[Resolved] Windows Antivirus Pro on XP 64-bit

Yep, I was able to do the scan. Here's the results:

Log.txt:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithList
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids


OTS log results:

OTS logfile created on: 9/1/2009 8:24:50 AM - Run 2
OTS by OldTimer - Version 3.0.10.3	 Folder = F:\Documents and Settings\Administrator\Desktop
64bit-Windows Server 2003  Service Pack 1 (Version = 5.2.3790) - Type = NTWorkstation
Internet Explorer (Version = 6.0.3790.1830)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
4.00 Gb Total Physical Memory | 4.00 Gb Available Physical Memory | 100.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): F:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = F: | %SystemRoot% = F:\WINDOWS | %ProgramFiles% = F:\Program Files (x86)
Drive C: | 931.50 Gb Total Space | 929.10 Gb Free Space | 99.74% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 59.61 Gb Total Space | 49.15 Gb Free Space | 82.46% Space Free | Partition Type: NTFS
Drive G: | 1.95 Gb Total Space | 0.11 Gb Free Space | 5.81% Space Free | Partition Type: FAT32
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: HOME
Current User Name: Administrator
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
 
[Processes - Safe List]
bratimer.exe -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\bratimer.exe -> [2009/01/21 15:00:54 | 00,065,536 | —- | M] ()
brss01a.exe -> F:\WINDOWS\SysWOW64\brss01a.exe -> [2001/12/13 00:01:00 | 00,045,056 | —- | M] (brother Industries Ltd)
brsvc01a.exe -> F:\WINDOWS\SysWOW64\brsvc01a.exe -> [2004/06/14 00:00:00 | 00,057,344 | —- | M] (brother Industries Ltd)
frameworkservice.exe -> F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe -> [2008/03/14 04:00:00 | 00,103,744 | —- | M] (McAfee, Inc.)
naprdmgr.exe -> F:\Program Files (x86)\McAfee\Common Framework\naPrdMgr.exe -> [2008/03/14 04:00:00 | 00,226,624 | —- | M] (McAfee, Inc.)
ots.com -> F:\Documents and Settings\Administrator\Desktop\OTS.com -> [2009/08/31 11:33:10 | 00,514,048 | —- | M] (OldTimer Tools)
vstskmgr.exe -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe -> [2008/09/29 08:07:00 | 00,062,800 | —- | M] (McAfee, Inc.)
 
[Win32 Services - Safe List]
(aspnet_state) ASP.NET State Service [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\aspnet_state.exe -> [2008/07/25 10:13:44 | 00,046,088 | —- | M] (Microsoft Corporation)
(ATI Smart) ATI Smart [Win32_Own | Auto | Stopped] -> F:\WINDOWS\SysWow64\ati2saag.exe -> [2009/05/15 21:05:00 | 00,665,088 | —- | M] ()
(BRA_Scheduler) Brother BRAdminPro Scheduler [Win32_Own | Auto | Running] -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\bratimer.exe -> [2009/01/21 15:00:54 | 00,065,536 | —- | M] ()
(Brother XP spl Service) BrSplService [Win32_Own | Auto | Running] -> F:\WINDOWS\SysWOW64\brsvc01a.exe -> [2004/06/14 00:00:00 | 00,057,344 | —- | M] (brother Industries Ltd)
(clr_optimization_v2.0.50727_32) .NET Runtime Optimization Service v2.0.50727_X86 [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -> [2008/07/25 11:17:02 | 00,069,632 | —- | M] (Microsoft Corporation)
(clr_optimization_v2.0.50727_64) .NET Runtime Optimization Service v2.0.50727_x64 [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -> [2008/07/25 10:13:48 | 00,093,184 | —- | M] (Microsoft Corporation)
(FontCache3.0.0.0) Windows Presentation Foundation Font Cache 3.0.0.0 [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe -> [2008/07/29 21:18:04 | 00,046,104 | —- | M] (Microsoft Corporation)
(helpsvc) Help and Support [Win32_Shared | Auto | Running] -> F:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -> [2005/03/25 08:00:00 | 00,077,824 | —- | M] (Microsoft Corporation)
(IASJet) IAS Jet Database Access [Win32_Shared | On_Demand | Stopped] -> F:\WINDOWS\SysWOW64\iasrecst.dll -> [2005/03/25 08:00:00 | 00,162,816 | —- | M] (Microsoft Corporation)
(idsvc) Windows CardSpace [Win32_Shared | Unknown | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe -> [2008/07/29 19:28:38 | 00,859,648 | —- | M] (Microsoft Corporation)
(McAfeeEngineService) McAfee Engine Service [Win32_Own | Auto | Running] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\EngineServer.exe -> [2008/09/29 08:07:00 | 00,017,920 | —- | M] (McAfee, Inc.)
(McAfeeFramework) McAfee Framework Service [Win32_Own | Auto | Running] -> F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe -> [2008/03/14 04:00:00 | 00,103,744 | —- | M] (McAfee, Inc.)
(McShield) McAfee McShield [Win32_Own | Auto | Running] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\McShield.exe -> [2008/09/29 08:07:00 | 00,175,072 | —- | M] (McAfee, Inc.)
(McTaskManager) McAfee Task Manager [Win32_Own | Auto | Running] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe -> [2008/09/29 08:07:00 | 00,062,800 | —- | M] (McAfee, Inc.)
(Netlogon) Net Logon [Win32_Shared | On_Demand | Stopped] -> F:\WINDOWS\SysWow64\netlogon.dll -> [2005/03/25 08:00:00 | 00,419,328 | —- | M] (Microsoft Corporation)
(ose) Office Source Engine [Win32_Own | On_Demand | Stopped] -> F:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE -> [2003/07/28 12:28:22 | 00,089,136 | —- | M] (Microsoft Corporation)
(UMWdf) Windows User Mode Driver Framework [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\SysWow64\wdfmgr.exe -> [2005/03/25 08:00:00 | 00,039,424 | —- | M] (Microsoft Corporation)
 
[Driver Services - Safe List]
(BrPar) BrPar [Kernel | Auto | Stopped] -> F:\WINDOWS\System32\drivers\BrPar.sys -> [2000/07/24 01:01:00 | 00,019,537 | —- | M] (Brother Industries Ltd.)
(mnmdd) mnmdd [Kernel | System | Running] -> F:\WINDOWS\SysWow64\mnmdd.dll -> [2005/03/25 08:00:00 | 00,033,792 | —- | M] (Microsoft Corporation)
 
[Registry - Safe List]
< 64bit-Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> %SystemRoot%\system32\blank.htm -> 
HKEY_LOCAL_MACHINE\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home -> 
HKEY_LOCAL_MACHINE\: Search\\"CustomizeSearch" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> 
HKEY_LOCAL_MACHINE\: Search\\"SearchAssistant" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> 
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> %SystemRoot%\system32\blank.htm -> 
HKEY_LOCAL_MACHINE\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home -> 
HKEY_LOCAL_MACHINE\: Search\\"CustomizeSearch" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> 
HKEY_LOCAL_MACHINE\: Search\\"SearchAssistant" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> 
< Internet Explorer Settings [HKEY_CURRENT_USER\] > -> -> 
HKEY_CURRENT_USER\: Main\\"Local Page" -> F:\WINDOWS\system32\blank.htm -> 
HKEY_CURRENT_USER\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_CURRENT_USER\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome -> 
HKEY_CURRENT_USER\: SearchURL\\"provider" ->  -> 
64bit-HKEY_CURRENT_USER\: URLSearchHooks\\"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" [HKLM] -> F:\WINDOWS\SysNative\shdocvw.dll [Microsoft Url Search Hook] -> File not found
HKEY_CURRENT_USER\: "ProxyEnable" -> 0 -> 
< FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
HKLM\software\mozilla\Firefox\Extensions ->  -> 
HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} -> F:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION [F:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION\] -> [2009/07/11 06:16:22 | 00,000,000 | —D | M]
< FireFox Extensions [User Folders] > -> 
Hosts file not found -> -> 
< 64bit-BHO's [HKEY_LOCAL_MACHINE] > -> 64bit-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> 
{7DB2D5A0-7241-4E79-B68D-6309F01C5231} [HKLM] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\scriptsn.dll [scriptproxy] -> [2008/09/29 08:07:00 | 00,064,808 | —- | M] (McAfee, Inc.)
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> 
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> F:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [AcroIEHlprObj Class] -> [2004/12/14 01:56:50 | 00,063,136 | —- | M] (Adobe Systems Incorporated)
{7DB2D5A0-7241-4E79-B68D-6309F01C5231} [HKLM] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\scriptsn.dll [scriptproxy] -> [2008/09/29 08:07:00 | 00,061,200 | —- | M] (McAfee, Inc.)
{AE7CD045-E861-484f-8273-0445EE161910} [HKLM] -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [AcroIEToolbarHelper Class] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar -> 
"{47833539-D0C5-4125-9FA8-0819E2EAAC93}" [HKLM] -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [Adobe PDF] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
< Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ -> 
WebBrowser\\"{47833539-D0C5-4125-9FA8-0819E2EAAC93}" [HKLM] -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [Adobe PDF] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
< 64bit-Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> 
"Alcmtr" -> F:\WINDOWS\ALCMTR.EXE [ALCMTR.EXE] -> [2008/06/19 04:20:52 | 00,057,344 | —- | M] (Realtek Semiconductor Corp.)
"AlcWzrd" -> F:\WINDOWS\ALCWZRD.EXE [ALCWZRD.EXE] -> [2008/06/19 04:42:44 | 02,808,832 | —- | M] (RealTek Semicoductor Corp.)
"RTHDCPL" -> F:\WINDOWS\RTHDCPL.EXE [RTHDCPL.EXE] -> [2008/10/28 05:18:26 | 17,331,200 | —- | M] (Realtek Semiconductor Corp.)
"SkyTel" -> F:\WINDOWS\SkyTel.exe [SkyTel.EXE] -> [2007/11/20 06:15:58 | 01,826,816 | —- | M] (Realtek Semiconductor Corp.)
"SoundMan" -> F:\WINDOWS\SOUNDMAN.EXE [SOUNDMAN.EXE] -> [2008/08/19 01:26:44 | 00,077,824 | —- | M] (Realtek Semiconductor Corp.)
< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> 
"Acrobat Assistant 7.0" -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe ["F:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"] -> [2004/12/14 02:12:02 | 00,483,328 | —- | M] (Adobe Systems Inc.)
"McAfeeUpdaterUI" -> F:\Program Files (x86)\McAfee\Common Framework\udaterui.exe ["F:\Program Files (x86)\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey] -> [2008/03/14 04:00:00 | 00,136,512 | —- | M] (McAfee, Inc.)
"ShStatEXE" -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE ["F:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE] -> [2008/09/29 08:07:00 | 00,124,240 | —- | M] (McAfee, Inc.)
"StartCCC" -> F:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ["F:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun] -> [2009/05/20 16:24:56 | 00,098,304 | —- | M] (Advanced Micro Devices, Inc.)
< Administrator Startup Folder > -> F:\Documents and Settings\Administrator\Start Menu\Programs\Startup -> 
< All Users Startup Folder > -> F:\Documents and Settings\All Users\Start Menu\Programs\Startup -> 
F:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk -> F:\WINDOWS\Installer\{AC76BA86-1033-0000-BA7E-100000000002}\SC_Acrobat.exe -> [2009/07/11 14:57:50 | 00,025,214 | R— | M] ()
F:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk -> F:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe -> [1999/11/04 16:06:48 | 00,113,664 | —- | M] (Adobe Systems, Inc.)
< CurrentVersion Policy Settings - Explorer [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\\"NoActiveDesktop" ->  [1] -> File not found
\\"NoActiveDesktopChanges" ->  [1] -> File not found
\\"ForceActiveDesktopOn" ->  [0] -> File not found
\\"HonorAutoRunSetting" ->  [1] -> File not found
< CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
\\"dontdisplaylastusername" ->  [0] -> File not found
\\"legalnoticecaption" ->  [] -> File not found
\\"legalnoticetext" ->  [] -> File not found
\\"scforceoption" ->  [0] -> File not found
\\"shutdownwithoutlogon" ->  [1] -> File not found
\\"undockwithoutlogon" ->  [1] -> File not found
< CurrentVersion Policy Settings - Explorer [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\\"NoDriveTypeAutoRun" ->  [145] -> File not found
< 64bit-Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ -> 
Convert link target to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert link target to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selected links to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selected links to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selection to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selection to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
E&xport to Microsoft Excel -> F:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE [res://F:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000] -> [2003/08/13 02:34:38 | 10,073,144 | —- | M] (Microsoft Corporation)
< Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ -> 
Convert link target to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert link target to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selected links to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selected links to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selection to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selection to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
E&xport to Microsoft Excel -> F:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE [res://F:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000] -> [2003/08/13 02:34:38 | 10,073,144 | —- | M] (Microsoft Corporation)
< 64bit-Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> 
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Button: Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Menu: Windows Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
< Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> 
{92780B25-18CC-41C8-B9BE-3C9C571A8263}:{FF059E31-CC5A-4E2E-BF3B-96E929D65503} [HKLM] -> F:\Program Files (x86)\Microsoft Office\OFFICE11\REFIEBAR.DLL [Button: Research] -> [2003/07/14 22:57:08 | 00,040,512 | —- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Button: Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Menu: Windows Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
< Internet Explorer Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\ -> 
64bit-CmdMapping\\"{92780B25-18CC-41C8-B9BE-3C9C571A8263}" [HKLM] -> F:\Program Files (x86)\Microsoft Office\OFFICE11\REFIEBAR.DLL [Research] -> [2003/07/14 22:57:08 | 00,040,512 | —- | M] (Microsoft Corporation)
CmdMapping\\"{92780B25-18CC-41C8-B9BE-3C9C571A8263}" [HKLM] -> F:\Program Files (x86)\Microsoft Office\OFFICE11\REFIEBAR.DLL [Research] -> [2003/07/14 22:57:08 | 00,040,512 | —- | M] (Microsoft Corporation)
64bit-CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
< 64bit-Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> 
PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> 
PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> 
< Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> 
PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> 
PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> 
< 64bit-Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
"" -> http://
< Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
"" -> http://
< 64bit-Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 1 domain(s) found. -> 
1 domain(s) and sub-domain(s) not assigned to a zone.
< 64bit-Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> 
< Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 1 domain(s) found. -> 
1 domain(s) and sub-domain(s) not assigned to a zone.
< Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> 
< Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> 
< Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> 
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> 
{6414512B-B978-451D-A0D8-FCFDF33E833C} [HKLM] -> http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1247275271781 [WUWebControl Class] -> 
< 64bit-Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> 
64bit-*Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell -> 
Explorer.exe -> F:\WINDOWS\explorer.exe -> [2005/03/25 08:00:00 | 01,364,480 | —- | M] (Microsoft Corporation)
*MultiFile Done* -> -> 
64bit-*UIHost* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UIHost -> 
%SystemRoot%\system32\logonui.exe -> F:\WINDOWS\SysNative\logonui.exe -> File not found
*MultiFile Done* -> -> 
64bit-*VMApplet* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet -> 
Control_RunDLL "sysdm.cpl" ->  -> File not found
*MultiFile Done* -> -> 
< Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> 
*Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell -> 
explorer.exe -> F:\WINDOWS\SysWow64\explorer.exe -> [2005/03/25 08:00:00 | 01,050,624 | —- | M] (Microsoft Corporation)
rundll32.exe ->  -> File not found
*MultiFile Done* -> -> 
*System* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\System -> 
lsass.exe ->  -> File not found
*MultiFile Done* -> -> 
< 64bit-Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ -> 
AtiExtEvent ->  -> File not found
crypt32chain ->  -> File not found
cryptnet ->  -> File not found
cscdll ->  -> File not found
dimsntfy ->  -> File not found
ScCertProp ->  -> File not found
Schedule ->  -> File not found
sclgntfy ->  -> File not found
SensLogn ->  -> File not found
termsrv ->  -> File not found
wlballoon ->  -> File not found
< Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ -> 
ScCertProp ->  -> File not found
Schedule ->  -> File not found
SensLogn ->  -> File not found
wlballoon ->  -> File not found
< 64bit-SSODL [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad -> 
"{35CEC8A3-2BE6-11D2-8773-92E220524153}" [HKLM] -> F:\WINDOWS\SysNative\stobject.dll [SysTray] -> File not found
< 64bit-ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks -> 
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}" [HKLM] ->  [] -> File not found
< SecurityProviders [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders -> 
64bit-*SecurityProviders* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders -> 
msapsspc.dll ->  -> File not found
 schannel.dll ->  -> File not found
 digest.dll ->  -> File not found
 msnsspc.dll ->  -> File not found
*MultiFile Done* -> -> 
< Standard Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List -> 
"%windir%\system32\sessmgr.exe" -> F:\WINDOWS\SysWow64\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> File not found
"F:\Program Files (x86)\Brother\BRAdmin Professional 3\AuditorServer.exe" -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\AuditorServer.exe [F:\Program Files (x86)\Brother\BRAdmin Professional 3\AuditorServer.exe:*:Enabled:BRAdmin Professional 3] -> [2009/03/11 11:32:26 | 00,139,264 | —- | M] ()
"F:\Program Files (x86)\Brother\BRAdmin Professional 3\bradminv3.exe" -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\bradminv3.exe [F:\Program Files (x86)\Brother\BRAdmin Professional 3\bradminv3.exe:*:Enabled:BRAdmin Professional 3] -> [2009/04/03 14:23:38 | 01,531,904 | —- | M] (Brother Industries, Ltd.)
"F:\Program Files (x86)\Brother\BRAdmin Professional 3\discover.exe" -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\discover.exe [F:\Program Files (x86)\Brother\BRAdmin Professional 3\discover.exe:*:Enabled:BRAdmin Professional 3] -> [2009/03/11 11:33:20 | 00,131,072 | —- | M] ()
"F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe" -> F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe [F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe:*:Enabled:McAfee Framework Service] -> [2008/03/14 04:00:00 | 00,103,744 | —- | M] (McAfee, Inc.)
< SafeBoot AlternateShell [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot -> 
"AlternateShell" -> cmd.exe -> 
< CDROM Autorun Setting [HKEY_LOCAL_MACHINE]> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom ->
"AutoRun" -> 1 -> 
"DisplayName" -> CD-ROM Driver -> 
"ImagePath" -> F:\WINDOWS\SysNative\DRIVERS\cdrom.sys [system32\DRIVERS\cdrom.sys] -> File not found
< Drives with AutoRun files > ->  -> 
C:\AUTOEXEC.BAT [] -> C:\AUTOEXEC.BAT [ NTFS ] -> [2009/07/10 20:40:29 | 00,000,000 | —- | M] ()
< MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 -> 
\{2beef6d5-6e37-11de-b0ef-0001292264a7}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell
\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\\"" ->  [AutoRun] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\AutoRun
\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\AutoRun\\"" ->  [Auto&Play] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\AutoRun\command
\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\AutoRun\command\\"" -> G:\LaunchU3.exe [G:\LaunchU3.exe -a] -> File not found
\{dcb2c169-6e4a-11de-85a3-0001292264a7}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell
\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\\"" ->  [AutoRun] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\AutoRun
\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\AutoRun\\"" ->  [Auto&Play] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\AutoRun\command
\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\AutoRun\command\\"" -> G:\LaunchU3.exe [G:\LaunchU3.exe -a] -> File not found
\{fdbee656-6e39-11de-a229-0001292264a7}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdbee656-6e39-11de-a229-0001292264a7}\Shell\AutoRun\command
\{fdbee656-6e39-11de-a229-0001292264a7}\Shell\AutoRun\command\\"" -> G:\setup.exe [G:\setup.exe] -> File not found
 
