118 replies to this topic

[Joecastle]

I tried to uninstall it threough the control panel, and clicking on the adobe suite there is the option to uninstall all or parts of the suite.. So I tried to uninstall Acrobat Pro and it failed to uninstall....

[CatByte]

what happened? Did you get an error message?

[Joecastle]

what happened? Did you get an error message?

Component removal Failed

[CatByte]

Hi try this program...it may be an association issue.



Download SREng

• Extract it to Desktop and double click SREngLdr.EXE to run it
• Select System Repair from the left pane.
• Click on File Association
• Select all entries that have an Error status click [Repair]
• Refer to this image for an example:
  
  
  
• Close SREng now.

Then try combofix again

[Joecastle]

Nothing... Same thing happens only in safe mode and does not happen in normal mode, but, combofix still stuck.... Oh.. Sreng did fix one erroe that was Adobe Dreamweaver....

Edited by Joecastle, 28 October 2009 - 07:22 PM.

[CatByte]

Hi,

Please post some fresh logs so i can see where we are at now with this infection:

run Win32kDiag:

• Double-click Win32kDiag.exe to run Win32kDiag and let it finish.
• When it states "Finished! Press any key to exit...", press any key on your keyboard to close the program.
• Double-click on the Win32kDiag.txt file that is located on your Desktop and post the entire contents of that log as a reply to this topic.

NEXT

Please run the GMER program again

• Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
• If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.
  
  
  Click the image to enlarge it
  
• In the right panel, you will see several boxes that have been checked. Uncheck the following ...
  • Sections
  • IAT/EAT
  • Drives/Partition other than Systemdrive (typically C:\)
  • Show All (don't miss this one)
• Then click the Scan button & wait for it to finish.
• Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  
• Save it where you can easily find it, such as your desktop, and attach it in your reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries



NEXT

Please run the DDS program again

• Disable any script blocking protection
• Double click dds.pif to run the tool.
• When done, two DDS.txt's will open.
• Save both reports to your desktop.

---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.

[Joecastle]

DDS?

[CatByte]

Sorry,

I thought you had this one already

Please download DDS from LINK 1 or LINK 2
and save it to your desktop.

• Disable any script blocking protection
• Double click dds.pif to run the tool.
• When done, two DDS.txt's will open.
• Save both reports to your desktop.

---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.

[Joecastle]

I am running Gmer at the moment and have a question about it.... In the sections that need to be unchecked ( Drives/Partition other than Systemdrive (typically C:\) ) this means to leave my C drive checked or unchecked?

[CatByte]

C is left checked

Thanks

[Joecastle]

Here is Win32 Running from: C:\Users\Viper1\Desktop\Win32kDiag.exe Log file at : C:\Users\Viper1\Desktop\Win32kDiag.txt WARNING: Could not get backup privileges! Searching 'C:\Windows'... Found mount point : C:\Windows\AppPatch\Custom\Custom Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\CSC\v2.0.6\namespace\namespace Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\Globalization\Globalization Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\Microsoft.NET\authman\authman Mount point destination : \Device\__max++>\^ Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16916_none_ebdb680516458e6e\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16916_none_ebdb680516458e6e: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.21116_none_ec64dcf22f63617a\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.21116_none_ec64dcf22f63617a: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16916_none_b2f810b7d9a605d2\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16916_none_b2f810b7d9a605d2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.21116_none_b38185a4f2c3d8de\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.21116_none_b38185a4f2c3d8de: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18319_none_b4e1503bd6c9e2c8\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18319_none_b4e1503bd6c9e2c8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22508_none_b574be8eefe04a71\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22508_none_b574be8eefe04a71: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.18100_none_b6c9915bd3f03513\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.18100_none_b6c9915bd3f03513: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.22212_none_b74a5eceed14237c\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.22212_none_b74a5eceed14237c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16916_none_deda9f807f4ec541\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16916_none_deda9f807f4ec541: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.21116_none_df64146d986c984d\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.21116_none_df64146d986c984d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18319_none_e0c3df047c72a237\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18319_none_e0c3df047c72a237: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22508_none_e1574d57958909e0\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22508_none_e1574d57958909e0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.16916_none_8d4e9eec54b4aaf6\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.16916_none_8d4e9eec54b4aaf6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.21116_none_8dd813d96dd27e02\x86_microsoft-windows-i..nternetcontrolpanel_31bf3856ad364e35_6.0.6000.21116_none_8dd813d96dd27e02: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16916_none_fffdec59a4af2c65\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16916_none_fffdec59a4af2c65: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21116_none_00876146bdccff71\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21116_none_00876146bdccff71: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18319_none_01e72bdda1d3095b\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18319_none_01e72bdda1d3095b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22508_none_027a9a30bae97104\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22508_none_027a9a30bae97104: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18100_none_03cf6cfd9ef95ba6\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18100_none_03cf6cfd9ef95ba6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22212_none_04503a70b81d4a0f\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22212_none_04503a70b81d4a0f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.16916_none_726565555a594d2c\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.16916_none_726565555a594d2c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.21116_none_72eeda4273772038\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.21116_none_72eeda4273772038: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.18319_none_744ea4d9577d2a22\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.18319_none_744ea4d9577d2a22: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.22508_none_74e2132c709391cb\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.22508_none_74e2132c709391cb: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16916_none_ac471aa909a2040b\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16916_none_ac471aa909a2040b: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21116_none_acd08f9622bfd717\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21116_none_acd08f9622bfd717: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18319_none_ae305a2d06c5e101\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18319_none_ae305a2d06c5e101: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22508_none_aec3c8801fdc48aa\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22508_none_aec3c8801fdc48aa: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16916_none_f9a70f336e9aa6b8\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16916_none_f9a70f336e9aa6b8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21116_none_fa30842087b879c4\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21116_none_fa30842087b879c4: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18319_none_fb904eb76bbe83ae\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18319_none_fb904eb76bbe83ae: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22508_none_fc23bd0a84d4eb57\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22508_none_fc23bd0a84d4eb57: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18100_none_fd788fd768e4d5f9\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18100_none_fd788fd768e4d5f9: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22212_none_fdf95d4a8208c462\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22212_none_fdf95d4a8208c462: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16916_none_95db47eb84802ce6\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16916_none_95db47eb84802ce6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21116_none_9664bcd89d9dfff2\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21116_none_9664bcd89d9dfff2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.16916_none_5dfb83283d527f1d\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.16916_none_5dfb83283d527f1d: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.21116_none_5e84f81556705229\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.21116_none_5e84f81556705229: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.18319_none_5fe4c2ac3a765c13\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.18319_none_5fe4c2ac3a765c13: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.22508_none_607830ff538cc3bc\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.22508_none_607830ff538cc3bc: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.16916_none_f1827f5cbd02b6c0\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.16916_none_f1827f5cbd02b6c0: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21116_none_f20bf449d62089cc\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21116_none_f20bf449d62089cc: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18319_none_f36bbee0ba2693b6\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18319_none_f36bbee0ba2693b6: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22508_none_f3ff2d33d33cfb5f\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22508_none_f3ff2d33d33cfb5f: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_none_2d76f8e51cda9b48\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_none_2d76f8e51cda9b48: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_none_2e006dd235f86e54\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_none_2e006dd235f86e54: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_none_2f60386919fe783e\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_none_2f60386919fe783e: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_none_2ff3a6bc3314dfe7\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_none_2ff3a6bc3314dfe7: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.16916_none_353b610816ff3030\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.16916_none_353b610816ff3030: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.21116_none_35c4d5f5301d033c\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.21116_none_35c4d5f5301d033c: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.18319_none_3724a08c14230d26\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.18319_none_3724a08c14230d26: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.22508_none_37b80edf2d3974cf\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.22508_none_37b80edf2d3974cf: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.16916_none_45b8a3358f604ac2\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.16916_none_45b8a3358f604ac2: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21116_none_46421822a87e1dce\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21116_none_46421822a87e1dce: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18319_none_47a1e2b98c8427b8\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18319_none_47a1e2b98c8427b8: 3 Could not open reparse point C:\Windows\SoftwareDistribution\Download\d465720e0e6d39d4c8c1f6d80acfbc81\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22508_none_4835510ca59a8f61\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22508_none_4835510ca59a8f61: 3 Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl [1] 2009-10-28 21:02:47 0 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Microsoft-Windows-Backup.etl () Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl [1] 2009-10-28 21:02:47 0 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl () Found mount point : C:\Windows\tracing\tracing Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\winsxs\Temp\PendingDeletes\PendingDeletes Mount point destination : \Device\__max++>\^ Found mount point : C:\Windows\winsxs\Temp\PendingRenames\PendingRenames Mount point destination : \Device\__max++>\^ Finished!

