Ga naar inhoud

Aanbevolen berichten

Geplaatst:

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EMDMgmt]

"ServiceDll"="%systemroot%\system32\emdmgmt.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ErrDev]

"ImagePath"="\SystemRoot\system32\drivers\errdev.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ESENT]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog]

"ServiceDll"="%SystemRoot%\System32\wevtsvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventSystem]

"ServiceDll"="%systemroot%\system32\es.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\exfat]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\fastfat]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\fdc]

"ImagePath"="system32\DRIVERS\fdc.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\fdPHost]

"ServiceDll"="%SystemRoot%\system32\fdPHost.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FDResPub]

"ServiceDll"="%SystemRoot%\system32\fdrespub.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FileInfo]

"ImagePath"="system32\drivers\fileinfo.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Filetrace]

"ImagePath"="system32\drivers\filetrace.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\flpydisk]

"ImagePath"="system32\DRIVERS\flpydisk.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FltMgr]

"ImagePath"="system32\drivers\fltmgr.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FontCache]

"ServiceDll"="%SystemRoot%\system32\FntCache.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FontCache3.0.0.0]

"ImagePath"="%systemroot%\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\fssfltr]

"ImagePath"="system32\DRIVERS\fssfltr.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\fsssvc]

"ImagePath"="\"c:\program files\Windows Live\Family Safety\fsssvc.exe\""

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Fs_Rec]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\gagp30kx]

"ImagePath"="\SystemRoot\system32\drivers\gagp30kx.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\GameConsoleService]

"ImagePath"="\"c:\program files\HP Games\My HP Game Console\GameConsoleService.exe\""

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\gpsvc]

"ServiceDll"="%SystemRoot%\System32\gpsvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hcw85bda]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HdAudAddService]

"ImagePath"="system32\drivers\CHDART.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HDAudBus]

"ImagePath"="system32\DRIVERS\HDAudBus.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HidBth]

"ImagePath"="system32\DRIVERS\hidbth.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HidIr]

"ImagePath"="\SystemRoot\system32\drivers\hidir.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hidserv]

"ServiceDll"="%SystemRoot%\System32\hidserv.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HidUsb]

"ImagePath"="\SystemRoot\system32\drivers\hidusb.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hkmsvc]

"ServiceDLL"="%SystemRoot%\system32\kmsvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HP Health Check Service]

"ImagePath"="\"c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe\""

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HpCISSs]

"ImagePath"="\SystemRoot\system32\drivers\hpcisss.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HpqKbFiltr]

"ImagePath"="system32\DRIVERS\HpqKbFiltr.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HpqRemHid]

"ImagePath"="system32\DRIVERS\HpqRemHid.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hpqwmiex]

"ImagePath"="c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HSFHWAZL]

"ImagePath"="system32\DRIVERS\VSTAZL3.SYS"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HSF_DPV]

"ImagePath"="system32\DRIVERS\HSX_DPV.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HSXHWAZL]

"ImagePath"="system32\DRIVERS\HSXHWAZL.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\HTTP]

"ImagePath"="system32\drivers\HTTP.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\i2omp]

"ImagePath"="\SystemRoot\system32\drivers\i2omp.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\i8042prt]

"ImagePath"="system32\DRIVERS\i8042prt.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaStor]

"ImagePath"="system32\DRIVERS\iaStor.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iaStorV]

"ImagePath"="\SystemRoot\system32\drivers\iastorv.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IDriverT]

"ImagePath"="\"c:\program files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe\""

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\idsvc]

"ImagePath"="\"%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe\""

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iirsp]

"ImagePath"="\SystemRoot\system32\drivers\iirsp.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IKEEXT]

"ServiceDll"="%SystemRoot%\System32\ikeext.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\inetaccs]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\intelide]

"ImagePath"="system32\drivers\intelide.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\intelppm]

"ImagePath"="system32\DRIVERS\intelppm.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IPBusEnum]

"ServiceDll"="%SystemRoot%\system32\ipbusenum.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IpFilterDriver]

"ImagePath"="system32\DRIVERS\ipfltdrv.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iphlpsvc]

"ServiceDll"="%SystemRoot%\System32\iphlpsvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IpInIp]