[Registry - Additional Scans - Safe List]
< 64bit-Protocol Filters [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\ -> 
application/octet-stream:{1E66F26B-79EE-11D2-8710-00C04F79ED0D} [HKLM] -> [Cor MIME Filter, CorFltr, CorFltr 1] -> File not found
application/x-complus:{1E66F26B-79EE-11D2-8710-00C04F79ED0D} [HKLM] -> [Cor MIME Filter, CorFltr, CorFltr 1] -> File not found
application/x-msdownload:{1E66F26B-79EE-11D2-8710-00C04F79ED0D} [HKLM] -> [Cor MIME Filter, CorFltr, CorFltr 1] -> File not found
text/xml:{807553E5-5146-11D5-A672-00B0D022E945} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found
< Protocol Filters [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\ -> 
text/xml:{807553E5-5146-11D5-A672-00B0D022E945} [HKLM] -> F:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL[Reg Error: Value error.] -> [2003/07/14 22:45:12 | 00,039,488 | —- | M] (Microsoft Corporation)
< 64bit-Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ -> 
about:{3050F406-98B5-11CF-BB82-00AA00BDCE0B} [HKLM] -> F:\WINDOWS\SysNative\mshtml.dll[Microsoft HTML About Pluggable Protocol] -> File not found
java script:{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} [HKLM] -> F:\WINDOWS\SysNative\mshtml.dll[Microsoft HTML Javascript Pluggable Protocol] -> File not found
mailto:{3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} [HKLM] -> F:\WINDOWS\SysNative\mshtml.dll[Microsoft HTML Mailto Pluggable Protocol] -> File not found
msdaipp: [HKLM] -> No CLSID value
msdaipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found
msdaipp\oledb:{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found
mso-offdap:{3D9F03FA-7A94-11D3-BE81-0050048385D1} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found
mso-offdap11:{32505114-5902-49B2-880A-1F7738E5A384} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found
res:{3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} [HKLM] -> F:\WINDOWS\SysNative\mshtml.dll[Microsoft HTML Resource Pluggable Protocol] -> File not found
sysimage:{76E67A63-06E9-11D2-A840-006008059382} [HKLM] -> F:\WINDOWS\SysNative\mshtml.dll[Microsoft HTML Resource Pluggable Protocol] -> File not found
vb script:{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} [HKLM] -> F:\WINDOWS\SysNative\mshtml.dll[Microsoft HTML Javascript Pluggable Protocol] -> File not found
wia:{13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} [HKLM] -> F:\WINDOWS\SysNative\wiascr.dll[WiaProtocol Class] -> File not found
< Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ -> 
msdaipp: [HKLM] -> No CLSID value
msdaipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} [HKLM] -> F:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll[MSDAMON.BINDER] -> [2003/07/11 02:25:22 | 00,842,816 | —- | M] (Microsoft Corporation)
msdaipp\oledb:{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} [HKLM] -> F:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll[MSDAIPP.BINDER] -> [2003/07/11 02:25:22 | 00,842,816 | —- | M] (Microsoft Corporation)
mso-offdap:{3D9F03FA-7A94-11D3-BE81-0050048385D1} [HKLM] -> F:\Program Files (x86)\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL[Data Page Pluggable Protocol mso-offdap Handler] -> [2003/08/04 13:19:34 | 07,330,360 | —- | M] (Microsoft Corporation)
mso-offdap11:{32505114-5902-49B2-880A-1F7738E5A384} [HKLM] -> F:\Program Files (x86)\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL[Data Page Plugable Protocal mso-offdap11 Handler] -> [2003/08/01 15:09:04 | 08,086,072 | —- | M] (Microsoft Corporation)
< 64bit-Security Center Settings > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center -> 
64bit-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
\\"FirstRunDisabled" ->  [1] -> File not found
\\"AntiVirusDisableNotify" ->  [0] -> File not found
\\"FirewallDisableNotify" ->  [0] -> File not found
\\"UpdatesDisableNotify" ->  [0] -> File not found
\\"AntiVirusOverride" ->  [0] -> File not found
\\"FirewallOverride" ->  [0] -> File not found
64bit-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ -> -> 
< Security Center Settings > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
\\"FirstRunDisabled" ->  [1] -> File not found
 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\ -> -> 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\ -> -> 
< 64bit-Uninstall List [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ -> 
{26F66AF6-4FDB-357A-7DCE-646C3D05D3A9} -> ccc-utility64
{5254156F-AA77-499A-B7C1-D5581D44E788} -> Marvell Miniport Driver
{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} -> Microsoft .NET Framework 3.0 Service Pack 2
{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} -> Microsoft .NET Framework 2.0 Service Pack 2
{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} -> Microsoft .NET Framework 3.5 SP1
ATI Display Driver -> ATI Display Driver
Microsoft .NET Framework 3.5 SP1 -> Microsoft .NET Framework 3.5 SP1
WIC -> Windows Imaging Component
< Uninstall List [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ -> 
{04F38D49-8732-4139-0C9F-6794937C7E6B} -> CCC Help English
{055EE59D-217B-43A7-ABFF-507B966405D8} -> ATI Catalyst Control Center
{0B3D3425-401F-798B-1DE6-DAA497E67DA2} -> CCC Help Italian
{147BCE03-C0F1-4C9F-8157-6A89B6D2D973} -> McAfee VirusScan Enterprise
{2007A5BF-A9BA-728B-AD14-90251EDF19FD} -> ccc-core-preinstall
{33CE9398-8C1A-11D9-8BDE-F66BAD1E3F3A} -> EndNote 9
{4A653EC8-A017-5ED8-4929-46FA814AC197} -> Catalyst Control Center HydraVision Full
{4DA77116-40B2-6C31-3F48-F94726B7CC60} -> Catalyst Control Center Graphics Light
{5AB082A1-EEC6-9C43-23FD-0ED68770A085} -> Catalyst Control Center Graphics Previews Common
{5AEE14C1-A580-9A1C-6036-2EA514B69C3C} -> Catalyst Control Center Core Implementation
{5E210E4A-1C33-AB78-D3B6-BAC2B43A489B} -> Catalyst Control Center Graphics Full Existing
{75C885D4-C758-4896-A3B4-90DA34B44C31} -> BRAdmin Professional 3
{7A4F8E83-27D9-4DC6-0A27-3E96C5886440} -> Catalyst Control Center Graphics Full New
{7E37E484-4C35-B62F-6309-7D852B0B50E0} -> CCC Help French
{830FBA32-7B93-3B18-4D45-74483FDC87D0} -> ccc-core-static
{90110409-6000-11D3-8CFE-0150048383C9} -> Microsoft Office Professional Edition 2003
{908A9D8C-262B-8847-4AC7-B0A7E95271F0} -> CCC Help Spanish
{A638557B-1F13-40A0-9627-C892FBCA6960} -> McAfee Agent
{AC76BA86-1033-0000-BA7E-100000000002} -> Adobe Acrobat 7.0 Standard
{C209E5C0-14A0-518D-2023-8F1C242A77C9} -> CCC Help German
{C9EA111F-132D-1715-7E35-8E5B599F81B6} -> CCC Help Portuguese
{D3B1C799-CB73-42DE-BA0F-2344793A095C} -> Catalyst Control Center - Branding
{E525D847-3475-975A-F9D1-A30D0D218F91} -> Catalyst Control Center Localization All
{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} -> Realtek High Definition Audio Driver
{FE4BD9BD-4A26-4F39-B12C-19336204B101} -> EndNote X Upgrade Edition
Adobe Acrobat 7.0 Standard - V -> Adobe Acrobat 7.0 Standard
Adobe Photoshop 7.0.1 -> Adobe Photoshop 7.0.1
All ATI Software -> ATI - Software Uninstall Utility
Brother HL-5170DN -> Brother HL-5170DN
ERUNT_is1 -> ERUNT 1.1j
HijackThis -> HijackThis 2.0.2
ISI ResearchSoft - Export Helper -> ISI ResearchSoft - Export Helper
SigmaPlot 6.00 -> SigmaPlot 6.00
Win Antivirus Pro -> Windows Antivirus Pro
< EventViewer Logs - Last 10 Errors > -> Event Information -> Description
Application [ Error ] 7/11/2009 12:38:56 PM Computer Name = HOME | Source = MsiInstaller | ID = 1013 -> Description = Product: Gatorlink VPN Client 5.0.04.0300 – Error 28011: Windows 64-bit  is not supported by Gatorlink VPN Client 5.0.04.0300.
Application [ Error ] 7/11/2009 12:41:51 PM Computer Name = HOME | Source = MsiInstaller | ID = 11721 -> Description = Product: Gatorlink VPN Client 5.0.00.0340 – Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: CsCaExe_RegisterIPSecPlugin1, location: F:\Program Files (x86)\Common Files\Deterministic Networks\Common files\dneinst.exe, command: -AddPlugin CVPNDRVA -Description "Cisco Systems Inc. IPSec Driver" -InstallPath F:\WINDOWS\SysWOW64\Drivers -Verbose 
Application [ Error ] 7/11/2009 1:27:47 PM Computer Name = HOME | Source = MsiInstaller | ID = 1013 -> Description = Product: Gatorlink VPN Client 5.0.04.0300 – Error 28011: Windows 64-bit  is not supported by Gatorlink VPN Client 5.0.04.0300.
Application [ Error ] 8/1/2009 6:06:43 PM Computer Name = HOME | Source = Application Error | ID = 1000 -> Description = Faulting application iexplore.exe, version 6.0.3790.1830, faulting module unknown, version 0.0.0.0, fault address 0x00000000.
Application [ Error ] 8/1/2009 6:07:47 PM Computer Name = HOME | Source = Application Hang | ID = 1002 -> Description = Hanging application IEXPLORE.EXE, version 6.0.3790.1830, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
System [ Error ] 8/31/2009 8:58:11 AM Computer Name = HOME | Source = Service Control Manager | ID = 7002 -> Description = The BrPar service depends on the Parallel arbitrator group and no member of this group started.
System [ Error ] 8/31/2009 9:59:57 AM Computer Name = HOME | Source = Service Control Manager | ID = 7002 -> Description = The BrPar service depends on the Parallel arbitrator group and no member of this group started.
System [ Error ] 8/31/2009 10:37:47 AM Computer Name = HOME | Source = Service Control Manager | ID = 7034 -> Description = The AntipyProex service terminated unexpectedly.  It has done this 1 time(s).
System [ Error ] 8/31/2009 1:42:38 PM Computer Name = HOME | Source = Service Control Manager | ID = 7034 -> Description = The BrSplService service terminated unexpectedly.  It has done this 1 time(s).
System [ Error ] 8/31/2009 1:42:38 PM Computer Name = HOME | Source = Service Control Manager | ID = 7034 -> Description = The Brother BRAdminPro Scheduler service terminated unexpectedly.  It has done this 1 time(s).
System [ Error ] 8/31/2009 1:42:38 PM Computer Name = HOME | Source = Service Control Manager | ID = 7034 -> Description = The McAfee Framework Service service terminated unexpectedly.  It has done this 1 time(s).
System [ Error ] 8/31/2009 1:42:39 PM Computer Name = HOME | Source = Service Control Manager | ID = 7034 -> Description = The McAfee Task Manager service terminated unexpectedly.  It has done this 1 time(s).
System [ Error ] 8/31/2009 1:46:02 PM Computer Name = HOME | Source = DCOM | ID = 10016 -> Description = The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID   {555F3418-D99E-4E51-800A-6E89CFD8B1D7}   to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19).  This security permission can be modified using the Component Services administrative tool.
System [ Error ] 8/31/2009 1:46:02 PM Computer Name = HOME | Source = DCOM | ID = 10016 -> Description = The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID   {555F3418-D99E-4E51-800A-6E89CFD8B1D7}   to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19).  This security permission can be modified using the Component Services administrative tool.
System [ Error ] 8/31/2009 1:46:03 PM Computer Name = HOME | Source = Service Control Manager | ID = 7002 -> Description = The BrPar service depends on the Parallel arbitrator group and no member of this group started.
 