[Joecastle]

DDs DDS (Ver_09-10-26.01) - NTFSx86 Run by Viper1 at 20:08:35.44 on Thu 10/29/2009 Internet Explorer: 7.0.6002.18005 BrowserJavaVersion: 1.6.0_13 Microsoft® Windows Vista™ Business 6.0.6002.2.1252.1.1033.18.3326.2159 [GMT -4:00] SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} ============== Running Processes =============== C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k rpcss C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Raxco\PerfectDisk2008\PD91Agent.exe C:\WINDOWS\system32\HPZipm12.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\System32\nvSCPAPISvr.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\nvvsvc.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\ESET\ESET Smart Security\egui.exe C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDCountdown.exe C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDPop3.exe C:\Program Files\Razer Barracuda AC-1 Gaming Audio Card\CustomAPP\RAZER BARRACUDA AC-1 GAMING AUDIO CARD.EXE C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe C:\Program Files\iPod\bin\iPodService.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\Viper1\Desktop\dds.scr C:\Windows\system32\wbem\wmiprvse.exe ============== Pseudo HJT Report =============== uStart Page = www.google.com/ uInternet Settings,ProxyOverride = *.local BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll BHO: ContributeBHO Class: {074c1dc5-9320-4a9a-947d-c042949c6216} - c:\program files\adobe\/Adobe Contribute CS3/contributeieplugin.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll TB: Contribute Toolbar: {517bdde4-e3a7-4570-b21e-2b52b6139fc7} - c:\program files\adobe\/Adobe Contribute CS3/contributeieplugin.dll EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll uRun: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun: [Acrobat Assistant 8.0] "c:\program files\adobe\acrobat 8.0\acrobat\Acrotray.exe" mRun: [IAAnotif] "c:\program files\intel\intel matrix storage manager\Iaanotif.exe" mRun: [Launch LCDMon] "c:\program files\logitech\gamepanel software\lcd manager\LCDMon.exe" mRun: [Launch LGDCore] "c:\program files\logitech\gamepanel software\g-series software\LGDCore.exe" /SHOWHIDE mRun: [SoundMAX] "c:\program files\analog devices\soundmax\SMax4.exe" /tray mRun: [Adobe_ID0EYTHM] c:\progra~1\common~1\adobe\adobev~1\server\bin\VERSIO~3.EXE mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe" mRun: [Cmaudio8788] RunDll32 cmicnfgp.cpl,CMICtrlWnd mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [Malwarebytes Anti-Malware (reboot)] "d:\malwarebytes' anti-malware\mbam.exe" /runcleanupscript mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-system: EnableLUA = 0 (0x0) mPolicies-system: FilterAdministratorToken = 1 (0x1) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: Append to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert link target to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {E59EB121-F339-4851-A3BA-FE49C35617C2} - c:\program files\icq6.5\ICQ.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} - hxxp://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1214964226984 DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - %SystemRoot%\system32\wpdshserviceobj.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll ================= FIREFOX =================== FF - ProfilePath - c:\users\viper1\appdata\roaming\mozilla\firefox\profiles\4vcqsnl6.default\ FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\ FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} ============= SERVICES / DRIVERS =============== R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2009-5-14 107256] R2 ekrn;ESET Service;c:\program files\eset\eset smart security\ekrn.exe [2009-5-14 731840] R2 epfwwfp;epfwwfp;c:\windows\system32\drivers\epfwwfp.sys [2009-5-14 38240] R2 PD91Agent;PD91Agent;c:\program files\raxco\perfectdisk2008\PD91Agent.exe [2008-12-31 693512] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\windows\system32\nvSCPAPISvr.exe [2009-6-10 232960] R3 cmudaxp;Razer Barracuda AC-1 Gaming Interface;c:\windows\system32\drivers\cmudaxp.sys [2009-9-12 1503040] S2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files\roxio\digital home 10\RoxioUpnpService10.exe [2007-8-24 362992] S2 RoxLiveShare10;LiveShare P2P Server 10;c:\program files\common files\roxio shared\10.0\sharedcom\RoxLiveShare10.exe [2007-8-24 309744] S2 RoxWatch10;Roxio Hard Drive Watcher 10;c:\program files\common files\roxio shared\10.0\sharedcom\RoxWatch10.exe [2007-8-24 166384] S2 ubsbm;Unibrain 1394 SBM Driver;c:\windows\system32\drivers\UBSBM.sys [2005-7-27 14080] S2 ubumapi;Unibrain 1394 FireAPI Driver;c:\windows\system32\drivers\UBUMAPI.sys [2005-7-27 36352] S3 LachesisFltr;Lachesis Mouse Driver;c:\windows\system32\drivers\Lachesis.sys [2009-7-12 12032] S3 PD91Engine;PD91Engine;c:\program files\raxco\perfectdisk2008\PD91Engine.exe [2008-12-31 910600] S3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files\roxio\digital home 10\RoxioUPnPRenderer10.exe [2007-8-24 72176] S3 RoxMediaDB10;RoxMediaDB10;c:\program files\common files\roxio shared\10.0\sharedcom\RoxMediaDB10.exe [2007-8-24 1083888] =============== Created Last 30 ================ 2009-10-29 01:14:57 0 d-s---w- C:\ComboFix 2009-10-27 00:28:49 77312 ----a-w- c:\windows\MBR.exe 2009-10-25 16:38:31 0 d-----w- C:\_OTS 2009-10-23 00:09:19 98816 ----a-w- c:\windows\sed.exe 2009-10-23 00:09:19 236544 ----a-w- c:\windows\PEV.exe 2009-10-23 00:09:19 161792 ----a-w- c:\windows\SWREG.exe 2009-10-19 22:45:26 0 d-----w- c:\program files\Trend Micro 2009-10-19 03:38:12 318976 ----a-w- c:\windows\system32\cmd.execf 2009-10-16 01:48:05 0 d-----w- c:\users\viper1\SiteGrinderData 2009-10-14 00:47:02 0 d-----w- c:\users\viper1\Office Genuine Advantage 2009-10-14 00:21:13 21099 ----a-w- c:\windows\system32\AdobePDF.dll 2009-10-13 00:27:30 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2009-10-13 00:27:30 107368 ----a-w- c:\windows\system32\GEARAspi.dll 2009-10-13 00:26:55 0 d-----w- c:\program files\iPod 2009-10-13 00:26:54 0 d-----w- c:\programdata\{755AC846-7372-4AC8-8550-C52491DAA8BD} 2009-10-13 00:26:54 0 d-----w- c:\program files\iTunes 2009-10-12 23:58:39 0 d-----w- c:\programdata\iPodtoComputer 2009-10-12 23:58:28 94854 ----a-w- c:\windows\system32\HKCU_GNU.reg 2009-10-12 23:58:28 6144 ----a-w- c:\windows\system32\ff_acm.acm 2009-10-12 23:58:28 60273 ----a-w- c:\windows\system32\pthreadGC2.dll 2009-10-12 23:58:28 57344 ----a-w- c:\windows\system32\ff_vfw.dll 2009-10-12 23:58:28 547 ----a-w- c:\windows\system32\ff_vfw.dll.manifest 2009-10-12 23:58:28 2004 ----a-w- c:\windows\system32\HKLM_GNU.reg 2009-10-12 23:58:28 14909 ----a-w- c:\windows\system32\A_reg.reg 2009-10-12 23:58:27 98304 ----a-w- c:\windows\system32\L3CODECX.AX 2009-10-04 19:54:36 0 d-----w- c:\program files\IObit 2009-10-02 22:27:56 195440 ------w- c:\windows\system32\MpSigStub.exe ==================== Find3M ==================== 2009-10-29 23:44:19 48734 ----a-w- c:\programdata\nvModes.dat 2009-10-14 00:21:55 51200 ----a-w- c:\windows\inf\infpub.dat 2009-10-14 00:21:54 86016 ----a-w- c:\windows\inf\infstor.dat 2009-10-14 00:21:54 143360 ----a-w- c:\windows\inf\infstrng.dat 2009-09-14 09:29:50 144896 ----a-w- c:\windows\system32\drivers\srv2.sys 2009-09-10 18:54:06 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-09-10 18:53:50 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-09-10 16:48:01 218624 ----a-w- c:\windows\system32\msv1_0.dll 2009-09-04 11:41:59 60928 ----a-w- c:\windows\system32\msasn1.dll 2009-08-29 00:27:49 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll 2009-08-29 00:14:38 28672 ----a-w- c:\windows\system32\Apphlpdm.dll 2009-08-28 23:42:52 2065696 ----a-w- c:\windows\system32\usbaaplrc.dll 2009-08-27 13:29:25 78336 ----a-w- c:\windows\system32\ieencode.dll 2009-08-27 12:40:58 834048 ----a-w- c:\windows\system32\wininet.dll 2009-08-18 03:33:52 1193832 ----a-w- c:\windows\system32\FM20.DLL 2009-08-14 15:53:34 17920 ----a-w- c:\windows\system32\netevent.dll 2009-08-14 13:49:20 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE 2009-08-14 13:49:18 17920 ----a-w- c:\windows\system32\ROUTE.EXE 2009-08-14 13:49:18 11264 ----a-w- c:\windows\system32\MRINFO.EXE 2009-08-14 13:49:15 27136 ----a-w- c:\windows\system32\NETSTAT.EXE 2009-08-14 13:49:14 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE 2009-08-14 13:49:14 19968 ----a-w- c:\windows\system32\ARP.EXE 2009-08-14 13:49:13 10240 ----a-w- c:\windows\system32\finger.exe 2009-08-14 13:48:02 105984 ----a-w- c:\windows\system32\netiohlp.dll 2009-08-04 12:34:19 3600456 ----a-w- c:\windows\system32\ntkrnlpa.exe 2009-08-04 12:34:19 3548216 ----a-w- c:\windows\system32\ntoskrnl.exe 2009-08-03 19:07:42 403816 ----a-w- c:\windows\system32\OGACheckControl.dll 2009-08-03 19:07:42 322928 ----a-w- c:\windows\system32\OGAAddin.dll 2009-08-03 19:07:42 230768 ----a-w- c:\windows\system32\OGAEXEC.exe 2009-07-12 22:18:13 665600 ----a-w- c:\windows\inf\drvindex.dat 2008-01-21 02:43:58 174 --sha-w- c:\program files\desktop.ini 2006-11-02 12:42:07 30674 ----a-w- c:\windows\inf\perflib\0409\perfd.dat 2006-11-02 12:42:07 30674 ----a-w- c:\windows\inf\perflib\0409\perfc.dat 2006-11-02 12:42:07 287440 ----a-w- c:\windows\inf\perflib\0409\perfi.dat 2006-11-02 12:42:07 287440 ----a-w- c:\windows\inf\perflib\0409\perfh.dat 2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfi.dat 2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfh.dat 2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfd.dat 2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfc.dat 2006-06-23 06:48:54 32768 ----a-r- c:\windows\inf\UpdateUSB.exe ============= FINISH: 20:08:42.87 ===============