"ImagePath"="system32\DRIVERS\ipinip.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IPMIDRV]

"ImagePath"="\SystemRoot\system32\drivers\ipmidrv.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IPNAT]

"ImagePath"="system32\DRIVERS\ipnat.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IRENUM]

"ImagePath"="system32\drivers\irenum.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\isapnp]

"ImagePath"="\SystemRoot\system32\drivers\isapnp.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iScsiPrt]

"ImagePath"="system32\DRIVERS\msiscsi.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iteatapi]

"ImagePath"="\SystemRoot\system32\drivers\iteatapi.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\iteraid]

"ImagePath"="\SystemRoot\system32\drivers\iteraid.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\kbdclass]

"ImagePath"="system32\DRIVERS\kbdclass.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\kbdhid]

"ImagePath"="system32\DRIVERS\kbdhid.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\KeyIso]

"ImagePath"="%SystemRoot%\system32\lsass.exe"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\KSecDD]

"ImagePath"="System32\Drivers\ksecdd.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\KtmRm]

"ServiceDll"="%systemroot%\system32\msdtckrm.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LanmanServer]

"ServiceDll"="%SystemRoot%\System32\srvsvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LanmanWorkstation]

"ServiceDll"="%SystemRoot%\System32\wkssvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ldap]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LightScribeService]

"ImagePath"="\"c:\program files\Common Files\LightScribe\LSSrvc.exe\""

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\lltdio]

"ImagePath"="system32\DRIVERS\lltdio.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\lltdsvc]

"ServiceDll"="%SystemRoot%\System32\lltdsvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\lmhosts]

"ServiceDll"="%SystemRoot%\System32\lmhsvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Lsa]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSI_FC]

"ImagePath"="\SystemRoot\system32\drivers\lsi_fc.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSI_SAS]

"ImagePath"="\SystemRoot\system32\drivers\lsi_sas.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LSI_SCSI]

"ImagePath"="\SystemRoot\system32\drivers\lsi_scsi.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\luafv]

"ImagePath"="\SystemRoot\system32\drivers\luafv.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MBAMProtector]

"ImagePath"="\??\c:\windows\system32\drivers\mbam.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MBAMService]

"ImagePath"="\"c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe\""

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Mcx2Svc]

"ServiceDll"="%SystemRoot%\system32\Mcx2Svc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mdmxsdk]

"ImagePath"="system32\DRIVERS\mdmxsdk.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\megasas]

"ImagePath"="\SystemRoot\system32\drivers\megasas.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MegaSR]

"ImagePath"="\SystemRoot\system32\drivers\megasr.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MMCSS]

"ServiceDll"="%SystemRoot%\system32\mmcss.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Modem]

"ImagePath"="system32\drivers\modem.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\monitor]

"ImagePath"="system32\DRIVERS\monitor.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mouclass]

"ImagePath"="system32\DRIVERS\mouclass.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mouhid]

"ImagePath"="system32\DRIVERS\mouhid.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MountMgr]

"ImagePath"="System32\drivers\mountmgr.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mpio]

"ImagePath"="\SystemRoot\system32\drivers\mpio.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mpsdrv]

"ImagePath"="System32\drivers\mpsdrv.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MpsSvc]

"ServiceDll"="%SystemRoot%\system32\mpssvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Mraid35x]

"ImagePath"="\SystemRoot\system32\drivers\mraid35x.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MRxDAV]

"ImagePath"="\SystemRoot\system32\drivers\mrxdav.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mrxsmb]

"ImagePath"="system32\DRIVERS\mrxsmb.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mrxsmb10]

"ImagePath"="system32\DRIVERS\mrxsmb10.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mrxsmb20]

"ImagePath"="system32\DRIVERS\mrxsmb20.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msahci]

"ImagePath"="system32\drivers\msahci.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msdsm]

"ImagePath"="\SystemRoot\system32\drivers\msdsm.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC]

"ImagePath"="%SystemRoot%\System32\msdtc.exe"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC Bridge 3.0.0.0]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSDTC Bridge 4.0.0.0]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Msfs]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msisadrv]

"ImagePath"="system32\drivers\msisadrv.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSiSCSI]