[Files/Folders - Created Within 30 Days]
query.bat -> F:\Documents and Settings\Administrator\Desktop\query.bat -> [2009/09/01 08:20:50 | 00,000,129 | —- | C] ()
_OTS -> F:\_OTS -> [2009/08/31 13:42:38 | 00,000,000 | —D | C]
OTS.com -> F:\Documents and Settings\Administrator\Desktop\OTS.com -> [2009/08/31 11:32:45 | 00,514,048 | —- | C] (OldTimer Tools)
HijackThis.exe -> F:\Documents and Settings\Administrator\Desktop\HijackThis.exe -> [2009/08/31 10:47:51 | 00,401,720 | —- | C] (Trend Micro Inc.)
ERDNT -> F:\WINDOWS\ERDNT -> [2009/08/31 10:39:13 | 00,000,000 | —D | C]
NTREGOPT.lnk -> F:\Documents and Settings\Administrator\Desktop\NTREGOPT.lnk -> [2009/08/31 10:38:42 | 00,000,641 | —- | C] ()
ERUNT.lnk -> F:\Documents and Settings\Administrator\Desktop\ERUNT.lnk -> [2009/08/31 10:38:42 | 00,000,622 | —- | C] ()
ERUNT -> F:\Program Files (x86)\ERUNT -> [2009/08/31 10:38:41 | 00,000,000 | —D | C]
RootRepeal.exe -> F:\Documents and Settings\Administrator\Desktop\RootRepeal.exe -> [2009/08/31 09:56:36 | 00,472,064 | —- | C] ( )
asdjflkjt.exe -> F:\Documents and Settings\Administrator\Desktop\asdjflkjt.exe -> [2009/08/31 09:56:29 | 00,791,393 | —- | C] (Lars  Hederer												)
bincd32.dat -> F:\WINDOWS\SysWow64\bincd32.dat -> [2009/08/15 06:15:07 | 00,000,004 | —- | C] ()
My Videos -> F:\Documents and Settings\All Users\Documents\My Videos -> [2009/08/02 14:55:40 | 00,000,000 | R–D | C]
My Videos -> F:\Documents and Settings\Administrator\My Documents\My Videos -> [2009/08/02 14:55:40 | 00,000,000 | R–D | C]
EndNote X -> F:\Program Files (x86)\EndNote X -> [2009/08/02 14:44:09 | 00,000,000 | —D | C]
EndNote -> F:\Documents and Settings\Administrator\Application Data\EndNote -> [2009/08/02 14:41:10 | 00,000,000 | —D | C]
Sp32w.dll -> F:\WINDOWS\SysWow64\Sp32w.dll -> [2009/07/11 15:45:00 | 00,033,280 | —- | C] ()
brss01a.ini -> F:\WINDOWS\SysWow64\brss01a.ini -> [2009/07/11 15:17:25 | 00,000,030 | —- | C] ()
BRWMARK.INI -> F:\WINDOWS\BRWMARK.INI -> [2009/07/11 15:17:24 | 00,000,410 | —- | C] ()
BRVIDEO.INI -> F:\WINDOWS\BRVIDEO.INI -> [2009/07/11 14:14:28 | 00,000,153 | —- | C] ()
brpp2ka.ini -> F:\WINDOWS\brpp2ka.ini -> [2009/07/11 14:14:28 | 00,000,052 | —- | C] ()
BRDIAG.INI -> F:\WINDOWS\BRDIAG.INI -> [2009/07/11 14:14:28 | 00,000,040 | —- | C] ()
Brownie.ini -> F:\WINDOWS\Brownie.ini -> [2009/07/11 14:14:28 | 00,000,023 | —- | C] ()
bw5170dn.ini -> F:\WINDOWS\bw5170dn.ini -> [2009/07/11 14:14:28 | 00,000,000 | —- | C] ()
brmx2001.ini -> F:\WINDOWS\brmx2001.ini -> [2009/07/11 14:14:28 | 00,000,000 | —- | C] ()
BROSNMP.DLL -> F:\WINDOWS\SysWow64\BROSNMP.DLL -> [2009/07/11 14:14:26 | 00,077,824 | —- | C] ()
BRGSRC32.DLL -> F:\WINDOWS\SysWow64\BRGSRC32.DLL -> [2009/07/11 14:14:26 | 00,026,624 | —- | C] ()
HL-5170DN.INI -> F:\WINDOWS\HL-5170DN.INI -> [2009/07/11 14:14:26 | 00,015,108 | —- | C] ()
BRGSRC16.DLL -> F:\WINDOWS\SysWow64\BRGSRC16.DLL -> [2009/07/11 14:14:26 | 00,004,608 | —- | C] ()
PTRCENG.DLL -> F:\WINDOWS\SysWow64\PTRCENG.DLL -> [2009/07/11 14:14:13 | 00,045,056 | —- | C] ()
ODBC.INI -> F:\WINDOWS\ODBC.INI -> [2009/07/11 14:07:47 | 00,000,376 | —- | C] ()
PerfStringBackup.INI -> F:\WINDOWS\SysWow64\PerfStringBackup.INI -> [2009/07/10 20:54:58 | 00,541,752 | —- | C] ()
win.ini -> F:\WINDOWS\win.ini -> [2009/07/10 20:39:26 | 00,000,497 | —- | C] ()
system.ini -> F:\WINDOWS\system.ini -> [2009/07/10 16:16:08 | 00,000,150 | —- | C] ()
quartz.dll -> F:\WINDOWS\SysWow64\quartz.dll -> [2005/03/25 08:00:00 | 01,291,264 | —- | C] ()
qedwipes.dll -> F:\WINDOWS\SysWow64\qedwipes.dll -> [2005/03/25 08:00:00 | 00,733,696 | —- | C] ()
qedit.dll -> F:\WINDOWS\SysWow64\qedit.dll -> [2005/03/25 08:00:00 | 00,512,512 | —- | C] ()
dxmasf.dll -> F:\WINDOWS\SysWow64\dxmasf.dll -> [2005/03/25 08:00:00 | 00,498,742 | —- | C] ()
encdec.dll -> F:\WINDOWS\SysWow64\encdec.dll -> [2005/03/25 08:00:00 | 00,396,288 | —- | C] ()
qdvd.dll -> F:\WINDOWS\SysWow64\qdvd.dll -> [2005/03/25 08:00:00 | 00,385,536 | —- | C] ()
msjetoledb40.dll -> F:\WINDOWS\SysWow64\msjetoledb40.dll -> [2005/03/25 08:00:00 | 00,355,112 | —- | C] ()
qdv.dll -> F:\WINDOWS\SysWow64\qdv.dll -> [2005/03/25 08:00:00 | 00,279,040 | —- | C] ()
sbe.dll -> F:\WINDOWS\SysWow64\sbe.dll -> [2005/03/25 08:00:00 | 00,276,992 | —- | C] ()
ir32_32.dll -> F:\WINDOWS\SysWow64\ir32_32.dll -> [2005/03/25 08:00:00 | 00,199,168 | —- | C] ()
qcap.dll -> F:\WINDOWS\SysWow64\qcap.dll -> [2005/03/25 08:00:00 | 00,192,512 | —- | C] ()
msencode.dll -> F:\WINDOWS\SysWow64\msencode.dll -> [2005/03/25 08:00:00 | 00,114,688 | —- | C] ()
amstream.dll -> F:\WINDOWS\SysWow64\amstream.dll -> [2005/03/25 08:00:00 | 00,072,704 | —- | C] ()
mciqtz32.dll -> F:\WINDOWS\SysWow64\mciqtz32.dll -> [2005/03/25 08:00:00 | 00,062,464 | —- | C] ()
devenum.dll -> F:\WINDOWS\SysWow64\devenum.dll -> [2005/03/25 08:00:00 | 00,061,440 | —- | C] ()
tsd32.dll -> F:\WINDOWS\SysWow64\tsd32.dll -> [2005/03/25 08:00:00 | 00,016,896 | —- | C] ()
msdmo.dll -> F:\WINDOWS\SysWow64\msdmo.dll -> [2005/03/25 08:00:00 | 00,014,336 | —- | C] ()
msdxmlc.dll -> F:\WINDOWS\SysWow64\msdxmlc.dll -> [2005/03/25 08:00:00 | 00,004,126 | —- | C] ()
OUTLPERF.INI -> F:\WINDOWS\SysWow64\OUTLPERF.INI -> [2003/01/07 15:05:08 | 00,002,695 | —- | C] ()
 
[Files/Folders - Modified Within 30 Days]
query.bat -> F:\Documents and Settings\Administrator\Desktop\query.bat -> [2009/09/01 08:23:40 | 00,000,129 | —- | M] ()
Adobe Acrobat Speed Launcher.lnk -> F:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk -> [2009/08/31 13:47:43 | 00,002,359 | —- | M] ()
bootstat.dat -> F:\WINDOWS\bootstat.dat -> [2009/08/31 13:45:59 | 00,002,048 | –S- | M] ()
SA.DAT -> F:\WINDOWS\tasks\SA.DAT -> [2009/08/31 13:45:59 | 00,000,006 | -H– | M] ()
NTUSER.DAT -> F:\Documents and Settings\Administrator\NTUSER.DAT -> [2009/08/31 13:44:31 | 01,310,720 | -H– | M] ()
ntuser.ini -> F:\Documents and Settings\Administrator\ntuser.ini -> [2009/08/31 13:44:31 | 00,000,178 | -HS- | M] ()
OTS.com -> F:\Documents and Settings\Administrator\Desktop\OTS.com -> [2009/08/31 11:33:10 | 00,514,048 | —- | M] (OldTimer Tools)
HijackThis.exe -> F:\Documents and Settings\Administrator\Desktop\HijackThis.exe -> [2009/08/31 10:48:16 | 00,401,720 | —- | M] (Trend Micro Inc.)
NTREGOPT.lnk -> F:\Documents and Settings\Administrator\Desktop\NTREGOPT.lnk -> [2009/08/31 10:38:42 | 00,000,641 | —- | M] ()
ERUNT.lnk -> F:\Documents and Settings\Administrator\Desktop\ERUNT.lnk -> [2009/08/31 10:38:42 | 00,000,622 | —- | M] ()
RootRepeal.exe -> F:\Documents and Settings\Administrator\Desktop\RootRepeal.exe -> [2009/08/31 09:49:34 | 00,472,064 | —- | M] ( )
asdjflkjt.exe -> F:\Documents and Settings\Administrator\Desktop\asdjflkjt.exe -> [2009/08/31 09:48:46 | 00,791,393 | —- | M] (Lars Hederer												)
bincd32.dat -> F:\WINDOWS\SysWow64\bincd32.dat -> [2009/08/15 07:01:40 | 00,000,004 | —- | M] ()
IconCache.db -> F:\Documents and Settings\Administrator\Local Settings\Application Data\IconCache.db -> [2009/08/15 06:32:36 | 06,413,810 | -H– | M] ()
qmgr1.dat -> F:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat -> [2009/08/12 05:56:56 | 00,005,508 | —- | M] ()
qmgr0.dat -> F:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat -> [2009/08/12 05:56:56 | 00,004,232 | —- | M] ()
opa11.dat -> F:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\opa11.dat -> [2009/07/11 14:08:27 | 00,008,206 | —- | M] ()
< End of report >

Hi, can you just confirm for me that you checked off Reg-File Associations under the "extras" window as I don't see them in the log.

If not please run OTS again with Reg-File Associations checked.

But try this reg fix first and see if that fixes the problem.



Please do the following:

Open Notepad
Click Start >Run type notepad into the run box click OK
Click Format and make certain that Word Wrap is NOT checked.
Copy the text inside of the code box, press Ctrl+C (or right click on the highlighted section and choose 'copy')
Now paste the copied text into the open notepad. press CTRL+V (or right click and choose 'paste')
Note: There must be NO blank lines in front of the pasted text, but ensure that there is a blank line at the end of the text, otherwise the registry merge will not work.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe] 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithList] 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids] 
"exefile"=hex(0):

Now go to File > and click Save As,
From the drop down menu at the top of the box choose Desktop as the location to save this file.
Go down to the File Name box and type in fixme.reg as the file name, then choose All Files as the save as file type.
Then click the save button.
Once you have clicked the save button, close Notepad.
You should now see a file on your desktop that looks like this:
[external image: Posted Image]
Locate the fixme.reg icon on your desktop and double click it, an information box will pop up asking if you want to merge the information in the file into the registry, click YES.
Once the file has run, the information will have merged with your registry so you can delete fixme.reg from your desktop as you won't be needing it any more.

You know, I contemplated your last request to "check off Reg-File Associations" as I couldn't determine clearly whether or you wanted that option checked or unchecked. I ultimately decided with unchecked and it looks like I chose wrong. I ran the registry merge successfully (do I have to reboot for this to take effect?) and here's the OTS scan I did after that with the Reg-File Association option checked:

OTS logfile created on: 9/1/2009 10:17:16 AM - Run 3
OTS by OldTimer - Version 3.0.10.3	 Folder = F:\Documents and Settings\Administrator\Desktop
64bit-Windows Server 2003  Service Pack 1 (Version = 5.2.3790) - Type = NTWorkstation
Internet Explorer (Version = 6.0.3790.1830)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
4.00 Gb Total Physical Memory | 4.00 Gb Available Physical Memory | 100.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): F:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = F: | %SystemRoot% = F:\WINDOWS | %ProgramFiles% = F:\Program Files (x86)
Drive C: | 931.50 Gb Total Space | 929.10 Gb Free Space | 99.74% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 59.61 Gb Total Space | 49.09 Gb Free Space | 82.34% Space Free | Partition Type: NTFS
Drive G: | 1.95 Gb Total Space | 0.11 Gb Free Space | 5.80% Space Free | Partition Type: FAT32
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: HOME
Current User Name: Administrator
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
 
[Processes - Safe List]
bratimer.exe -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\bratimer.exe -> [2009/01/21 15:00:54 | 00,065,536 | —- | M] ()
brss01a.exe -> F:\WINDOWS\SysWOW64\brss01a.exe -> [2001/12/13 00:01:00 | 00,045,056 | —- | M] (brother Industries Ltd)
brsvc01a.exe -> F:\WINDOWS\SysWOW64\brsvc01a.exe -> [2004/06/14 00:00:00 | 00,057,344 | —- | M] (brother Industries Ltd)
frameworkservice.exe -> F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe -> [2008/03/14 04:00:00 | 00,103,744 | —- | M] (McAfee, Inc.)
naprdmgr.exe -> F:\Program Files (x86)\McAfee\Common Framework\naPrdMgr.exe -> [2008/03/14 04:00:00 | 00,226,624 | —- | M] (McAfee, Inc.)
ots.com -> F:\Documents and Settings\Administrator\Desktop\OTS.com -> [2009/08/31 11:33:10 | 00,514,048 | —- | M] (OldTimer Tools)
vstskmgr.exe -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe -> [2008/09/29 08:07:00 | 00,062,800 | —- | M] (McAfee, Inc.)
 
