Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige items gevonden)

Registersleutels geïnfecteerd:
HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi (Adware.Zwunzi) -> Quarantined and deleted successfully.

Registerwaarden geïnfecteerd:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\firevall administrating (BackdoorBot) -> Quarantined and deleted successfully.

Registerdata bestanden geïnfecteerd:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page (Hijack.Homepage) -> Bad: (http://freeart1cile.com) Good: (http://www.Google.com/) -> Quarantined and deleted successfully.

Mappen geïnfecteerd:
C:\ProgramData\Zwunzi (Adware.Zwunzi) -> Quarantined and deleted successfully.
C:\Program Files\Zwunzi (Adware.Zwunzi) -> Quarantined and deleted successfully.

Bestanden geïnfecteerd:
C:\Users\Jotwani\AppData\Local\Temp\nstCA02.tmp\uninstall.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\Zwunzi\zwunzi118.exe (Adware.Zwunzi) -> Quarantined and deleted successfully.
C:\Windows\rndll.exe (BackdoorBot) -> Quarantined and deleted successfully.