"ServiceDll"="%systemroot%\system32\iscsiexe.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msiserver]

"ImagePath"="%systemroot%\system32\msiexec.exe /V"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSKSSRV]

"ImagePath"="system32\drivers\MSKSSRV.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSPCLOCK]

"ImagePath"="system32\drivers\MSPCLOCK.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSPQM]

"ImagePath"="system32\drivers\MSPQM.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MsRPC]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSSCNTRS]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mssmbios]

"ImagePath"="system32\DRIVERS\mssmbios.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSSQL$MSSMLBIZ]

"ImagePath"="\"c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe\" -sMSSMLBIZ"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSSQLServerADHelper]

"ImagePath"="\"c:\program files\Microsoft SQL Server\90\Shared\sqladhlp90.exe\""

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MSTEE]

"ImagePath"="system32\drivers\MSTEE.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Mup]

"ImagePath"="System32\Drivers\mup.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\napagent]

"ServiceDLL"="%SystemRoot%\system32\qagentRT.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NativeWifiP]

"ImagePath"="system32\DRIVERS\nwifi.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NDIS]

"ImagePath"="system32\drivers\ndis.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NdisTapi]

"ImagePath"="system32\DRIVERS\ndistapi.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ndisuio]

"ImagePath"="system32\DRIVERS\ndisuio.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NdisWan]

"ImagePath"="system32\DRIVERS\ndiswan.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NDProxy]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NetBIOS]

"ImagePath"="system32\DRIVERS\netbios.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\netbt]

"ImagePath"="System32\DRIVERS\netbt.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Netlogon]

"ImagePath"="%SystemRoot%\system32\lsass.exe"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Netman]

"ServiceDll"="%SystemRoot%\System32\netman.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\netprofm]

"ServiceDll"="%SystemRoot%\System32\netprofm.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NetTcpPortSharing]

"ImagePath"="\"%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe\""

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NETw4v32]

"ImagePath"="system32\DRIVERS\NETw4v32.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nfrd960]

"ImagePath"="\SystemRoot\system32\drivers\nfrd960.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NlaSvc]

"ServiceDll"="%SystemRoot%\System32\nlasvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Npfs]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nsi]

"ServiceDll"="%systemroot%\system32\nsisvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nsiproxy]

"ImagePath"="system32\drivers\nsiproxy.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NTDS]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ntfs]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ntrigdigi]

"ImagePath"="\SystemRoot\system32\drivers\ntrigdigi.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Null]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NVENETFD]

"ImagePath"="system32\DRIVERS\nvm60x32.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nvlddmkm]

"ImagePath"="system32\DRIVERS\nvlddmkm.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nvraid]

"ImagePath"="\SystemRoot\system32\drivers\nvraid.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nvstor]

"ImagePath"="\SystemRoot\system32\drivers\nvstor.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\nv_agp]

"ImagePath"="\SystemRoot\system32\drivers\nv_agp.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NwlnkFlt]

"ImagePath"="system32\DRIVERS\nwlnkflt.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NwlnkFwd]

"ImagePath"="system32\DRIVERS\nwlnkfwd.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\odserv]

"ImagePath"="\"c:\program files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE\""

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ohci1394]

"ImagePath"="system32\DRIVERS\ohci1394.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ose]

"ImagePath"="\"c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE\""

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Outlook]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\p2pimsvc]

"ServiceDll"="%SystemRoot%\system32\p2psvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\p2psvc]

"ServiceDll"="%SystemRoot%\system32\p2psvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Parport]

"ImagePath"="\SystemRoot\system32\drivers\parport.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\partmgr]

"ImagePath"="System32\drivers\partmgr.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Parvdm]

"ImagePath"="\SystemRoot\system32\drivers\parvdm.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PcaSvc]

"ServiceDll"="%SystemRoot%\System32\pcasvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pci]

"ImagePath"="system32\drivers\pci.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pciide]

"ImagePath"="\SystemRoot\system32\drivers\pciide.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pcmcia]

"ImagePath"="\SystemRoot\system32\drivers\pcmcia.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PEAUTH]

"ImagePath"="system32\drivers\peauth.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfDisk]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfNet]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfOS]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerfProc]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\pla]