[Win32 Services - Safe List]
(aspnet_state) ASP.NET State Service [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\aspnet_state.exe -> [2008/07/25 10:13:44 | 00,046,088 | —- | M] (Microsoft Corporation)
(ATI Smart) ATI Smart [Win32_Own | Auto | Stopped] -> F:\WINDOWS\SysWow64\ati2saag.exe -> [2009/05/15 21:05:00 | 00,665,088 | —- | M] ()
(BRA_Scheduler) Brother BRAdminPro Scheduler [Win32_Own | Auto | Running] -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\bratimer.exe -> [2009/01/21 15:00:54 | 00,065,536 | —- | M] ()
(Brother XP spl Service) BrSplService [Win32_Own | Auto | Running] -> F:\WINDOWS\SysWOW64\brsvc01a.exe -> [2004/06/14 00:00:00 | 00,057,344 | —- | M] (brother Industries Ltd)
(clr_optimization_v2.0.50727_32) .NET Runtime Optimization Service v2.0.50727_X86 [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -> [2008/07/25 11:17:02 | 00,069,632 | —- | M] (Microsoft Corporation)
(clr_optimization_v2.0.50727_64) .NET Runtime Optimization Service v2.0.50727_x64 [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -> [2008/07/25 10:13:48 | 00,093,184 | —- | M] (Microsoft Corporation)
(FontCache3.0.0.0) Windows Presentation Foundation Font Cache 3.0.0.0 [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe -> [2008/07/29 21:18:04 | 00,046,104 | —- | M] (Microsoft Corporation)
(helpsvc) Help and Support [Win32_Shared | Auto | Running] -> F:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -> [2005/03/25 08:00:00 | 00,077,824 | —- | M] (Microsoft Corporation)
(IASJet) IAS Jet Database Access [Win32_Shared | On_Demand | Stopped] -> F:\WINDOWS\SysWOW64\iasrecst.dll -> [2005/03/25 08:00:00 | 00,162,816 | —- | M] (Microsoft Corporation)
(idsvc) Windows CardSpace [Win32_Shared | Unknown | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe -> [2008/07/29 19:28:38 | 00,859,648 | —- | M] (Microsoft Corporation)
(McAfeeEngineService) McAfee Engine Service [Win32_Own | Auto | Running] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\EngineServer.exe -> [2008/09/29 08:07:00 | 00,017,920 | —- | M] (McAfee, Inc.)
(McAfeeFramework) McAfee Framework Service [Win32_Own | Auto | Running] -> F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe -> [2008/03/14 04:00:00 | 00,103,744 | —- | M] (McAfee, Inc.)
(McShield) McAfee McShield [Win32_Own | Auto | Running] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\McShield.exe -> [2008/09/29 08:07:00 | 00,175,072 | —- | M] (McAfee, Inc.)
(McTaskManager) McAfee Task Manager [Win32_Own | Auto | Running] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe -> [2008/09/29 08:07:00 | 00,062,800 | —- | M] (McAfee, Inc.)
(Netlogon) Net Logon [Win32_Shared | On_Demand | Stopped] -> F:\WINDOWS\SysWow64\netlogon.dll -> [2005/03/25 08:00:00 | 00,419,328 | —- | M] (Microsoft Corporation)
(ose) Office Source Engine [Win32_Own | On_Demand | Stopped] -> F:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE -> [2003/07/28 12:28:22 | 00,089,136 | —- | M] (Microsoft Corporation)
(UMWdf) Windows User Mode Driver Framework [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\SysWow64\wdfmgr.exe -> [2005/03/25 08:00:00 | 00,039,424 | —- | M] (Microsoft Corporation)
 
[Driver Services - Safe List]
(BrPar) BrPar [Kernel | Auto | Stopped] -> F:\WINDOWS\System32\drivers\BrPar.sys -> [2000/07/24 01:01:00 | 00,019,537 | —- | M] (Brother Industries Ltd.)
(mnmdd) mnmdd [Kernel | System | Running] -> F:\WINDOWS\SysWow64\mnmdd.dll -> [2005/03/25 08:00:00 | 00,033,792 | —- | M] (Microsoft Corporation)
 
[Registry - Safe List]
< 64bit-Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> %SystemRoot%\system32\blank.htm -> 
HKEY_LOCAL_MACHINE\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home -> 
HKEY_LOCAL_MACHINE\: Search\\"CustomizeSearch" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> 
HKEY_LOCAL_MACHINE\: Search\\"SearchAssistant" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> 
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> %SystemRoot%\system32\blank.htm -> 
HKEY_LOCAL_MACHINE\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home -> 
HKEY_LOCAL_MACHINE\: Search\\"CustomizeSearch" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> 
HKEY_LOCAL_MACHINE\: Search\\"SearchAssistant" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> 
< Internet Explorer Settings [HKEY_CURRENT_USER\] > -> -> 
HKEY_CURRENT_USER\: Main\\"Local Page" -> F:\WINDOWS\system32\blank.htm -> 
HKEY_CURRENT_USER\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_CURRENT_USER\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome -> 
HKEY_CURRENT_USER\: SearchURL\\"provider" ->  -> 
64bit-HKEY_CURRENT_USER\: URLSearchHooks\\"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" [HKLM] -> F:\WINDOWS\SysNative\shdocvw.dll [Microsoft Url Search Hook] -> File not found
HKEY_CURRENT_USER\: "ProxyEnable" -> 0 -> 
< FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
HKLM\software\mozilla\Firefox\Extensions ->  -> 
HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} -> F:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION [F:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION\] -> [2009/07/11 06:16:22 | 00,000,000 | —D | M]
< FireFox Extensions [User Folders] > -> 
Hosts file not found -> -> 
< 64bit-BHO's [HKEY_LOCAL_MACHINE] > -> 64bit-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> 
{7DB2D5A0-7241-4E79-B68D-6309F01C5231} [HKLM] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\scriptsn.dll [scriptproxy] -> [2008/09/29 08:07:00 | 00,064,808 | —- | M] (McAfee, Inc.)
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> 
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> F:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [AcroIEHlprObj Class] -> [2004/12/14 01:56:50 | 00,063,136 | —- | M] (Adobe Systems Incorporated)
{7DB2D5A0-7241-4E79-B68D-6309F01C5231} [HKLM] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\scriptsn.dll [scriptproxy] -> [2008/09/29 08:07:00 | 00,061,200 | —- | M] (McAfee, Inc.)
{AE7CD045-E861-484f-8273-0445EE161910} [HKLM] -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [AcroIEToolbarHelper Class] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar -> 
"{47833539-D0C5-4125-9FA8-0819E2EAAC93}" [HKLM] -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [Adobe PDF] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
< Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ -> 
WebBrowser\\"{47833539-D0C5-4125-9FA8-0819E2EAAC93}" [HKLM] -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [Adobe PDF] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
< 64bit-Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> 
"Alcmtr" -> F:\WINDOWS\ALCMTR.EXE [ALCMTR.EXE] -> [2008/06/19 04:20:52 | 00,057,344 | —- | M] (Realtek Semiconductor Corp.)
"AlcWzrd" -> F:\WINDOWS\ALCWZRD.EXE [ALCWZRD.EXE] -> [2008/06/19 04:42:44 | 02,808,832 | —- | M] (RealTek Semicoductor Corp.)
"RTHDCPL" -> F:\WINDOWS\RTHDCPL.EXE [RTHDCPL.EXE] -> [2008/10/28 05:18:26 | 17,331,200 | —- | M] (Realtek Semiconductor Corp.)
"SkyTel" -> F:\WINDOWS\SkyTel.exe [SkyTel.EXE] -> [2007/11/20 06:15:58 | 01,826,816 | —- | M] (Realtek Semiconductor Corp.)
"SoundMan" -> F:\WINDOWS\SOUNDMAN.EXE [SOUNDMAN.EXE] -> [2008/08/19 01:26:44 | 00,077,824 | —- | M] (Realtek Semiconductor Corp.)
< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> 
"Acrobat Assistant 7.0" -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe ["F:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"] -> [2004/12/14 02:12:02 | 00,483,328 | —- | M] (Adobe Systems Inc.)
"McAfeeUpdaterUI" -> F:\Program Files (x86)\McAfee\Common Framework\udaterui.exe ["F:\Program Files (x86)\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey] -> [2008/03/14 04:00:00 | 00,136,512 | —- | M] (McAfee, Inc.)
"ShStatEXE" -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE ["F:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE] -> [2008/09/29 08:07:00 | 00,124,240 | —- | M] (McAfee, Inc.)
"StartCCC" -> F:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ["F:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun] -> [2009/05/20 16:24:56 | 00,098,304 | —- | M] (Advanced Micro Devices, Inc.)
< Administrator Startup Folder > -> F:\Documents and Settings\Administrator\Start Menu\Programs\Startup -> 
< All Users Startup Folder > -> F:\Documents and Settings\All Users\Start Menu\Programs\Startup -> 
F:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk -> F:\WINDOWS\Installer\{AC76BA86-1033-0000-BA7E-100000000002}\SC_Acrobat.exe -> [2009/07/11 14:57:50 | 00,025,214 | R— | M] ()
F:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk -> F:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe -> [1999/11/04 16:06:48 | 00,113,664 | —- | M] (Adobe Systems, Inc.)
< CurrentVersion Policy Settings - Explorer [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\\"NoActiveDesktop" ->  [1] -> File not found
\\"NoActiveDesktopChanges" ->  [1] -> File not found
\\"ForceActiveDesktopOn" ->  [0] -> File not found
\\"HonorAutoRunSetting" ->  [1] -> File not found
< CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
\\"dontdisplaylastusername" ->  [0] -> File not found
\\"legalnoticecaption" ->  [] -> File not found
\\"legalnoticetext" ->  [] -> File not found
\\"scforceoption" ->  [0] -> File not found
\\"shutdownwithoutlogon" ->  [1] -> File not found
\\"undockwithoutlogon" ->  [1] -> File not found
< CurrentVersion Policy Settings - Explorer [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\\"NoDriveTypeAutoRun" ->  [145] -> File not found
< 64bit-Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ -> 
Convert link target to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert link target to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selected links to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selected links to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selection to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selection to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
E&xport to Microsoft Excel -> F:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE [res://F:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000] -> [2003/08/13 02:34:38 | 10,073,144 | —- | M] (Microsoft Corporation)
< Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ -> 
Convert link target to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert link target to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selected links to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selected links to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selection to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selection to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
E&xport to Microsoft Excel -> F:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE [res://F:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000] -> [2003/08/13 02:34:38 | 10,073,144 | —- | M] (Microsoft Corporation)
< 64bit-Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> 
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Button: Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Menu: Windows Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
< Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> 
{92780B25-18CC-41C8-B9BE-3C9C571A8263}:{FF059E31-CC5A-4E2E-BF3B-96E929D65503} [HKLM] -> F:\Program Files (x86)\Microsoft Office\OFFICE11\REFIEBAR.DLL [Button: Research] -> [2003/07/14 22:57:08 | 00,040,512 | —- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Button: Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Menu: Windows Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
< Internet Explorer Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\ -> 
64bit-CmdMapping\\"{92780B25-18CC-41C8-B9BE-3C9C571A8263}" [HKLM] -> F:\Program Files (x86)\Microsoft Office\OFFICE11\REFIEBAR.DLL [Research] -> [2003/07/14 22:57:08 | 00,040,512 | —- | M] (Microsoft Corporation)
CmdMapping\\"{92780B25-18CC-41C8-B9BE-3C9C571A8263}" [HKLM] -> F:\Program Files (x86)\Microsoft Office\OFFICE11\REFIEBAR.DLL [Research] -> [2003/07/14 22:57:08 | 00,040,512 | —- | M] (Microsoft Corporation)
64bit-CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
< 64bit-Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> 
PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> 
PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> 
< Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> 
PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> 
PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> 
< 64bit-Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
"" -> http://
< Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
"" -> http://
< 64bit-Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 1 domain(s) found. -> 
1 domain(s) and sub-domain(s) not assigned to a zone.
< 64bit-Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> 
< Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 1 domain(s) found. -> 
1 domain(s) and sub-domain(s) not assigned to a zone.
< Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> 
< Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> 
< Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> 
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> 
{6414512B-B978-451D-A0D8-FCFDF33E833C} [HKLM] -> http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1247275271781 [WUWebControl Class] -> 
< 64bit-Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> 
64bit-*Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell -> 
Explorer.exe -> F:\WINDOWS\explorer.exe -> [2005/03/25 08:00:00 | 01,364,480 | —- | M] (Microsoft Corporation)
*MultiFile Done* -> -> 
64bit-*UIHost* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UIHost -> 
%SystemRoot%\system32\logonui.exe -> F:\WINDOWS\SysNative\logonui.exe -> File not found
*MultiFile Done* -> -> 
64bit-*VMApplet* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet -> 
Control_RunDLL "sysdm.cpl" ->  -> File not found
*MultiFile Done* -> -> 
< Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> 
*Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell -> 
explorer.exe -> F:\WINDOWS\SysWow64\explorer.exe -> [2005/03/25 08:00:00 | 01,050,624 | —- | M] (Microsoft Corporation)
rundll32.exe ->  -> File not found
*MultiFile Done* -> -> 
*System* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\System -> 
lsass.exe ->  -> File not found
*MultiFile Done* -> -> 
< 64bit-Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ -> 
AtiExtEvent ->  -> File not found
crypt32chain ->  -> File not found
cryptnet ->  -> File not found
cscdll ->  -> File not found
dimsntfy ->  -> File not found
ScCertProp ->  -> File not found
Schedule ->  -> File not found
sclgntfy ->  -> File not found
SensLogn ->  -> File not found
termsrv ->  -> File not found
wlballoon ->  -> File not found
< Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ -> 
ScCertProp ->  -> File not found
Schedule ->  -> File not found
SensLogn ->  -> File not found
wlballoon ->  -> File not found
< 64bit-SSODL [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad -> 
"{35CEC8A3-2BE6-11D2-8773-92E220524153}" [HKLM] -> F:\WINDOWS\SysNative\stobject.dll [SysTray] -> File not found
< 64bit-ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks -> 
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}" [HKLM] ->  [] -> File not found
< SecurityProviders [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders -> 
64bit-*SecurityProviders* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders -> 
msapsspc.dll ->  -> File not found
 schannel.dll ->  -> File not found
 digest.dll ->  -> File not found
 msnsspc.dll ->  -> File not found
*MultiFile Done* -> -> 
< Standard Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List -> 
"%windir%\system32\sessmgr.exe" -> F:\WINDOWS\SysWow64\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> File not found
"F:\Program Files (x86)\Brother\BRAdmin Professional 3\AuditorServer.exe" -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\AuditorServer.exe [F:\Program Files (x86)\Brother\BRAdmin Professional 3\AuditorServer.exe:*:Enabled:BRAdmin Professional 3] -> [2009/03/11 11:32:26 | 00,139,264 | —- | M] ()
"F:\Program Files (x86)\Brother\BRAdmin Professional 3\bradminv3.exe" -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\bradminv3.exe [F:\Program Files (x86)\Brother\BRAdmin Professional 3\bradminv3.exe:*:Enabled:BRAdmin Professional 3] -> [2009/04/03 14:23:38 | 01,531,904 | —- | M] (Brother Industries, Ltd.)
"F:\Program Files (x86)\Brother\BRAdmin Professional 3\discover.exe" -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\discover.exe [F:\Program Files (x86)\Brother\BRAdmin Professional 3\discover.exe:*:Enabled:BRAdmin Professional 3] -> [2009/03/11 11:33:20 | 00,131,072 | —- | M] ()
"F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe" -> F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe [F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe:*:Enabled:McAfee Framework Service] -> [2008/03/14 04:00:00 | 00,103,744 | —- | M] (McAfee, Inc.)
< SafeBoot AlternateShell [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot -> 
"AlternateShell" -> cmd.exe -> 
< CDROM Autorun Setting [HKEY_LOCAL_MACHINE]> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom ->
"AutoRun" -> 1 -> 
"DisplayName" -> CD-ROM Driver -> 
"ImagePath" -> F:\WINDOWS\SysNative\DRIVERS\cdrom.sys [system32\DRIVERS\cdrom.sys] -> File not found
< Drives with AutoRun files > ->  -> 
C:\AUTOEXEC.BAT [] -> C:\AUTOEXEC.BAT [ NTFS ] -> [2009/07/10 20:40:29 | 00,000,000 | —- | M] ()
< MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 -> 
\{2beef6d5-6e37-11de-b0ef-0001292264a7}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell
\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\\"" ->  [AutoRun] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\AutoRun
\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\AutoRun\\"" ->  [Auto&Play] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\AutoRun\command
\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\AutoRun\command\\"" -> G:\LaunchU3.exe [G:\LaunchU3.exe -a] -> File not found
\{dcb2c169-6e4a-11de-85a3-0001292264a7}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell
\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\\"" ->  [AutoRun] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\AutoRun
\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\AutoRun\\"" ->  [Auto&Play] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\AutoRun\command
\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\AutoRun\command\\"" -> G:\LaunchU3.exe [G:\LaunchU3.exe -a] -> File not found
\{fdbee656-6e39-11de-a229-0001292264a7}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdbee656-6e39-11de-a229-0001292264a7}\Shell\AutoRun\command
\{fdbee656-6e39-11de-a229-0001292264a7}\Shell\AutoRun\command\\"" -> G:\setup.exe [G:\setup.exe] -> File not found
 
