Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Databaseversie: 6647

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

23/05/2011 11:14:00
mbam-log-2011-05-23 (11-14-00).txt

Scantype: Snelle scan
Objecten gescand: 166642
Verstreken tijd: 1 minuut/minuten, 11 seconde(n)

Geheugenprocessen geïnfecteerd: 0
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 9
Registerwaarden geïnfecteerd: 1
Registerdata geïnfecteerd: 0
Mappen geïnfecteerd: 0
Bestanden geïnfecteerd: 7

Geheugenprocessen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registersleutels geïnfecteerd:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1a398ae5 (Adware.Ezula) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7CB31C91-27EB-5479-F82D-34C0368A7DA5} (Adware.AdRotator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7CB31C91-27EB-5479-F82D-34C0368A7DA5} (Adware.AdRotator) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{7CB31C91-27EB-5479-F82D-34C0368A7DA5} (Adware.AdRotator) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7CB31C91-27EB-5479-F82D-34C0368A7DA5} (Adware.AdRotator) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c0d3cc73-9592-5457-ceb6-9f92d4ca70a1} (Adware.AdRotator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c0d3cc73-9592-5457-ceb6-9f92d4ca70a1} (Adware.AdRotator) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C0D3CC73-9592-5457-CEB6-9F92D4CA70A1} (Adware.AdRotator) -> Quarantined and deleted successfully.

Registerwaarden geïnfecteerd:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\zyknqeoduetyqb (Trojan.Agent) -> Value: zyknqeoduetyqb -> Quarantined and deleted successfully.

Registerdata geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Mappen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Bestanden geïnfecteerd:
c:\Windows\System32\1a398ae5.exe (Adware.Ezula) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\1a398ae5.exe (Adware.Ezula) -> Quarantined and deleted successfully.
c:\Users\Thomas\AppData\Local\Temp\oproep ccp10 42491293  part d 4001-4002-4003.pdf (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\Thomas\AppData\Local\Temp\oproepbrief c3 + c4-1.doc (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\Thomas\AppData\Local\Temp\oproepbrief c3 + c4.doc (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\Thomas\AppData\Local\Temp\oproepbrief groep 1 + 2.doc (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\5aa57c54.dll (Adware.AdRotator) -> Quarantined and deleted successfully.