"ServiceDll"="%systemroot%\system32\pla.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PlugPlay]

"ServiceDll"="%SystemRoot%\system32\umpnpmgr.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Pml Driver HPZ12]

"ServiceDll"="c:\windows\system32\HPZipm12.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PNRPAutoReg]

"ServiceDll"="%SystemRoot%\system32\p2psvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PNRPsvc]

"ServiceDll"="%SystemRoot%\system32\p2psvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PolicyAgent]

"ServiceDll"="%SystemRoot%\System32\ipsecsvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PortProxy]

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PptpMiniport]

"ImagePath"="system32\DRIVERS\raspptp.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Processor]

"ImagePath"="\SystemRoot\system32\drivers\processr.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ProfSvc]

"ServiceDll"="%systemroot%\system32\profsvc.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ProtectedStorage]

"ImagePath"="%SystemRoot%\system32\lsass.exe"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PSched]

"ImagePath"="system32\DRIVERS\pacer.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ql2300]

"ImagePath"="\SystemRoot\system32\drivers\ql2300.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ql40xx]

"ImagePath"="\SystemRoot\system32\drivers\ql40xx.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\QPCapSvc]

"ImagePath"="\"c:\program files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe\"\00\00\00\00\00\00\00\00\00\00\02\00\00\00c:\program files\HP\QuickPlay\Kernel\TV\Ca"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\QPSched]

"ImagePath"="\"c:\program files\HP\QuickPlay\Kernel\TV\QPSched.exe\"\00a\00y\00\\00K\00e\00r\00n\00e\00l\00\\00T\00V\00\\00Q\00P\00C\00a\00p\00S\00v\00c\00.\00e\00x\00e"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\QWAVE]

"ServiceDll"="%windir%\system32\qwave.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\QWAVEdrv]

"ImagePath"="\SystemRoot\system32\drivers\qwavedrv.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RasAcd]

"ImagePath"="System32\DRIVERS\rasacd.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RasAuto]

"ServiceDll"="%SystemRoot%\System32\rasauto.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Rasl2tp]

"ImagePath"="system32\DRIVERS\rasl2tp.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RasMan]

"ServiceDll"="%SystemRoot%\System32\rasmans.dll"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RasPppoe]

"ImagePath"="system32\DRIVERS\raspppoe.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RasSstp]

"ImagePath"="system32\DRIVERS\rassstp.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rdbss]

"ImagePath"="system32\DRIVERS\rdbss.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RDPCDD]

"ImagePath"="System32\DRIVERS\RDPCDD.sys"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RDPDD]

.

Geplaatst:

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

Folder::

c:\program files\Common Files\Spigot

c:\program files\PriceGong

Registry::

[-HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\windows]

[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

"BabylonToolbar"=-

Sla dit bestand op je bureaublad op als CFScript.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht.

Geplaatst:
hoe sla ik dit op als cfscript
Dat is gewoon de naam die je aan dat tekstbestand geeft bij het opslaan op het bureaublad : CFScript
Geplaatst:

al mijn opstart programma zijn nu weg dit zijn de vermeldingen die ik krijg

c:\programfiles\internet Explorer\explore.exe

illegal operatio attempted on registry key that has been marked for deletion

help

Geplaatst:

alles werkt weer alleen heb ik nog het probleem wanneer ik de laptop oppstart:could not load or run c:\usser\steve\locals-1\temp\msevah.exe specified in the registry make sure this file exist on your computer or remove the reference to in the registry.

nu ik heb het al geprobeert met de registry zelf daar kan ik het niet verwijderen,graag een ander oplossing maar niet met combofix want dan gaat het weer fout ik kan gelukig een herstel uit voeren.

bvd

Geplaatst:

Een echt alternatief voor Combofix is er in dit geval niet (omdat je er in het register blijkbaar ook niet in slaagt om manuele verwijdering toe te passen). Dan zal je nu moeten teruggaan naar een herstelpunt van vóór de besmetting zich heeft voorgedaan ... dit op voorwaarde dat je nog oudere herstelpunten hebt, tenminste.

En anders zal het toch Combofix moeten worden :dong:

Gast
Dit topic is nu gesloten voor nieuwe reacties.
×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.