[Registry - Additional Scans - Safe List]
< 64bit-File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\ -> 
.bat [@ = batfile] -> "%1" %* -> 
.cmd [@ = cmdfile] -> "%1" %* -> 
.com [@ = comfile] -> "%1" %* -> 
.cpl [@ = cplfile] -> rundll32.exe shell32.dll,Control_RunDLL "%1",%* -> 
.exe [@ = exefile] -> F:\WINDOWS\SysWow64\desot.exe -> File not found
.html [@ = htmlfile] -> F:\Program Files (x86)\Internet Explorer\iexplore.exe -> [2005/03/25 08:00:00 | 00,094,208 | —- | M] (Microsoft Corporation)
.inf [@ = inffile] -> F:\WINDOWS\SysNative\NOTEPAD.EXE -> File not found
.ini [@ = inifile] -> F:\WINDOWS\SysNative\NOTEPAD.EXE -> File not found
.url [@ = InternetShortcut] -> rundll32.exe shdocvw.dll,OpenURL %l -> 
.js [@ = JSFile] -> F:\WINDOWS\SysNative\WScript.exe -> File not found
.jse [@ = JSEFile] -> F:\WINDOWS\SysNative\WScript.exe -> File not found
.pif [@ = piffile] -> "%1" %* -> 
.scr [@ = scrfile] -> "%1" /S -> 
.txt [@ = txtfile] -> F:\WINDOWS\SysNative\NOTEPAD.EXE -> File not found
.vbe [@ = VBEFile] -> F:\WINDOWS\SysNative\WScript.exe -> File not found
.vbs [@ = VBSFile] -> F:\WINDOWS\SysNative\WScript.exe -> File not found
.wsf [@ = WSFFile] -> F:\WINDOWS\SysNative\WScript.exe -> File not found
.wsh [@ = WSHFile] -> F:\WINDOWS\SysNative\WScript.exe -> File not found
< File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\ -> 
.bat [@ = batfile] -> "%1" %* -> 
.cmd [@ = cmdfile] -> "%1" %* -> 
.com [@ = comfile] -> "%1" %* -> 
.exe [@ = exefile] -> F:\WINDOWS\SysWow64\desot.exe -> File not found
.html [@ = htmlfile] -> F:\Program Files (x86)\Internet Explorer\iexplore.exe -> [2005/03/25 08:00:00 | 00,094,208 | —- | M] (Microsoft Corporation)
.pif [@ = piffile] -> "%1" %* -> 
.reg [@ = regfile] -> F:\WINDOWS\SysWow64\regedit.exe -> [2005/03/25 08:00:00 | 00,147,456 | —- | M] (Microsoft Corporation)
.scr [@ = scrfile] -> "%1" /S -> 
< File Associations - Select to Repair > -> HKEY_CURRENT_USER\SOFTWARE\Classes\\ -> 
< 64bit-Protocol Filters [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\ -> 
application/octet-stream:{1E66F26B-79EE-11D2-8710-00C04F79ED0D} [HKLM] -> [Cor MIME Filter, CorFltr, CorFltr 1] -> File not found
application/x-complus:{1E66F26B-79EE-11D2-8710-00C04F79ED0D} [HKLM] -> [Cor MIME Filter, CorFltr, CorFltr 1] -> File not found
application/x-msdownload:{1E66F26B-79EE-11D2-8710-00C04F79ED0D} [HKLM] -> [Cor MIME Filter, CorFltr, CorFltr 1] -> File not found
text/xml:{807553E5-5146-11D5-A672-00B0D022E945} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found
< Protocol Filters [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\ -> 
text/xml:{807553E5-5146-11D5-A672-00B0D022E945} [HKLM] -> F:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL[Reg Error: Value error.] -> [2003/07/14 22:45:12 | 00,039,488 | —- | M] (Microsoft Corporation)
< 64bit-Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ -> 
about:{3050F406-98B5-11CF-BB82-00AA00BDCE0B} [HKLM] -> F:\WINDOWS\SysNative\mshtml.dll[Microsoft HTML About Pluggable Protocol] -> File not found
java script:{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} [HKLM] -> F:\WINDOWS\SysNative\mshtml.dll[Microsoft HTML Javascript Pluggable Protocol] -> File not found
mailto:{3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} [HKLM] -> F:\WINDOWS\SysNative\mshtml.dll[Microsoft HTML Mailto Pluggable Protocol] -> File not found
msdaipp: [HKLM] -> No CLSID value
msdaipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found
msdaipp\oledb:{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found
mso-offdap:{3D9F03FA-7A94-11D3-BE81-0050048385D1} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found
mso-offdap11:{32505114-5902-49B2-880A-1F7738E5A384} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.] -> File not found
res:{3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} [HKLM] -> F:\WINDOWS\SysNative\mshtml.dll[Microsoft HTML Resource Pluggable Protocol] -> File not found
sysimage:{76E67A63-06E9-11D2-A840-006008059382} [HKLM] -> F:\WINDOWS\SysNative\mshtml.dll[Microsoft HTML Resource Pluggable Protocol] -> File not found
vb script:{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} [HKLM] -> F:\WINDOWS\SysNative\mshtml.dll[Microsoft HTML Javascript Pluggable Protocol] -> File not found
wia:{13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} [HKLM] -> F:\WINDOWS\SysNative\wiascr.dll[WiaProtocol Class] -> File not found
< Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ -> 
msdaipp: [HKLM] -> No CLSID value
msdaipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} [HKLM] -> F:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll[MSDAMON.BINDER] -> [2003/07/11 02:25:22 | 00,842,816 | —- | M] (Microsoft Corporation)
msdaipp\oledb:{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} [HKLM] -> F:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll[MSDAIPP.BINDER] -> [2003/07/11 02:25:22 | 00,842,816 | —- | M] (Microsoft Corporation)
mso-offdap:{3D9F03FA-7A94-11D3-BE81-0050048385D1} [HKLM] -> F:\Program Files (x86)\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL[Data Page Pluggable Protocol mso-offdap Handler] -> [2003/08/04 13:19:34 | 07,330,360 | —- | M] (Microsoft Corporation)
mso-offdap11:{32505114-5902-49B2-880A-1F7738E5A384} [HKLM] -> F:\Program Files (x86)\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL[Data Page Plugable Protocal mso-offdap11 Handler] -> [2003/08/01 15:09:04 | 08,086,072 | —- | M] (Microsoft Corporation)
< 64bit-Security Center Settings > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center -> 
64bit-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
\\"FirstRunDisabled" ->  [1] -> File not found
\\"AntiVirusDisableNotify" ->  [0] -> File not found
\\"FirewallDisableNotify" ->  [0] -> File not found
\\"UpdatesDisableNotify" ->  [0] -> File not found
\\"AntiVirusOverride" ->  [0] -> File not found
\\"FirewallOverride" ->  [0] -> File not found
64bit-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ -> -> 
< Security Center Settings > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
\\"FirstRunDisabled" ->  [1] -> File not found
 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\ -> -> 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\ -> -> 
< 64bit-Uninstall List [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ -> 
{26F66AF6-4FDB-357A-7DCE-646C3D05D3A9} -> ccc-utility64
{5254156F-AA77-499A-B7C1-D5581D44E788} -> Marvell Miniport Driver
{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} -> Microsoft .NET Framework 3.0 Service Pack 2
{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} -> Microsoft .NET Framework 2.0 Service Pack 2
{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} -> Microsoft .NET Framework 3.5 SP1
ATI Display Driver -> ATI Display Driver
Microsoft .NET Framework 3.5 SP1 -> Microsoft .NET Framework 3.5 SP1
WIC -> Windows Imaging Component
< Uninstall List [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ -> 
{04F38D49-8732-4139-0C9F-6794937C7E6B} -> CCC Help English
{055EE59D-217B-43A7-ABFF-507B966405D8} -> ATI Catalyst Control Center
{0B3D3425-401F-798B-1DE6-DAA497E67DA2} -> CCC Help Italian
{147BCE03-C0F1-4C9F-8157-6A89B6D2D973} -> McAfee VirusScan Enterprise
{2007A5BF-A9BA-728B-AD14-90251EDF19FD} -> ccc-core-preinstall
{33CE9398-8C1A-11D9-8BDE-F66BAD1E3F3A} -> EndNote 9
{4A653EC8-A017-5ED8-4929-46FA814AC197} -> Catalyst Control Center HydraVision Full
{4DA77116-40B2-6C31-3F48-F94726B7CC60} -> Catalyst Control Center Graphics Light
{5AB082A1-EEC6-9C43-23FD-0ED68770A085} -> Catalyst Control Center Graphics Previews Common
{5AEE14C1-A580-9A1C-6036-2EA514B69C3C} -> Catalyst Control Center Core Implementation
{5E210E4A-1C33-AB78-D3B6-BAC2B43A489B} -> Catalyst Control Center Graphics Full Existing
{75C885D4-C758-4896-A3B4-90DA34B44C31} -> BRAdmin Professional 3
{7A4F8E83-27D9-4DC6-0A27-3E96C5886440} -> Catalyst Control Center Graphics Full New
{7E37E484-4C35-B62F-6309-7D852B0B50E0} -> CCC Help French
{830FBA32-7B93-3B18-4D45-74483FDC87D0} -> ccc-core-static
{90110409-6000-11D3-8CFE-0150048383C9} -> Microsoft Office Professional Edition 2003
{908A9D8C-262B-8847-4AC7-B0A7E95271F0} -> CCC Help Spanish
{A638557B-1F13-40A0-9627-C892FBCA6960} -> McAfee Agent
{AC76BA86-1033-0000-BA7E-100000000002} -> Adobe Acrobat 7.0 Standard
{C209E5C0-14A0-518D-2023-8F1C242A77C9} -> CCC Help German
{C9EA111F-132D-1715-7E35-8E5B599F81B6} -> CCC Help Portuguese
{D3B1C799-CB73-42DE-BA0F-2344793A095C} -> Catalyst Control Center - Branding
{E525D847-3475-975A-F9D1-A30D0D218F91} -> Catalyst Control Center Localization All
{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} -> Realtek High Definition Audio Driver
{FE4BD9BD-4A26-4F39-B12C-19336204B101} -> EndNote X Upgrade Edition
Adobe Acrobat 7.0 Standard - V -> Adobe Acrobat 7.0 Standard
Adobe Photoshop 7.0.1 -> Adobe Photoshop 7.0.1
All ATI Software -> ATI - Software Uninstall Utility
Brother HL-5170DN -> Brother HL-5170DN
ERUNT_is1 -> ERUNT 1.1j
HijackThis -> HijackThis 2.0.2
ISI ResearchSoft - Export Helper -> ISI ResearchSoft - Export Helper
SigmaPlot 6.00 -> SigmaPlot 6.00
Win Antivirus Pro -> Windows Antivirus Pro
< EventViewer Logs - Last 10 Errors > -> Event Information -> Description
Application [ Error ] 7/11/2009 12:38:56 PM Computer Name = HOME | Source = MsiInstaller | ID = 1013 -> Description = Product: Gatorlink VPN Client 5.0.04.0300 – Error 28011: Windows 64-bit  is not supported by Gatorlink VPN Client 5.0.04.0300.
Application [ Error ] 7/11/2009 12:41:51 PM Computer Name = HOME | Source = MsiInstaller | ID = 11721 -> Description = Product: Gatorlink VPN Client 5.0.00.0340 – Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: CsCaExe_RegisterIPSecPlugin1, location: F:\Program Files (x86)\Common Files\Deterministic Networks\Common files\dneinst.exe, command: -AddPlugin CVPNDRVA -Description "Cisco Systems Inc. IPSec Driver" -InstallPath F:\WINDOWS\SysWOW64\Drivers -Verbose 
Application [ Error ] 7/11/2009 1:27:47 PM Computer Name = HOME | Source = MsiInstaller | ID = 1013 -> Description = Product: Gatorlink VPN Client 5.0.04.0300 – Error 28011: Windows 64-bit  is not supported by Gatorlink VPN Client 5.0.04.0300.
Application [ Error ] 8/1/2009 6:06:43 PM Computer Name = HOME | Source = Application Error | ID = 1000 -> Description = Faulting application iexplore.exe, version 6.0.3790.1830, faulting module unknown, version 0.0.0.0, fault address 0x00000000.
Application [ Error ] 8/1/2009 6:07:47 PM Computer Name = HOME | Source = Application Hang | ID = 1002 -> Description = Hanging application IEXPLORE.EXE, version 6.0.3790.1830, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
System [ Error ] 8/31/2009 8:58:11 AM Computer Name = HOME | Source = Service Control Manager | ID = 7002 -> Description = The BrPar service depends on the Parallel arbitrator group and no member of this group started.
System [ Error ] 8/31/2009 9:59:57 AM Computer Name = HOME | Source = Service Control Manager | ID = 7002 -> Description = The BrPar service depends on the Parallel arbitrator group and no member of this group started.
System [ Error ] 8/31/2009 10:37:47 AM Computer Name = HOME | Source = Service Control Manager | ID = 7034 -> Description = The AntipyProex service terminated unexpectedly.  It has done this 1 time(s).
System [ Error ] 8/31/2009 1:42:38 PM Computer Name = HOME | Source = Service Control Manager | ID = 7034 -> Description = The BrSplService service terminated unexpectedly.  It has done this 1 time(s).
System [ Error ] 8/31/2009 1:42:38 PM Computer Name = HOME | Source = Service Control Manager | ID = 7034 -> Description = The Brother BRAdminPro Scheduler service terminated unexpectedly.  It has done this 1 time(s).
System [ Error ] 8/31/2009 1:42:38 PM Computer Name = HOME | Source = Service Control Manager | ID = 7034 -> Description = The McAfee Framework Service service terminated unexpectedly.  It has done this 1 time(s).
System [ Error ] 8/31/2009 1:42:39 PM Computer Name = HOME | Source = Service Control Manager | ID = 7034 -> Description = The McAfee Task Manager service terminated unexpectedly.  It has done this 1 time(s).
System [ Error ] 8/31/2009 1:46:02 PM Computer Name = HOME | Source = DCOM | ID = 10016 -> Description = The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID   {555F3418-D99E-4E51-800A-6E89CFD8B1D7}   to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19).  This security permission can be modified using the Component Services administrative tool.
System [ Error ] 8/31/2009 1:46:02 PM Computer Name = HOME | Source = DCOM | ID = 10016 -> Description = The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID   {555F3418-D99E-4E51-800A-6E89CFD8B1D7}   to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19).  This security permission can be modified using the Component Services administrative tool.
System [ Error ] 8/31/2009 1:46:03 PM Computer Name = HOME | Source = Service Control Manager | ID = 7002 -> Description = The BrPar service depends on the Parallel arbitrator group and no member of this group started.
 
[Files/Folders - Created Within 30 Days]
fixme.reg -> F:\Documents and Settings\Administrator\Desktop\fixme.reg -> [2009/09/01 10:16:32 | 00,000,350 | —- | C] ()
query.bat -> F:\Documents and Settings\Administrator\Desktop\query.bat -> [2009/09/01 08:20:50 | 00,000,129 | —- | C] ()
_OTS -> F:\_OTS -> [2009/08/31 13:42:38 | 00,000,000 | —D | C]
OTS.com -> F:\Documents and Settings\Administrator\Desktop\OTS.com -> [2009/08/31 11:32:45 | 00,514,048 | —- | C] (OldTimer Tools)
HijackThis.exe -> F:\Documents and Settings\Administrator\Desktop\HijackThis.exe -> [2009/08/31 10:47:51 | 00,401,720 | —- | C] (Trend Micro Inc.)
ERDNT -> F:\WINDOWS\ERDNT -> [2009/08/31 10:39:13 | 00,000,000 | —D | C]
NTREGOPT.lnk -> F:\Documents and Settings\Administrator\Desktop\NTREGOPT.lnk -> [2009/08/31 10:38:42 | 00,000,641 | —- | C] ()
ERUNT.lnk -> F:\Documents and Settings\Administrator\Desktop\ERUNT.lnk -> [2009/08/31 10:38:42 | 00,000,622 | —- | C] ()
ERUNT -> F:\Program Files (x86)\ERUNT -> [2009/08/31 10:38:41 | 00,000,000 | —D | C]
RootRepeal.exe -> F:\Documents and Settings\Administrator\Desktop\RootRepeal.exe -> [2009/08/31 09:56:36 | 00,472,064 | —- | C] ( )
asdjflkjt.exe -> F:\Documents and Settings\Administrator\Desktop\asdjflkjt.exe -> [2009/08/31 09:56:29 | 00,791,393 | —- | C] (Lars Hederer												)
bincd32.dat -> F:\WINDOWS\SysWow64\bincd32.dat -> [2009/08/15 06:15:07 | 00,000,004 | —- | C] ()
My Videos -> F:\Documents and Settings\All Users\Documents\My Videos -> [2009/08/02 14:55:40 | 00,000,000 | R–D | C]
My Videos -> F:\Documents and Settings\Administrator\My Documents\My Videos -> [2009/08/02 14:55:40 | 00,000,000 | R–D | C]
EndNote X -> F:\Program Files (x86)\EndNote X -> [2009/08/02 14:44:09 | 00,000,000 | —D | C]
EndNote -> F:\Documents and Settings\Administrator\Application Data\EndNote -> [2009/08/02 14:41:10 | 00,000,000 | —D | C]
Sp32w.dll -> F:\WINDOWS\SysWow64\Sp32w.dll -> [2009/07/11 15:45:00 | 00,033,280 | —- | C] ()
brss01a.ini -> F:\WINDOWS\SysWow64\brss01a.ini -> [2009/07/11 15:17:25 | 00,000,030 | —- | C] ()
BRWMARK.INI -> F:\WINDOWS\BRWMARK.INI -> [2009/07/11 15:17:24 | 00,000,410 | —- | C] ()
BRVIDEO.INI -> F:\WINDOWS\BRVIDEO.INI -> [2009/07/11 14:14:28 | 00,000,153 | —- | C] ()
brpp2ka.ini -> F:\WINDOWS\brpp2ka.ini -> [2009/07/11 14:14:28 | 00,000,052 | —- | C] ()
BRDIAG.INI -> F:\WINDOWS\BRDIAG.INI -> [2009/07/11 14:14:28 | 00,000,040 | —- | C] ()
Brownie.ini -> F:\WINDOWS\Brownie.ini -> [2009/07/11 14:14:28 | 00,000,023 | —- | C] ()
bw5170dn.ini -> F:\WINDOWS\bw5170dn.ini -> [2009/07/11 14:14:28 | 00,000,000 | —- | C] ()
brmx2001.ini -> F:\WINDOWS\brmx2001.ini -> [2009/07/11 14:14:28 | 00,000,000 | —- | C] ()
BROSNMP.DLL -> F:\WINDOWS\SysWow64\BROSNMP.DLL -> [2009/07/11 14:14:26 | 00,077,824 | —- | C] ()
BRGSRC32.DLL -> F:\WINDOWS\SysWow64\BRGSRC32.DLL -> [2009/07/11 14:14:26 | 00,026,624 | —- | C] ()
HL-5170DN.INI -> F:\WINDOWS\HL-5170DN.INI -> [2009/07/11 14:14:26 | 00,015,108 | —- | C] ()
BRGSRC16.DLL -> F:\WINDOWS\SysWow64\BRGSRC16.DLL -> [2009/07/11 14:14:26 | 00,004,608 | —- | C] ()
PTRCENG.DLL -> F:\WINDOWS\SysWow64\PTRCENG.DLL -> [2009/07/11 14:14:13 | 00,045,056 | —- | C] ()
ODBC.INI -> F:\WINDOWS\ODBC.INI -> [2009/07/11 14:07:47 | 00,000,376 | —- | C] ()
PerfStringBackup.INI -> F:\WINDOWS\SysWow64\PerfStringBackup.INI -> [2009/07/10 20:54:58 | 00,541,752 | —- | C] ()
win.ini -> F:\WINDOWS\win.ini -> [2009/07/10 20:39:26 | 00,000,497 | —- | C] ()
system.ini -> F:\WINDOWS\system.ini -> [2009/07/10 16:16:08 | 00,000,150 | —- | C] ()
quartz.dll -> F:\WINDOWS\SysWow64\quartz.dll -> [2005/03/25 08:00:00 | 01,291,264 | —- | C] ()
qedwipes.dll -> F:\WINDOWS\SysWow64\qedwipes.dll -> [2005/03/25 08:00:00 | 00,733,696 | —- | C] ()
qedit.dll -> F:\WINDOWS\SysWow64\qedit.dll -> [2005/03/25 08:00:00 | 00,512,512 | —- | C] ()
dxmasf.dll -> F:\WINDOWS\SysWow64\dxmasf.dll -> [2005/03/25 08:00:00 | 00,498,742 | —- | C] ()
encdec.dll -> F:\WINDOWS\SysWow64\encdec.dll -> [2005/03/25 08:00:00 | 00,396,288 | —- | C] ()
qdvd.dll -> F:\WINDOWS\SysWow64\qdvd.dll -> [2005/03/25 08:00:00 | 00,385,536 | —- | C] ()
msjetoledb40.dll -> F:\WINDOWS\SysWow64\msjetoledb40.dll -> [2005/03/25 08:00:00 | 00,355,112 | —- | C] ()
qdv.dll -> F:\WINDOWS\SysWow64\qdv.dll -> [2005/03/25 08:00:00 | 00,279,040 | —- | C] ()
sbe.dll -> F:\WINDOWS\SysWow64\sbe.dll -> [2005/03/25 08:00:00 | 00,276,992 | —- | C] ()
ir32_32.dll -> F:\WINDOWS\SysWow64\ir32_32.dll -> [2005/03/25 08:00:00 | 00,199,168 | —- | C] ()
qcap.dll -> F:\WINDOWS\SysWow64\qcap.dll -> [2005/03/25 08:00:00 | 00,192,512 | —- | C] ()
msencode.dll -> F:\WINDOWS\SysWow64\msencode.dll -> [2005/03/25 08:00:00 | 00,114,688 | —- | C] ()
amstream.dll -> F:\WINDOWS\SysWow64\amstream.dll -> [2005/03/25 08:00:00 | 00,072,704 | —- | C] ()
mciqtz32.dll -> F:\WINDOWS\SysWow64\mciqtz32.dll -> [2005/03/25 08:00:00 | 00,062,464 | —- | C] ()
devenum.dll -> F:\WINDOWS\SysWow64\devenum.dll -> [2005/03/25 08:00:00 | 00,061,440 | —- | C] ()
tsd32.dll -> F:\WINDOWS\SysWow64\tsd32.dll -> [2005/03/25 08:00:00 | 00,016,896 | —- | C] ()
msdmo.dll -> F:\WINDOWS\SysWow64\msdmo.dll -> [2005/03/25 08:00:00 | 00,014,336 | —- | C] ()
msdxmlc.dll -> F:\WINDOWS\SysWow64\msdxmlc.dll -> [2005/03/25 08:00:00 | 00,004,126 | —- | C] ()
OUTLPERF.INI -> F:\WINDOWS\SysWow64\OUTLPERF.INI -> [2003/01/07 15:05:08 | 00,002,695 | —- | C] ()
 
[Files/Folders - Modified Within 30 Days]
fixme.reg -> F:\Documents and Settings\Administrator\Desktop\fixme.reg -> [2009/09/01 10:17:04 | 00,000,350 | —- | M] ()
query.bat -> F:\Documents and Settings\Administrator\Desktop\query.bat -> [2009/09/01 08:23:40 | 00,000,129 | —- | M] ()
Adobe Acrobat Speed Launcher.lnk -> F:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk -> [2009/08/31 13:47:43 | 00,002,359 | —- | M] ()
bootstat.dat -> F:\WINDOWS\bootstat.dat -> [2009/08/31 13:45:59 | 00,002,048 | –S- | M] ()
SA.DAT -> F:\WINDOWS\tasks\SA.DAT -> [2009/08/31 13:45:59 | 00,000,006 | -H– | M] ()
NTUSER.DAT -> F:\Documents and Settings\Administrator\NTUSER.DAT -> [2009/08/31 13:44:31 | 01,310,720 | -H– | M] ()
ntuser.ini -> F:\Documents and Settings\Administrator\ntuser.ini -> [2009/08/31 13:44:31 | 00,000,178 | -HS- | M] ()
OTS.com -> F:\Documents and Settings\Administrator\Desktop\OTS.com -> [2009/08/31 11:33:10 | 00,514,048 | —- | M] (OldTimer Tools)
HijackThis.exe -> F:\Documents and Settings\Administrator\Desktop\HijackThis.exe -> [2009/08/31 10:48:16 | 00,401,720 | —- | M] (Trend Micro Inc.)
NTREGOPT.lnk -> F:\Documents and Settings\Administrator\Desktop\NTREGOPT.lnk -> [2009/08/31 10:38:42 | 00,000,641 | —- | M] ()
ERUNT.lnk -> F:\Documents and Settings\Administrator\Desktop\ERUNT.lnk -> [2009/08/31 10:38:42 | 00,000,622 | —- | M] ()
RootRepeal.exe -> F:\Documents and Settings\Administrator\Desktop\RootRepeal.exe -> [2009/08/31 09:49:34 | 00,472,064 | —- | M] ( )
asdjflkjt.exe -> F:\Documents and Settings\Administrator\Desktop\asdjflkjt.exe -> [2009/08/31 09:48:46 | 00,791,393 | —- | M] (Lars Hederer												)
bincd32.dat -> F:\WINDOWS\SysWow64\bincd32.dat -> [2009/08/15 07:01:40 | 00,000,004 | —- | M] ()
IconCache.db -> F:\Documents and Settings\Administrator\Local Settings\Application Data\IconCache.db -> [2009/08/15 06:32:36 | 06,413,810 | -H– | M] ()
qmgr1.dat -> F:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat -> [2009/08/12 05:56:56 | 00,005,508 | —- | M] ()
qmgr0.dat -> F:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat -> [2009/08/12 05:56:56 | 00,004,232 | —- | M] ()
opa11.dat -> F:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\opa11.dat -> [2009/07/11 14:08:27 | 00,008,206 | —- | M] ()
< End of report >

Yes please reboot and see if it has corrected the exe issue

After reboot, the exe issue is not fixed. I get the same prompt as before about choosing a program to open the .exe.

Start OTS Copy/Paste the information inside the codebox below into the panel where it says "Paste fix here" and then click the Run Fix button.

[Registry - Additional Scans - Safe List]
< 64bit-File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\
YN -> .exe [@ = exefile] -> F:\WINDOWS\SysWow64\desot.exe
< File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\
YN -> .exe [@ = exefile] -> F:\WINDOWS\SysWow64\desot.exe

[Empty Temp Folders]
[Start Explorer]
[Reboot]

The fix should only take a very short time. When the fix is completed a message box will popup either telling you that it is finished, or that a reboot is needed to complete the fix. If the fix is complete, click the Ok button and Notepad will open with a log of actions taken during the fix. Post that log back here in your next reply.

If a reboot is required, click the "Yes" button to reboot the machine. After the reboot, OTS will finish moving any files that could not be moved during the fix and NotePad will open with the final results at that time. Post that log back here in your next reply.

I copy/pasted the text into the "Paste Fix Here" area in OTS (still is renamed as OTS.com) and clicked Run Fix. OTS then quits without noticeably doing anything. edit to say that I tried multiple times, even rebooting and trying.. same behavior.

It was only supposed to fix the exe file association, can you reboot and see if it has done so.

It did not fix the exe file association problem.

Please run another OTS.com log and check off the reg-file associations as before and post the log

Here you go:

OTS logfile created on: 9/1/2009 11:37:55 AM - Run 4
OTS by OldTimer - Version 3.0.10.3	 Folder = F:\Documents and Settings\Administrator\Desktop
64bit-Windows Server 2003  Service Pack 1 (Version = 5.2.3790) - Type = NTWorkstation
Internet Explorer (Version = 6.0.3790.1830)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
4.00 Gb Total Physical Memory | 4.00 Gb Available Physical Memory | 100.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): F:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = F: | %SystemRoot% = F:\WINDOWS | %ProgramFiles% = F:\Program Files (x86)
Drive C: | 931.50 Gb Total Space | 929.10 Gb Free Space | 99.74% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 59.61 Gb Total Space | 49.09 Gb Free Space | 82.35% Space Free | Partition Type: NTFS
Drive G: | 1.95 Gb Total Space | 0.11 Gb Free Space | 5.78% Space Free | Partition Type: FAT32
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: HOME
Current User Name: Administrator
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
 
[Processes - Safe List]
ots.com -> F:\Documents and Settings\Administrator\Desktop\OTS.com -> [2009/08/31 11:33:10 | 00,514,048 | —- | M] (OldTimer Tools)
 
[Win32 Services - Safe List]
(aspnet_state) ASP.NET State Service [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\aspnet_state.exe -> [2008/07/25 10:13:44 | 00,046,088 | —- | M] (Microsoft Corporation)
(ATI Smart) ATI Smart [Win32_Own | Auto | Stopped] -> F:\WINDOWS\SysWow64\ati2saag.exe -> [2009/05/15 21:05:00 | 00,665,088 | —- | M] ()
(BRA_Scheduler) Brother BRAdminPro Scheduler [Win32_Own | Auto | Stopped] -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\bratimer.exe -> [2009/01/21 15:00:54 | 00,065,536 | —- | M] ()
(Brother XP spl Service) BrSplService [Win32_Own | Auto | Stopped] -> F:\WINDOWS\SysWOW64\brsvc01a.exe -> [2004/06/14 00:00:00 | 00,057,344 | —- | M] (brother Industries Ltd)
(clr_optimization_v2.0.50727_32) .NET Runtime Optimization Service v2.0.50727_X86 [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -> [2008/07/25 11:17:02 | 00,069,632 | —- | M] (Microsoft Corporation)
(clr_optimization_v2.0.50727_64) .NET Runtime Optimization Service v2.0.50727_x64 [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -> [2008/07/25 10:13:48 | 00,093,184 | —- | M] (Microsoft Corporation)
(FontCache3.0.0.0) Windows Presentation Foundation Font Cache 3.0.0.0 [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe -> [2008/07/29 21:18:04 | 00,046,104 | —- | M] (Microsoft Corporation)
(helpsvc) Help and Support [Win32_Shared | Auto | Running] -> F:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -> [2005/03/25 08:00:00 | 00,077,824 | —- | M] (Microsoft Corporation)
(IASJet) IAS Jet Database Access [Win32_Shared | On_Demand | Stopped] -> F:\WINDOWS\SysWOW64\iasrecst.dll -> [2005/03/25 08:00:00 | 00,162,816 | —- | M] (Microsoft Corporation)
(idsvc) Windows CardSpace [Win32_Shared | Unknown | Stopped] -> F:\WINDOWS\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe -> [2008/07/29 19:28:38 | 00,859,648 | —- | M] (Microsoft Corporation)
(McAfeeEngineService) McAfee Engine Service [Win32_Own | Auto | Running] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\EngineServer.exe -> [2008/09/29 08:07:00 | 00,017,920 | —- | M] (McAfee, Inc.)
(McAfeeFramework) McAfee Framework Service [Win32_Own | Auto | Stopped] -> F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe -> [2008/03/14 04:00:00 | 00,103,744 | —- | M] (McAfee, Inc.)
(McShield) McAfee McShield [Win32_Own | Auto | Running] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\McShield.exe -> [2008/09/29 08:07:00 | 00,175,072 | —- | M] (McAfee, Inc.)
(McTaskManager) McAfee Task Manager [Win32_Own | Auto | Stopped] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe -> [2008/09/29 08:07:00 | 00,062,800 | —- | M] (McAfee, Inc.)
(Netlogon) Net Logon [Win32_Shared | On_Demand | Stopped] -> F:\WINDOWS\SysWow64\netlogon.dll -> [2005/03/25 08:00:00 | 00,419,328 | —- | M] (Microsoft Corporation)
(ose) Office Source Engine [Win32_Own | On_Demand | Stopped] -> F:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE -> [2003/07/28 12:28:22 | 00,089,136 | —- | M] (Microsoft Corporation)
(UMWdf) Windows User Mode Driver Framework [Win32_Own | On_Demand | Stopped] -> F:\WINDOWS\SysWow64\wdfmgr.exe -> [2005/03/25 08:00:00 | 00,039,424 | —- | M] (Microsoft Corporation)
 
[Driver Services - Safe List]
(BrPar) BrPar [Kernel | Auto | Stopped] -> F:\WINDOWS\System32\drivers\BrPar.sys -> [2000/07/24 01:01:00 | 00,019,537 | —- | M] (Brother Industries Ltd.)
(mnmdd) mnmdd [Kernel | System | Running] -> F:\WINDOWS\SysWow64\mnmdd.dll -> [2005/03/25 08:00:00 | 00,033,792 | —- | M] (Microsoft Corporation)
 
[Registry - Safe List]
< 64bit-Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> %SystemRoot%\system32\blank.htm -> 
HKEY_LOCAL_MACHINE\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home -> 
HKEY_LOCAL_MACHINE\: Search\\"CustomizeSearch" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> 
HKEY_LOCAL_MACHINE\: Search\\"SearchAssistant" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> 
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> %SystemRoot%\system32\blank.htm -> 
HKEY_LOCAL_MACHINE\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home -> 
HKEY_LOCAL_MACHINE\: Search\\"CustomizeSearch" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> 
HKEY_LOCAL_MACHINE\: Search\\"SearchAssistant" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> 
< Internet Explorer Settings [HKEY_CURRENT_USER\] > -> -> 
HKEY_CURRENT_USER\: Main\\"Local Page" -> F:\WINDOWS\system32\blank.htm -> 
HKEY_CURRENT_USER\: Main\\"Search Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_CURRENT_USER\: Main\\"Start Page" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome -> 
HKEY_CURRENT_USER\: SearchURL\\"provider" ->  -> 
64bit-HKEY_CURRENT_USER\: URLSearchHooks\\"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" [HKLM] -> F:\WINDOWS\SysNative\shdocvw.dll [Microsoft Url Search Hook] -> File not found
HKEY_CURRENT_USER\: "ProxyEnable" -> 0 -> 
< FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
HKLM\software\mozilla\Firefox\Extensions ->  -> 
HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b} -> F:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION [F:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION\] -> [2009/07/11 06:16:22 | 00,000,000 | —D | M]
< FireFox Extensions [User Folders] > -> 
Hosts file not found -> -> 
< 64bit-BHO's [HKEY_LOCAL_MACHINE] > -> 64bit-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> 
{7DB2D5A0-7241-4E79-B68D-6309F01C5231} [HKLM] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\scriptsn.dll [scriptproxy] -> [2008/09/29 08:07:00 | 00,064,808 | —- | M] (McAfee, Inc.)
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> 
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [HKLM] -> F:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [AcroIEHlprObj Class] -> [2004/12/14 01:56:50 | 00,063,136 | —- | M] (Adobe Systems Incorporated)
{7DB2D5A0-7241-4E79-B68D-6309F01C5231} [HKLM] -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\scriptsn.dll [scriptproxy] -> [2008/09/29 08:07:00 | 00,061,200 | —- | M] (McAfee, Inc.)
{AE7CD045-E861-484f-8273-0445EE161910} [HKLM] -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [AcroIEToolbarHelper Class] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar -> 
"{47833539-D0C5-4125-9FA8-0819E2EAAC93}" [HKLM] -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [Adobe PDF] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
< Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ -> 
WebBrowser\\"{47833539-D0C5-4125-9FA8-0819E2EAAC93}" [HKLM] -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [Adobe PDF] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
< 64bit-Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> 
"Alcmtr" -> F:\WINDOWS\ALCMTR.EXE [ALCMTR.EXE] -> [2008/06/19 04:20:52 | 00,057,344 | —- | M] (Realtek Semiconductor Corp.)
"AlcWzrd" -> F:\WINDOWS\ALCWZRD.EXE [ALCWZRD.EXE] -> [2008/06/19 04:42:44 | 02,808,832 | —- | M] (RealTek Semicoductor Corp.)
"RTHDCPL" -> F:\WINDOWS\RTHDCPL.EXE [RTHDCPL.EXE] -> [2008/10/28 05:18:26 | 17,331,200 | —- | M] (Realtek Semiconductor Corp.)
"SkyTel" -> F:\WINDOWS\SkyTel.exe [SkyTel.EXE] -> [2007/11/20 06:15:58 | 01,826,816 | —- | M] (Realtek Semiconductor Corp.)
"SoundMan" -> F:\WINDOWS\SOUNDMAN.EXE [SOUNDMAN.EXE] -> [2008/08/19 01:26:44 | 00,077,824 | —- | M] (Realtek Semiconductor Corp.)
< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> 
"Acrobat Assistant 7.0" -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe ["F:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"] -> [2004/12/14 02:12:02 | 00,483,328 | —- | M] (Adobe Systems Inc.)
"McAfeeUpdaterUI" -> F:\Program Files (x86)\McAfee\Common Framework\udaterui.exe ["F:\Program Files (x86)\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey] -> [2008/03/14 04:00:00 | 00,136,512 | —- | M] (McAfee, Inc.)
"ShStatEXE" -> F:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE ["F:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE] -> [2008/09/29 08:07:00 | 00,124,240 | —- | M] (McAfee, Inc.)
"StartCCC" -> F:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ["F:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun] -> [2009/05/20 16:24:56 | 00,098,304 | —- | M] (Advanced Micro Devices, Inc.)
< Administrator Startup Folder > -> F:\Documents and Settings\Administrator\Start Menu\Programs\Startup -> 
< All Users Startup Folder > -> F:\Documents and Settings\All Users\Start Menu\Programs\Startup -> 
F:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk -> F:\WINDOWS\Installer\{AC76BA86-1033-0000-BA7E-100000000002}\SC_Acrobat.exe -> [2009/07/11 14:57:50 | 00,025,214 | R— | M] ()
F:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk -> F:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe -> [1999/11/04 16:06:48 | 00,113,664 | —- | M] (Adobe Systems, Inc.)
< CurrentVersion Policy Settings - Explorer [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\\"NoActiveDesktop" ->  [1] -> File not found
\\"NoActiveDesktopChanges" ->  [1] -> File not found
\\"ForceActiveDesktopOn" ->  [0] -> File not found
\\"HonorAutoRunSetting" ->  [1] -> File not found
< CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
\\"dontdisplaylastusername" ->  [0] -> File not found
\\"legalnoticecaption" ->  [] -> File not found
\\"legalnoticetext" ->  [] -> File not found
\\"scforceoption" ->  [0] -> File not found
\\"shutdownwithoutlogon" ->  [1] -> File not found
\\"undockwithoutlogon" ->  [1] -> File not found
< CurrentVersion Policy Settings - Explorer [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\\"NoDriveTypeAutoRun" ->  [145] -> File not found
< 64bit-Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ -> 
Convert link target to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert link target to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selected links to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selected links to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selection to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selection to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
E&xport to Microsoft Excel -> F:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE [res://F:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000] -> [2003/08/13 02:34:38 | 10,073,144 | —- | M] (Microsoft Corporation)
< Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ -> 
Convert link target to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert link target to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selected links to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selected links to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selection to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert selection to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert to Adobe PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
Convert to existing PDF -> F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [res://F:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html] -> [2004/12/14 02:13:40 | 00,225,280 | —- | M] (Adobe Systems Incorporated)
E&xport to Microsoft Excel -> F:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE [res://F:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000] -> [2003/08/13 02:34:38 | 10,073,144 | —- | M] (Microsoft Corporation)
< 64bit-Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> 
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Button: Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Menu: Windows Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
< Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> 
{92780B25-18CC-41C8-B9BE-3C9C571A8263}:{FF059E31-CC5A-4E2E-BF3B-96E929D65503} [HKLM] -> F:\Program Files (x86)\Microsoft Office\OFFICE11\REFIEBAR.DLL [Button: Research] -> [2003/07/14 22:57:08 | 00,040,512 | —- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Button: Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Menu: Windows Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
< Internet Explorer Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\ -> 
64bit-CmdMapping\\"{92780B25-18CC-41C8-B9BE-3C9C571A8263}" [HKLM] -> F:\Program Files (x86)\Microsoft Office\OFFICE11\REFIEBAR.DLL [Research] -> [2003/07/14 22:57:08 | 00,040,512 | —- | M] (Microsoft Corporation)
CmdMapping\\"{92780B25-18CC-41C8-B9BE-3C9C571A8263}" [HKLM] -> F:\Program Files (x86)\Microsoft Office\OFFICE11\REFIEBAR.DLL [Research] -> [2003/07/14 22:57:08 | 00,040,512 | —- | M] (Microsoft Corporation)
64bit-CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> F:\Program Files\Messenger\msmsgs.exe [Messenger] -> [2005/03/25 08:00:00 | 01,681,920 | —- | M] (Microsoft Corporation)
< 64bit-Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> 
PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> 
PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> 
< Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> 
PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> 
PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> 
< 64bit-Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
"" -> http://
< Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
"" -> http://
< 64bit-Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 1 domain(s) found. -> 
1 domain(s) and sub-domain(s) not assigned to a zone.
< 64bit-Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> 
< Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 1 domain(s) found. -> 
1 domain(s) and sub-domain(s) not assigned to a zone.
< Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> 
< Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> 
< Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> 
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> 
{6414512B-B978-451D-A0D8-FCFDF33E833C} [HKLM] -> http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1247275271781 [WUWebControl Class] -> 
< 64bit-Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> 
64bit-*Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell -> 
Explorer.exe -> F:\WINDOWS\explorer.exe -> [2005/03/25 08:00:00 | 01,364,480 | —- | M] (Microsoft Corporation)
*MultiFile Done* -> -> 
64bit-*UIHost* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UIHost -> 
%SystemRoot%\system32\logonui.exe -> F:\WINDOWS\SysNative\logonui.exe -> File not found
*MultiFile Done* -> -> 
64bit-*VMApplet* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet -> 
Control_RunDLL "sysdm.cpl" ->  -> File not found
*MultiFile Done* -> -> 
< Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> 
*Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell -> 
explorer.exe -> F:\WINDOWS\SysWow64\explorer.exe -> [2005/03/25 08:00:00 | 01,050,624 | —- | M] (Microsoft Corporation)
rundll32.exe ->  -> File not found
*MultiFile Done* -> -> 
*System* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\System -> 
lsass.exe ->  -> File not found
*MultiFile Done* -> -> 
< 64bit-Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ -> 
AtiExtEvent ->  -> File not found
crypt32chain ->  -> File not found
cryptnet ->  -> File not found
cscdll ->  -> File not found
dimsntfy ->  -> File not found
ScCertProp ->  -> File not found
Schedule ->  -> File not found
sclgntfy ->  -> File not found
SensLogn ->  -> File not found
termsrv ->  -> File not found
wlballoon ->  -> File not found
< Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ -> 
ScCertProp ->  -> File not found
Schedule ->  -> File not found
SensLogn ->  -> File not found
wlballoon ->  -> File not found
< 64bit-SSODL [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad -> 
"{35CEC8A3-2BE6-11D2-8773-92E220524153}" [HKLM] -> F:\WINDOWS\SysNative\stobject.dll [SysTray] -> File not found
< 64bit-ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks -> 
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}" [HKLM] ->  [] -> File not found
< SecurityProviders [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders -> 
64bit-*SecurityProviders* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders -> 
msapsspc.dll ->  -> File not found
 schannel.dll ->  -> File not found
 digest.dll ->  -> File not found
 msnsspc.dll ->  -> File not found
*MultiFile Done* -> -> 
< Standard Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List -> 
"%windir%\system32\sessmgr.exe" -> F:\WINDOWS\SysWow64\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> File not found
"F:\Program Files (x86)\Brother\BRAdmin Professional 3\AuditorServer.exe" -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\AuditorServer.exe [F:\Program Files (x86)\Brother\BRAdmin Professional 3\AuditorServer.exe:*:Enabled:BRAdmin Professional 3] -> [2009/03/11 11:32:26 | 00,139,264 | —- | M] ()
"F:\Program Files (x86)\Brother\BRAdmin Professional 3\bradminv3.exe" -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\bradminv3.exe [F:\Program Files (x86)\Brother\BRAdmin Professional 3\bradminv3.exe:*:Enabled:BRAdmin Professional 3] -> [2009/04/03 14:23:38 | 01,531,904 | —- | M] (Brother Industries, Ltd.)
"F:\Program Files (x86)\Brother\BRAdmin Professional 3\discover.exe" -> F:\Program Files (x86)\Brother\BRAdmin Professional 3\discover.exe [F:\Program Files (x86)\Brother\BRAdmin Professional 3\discover.exe:*:Enabled:BRAdmin Professional 3] -> [2009/03/11 11:33:20 | 00,131,072 | —- | M] ()
"F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe" -> F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe [F:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe:*:Enabled:McAfee Framework Service] -> [2008/03/14 04:00:00 | 00,103,744 | —- | M] (McAfee, Inc.)
< SafeBoot AlternateShell [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot -> 
"AlternateShell" -> cmd.exe -> 
< CDROM Autorun Setting [HKEY_LOCAL_MACHINE]> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom ->
"AutoRun" -> 1 -> 
"DisplayName" -> CD-ROM Driver -> 
"ImagePath" -> F:\WINDOWS\SysNative\DRIVERS\cdrom.sys [system32\DRIVERS\cdrom.sys] -> File not found
< Drives with AutoRun files > ->  -> 
C:\AUTOEXEC.BAT [] -> C:\AUTOEXEC.BAT [ NTFS ] -> [2009/07/10 20:40:29 | 00,000,000 | —- | M] ()
< MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 -> 
\{2beef6d5-6e37-11de-b0ef-0001292264a7}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell
\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\\"" ->  [AutoRun] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\AutoRun
\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\AutoRun\\"" ->  [Auto&Play] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\AutoRun\command
\{2beef6d5-6e37-11de-b0ef-0001292264a7}\Shell\AutoRun\command\\"" -> G:\LaunchU3.exe [G:\LaunchU3.exe -a] -> File not found
\{dcb2c169-6e4a-11de-85a3-0001292264a7}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell
\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\\"" ->  [AutoRun] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\AutoRun
\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\AutoRun\\"" ->  [Auto&Play] -> File not found
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\AutoRun\command
\{dcb2c169-6e4a-11de-85a3-0001292264a7}\Shell\AutoRun\command\\"" -> G:\LaunchU3.exe [G:\LaunchU3.exe -a] -> File not found
\{fdbee656-6e39-11de-a229-0001292264a7}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fdbee656-6e39-11de-a229-0001292264a7}\Shell\AutoRun\command
\{fdbee656-6e39-11de-a229-0001292264a7}\Shell\AutoRun\command\\"" -> G:\setup.exe [G:\setup.exe] -> File not found
 
[Registry - Additional Scans - Safe List]
< 64bit-File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\ -> 
.bat [@ = batfile] -> "%1" %* -> 
.cmd [@ = cmdfile] -> "%1" %* -> 
.com [@ = comfile] -> "%1" %* -> 
.cpl [@ = cplfile] -> rundll32.exe shell32.dll,Control_RunDLL "%1",%* -> 
.exe [@ = exefile] -> F:\WINDOWS\SysWow64\desot.exe -> File not found
.html [@ = htmlfile] -> F:\Program Files (x86)\Internet Explorer\iexplore.exe -> [2005/03/25 08:00:00 | 00,094,208 | —- | M] (Microsoft Corporation)
.inf [@ = inffile] -> F:\WINDOWS\SysNative\NOTEPAD.EXE -> File not found
.ini [@ = inifile] -> F:\WINDOWS\SysNative\NOTEPAD.EXE -> File not found
.url [@ = InternetShortcut] -> rundll32.exe shdocvw.dll,OpenURL %l -> 
.js [@ = JSFile] -> F:\WINDOWS\SysNative\WScript.exe -> File not found
.jse [@ = JSEFile] -> F:\WINDOWS\SysNative\WScript.exe -> File not found
.pif [@ = piffile] -> "%1" %* -> 
.scr [@ = scrfile] -> "%1" /S -> 
.txt [@ = txtfile] -> F:\WINDOWS\SysNative\NOTEPAD.EXE -> File not found
.vbe [@ = VBEFile] -> F:\WINDOWS\SysNative\WScript.exe -> File not found
.vbs [@ = VBSFile] -> F:\WINDOWS\SysNative\WScript.exe -> File not found
.wsf [@ = WSFFile] -> F:\WINDOWS\SysNative\WScript.exe -> File not found
.wsh [@ = WSHFile] -> F:\WINDOWS\SysNative\WScript.exe -> File not found
< File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\ -> 
.bat [@ = batfile] -> "%1" %* -> 
.cmd [@ = cmdfile] -> "%1" %* -> 
.com [@ = comfile] -> "%1" %* -> 
.exe [@ = exefile] -> F:\WINDOWS\SysWow64\desot.exe -> File not found
.html [@ = htmlfile] -> F:\Program Files (x86)\Internet Explorer\iexplore.exe -> [2005/03/25 08:00:00 | 00,094,208 | —- | M] (Microsoft Corporation)
.pif [@ = piffile] -> "%1" %* -> 
.reg [@ = regfile] -> F:\WINDOWS\SysWow64\regedit.exe -> [2005/03/25 08:00:00 | 00,147,456 | —- | M] (Microsoft Corporation)
.scr [@ = scrfile] -> "%1" /S -> 
< File Associations - Select to Repair > -> HKEY_CURRENT_USER\SOFTWARE\Classes\\ -> 
 
[Files/Folders - Created Within 30 Days]
fixme.reg -> F:\Documents and Settings\Administrator\Desktop\fixme.reg -> [2009/09/01 10:16:32 | 00,000,350 | —- | C] ()
query.bat -> F:\Documents and Settings\Administrator\Desktop\query.bat -> [2009/09/01 08:20:50 | 00,000,129 | —- | C] ()
_OTS -> F:\_OTS -> [2009/08/31 13:42:38 | 00,000,000 | —D | C]
OTS.com -> F:\Documents and Settings\Administrator\Desktop\OTS.com -> [2009/08/31 11:32:45 | 00,514,048 | —- | C] (OldTimer Tools)
HijackThis.exe -> F:\Documents and Settings\Administrator\Desktop\HijackThis.exe -> [2009/08/31 10:47:51 | 00,401,720 | —- | C] (Trend Micro Inc.)
ERDNT -> F:\WINDOWS\ERDNT -> [2009/08/31 10:39:13 | 00,000,000 | —D | C]
NTREGOPT.lnk -> F:\Documents and Settings\Administrator\Desktop\NTREGOPT.lnk -> [2009/08/31 10:38:42 | 00,000,641 | —- | C] ()
ERUNT.lnk -> F:\Documents and Settings\Administrator\Desktop\ERUNT.lnk -> [2009/08/31 10:38:42 | 00,000,622 | —- | C] ()
ERUNT -> F:\Program Files (x86)\ERUNT -> [2009/08/31 10:38:41 | 00,000,000 | —D | C]
RootRepeal.exe -> F:\Documents and Settings\Administrator\Desktop\RootRepeal.exe -> [2009/08/31 09:56:36 | 00,472,064 | —- | C] ( )
asdjflkjt.exe -> F:\Documents and Settings\Administrator\Desktop\asdjflkjt.exe -> [2009/08/31 09:56:29 | 00,791,393 | —- | C] (Lars Hederer												)
bincd32.dat -> F:\WINDOWS\SysWow64\bincd32.dat -> [2009/08/15 06:15:07 | 00,000,004 | —- | C] ()
My Videos -> F:\Documents and Settings\All Users\Documents\My Videos -> [2009/08/02 14:55:40 | 00,000,000 | R–D | C]
My Videos -> F:\Documents and Settings\Administrator\My Documents\My Videos -> [2009/08/02 14:55:40 | 00,000,000 | R–D | C]
EndNote X -> F:\Program Files (x86)\EndNote X -> [2009/08/02 14:44:09 | 00,000,000 | —D | C]
EndNote -> F:\Documents and Settings\Administrator\Application Data\EndNote -> [2009/08/02 14:41:10 | 00,000,000 | —D | C]
Sp32w.dll -> F:\WINDOWS\SysWow64\Sp32w.dll -> [2009/07/11 15:45:00 | 00,033,280 | —- | C] ()
brss01a.ini -> F:\WINDOWS\SysWow64\brss01a.ini -> [2009/07/11 15:17:25 | 00,000,030 | —- | C] ()
BRWMARK.INI -> F:\WINDOWS\BRWMARK.INI -> [2009/07/11 15:17:24 | 00,000,410 | —- | C] ()
BRVIDEO.INI -> F:\WINDOWS\BRVIDEO.INI -> [2009/07/11 14:14:28 | 00,000,153 | —- | C] ()
brpp2ka.ini -> F:\WINDOWS\brpp2ka.ini -> [2009/07/11 14:14:28 | 00,000,052 | —- | C] ()
BRDIAG.INI -> F:\WINDOWS\BRDIAG.INI -> [2009/07/11 14:14:28 | 00,000,040 | —- | C] ()
Brownie.ini -> F:\WINDOWS\Brownie.ini -> [2009/07/11 14:14:28 | 00,000,023 | —- | C] ()
bw5170dn.ini -> F:\WINDOWS\bw5170dn.ini -> [2009/07/11 14:14:28 | 00,000,000 | —- | C] ()
brmx2001.ini -> F:\WINDOWS\brmx2001.ini -> [2009/07/11 14:14:28 | 00,000,000 | —- | C] ()
BROSNMP.DLL -> F:\WINDOWS\SysWow64\BROSNMP.DLL -> [2009/07/11 14:14:26 | 00,077,824 | —- | C] ()
BRGSRC32.DLL -> F:\WINDOWS\SysWow64\BRGSRC32.DLL -> [2009/07/11 14:14:26 | 00,026,624 | —- | C] ()
HL-5170DN.INI -> F:\WINDOWS\HL-5170DN.INI -> [2009/07/11 14:14:26 | 00,015,108 | —- | C] ()
BRGSRC16.DLL -> F:\WINDOWS\SysWow64\BRGSRC16.DLL -> [2009/07/11 14:14:26 | 00,004,608 | —- | C] ()
PTRCENG.DLL -> F:\WINDOWS\SysWow64\PTRCENG.DLL -> [2009/07/11 14:14:13 | 00,045,056 | —- | C] ()
ODBC.INI -> F:\WINDOWS\ODBC.INI -> [2009/07/11 14:07:47 | 00,000,376 | —- | C] ()
PerfStringBackup.INI -> F:\WINDOWS\SysWow64\PerfStringBackup.INI -> [2009/07/10 20:54:58 | 00,541,752 | —- | C] ()
win.ini -> F:\WINDOWS\win.ini -> [2009/07/10 20:39:26 | 00,000,497 | —- | C] ()
system.ini -> F:\WINDOWS\system.ini -> [2009/07/10 16:16:08 | 00,000,150 | —- | C] ()
quartz.dll -> F:\WINDOWS\SysWow64\quartz.dll -> [2005/03/25 08:00:00 | 01,291,264 | —- | C] ()
qedwipes.dll -> F:\WINDOWS\SysWow64\qedwipes.dll -> [2005/03/25 08:00:00 | 00,733,696 | —- | C] ()
qedit.dll -> F:\WINDOWS\SysWow64\qedit.dll -> [2005/03/25 08:00:00 | 00,512,512 | —- | C] ()
dxmasf.dll -> F:\WINDOWS\SysWow64\dxmasf.dll -> [2005/03/25 08:00:00 | 00,498,742 | —- | C] ()
encdec.dll -> F:\WINDOWS\SysWow64\encdec.dll -> [2005/03/25 08:00:00 | 00,396,288 | —- | C] ()
qdvd.dll -> F:\WINDOWS\SysWow64\qdvd.dll -> [2005/03/25 08:00:00 | 00,385,536 | —- | C] ()
msjetoledb40.dll -> F:\WINDOWS\SysWow64\msjetoledb40.dll -> [2005/03/25 08:00:00 | 00,355,112 | —- | C] ()
qdv.dll -> F:\WINDOWS\SysWow64\qdv.dll -> [2005/03/25 08:00:00 | 00,279,040 | —- | C] ()
sbe.dll -> F:\WINDOWS\SysWow64\sbe.dll -> [2005/03/25 08:00:00 | 00,276,992 | —- | C] ()
ir32_32.dll -> F:\WINDOWS\SysWow64\ir32_32.dll -> [2005/03/25 08:00:00 | 00,199,168 | —- | C] ()
qcap.dll -> F:\WINDOWS\SysWow64\qcap.dll -> [2005/03/25 08:00:00 | 00,192,512 | —- | C] ()
msencode.dll -> F:\WINDOWS\SysWow64\msencode.dll -> [2005/03/25 08:00:00 | 00,114,688 | —- | C] ()
amstream.dll -> F:\WINDOWS\SysWow64\amstream.dll -> [2005/03/25 08:00:00 | 00,072,704 | —- | C] ()
mciqtz32.dll -> F:\WINDOWS\SysWow64\mciqtz32.dll -> [2005/03/25 08:00:00 | 00,062,464 | —- | C] ()
devenum.dll -> F:\WINDOWS\SysWow64\devenum.dll -> [2005/03/25 08:00:00 | 00,061,440 | —- | C] ()
tsd32.dll -> F:\WINDOWS\SysWow64\tsd32.dll -> [2005/03/25 08:00:00 | 00,016,896 | —- | C] ()
msdmo.dll -> F:\WINDOWS\SysWow64\msdmo.dll -> [2005/03/25 08:00:00 | 00,014,336 | —- | C] ()
msdxmlc.dll -> F:\WINDOWS\SysWow64\msdxmlc.dll -> [2005/03/25 08:00:00 | 00,004,126 | —- | C] ()
OUTLPERF.INI -> F:\WINDOWS\SysWow64\OUTLPERF.INI -> [2003/01/07 15:05:08 | 00,002,695 | —- | C] ()
 
[Files/Folders - Modified Within 30 Days]
Adobe Acrobat Speed Launcher.lnk -> F:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk -> [2009/09/01 11:13:46 | 00,002,359 | —- | M] ()
bootstat.dat -> F:\WINDOWS\bootstat.dat -> [2009/09/01 11:13:44 | 00,002,048 | –S- | M] ()
SA.DAT -> F:\WINDOWS\tasks\SA.DAT -> [2009/09/01 11:13:44 | 00,000,006 | -H– | M] ()
NTUSER.DAT -> F:\Documents and Settings\Administrator\NTUSER.DAT -> [2009/09/01 11:12:15 | 01,310,720 | -H– | M] ()
ntuser.ini -> F:\Documents and Settings\Administrator\ntuser.ini -> [2009/09/01 11:12:15 | 00,000,178 | -HS- | M] ()
fixme.reg -> F:\Documents and Settings\Administrator\Desktop\fixme.reg -> [2009/09/01 10:17:04 | 00,000,350 | —- | M] ()
query.bat -> F:\Documents and Settings\Administrator\Desktop\query.bat -> [2009/09/01 08:23:40 | 00,000,129 | —- | M] ()
OTS.com -> F:\Documents and Settings\Administrator\Desktop\OTS.com -> [2009/08/31 11:33:10 | 00,514,048 | —- | M] (OldTimer Tools)
HijackThis.exe -> F:\Documents and Settings\Administrator\Desktop\HijackThis.exe -> [2009/08/31 10:48:16 | 00,401,720 | —- | M] (Trend Micro Inc.)
NTREGOPT.lnk -> F:\Documents and Settings\Administrator\Desktop\NTREGOPT.lnk -> [2009/08/31 10:38:42 | 00,000,641 | —- | M] ()
ERUNT.lnk -> F:\Documents and Settings\Administrator\Desktop\ERUNT.lnk -> [2009/08/31 10:38:42 | 00,000,622 | —- | M] ()
RootRepeal.exe -> F:\Documents and Settings\Administrator\Desktop\RootRepeal.exe -> [2009/08/31 09:49:34 | 00,472,064 | —- | M] ( )
asdjflkjt.exe -> F:\Documents and Settings\Administrator\Desktop\asdjflkjt.exe -> [2009/08/31 09:48:46 | 00,791,393 | —- | M] (Lars Hederer												)
bincd32.dat -> F:\WINDOWS\SysWow64\bincd32.dat -> [2009/08/15 07:01:40 | 00,000,004 | —- | M] ()
IconCache.db -> F:\Documents and Settings\Administrator\Local Settings\Application Data\IconCache.db -> [2009/08/15 06:32:36 | 06,413,810 | -H– | M] ()
qmgr1.dat -> F:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat -> [2009/08/12 05:56:56 | 00,005,508 | —- | M] ()
qmgr0.dat -> F:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat -> [2009/08/12 05:56:56 | 00,004,232 | —- | M] ()
opa11.dat -> F:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\opa11.dat -> [2009/07/11 14:08:27 | 00,008,206 | —- | M] ()
< End of report >

Hi,

I've made a couple of adjustments to the fix,

hopefully it will work this time.

Please make sure all other programs are closed before trying the fix:


Start OTS

Copy/Paste the information inside the codebox below into the panel where it says "Paste fix here" and then click the Run Fix button.

(Note: copying begins at [Kill All Processes])

[Kill All Processes]
[Unregister Dlls]
[Registry - Additional Scans - Safe List]
< 64bit-File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\
YN -> .exe [@ = exefile] -> F:\WINDOWS\SysWow64\desot.exe
< File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\
YN -> .exe [@ = exefile] -> F:\WINDOWS\SysWow64\desot.exe
[Empty Temp Folders]
[Start Explorer]
[Reboot]

The fix should only take a very short time. When the fix is completed a message box will popup either telling you that it is finished, or that a reboot is needed to complete the fix. If the fix is complete, click the Ok button and Notepad will open with a log of actions taken during the fix. Post that log back here in your next reply.

If a reboot is required, click the "Yes" button to reboot the machine. After the reboot, OTS will finish moving any files that could not be moved during the fix and NotePad will open with the final results at that time. Post that log back here in your next reply.

I'm getting the same behavior as reported earlier. When I attempt to copy/paste the code into the "Paste Fix Here" box and click "Run Fix", the app quits immediately without doing anything. There is no log created in \_OTS\. I ran a scan again just to make sure and the file association for .exe has not changed. It still says this: .exe [@ = exefile] -> F:\WINDOWS\SysWow64\desot.exe -> File not found Is the Run Fix failing because we renamed OTS.exe to OTS.com?

Hi, Yes I suspect that may be the issue, Let me research this a bit more, I am sure there is a workaround. I will get back to you as soon as I can. Thanks ~CB

Hi I'm still researching, but just a thought - have you tried right clicking and running as an Administrator?