[Joecastle]

 Attach.txt   9.03KB   659 downloads

[CatByte]

Hi,

Please do the following


Go to Start menu.

Type cmd in the Search Menu

Press Ctrl + SHIFT and Click on the cmd shortcut on the Start Menu. Ctrl-Shift-Enter is the general keyboard shortcut that triggers elevation to “Run as Administrator”.

Press Alt+C from the keyboard or click Continue to confirm the UAC elevation warning prompt and the administrative privileged command prompt will be opened.

Now type the following commands at the C:\ prompt in the command window:

assoc >"%userprofile%\desktop\assoc.txt"

press enter

then type:

ftype >"%userprofile%\desktop\ftype.txt"

press enter.


The commands will produce two files on your desktop - assoc.txt and ftype.txt. Post the contents of both files from your desktop

[Joecastle]

Here they are... assoc.txt .$cp=$cpfile .$cr=$crfile .$cx=$cxfile .386=vxdfile .3dr=3DMark.Result .3g2=QuickTime.3g2 .3gp=QuickTime.3gp .3gp2=QuickTime.3gp2 .3gpp=QuickTime.3gpp .7z=WinRAR .8ba=Photoshop.PlugIn .8bc=Photoshop.PlugIn .8be=Photoshop.PlugIn .8bf=Adobe.Photoshop.Plugin .8bi=Adobe.Photoshop.Plugin .8bp=Photoshop.PlugIn .8bs=Photoshop.PlugIn .8bx=Photoshop.PlugIn .8by=Photoshop.PlugIn .8li=Photoshop.PlugIn .aac=QuickTime.aac .abr=Photoshop.BrushesFile .ac3=QuickTime.ac3 .aca=Agent.Character.2 .acb=Adobe.Illustrator.ColorBook .acbl=Adobe.Illustrator.ColorBook .accda=Access.ACCDAExtension.12 .accdb=Access.Application.12 .accdc=Access.ACCDCFile.12 .accde=Access.ACCDEFile.12 .accdr=Access.ACCDRFile.12 .accdt=Access.ACCDTFile.12 .accdu=Access.WizardUserDataFile.12 .ace=WinRAR .acf=Photoshop.CustomFilterKernel .acl=ACLFile .aco=Photoshop.SwatchesFile .acs=Agent.Character2.2 .act=Photoshop.ColorTableFile .acv=Photoshop.CurvesFile .ade=Access.ADEFile.12 .adn=Access.BlankProjectTemplate.12 .ado=Photoshop.DuotoneSettingsFile .adobebridge=Adobe.adobebridge .adp=Access.Project.12 .adpp=DeviceCentral.adpp .adts=QuickTime.adts .advs=DeviceCentral.advs .aep=Adobe.AfterEffects.Project.80 .aet=Adobe.AfterEffects.ProjectTemplate.80 .aex=Adobe.AfterEffects.PlugIn .ahs=Photoshop.HalftoneScreens .ahu=Photoshop.HueSatFile .ai=Adobe.Illustrator.13 .aia=Adobe.Illustrator.Action .aif=WMP11.AssocFile.AIFF .aifc=WMP11.AssocFile.AIFF .aiff=WMP11.AssocFile.AIFF .aip=Adobe.Illustrator.Plugin .ait=Adobe.Illustrator.Template .alv=Photoshop.LevelsFile .amc=QuickTime.amc .amp=Photoshop.ArbitraryMapFile .ams=Photoshop.MonitorSetupFile .ani=anifile .api=AcroExch.Plugin .apl=Photoshop.AdobePlugIn .apln=InDesign.Adobe Plug-in .application=Application.Manifest .appref-ms=Application.Reference .arj=WinRAR .as=Flash.ActionScriptFile .asa=aspfile .asax=asaxfile .asc=Flash.ASCommunicationFile .ascx=ascxfile .ase=Adobe.Illustrator.SwatchExchange .asf=WMP11.AssocFile.ASF .ashx=ashxfile .asl=Photoshop.Styles .asmx=asmxfile .asp=aspfile .aspx=aspxfile .ast=Photoshop.SepTablesFile .asv=Photoshop.ASVColAdjFile .asx=WMP11.AssocFile.ASX .atf=Photoshop.TransferFunctionsFile .atn=Photoshop.ActionsFile .au=WMP11.AssocFile.AU .ava=Photoshop.VariationsFile .avi=WMP11.AssocFile.AVI .aw=AWFile .awf=Adobe.WorkFlow.Files .axd=axdfile .axt=Photoshop.AXTAdjColFile .b6l=BlindWrite License file .b6t=BlindWrite TOC file .bat=batfile .blg=PerfFile .blw=Photoshop.BWPresets .bmp=OISbmpfile .bpdx=BPDXFileType .bz=WinRAR .bz2=WinRAR .c2c=CopyToDVD Project .c2d=c2dRCCopy36.File .cab=WinRAR .camp=campfile .cat=CATFile .cda=WMP11.AssocFile.CDA .cdmp=cdmpfile .cdx=aspfile .cer=CERFile .cfc=AdobeColdFusionComponent .cfm=AdobeColdFusionFile .cfxxe=cfxxefile .cha=Photoshop.CHAFile .chk=chkfile .chm=chm.file .cif=cifDIL10Mount.File .cin=Photoshop.CINFile.10 .clr=Flash.ColorTableFile .clx=InDesign.Proximity Dictionary .CM10RCMLayoutEvent=CRCMLayoutEvent Object .CM10RCMLayoutEvent.1=CRCMLayoutEvent Object .CM10RCMResourceLoader=CRCMResourceLoader Object .cmd=cmdfile .collection=Bridge.Collection .com=comfile .compositefont=Windows.CompositeFont .config=configfile .contact=contact_wab_auto_file .cpl=cplfile .cr2=Photoshop.CameraRawFileCanon2.10 .crd=Microsoft.InformationCard .crds=Microsoft.WindowsCardSpaceBackup .crl=CRLFile .crt=CERFile .crtx=CRTXFile .crw=Photoshop.CameraRawFileCanon.10 .cs=csfile .csf=Adobe.ColorSettings .csh=Photoshop.CustomShapes .css=CSSFile .csv=Excel.CSV .cue=cueRCCopy36.File .cur=curfile .db=dbfile .dcr=Photoshop.CameraRawFileKodak.10 .dcst=InDesign.Document Presets .dct=Adobe.Illustrator.Dictionary .del=Adobe.Premiere.Edit.Decision.List .der=CERFile .desklink=CLSID\{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE} .det=Outlook.File.det .dib=OISbmpfile .dic=txtfile .dif=QuickTime.dif .disco=discofile .div=divFile .divx=divxFile .dll=dllfile .dlx=Adobe.Premiere.Movie .dmsa=MusicDiscCreator Document .DMSD=MyDVD10.Project .dmse=SoundEditor Document .DMSM=VideoWave10.Project .DMSP=ROXIOPS10.DMSP .DMSS=RoxioEMC10.DMSS .dng=Photoshop.CameraRawFileDigital.10 .doc=Word.Document.8 .dochtml=wordhtmlfile .docm=Word.DocumentMacroEnabled.12 .docmhtml=wordmhtmlfile .docx=Word.Document.12 .docxml=wordxmlfile .dot=Word.Template.8 .dothtml=wordhtmltemplate .dotm=Word.TemplateMacroEnabled.12 .dotx=Word.Template.12 .dps=dpsFile .dqy=dqyfile .drv=drvfile .dsn=MSDASQL .dv=QuickTime.dv .dvr-ms=WMP.DVR-MSFile .dwfx=XPSViewer.Document .dwt=Dreamweaver.Template .dxu=dxuFile .elm=ELMFile .em=AdobeEncore.MenuTemplate .emf=emffile .eml=Microsoft Internet Mail Message .EMPTYBINARYREGISTRY=OneNote .env=InDesign.Proximity Dictionary .epf=EPFFile .eps=Adobe.Illustrator.EPS .erf=Photoshop.CameraRawFileEpson.10 .evt=evtfile .evtx=evtxfile .exc=txtfile .exe=exefile .exr=Photoshop.OpenEXRFile.10 .f4a=FlashPlayer.AudioForFlashPlayer .f4p=FlashPlayer.ProtectedMediaForFlashPlayer .f4v=FlashPlayer.VideoForFlashPlayer .fad=FADFile .fdf=AcroExch.FDFDoc .fdm=FDMFile .ffo=Photoshop.FileInfo .ffx=Adobe.AfterEffects.Preset .fla=Flash.Movie .flp=Flash.FlashProjectFile .flst=InDesign.Flattener Presets .flt=Adobe.Illustrator.Filter .flv=FlashVideo.FlashVideo .fnd=fndfile .fon=fonfile .gadget=Windows.gadget .gcsx=GCSXFile .gfs=GrooveStub .gi=giRCCopy36.File .gif=OISgiffile .glk=GrooveLinkFile .glox=GLOXFile .gmmp=gmmpfile .gqsx=GQSXFile .gra=MSGraph.Chart.8 .grd=Photoshop.Gradients .group=group_wab_auto_file .grp=MSProgramGroup .grv=GrooveFile .gsa=GrooveSpaceArchive .gta=GrooveToolArchive .gz=WinRAR .H1C=h1cfile .H1D=h1dfile .H1F=h1ffile .H1H=h1hfile .H1K=h1kfile .H1Q=h1qfile .H1S=h1sfile .H1T=h1tfile .H1V=h1vfile .H1W=h1wfile .hdr=Photoshop.PortableBitMapFile.10 .hlp=hlpfile .hol=Outlook.File.hol .hpphotogallery=HPPhotoGallery .hta=htafile .htm=htmlfile .html=htmlfile .hxa=MSHelp.hxa.2.5 .hxc=MSHelp.hxc.2.5 .hxd=MSHelp.hxd.2.5 .hxe=MSHelp.hxe.2.5 .hxf=MSHelp.hxf.2.5 .hxh=MSHelp.hxh.2.5 .hxi=MSHelp.hxi.2.5 .hxk=MSHelp.hxk.2.5 .hxq=MSHelp.hxq.2.5 .hxr=MSHelp.hxr.2.5 .hxs=MSHelp.hxs.2.5 .hxt=MSHelp.hxt.2.5 .hxv=MSHelp.hxv.2.5 .hxw=MSHelp.hxa.2.5 .hyp=Adobe.Illustrator.Hyphen .ibc=Outlook.File.ibc .icc=icmfile .icl=IconLibraryFile .icm=icmfile .ico=icofile .ics=Outlook.File.ics .idlk=InDesign.Lock File .idpk=InDesign.Package For GoLive .inca=InCopy.Assignment File .incd=InCopy.Document .incp=InCopy.Assignment Package .inct=InCopy.Template .incx=InCopy.Interchange.Document .indb=InDesign.Book .indd=InDesign.Document .indk=InDesign.User Defined Keyboard Shortcuts .indl=InDesign.Asset Library .indp=InDesign.Assignment Package .inds=InDesign.Snippet .indt=InDesign.Template .inf=inffile .infopathxml=InfoPath.Document.2 .ini=inifile .inlx=InDesign.Interchange Library .inx=InDesign.XML.Interchange.Document .ipa=iTunes.ipa .ipg=iTunes.ipg .ipsw=iTunes.ipsw .iqy=iqyfile .iros=Photoshop.IRSettings .irs=Photoshop.IRSettings .iso=isoRCCopy36.File .itdb=iTunes.itdb .ite=iTunes.ite .iti=ITIClient.Document .itl=iTunes.itl .itlp=iTunes.itlp .itms=iTunes.itms .itpc=iTunes.itpc .jar=jarfile .jdf=AcroExch.JDFJobDef.1 .jfif=OISjpegfile .jnlp=JNLPFile .jnt=jntfile .Job=JobObject .joboptions=AcroDistJobOptions .jod=Microsoft.Jet.OLEDB.4.0 .jp2=JPEG2000FileType .jpe=OISjpegfile .jpeg=OISjpegfile .jpg=OISjpegfile .jps=jpsfile .js=jsfile .JSE=JSEFile .jsf=FireworksBatchScript .jsfl=Flash.JSCommandFile .jsx=JSXFile .jsxbin=JSXBINFile .jtp=jtpfile .jtx=XPSViewer.Document .jwl=CDLableCreator.Document .kys=Photoshop.KYSFile.10 .label=Label .laccdb=Access.LockFile.12 .layout=Adobe.Premiere.Layout .lbi=Dreamweaver.Library.Item .ldb=Access.LockFile.12 .lex=LEXFile .lgp=lgpfile .lha=WinRAR .lnk=lnkfile .lnst=InDesign.Line Presets .log=txtfile .lwv=LWVFile .lzh=WinRAR .m1v=WMP11.AssocFile.MPEG .M2V=WMP11.AssocFile.MPEG .m3u=WMP11.AssocFile.m3u .m4r=iTunes.m4r .mac=QuickTime.mac .mad=Access.Shortcut.Module.1 .maf=Access.Shortcut.Form.1 .mag=Access.Shortcut.Diagram.1 .mam=Access.Shortcut.Macro.1 .mapimail=CLSID\{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE} .maq=Access.Shortcut.Query.1 .mar=Access.Shortcut.Report.1 .mas=Access.Shortcut.StoredProcedure.1 .mat=Access.Shortcut.Table.1 .mau=Access.Shortcut.Function.1 .mav=Access.Shortcut.View.1 .maw=Access.Shortcut.DataAccessPage.1 .mbam=mbam.script .mda=Access.Extension.12 .mdb=Access.MDBFile .mdbhtml=accesshtmlfile .mde=Access.MDEFile.12 .mdn=Access.BlankDatabaseTemplate.12 .mdt=Access.WizardDataFile.12 .mdw=Access.Workgroup.12 .mfp=MacromediaFlashPaper.MacromediaFlashPaper .mgc=MediaCatalogMGC .mht=mhtmlfile .mhtml=mhtmlfile .mid=WMP11.AssocFile.MIDI .midi=WMP11.AssocFile.MIDI .mig=migfile .mjd=AcroExch.JDFJobDef.1 .mlc=LpkSetup.1 .mml=MediaCatalogMML .mmw=MediaCatalogMMW .mno=mnofile .mnu=Photoshop.MenuCustomizationFile.10 .MOD=WMP11.AssocFile.MPEG .mos=Photoshop.CameraRawFileLeaf.10 .mov=QuickTime.mov .mp2=WMP11.AssocFile.MPEG .mp2v=WMP11.AssocFile.MPEG .mp3=WMP11.AssocFile.MP3 .mp4=QuickTime.mp4 .mpa=WMP11.AssocFile.MPEG .mpe=WMP11.AssocFile.MPEG .mpeg=WMP11.AssocFile.MPEG .mpf=MediaPackageFile .mpg=WMP11.AssocFile.MPEG .mpv2=WMP11.AssocFile.MPEG .mpvuhpcp=hpodcpxe.UploadControl .mqv=QuickTime.mqv .mrw=Photoshop.CameraRawFileMinolta.10 .msc=MSCFile .msdm=MsdtManifest .msg=Outlook.File.msg .msi=Msi.Package .msp=Msi.Patch .msrcincident=RemoteAssistance.1 .msstyles=msstylesfile .msu=Microsoft.System.Update.1 .MSWMM=Windows.Movie.Maker .mxi=Adobe.Extension.Information .mxp=Adobe.Extension.Package .mydocs=CLSID\{ECF03A32-103D-11d2-854D-006008059367} .ncor=AdobeEncore.Document .nef=Photoshop.CameraRawFileNikon.10 .nfo=MSInfo.Document .nick=NICKFile .NickSig=NickSig_auto_file .nk2=NICKFile .nws=Microsoft Internet News Message .ocx=ocxfile .odc=odcfile .odccubefile=odccubefile .odcdatabasefile=odcdatabasefile .odcnewfile=odcnewfile .odctablefile=odctablefile .odp=PowerPoint.OpenDocumentPresentation.12 .ods=Excel.OpenDocumentSpreadsheet.12 .odt=Word.OpenDocumentText.12 .ofs=Outlook.File.ofs .oft=Outlook.Template .ols=OfficeListShortcut .one=OneNote.Section.1 .onepkg=OneNote.Package .onetoc=OneNote.TableOfContents .onetoc2=OneNote.TableOfContents.12 .opc=OPCFile .oqy=oqyfile .orf=Photoshop.CameraRawFileOlympus.10 .ost=OSTFile .ota=ProjectFileType .otf=otffile .otm=OTMFile .otn=OutFileType .otp=TPairFileType .otr=ReflectType .p10=P10File .p12=PFXFile .p7b=SPCFile .p7c=certificate_wab_auto_file .p7m=P7MFile .p7r=P7RFile .p7s=P7SFile .pab=PABFile .pat=Photoshop.Patterns .pbk=pbkfile .pbm=Photoshop.RadianceFile.10 .pcast=iTunes.pcast .pcb=PCBFile .pcd=Photoshop.PCDFile.10 .pct=QuickTime.pct .pcx=Photoshop.PCXFile.10 .pdd=Photoshop.PDDFile.10 .pdf=AcroExch.Document .pdfs=InDesign.PDF Export Presets .pdp=Photoshop.PDPFile.10 .pdx=PDXFileType .pef=Photoshop.CameraRawFilePentax.10 .pfm=pfmfile .pfx=PFXFile .php=phpfile .php3=php3file .php4=php4file .pic=QuickTime.pic .pict=QuickTime.pict .pif=piffile .pip=PIPFile .pko=PKOFile .plist=QuickTimePreferences .pln=InDesign.3d Party Plug-in .pnf=pnffile .png=OISpngfile .pns=pnsfile .pnt=QuickTime.pnt .pntg=QuickTime.pntg .pot=PowerPoint.Template.8 .pothtml=powerpointhtmltemplate .potm=PowerPoint.TemplateMacroEnabled.12 .potx=PowerPoint.Template.12 .ppa=PowerPoint.Addin.8 .ppam=PowerPoint.Addin.12 .ppj=Adobe.Premiere.Pro.Project .pps=PowerPoint.SlideShow.8 .ppsm=PowerPoint.SlideShowMacroEnabled.12 .ppsx=PowerPoint.SlideShow.12 .ppt=PowerPoint.Show.8 .ppthtml=powerpointhtmlfile .pptm=PowerPoint.ShowMacroEnabled.12 .pptmhtml=powerpointmhtmlfile .pptx=PowerPoint.Show.12 .pptxml=powerpointxmlfile .prexport=Adobe.Premiere.Preset .prf=prffile .prfpset=Adobe.Premiere.Preset .printerExport=brmFile .prm=Adobe.Premiere.Plugin .prmp=Adobe.Premiere.Plugin .prpreset=Adobe.Premiere.Preset .prproj=Adobe.Premiere.Pro.Project .prsl=Adobe.Premiere.Style .prst=InDesign.Printer Presets .prtl=Adobe.Premiere.Title .ps=AcroDist .psb=Photoshop.PSBFile.10 .psd=Photoshop.Image.10 .pset=InDesign.Plug-in Set .psf=Photoshop.ProofSetup .psp=Photoshop.PreferencesFile .pspd=ROXIOPS10.PSPD .pst=PSTFile .psw=PSWFile .pub=Publisher.Document.12 .pubhtml=publisherhtmlfile .pubmhtml=publishermhtmlfile .pwz=PowerPoint.Wizard.8 .pxr=Photoshop.PXRFile.10 .qds=SavedDsQuery .qht=QuickTime.qht .qhtm=QuickTime.qhtm .qpa=QuickTimePlayerAddition .qt=QuickTime.qt .qti=QuickTime.qti .qtif=QuickTime.qtif .qtl=QuickTime.qtl .qtp=QuickTimePreferences .qtr=QuickTimeResources .qts=QuickTimeSystem .qtx=QuickTimeExtension .r00=WinRAR .r01=WinRAR .r02=WinRAR .r03=WinRAR .r04=WinRAR .r05=WinRAR .r06=WinRAR .r07=WinRAR .r08=WinRAR .r09=WinRAR .r10=WinRAR .r11=WinRAR .r12=WinRAR .r13=WinRAR .r14=WinRAR .r15=WinRAR .r16=WinRAR .r17=WinRAR .r18=WinRAR .r19=WinRAR .r20=WinRAR .r21=WinRAR .r22=WinRAR .r23=WinRAR .r24=WinRAR .r25=WinRAR .r26=WinRAR .r27=WinRAR .r28=WinRAR .r29=WinRAR .raf=Photoshop.CameraRawFileFujifilm.10 .rar=WinRAR .rat=ratfile .rbc=rbcBackupCentral.File .rcl=EasyCDCreator.Document.9 .RDP=RDP.File .reg=regfile .rels=xmlfile .rem=remfile .resx=resxfile .rev=WinRAR.REV .rfi=rfiEasyArchivePlugin.File .rle=rlefile .rll=dllfile .rmf=AcroExch.RMFFile .rmi=WMP11.AssocFile.MIDI .Roxio=RoxioCentral.File .rpln=InDesign.Required Component .rqy=rqyfile .rtf=Word.RTF.8 .rwz=RWZFile .sbsc=SoundboothFile_sbsc .sbst=SoundboothFile_sbst .sbx=Adobe.Illustrator.Tsume .scf=SHCmdFile .scp=txtfile .scr=scrfile .sct=Photoshop.SCTFile.10 .sd2=QuickTime.sd2 .search-ms=SearchFolder .secstore=AcroExch.SecStore .sequ=AcroExch.Sequence .sfcache=EMDFileProperties.1 .shc=Photoshop.ShapeCurves .shh=Photoshop.SHHFile.10 .shtm=shtmfile .shtml=shtmlfile .sldm=PowerPoint.SlideMacroEnabled.12 .sldx=PowerPoint.Slide.12 .slk=Excel.SLK .slupkg-ms=MSSLPUFile .smrd=Adobe.Illustrator.Filter .smwt=Adobe.Sangam Writer .snd=WMP11.AssocFile.AU .soap=soapfile .Sonic=BackupCentral.File .spa=Flash.Movie .spc=SPCFile .spl=ShockwaveFlash.ShockwaveFlash .spu=AdobeEncore.Subtitle .srf=Photoshop.CameraRawFileSony.10 .sst=CertificateStoreFile .sta=Photoshop.STAFile.10 .stc=Contribute.Setup.File .ste=Dreamweaver.Site.Definition .stl=Fireworks.stl .stm=stmfile .swc=Flash.FlashComponentFile .swd=Flash.DebugFile .swf=ShockwaveFlash.ShockwaveFlash .swt=ShockwaveFlash.ShockwaveFlash .sys=sysfile .tar=WinRAR .taz=WinRAR .tbz=WinRAR .tbz2=WinRAR .tds=LiveCycleDesigner.tds .tga=Photoshop.TGAFile.10 .tgz=WinRAR .theme=themefile .thmx=OfficeTheme.12 .tif=Photoshop.TIFFFile.10 .tiff=Photoshop.TIFFFile.10 .tix=divxTicketFile .tpl=Photoshop.ToolPresets .ttc=ttcfile .ttf=ttffile .tvs=TeamViewerSession .txt=txtfile .udc=InDesign.User Dictionary .UDL=MSDASC .uin=icquser .url=InternetShortcut .uu=WinRAR .uue=WinRAR .uxdc=UXDCFILE .vb=vbfile .VBE=VBEFile .vbs=VBSFile .vcf=Outlook.File.vcf .vcg=GrooveVCard .vcpf=VideoConvert Document10 .vcs=Outlook.File.vcs .vdx=VisioViewer.Viewer .Viper1=Viper1_auto_file .vpd=PhotoDVD project .vpr=Adobe.Premiere.Preset .vsd=VisioViewer.Viewer .vss=VisioViewer.Viewer .vst=VisioViewer.Viewer .vsx=VisioViewer.Viewer .vtx=VisioViewer.Viewer .vxd=vxdfile .wab=wab_auto_file .wav=WMP11.AssocFile.WAV .wax=WMP11.AssocFile.WAX .wbcat=wbcatfile .wbk=Word.Backup.8 .wcinv=MSWinCollab .wcinv-ms-p2p=MSWinCollab .wdp=wdpfile .web=webfile .webpnp=webpnpFile .wiz=Word.Wizard.8 .wizhtml=accessthmltemplate .wll=Word.Addin.8 .wm=WMP11.AssocFile.ASF .wma=WMP11.AssocFile.WMA .WMD=WMP11.AssocFile.WMD .wmdb=WMP.WMDBFile .wmf=wmffile .WMS=WMP11.AssocFile.WMS .wmv=WMP11.AssocFile.WMV .wmx=WMP11.AssocFile.ASX .wmz=WMP11.AssocFile.WMZ .WPL=WMP11.AssocFile.WPL .wsc=scriptletfile .WSF=WSFFile .WSH=WSHFile .wtx=txtfile .wvx=WMP11.AssocFile.WVX .x3f=Photoshop.CameraRawFileFoveon.10 .xaml=Windows.XamlDocument .xbap=Windows.Xbap .xdp=LiveCycleDesigner.xdp .xevgenxml=XEV.GenericApp .xfdf=AcroExch.XFDFDoc .xht=xhtfile .xhtml=xhtmlfile .xla=Excel.Addin .xlam=Excel.AddInMacroEnabled .xlk=Excel.Backup .xll=Excel.XLL .xlm=Excel.Macrosheet .xls=Excel.Sheet.8 .xlsb=Excel.SheetBinaryMacroEnabled.12 .xlshtml=Excelhtmlfile .xlsm=Excel.SheetMacroEnabled.12 .xlsmhtml=excelmhtmlfile .xlsx=Excel.Sheet.12 .xlt=Excel.Template.8 .xlthtml=Excelhtmltemplate .xltm=Excel.TemplateMacroEnabled .xltx=Excel.Template .xlw=Excel.Workspace .xlxml=Excelxmlss .xml=xmlfile .xps=XPSViewer.Document .xrm-ms=MSSLLFile .xsf=InfoPath.SolutionManifest.2 .xsl=xslfile .xslt=xsltfile .xsn=InfoPath.Solution.2 .xst=PSTFile .xtp=XTPFile .xxe=WinRAR .z=WinRAR .zfsendtotarget=CLSID\{888DCA60-FC0A-11CF-8F0F-00C04FD7D062} .zip=WinRAR.ZIP ftype.txt $cpfile="C:\Program Files\Roxio\Retrieve 10\Retrieve10.exe" "%1" $crfile="C:\Program Files\Roxio\Retrieve 10\Retrieve10.exe" "%1" $cxfile="C:\Program Files\Roxio\Retrieve 10\Retrieve10.exe" "%1" Access.ACCDAExtension.12=C:\PROGRA~1\MICROS~2\Office12\MSACCESS.EXE /NOSTARTUP "%1" Access.ACCDCFile.12="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP "%1" Access.ACCDEFile.12="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP "%1" %2 %3 %4 %5 %6 %7 %8 %9 Access.ACCDRFile.12="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /RUNTIME "%1" %2 %3 %4 %5 %6 %7 %8 %9 Access.ACCDTFile.12="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP "%1" Access.ADEFile.12="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP "%1" %2 %3 %4 %5 %6 %7 %8 %9 Access.Application.12="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP "%1" %2 %3 %4 %5 %6 %7 %8 %9 Access.BlankDatabaseTemplate.12="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP /NEWDB "%1" Access.BlankProjectTemplate.12="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP /NEWDB "%1" Access.Extension.12=C:\PROGRA~1\MICROS~2\Office12\MSACCESS.EXE /NOSTARTUP "%1" Access.MDBFile="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP "%1" %2 %3 %4 %5 %6 %7 %8 %9 Access.MDEFile.12="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP "%1" %2 %3 %4 %5 %6 %7 %8 %9 Access.Project.12="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP "%1" %2 %3 %4 %5 %6 %7 %8 %9 Access.Shortcut.DataAccessPage.1="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP /SHELLSYSTEM [OpenDataAccessPage "%1"] Access.Shortcut.Diagram.1="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP /SHELLSYSTEM [OpenDiagram "%1"] Access.Shortcut.Form.1="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP /SHELLSYSTEM [OpenForm "%1"] Access.Shortcut.Function.1="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /SHELLSYSTEM [OpenFunction "%1"] Access.Shortcut.Macro.1="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP /SHELLSYSTEM [ShellOpenMacro "%1"] Access.Shortcut.Module.1="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP /SHELLSYSTEM [OpenModule "%1"] Access.Shortcut.Query.1=C:\PROGRA~1\MICROS~2\Office12\MSACCESS.EXE /NOSTARTUP /SHELLSYSTEM [OpenQuery "%1"] Access.Shortcut.Report.1="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP /SHELLSYSTEM [OpenReport "%1", 2] Access.Shortcut.StoredProcedure.1="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP /SHELLSYSTEM [OpenStoredProcedure "%1"] Access.Shortcut.Table.1=C:\PROGRA~1\MICROS~2\Office12\MSACCESS.EXE /NOSTARTUP /SHELLSYSTEM [OpenTable "%1"] Access.Shortcut.View.1="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP /SHELLSYSTEM [OpenView "%1"] Access.WizardDataFile.12="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP "%1" Access.WizardUserDataFile.12="C:\PROGRA~1\MICROS~2\Office12\MSACCESS.EXE" /NOSTARTUP "%1" Access.Workgroup.12="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" /NOSTARTUP "%1" accesshtmlfile="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" accessthmltemplate="C:\Program Files\Microsoft Office\Office12\MSACCESS.EXE" acrobat="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrobat.exe" /u "%1" AcroDist="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroDist.exe" "%1" AcroDistJobOptions="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrodist.exe" /E "%1" AcroExch.Document="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrobat.exe" "%1" AcroExch.Document.7="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrobat.exe" "%1" AcroExch.FDFDoc="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrobat.exe" "%1" AcroExch.JDFJobDef.1="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrobat.exe" "%1" AcroExch.RMFFile="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrobat.exe" "%1" AcroExch.XDPDoc="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrobat.exe" "%1" AcroExch.XFDFDoc="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrobat.exe" "%1" Adobe.adobebridge="C:\Program Files\Adobe\Adobe Bridge CS3\Bridge.exe" "%L" Adobe.AfterEffects.Effect="C:\Program Files\Adobe\Adobe Premiere Pro CS3\Adobe Premiere Pro.exe" "%1" Adobe.AfterEffects.Preset="C:\Program Files\Adobe\Adobe After Effects CS3\Support Files\AfterFX.exe" "%1" Adobe.AfterEffects.Project.80="C:\Program Files\Adobe\Adobe After Effects CS3\Support Files\AfterFX.exe" "%1" Adobe.AfterEffects.ProjectTemplate.80="C:\Program Files\Adobe\Adobe After Effects CS3\Support Files\AfterFX.exe" "%1" Adobe.Extension.Information="C:\Program Files\Adobe\Adobe Extension Manager\Extension Manager.exe" "%1" Adobe.Extension.Package="C:\Program Files\Adobe\Adobe Extension Manager\Extension Manager.exe" "%1" Adobe.Illustrator.13="C:\Program Files\Adobe\Adobe Illustrator CS3\Support Files\Contents\Windows\Illustrator.exe" "%1" Adobe.Illustrator.dwg="C:\Program Files\Adobe\Adobe Illustrator CS3\Support Files\Contents\Windows\Illustrator.exe" "%1" Adobe.Illustrator.dxf="C:\Program Files\Adobe\Adobe Illustrator CS3\Support Files\Contents\Windows\Illustrator.exe" "%1" Adobe.Illustrator.EPS="C:\Program Files\Adobe\Adobe Illustrator CS3\Support Files\Contents\Windows\Illustrator.exe" "%1" Adobe.Illustrator.pict="C:\Program Files\Adobe\Adobe Illustrator CS3\Support Files\Contents\Windows\Illustrator.exe" "%1" Adobe.Illustrator.Template="C:\Program Files\Adobe\Adobe Illustrator CS3\Support Files\Contents\Windows\Illustrator.exe" "%1" Adobe.Premiere.Edit.Decision.List="C:\Program Files\Adobe\Adobe Premiere Pro CS3\Adobe Premiere Pro.exe" "%1" Adobe.Premiere.Keys.File="C:\Program Files\Adobe\Adobe Premiere Pro CS3\Adobe Premiere Pro.exe" "%1" Adobe.Premiere.Layout="C:\Program Files\Adobe\Adobe Premiere Pro CS3\Adobe Premiere Pro.exe" "%1" Adobe.Premiere.Movie="C:\Program Files\Adobe\Adobe Premiere Pro CS3\Adobe Premiere Pro.exe" "%1" Adobe.Premiere.Plugin="C:\Program Files\Adobe\Adobe Premiere Pro CS3\Adobe Premiere Pro.exe" "%1" Adobe.Premiere.Preset="C:\Program Files\Adobe\Adobe Premiere Pro CS3\Adobe Premiere Pro.exe" "%1" Adobe.Premiere.Pro.Project="C:\Program Files\Adobe\Adobe Premiere Pro CS3\Adobe Premiere Pro.exe" "%1" Adobe.Premiere.Style="C:\Program Files\Adobe\Adobe Premiere Pro CS3\Adobe Premiere Pro.exe" "%1" Adobe.Premiere.Title="C:\Program Files\Adobe\Adobe Premiere Pro CS3\Adobe Premiere Pro.exe" "%1" adobebridge=C:\Program Files\Adobe\Adobe Bridge CS3\Bridge.exe "%1" AdobeEncore.Document="C:\Program Files\Adobe\Adobe Encore CS3\Adobe Encore.exe" "%1" AdobeEncore.MenuTemplate="C:\Program Files\Adobe\Adobe Encore CS3\Adobe Encore.exe" "%1" AIFFFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" Application.Manifest=rundll32.exe dfshim.dll,ShOpenVerbApplication %1 Application.Reference=rundll32.exe dfshim.dll,ShOpenVerbShortcut %1|%2 ASFFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Open "%L" ASXFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" AUFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" AVIFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:8 /Open "%L" AVIFileType=C:\PROGRA~1\SQIRLZ~1\SQIRLZ~1.EXE /dde batfile="%1" %* BlindWrite License file="regedit.exe" "%1" BlindWrite TOC file="C:\Program Files\VSO\blindwrite6\Bw.exe" "%1" BMPFileType=C:\PROGRA~1\SQIRLZ~1\SQIRLZ~1.EXE /dde BPDXFileType="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrobat.exe" "%1" Bridge.Collection="C:\Program Files\Adobe\Adobe Bridge CS3\Bridge.exe" "%1" brmFile="PrintBrmUI.exe" /import /file:"%1" c2dRCCopy36.File="C:\Program Files\Common Files\Roxio Shared\10.0\Roxio Central36\Main\Roxio_Central36.exe" "%1" CATFile=%SystemRoot%\system32\rundll32.exe cryptext.dll,CryptExtOpenCAT %1 cclaunch="C:\Program Files\CCleaner\ccleaner.exe" /%1 cdafile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" CDLableCreator.Document="C:\Program Files\Roxio\Label Creator 10\RxLabelCreator10.exe" "%1" CERFile=%SystemRoot%\system32\rundll32.exe cryptext.dll,CryptExtOpenCER %1 CertificateStoreFile=%SystemRoot%\system32\rundll32.exe cryptext.dll,CryptExtOpenSTR %1 certificate_wab_auto_file="%ProgramFiles%\Windows Mail\wab.exe" /certificate "%1" cfxxefile="%1" %* chm.file="%SystemRoot%\hh.exe" %1 cifDIL10Mount.File="C:\Program Files\Roxio\Virtual Drive 10\DiscImageLoader10.exe" "%1" cmdfile="%1" %* comfile="%1" %* CompressedFolder=%SystemRoot%\Explorer.exe /idlist,%I,%L contact_wab_auto_file="%ProgramFiles%\Windows Mail\wab.exe" /contact "%1" Contribute.Setup.File="C:\Program Files\Adobe\Adobe Contribute CS3\Contribute.exe" "%1" CopyToDVD Project="C:\Program Files\VSO\copytodvd\c2cman.exe" "%1" Creator10=C:\Program Files\Roxio\Creator Classic 10\Creator10.exe CRLFile=%SystemRoot%\system32\rundll32.exe cryptext.dll,CryptExtOpenCRL %1 cueRCCopy36.File="C:\Program Files\Common Files\Roxio Shared\10.0\Roxio Central36\Main\Roxio_Central36.exe" "%1" daap=C:\Program Files\iTunes\iTunes.exe /url "%1" DeviceCentral.adpp="C:\Program Files\Adobe\Adobe Device Central CS3\DeviceCentral.exe" "%1" DeviceCentral.advs="C:\Program Files\Adobe\Adobe Device Central CS3\DeviceCentral.exe" "%1" divFile="C:\Program Files\DivX\DivX Player\DivX Player.exe" "%1" divxFile="C:\Program Files\DivX\DivX Player\DivX Player.exe" "%1" divxTicketFile="C:\Program Files\DivX\DivX Player\DivX Player.exe" "%1" dpsFile="C:\Program Files\DivX\DivX Player\DivX Player.exe" "%1" dqyfile=C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE Dreamweaver.Document=C:\PROGRA~1\Adobe\ADOBED~2\DREAMW~1.EXE "%1" Dreamweaver.Library.Item="C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1" Dreamweaver.Site.Definition="C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1" Dreamweaver.Template="C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1" dxuFile="C:\Program Files\DivX\DivX Player\DivX Player.exe" "%1" EasyCDCreator.Document.9="C:\Program Files\Roxio\Creator Classic 10\Creator10.exe" "%1" emffile="%systemroot%\system32\mspaint.exe" "%1" evtfile=%SystemRoot%\system32\eventvwr.exe /l:"%1" evtxfile=%SystemRoot%\system32\eventvwr.exe /l:"%1" EXCDLabelCreator.Document=C:\Program Files\Roxio\Label Creator 10\LCTaskAssistant10.exe "%1" ExCDLableCreator.Document="C:\Program Files\Roxio\Label Creator 10\LCTaskAssistant10.exe" "%1" Excel.Addin="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.AddInMacroEnabled="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.Backup="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.Chart=C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE /e Excel.CSV="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.Macrosheet="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.OpenDocumentSpreadsheet.12="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.Sheet.12="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.Sheet.8="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.SheetBinaryMacroEnabled.12="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.SheetMacroEnabled.12="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.SLK="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.Template="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.Template.8="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.TemplateMacroEnabled="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.Workspace="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excel.XLL="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" /e Excelhtmlfile="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" Excelhtmltemplate="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE" exefile="%1" %* Explorer.AssocProtocol.search-ms=%SystemRoot%\Explorer.exe /separate,/idlist,%I,%L FaxCover.Document=%systemroot%\system32\fxscover.exe "%1" feed="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /share "%1" feeds="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /share "%1" FirefoxHTML="C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" FirefoxURL="C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" Fireworks.Doc="C:\Program Files\Adobe\Adobe Fireworks CS3\Fireworks.exe" "%1" Fireworks.gif="C:\Program Files\Adobe\Adobe Fireworks CS3\Fireworks.exe" "%1" Fireworks.stl="C:\Program Files\Adobe\Adobe Fireworks CS3\Fireworks.exe" "%1" FireworksBatchScript="C:\Program Files\Adobe\Adobe Fireworks CS3\Fireworks.exe" "%1" Flash.ActionScriptFile=C:\PROGRA~1\Adobe\ADOBEF~2\Flash.exe /dde Flash.ASCommunicationFile=C:\Program Files\Adobe\Adobe Flash CS3\flash.exe /dde Flash.ColorTableFile=C:\Program Files\Adobe\Adobe Flash CS3\flash.exe /dde Flash.DebugFile=C:\Program Files\Adobe\Adobe Flash CS3\flash.exe /dde Flash.FlashComponentFile=C:\Program Files\Adobe\Adobe Flash CS3\flash.exe /dde Flash.FlashProjectFile=C:\Program Files\Adobe\Adobe Flash CS3\flash.exe /dde Flash.JSCommandFile=C:\Program Files\Adobe\Adobe Flash CS3\flash.exe /dde Flash.Movie=C:\PROGRA~1\Adobe\ADOBEF~2\Flash.exe /dde FlashFileType=C:\PROGRA~1\SQIRLZ~1\SQIRLZ~1.EXE /dde FlashPlayer.AudioForFlashPlayer="C:\Program Files\Adobe\Adobe Flash CS3\Players\FlashPlayer.exe" %1 FlashPlayer.FlashVideo="C:\Program Files\Adobe\Adobe Flash CS3\Players\FlashPlayer.exe" %1 FlashPlayer.ProtectedMediaForFlashPlayer="C:\Program Files\Adobe\Adobe Flash CS3\Players\FlashPlayer.exe" %1 FlashPlayer.VideoForFlashPlayer="C:\Program Files\Adobe\Adobe Flash CS3\Players\FlashPlayer.exe" %1 fndfile=%SystemRoot%\Explorer.exe Folder=%SystemRoot%\Explorer.exe /separate,/idlist,%I,%L fonfile=%SystemRoot%\System32\fontview.exe %1 ftp="C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 giffile="C:\Program Files\Internet Explorer\iexplore.exe" -nohome GIFFileType=C:\PROGRA~1\SQIRLZ~1\SQIRLZ~1.EXE /dde giRCCopy36.File="C:\Program Files\Common Files\Roxio Shared\10.0\Roxio Central36\Main\Roxio_Central36.exe" "%1" groove=C:\PROGRA~1\MICROS~2\Office12\GROOVE.EXE /url: "%1" GrooveFile=C:\PROGRA~1\MICROS~2\Office12\GROOVE.EXE /grv: "%1" GrooveLinkFile=C:\PROGRA~1\MICROS~2\Office12\GROOVE.EXE /grv: "%1" GrooveSpaceArchive=C:\PROGRA~1\MICROS~2\Office12\GROOVE.EXE /grv: "%1" GrooveToolArchive=C:\PROGRA~1\MICROS~2\Office12\GROOVE.EXE /grv: "%1" GrooveVCard=C:\PROGRA~1\MICROS~2\Office12\GROOVE.EXE /grv: "%1" group_wab_auto_file="%ProgramFiles%\Windows Mail\wab.exe" /Group "%1" hlpfile=%SystemRoot%\winhlp32.exe %1 HPPhotoGallery=C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe /memdisc "%1" htafile=C:\Windows\system32\mshta.exe "%1" %* htmlfile="C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome http="C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome https="C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome icofile=%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Gallery\PhotoViewer.dll", ImageView_Fullscreen %1 icq="C:\Program Files\ICQ6.5\ICQLRun.exe" %1 icquser="C:\Program Files\ICQ6.5\ICQLRun.exe" %1 IE.AssocFile.HTM="C:\Program Files\Internet Explorer\iexplore.exe" -nohome IE.AssocFile.MHT="C:\Program Files\Internet Explorer\iexplore.exe" -nohome IE.AssocFile.URL=rundll32.exe ieframe.dll,OpenURL %l IE.FTP="C:\Program Files\Internet Explorer\iexplore.exe" %1 IE.HTTP="C:\Program Files\Internet Explorer\iexplore.exe" -nohome IE.HTTPS="C:\Program Files\Internet Explorer\iexplore.exe" -nohome InDesign.Asset Library="C:\Program Files\Adobe\Adobe InDesign CS3\InDesign.exe" "%1" InDesign.Assignment Package="C:\Program Files\Adobe\Adobe InDesign CS3\InDesign.exe" "%1" InDesign.Book="C:\Program Files\Adobe\Adobe InDesign CS3\InDesign.exe" "%1" InDesign.Document="C:\Program Files\Adobe\Adobe InDesign CS3\InDesign.exe" "%1" InDesign.Template="C:\Program Files\Adobe\Adobe InDesign CS3\InDesign.exe" "%1" InDesign.XML.Interchange.Document="C:\Program Files\Adobe\Adobe InDesign CS3\InDesign.exe" "%1" inffile=%SystemRoot%\system32\NOTEPAD.EXE %1 InfoPath.Document.2="C:\Program Files\Microsoft Office\Office12\INFOPATH.EXE" "%1" InfoPath.Solution.2="C:\Program Files\Microsoft Office\Office12\INFOPATH.EXE" "%1" InfoPath.SolutionManifest.2="C:\Program Files\Microsoft Office\Office12\INFOPATH.EXE" "%1" inifile=%SystemRoot%\system32\NOTEPAD.EXE %1 InternetShortcut=rundll32.exe ieframe.dll,OpenURL %l iqyfile=C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE /e Iso image file="C:\Program Files\VSO\copytodvd\copytocd.exe" "%1" isoRCCopy36.File="C:\Program Files\Common Files\Roxio Shared\10.0\Roxio Central36\Main\Roxio_Central36.exe" "%1" ITIClient.Document=C:\PROGRA~1\INTERA~1\INTERA~1\iPlayer.exe "%1" itms=C:\Program Files\iTunes\iTunes.exe /url "%1" itmss=C:\Program Files\iTunes\iTunes.exe /url "%1" itpc=C:\Program Files\iTunes\iTunes.exe /url "%1" iTunes=C:\Program Files\iTunes\iTunes.exe /url "%1" iTunes.aa="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.aax="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.aif="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.aifc="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.aiff="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.AssocProtocol.daap=C:\Program Files\iTunes\iTunes.exe /url "%1" iTunes.AssocProtocol.itms=C:\Program Files\iTunes\iTunes.exe /url "%1" iTunes.AssocProtocol.itmss=C:\Program Files\iTunes\iTunes.exe /url "%1" iTunes.AssocProtocol.itpc=C:\Program Files\iTunes\iTunes.exe /url "%1" iTunes.AssocProtocol.pcast=C:\Program Files\iTunes\iTunes.exe /url "%1" iTunes.cda="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.cdda="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.ipa="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.ipg="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.ipsw="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.itdb="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.ite="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.itl="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.itlp="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.itms="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.itpc="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.m3u="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.m3u8="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.m4a="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.m4b="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.m4p="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.m4r="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.m4v="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.mov="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.mp2="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.mp3="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.mpeg="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.mpg="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.pcast="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.pls="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.rmp="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.wav="C:\Program Files\iTunes\iTunes.exe" /open "%L" iTunes.wave="C:\Program Files\iTunes\iTunes.exe" /open "%L" jarfile="C:\Program Files\Java\jre6\bin\javaw.exe" -jar "%1" %* JNLPFile="C:\Program Files\Java\jre6\bin\javaws.exe" "%1" jntfile="%ProgramFiles%\Windows Journal\Journal.exe" "%1" JPEG2000FileType=C:\PROGRA~1\SQIRLZ~1\SQIRLZ~1.EXE /dde jpegfile=rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1 JPEGFileType=C:\PROGRA~1\SQIRLZ~1\SQIRLZ~1.EXE /dde jpsfile="C:\Windows\system32\NvStView.exe" "%1" JSEFile=%SystemRoot%\System32\WScript.exe "%1" %* JSFile=%SystemRoot%\System32\WScript.exe "%1" %* JSXFile="C:\Program Files\Adobe\Adobe Utilities\ExtendScript Toolkit 2\ExtendScript Toolkit 2.exe" -run "%1" jtpfile="%ProgramFiles%\Windows Journal\Journal.exe" "%1" LDAP="%ProgramFiles%\Windows Mail\wab.exe" "/ldap:%1" LiveCycleDesigner.Document="C:\Program Files\Adobe\Acrobat 8.0\Designer 8.0\\FormDesigner.exe" "%1" LiveCycleDesigner.tds="C:\Program Files\Adobe\Acrobat 8.0\Designer 8.0\FormDesigner.exe" "%1" LiveCycleDesigner.xdp="C:\Program Files\Adobe\Acrobat 8.0\Designer 8.0\FormDesigner.exe" "%1" m3ufile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "%L" MacromediaFlashPaper.MacromediaFlashPaper="C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" mailto="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" -c IPM.Note /m "%1" mbam.script="D:\Malwarebytes' Anti-Malware\mbam.exe" %1 MediaPackageFile="C:\Program Files\Microsoft Office\Office12\MSTORE.EXE" "%1" mhtmlfile="C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome Microsoft Internet Mail Message="%ProgramFiles%\Windows Mail\WinMail.exe" /eml:%1 Microsoft Internet News Message="%ProgramFiles%\Windows Mail\WinMail.exe" /nws:%1 Microsoft.InformationCard=C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\infocardcpl.cpl,ImportInformationCard_RunDll %1 Microsoft.System.Update.1="%systemroot%\system32\wusa.exe" "%1" %2 %3 %4 Microsoft.WindowsCardSpaceBackup=C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\infocardcpl.cpl,ImportInformationCard_RunDll %1 MIDFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" migfile=C:\Windows\System32\migwiz\migwiz.exe /Restore %1 MMS="%ProgramFiles%\Windows Media Player\wmplayer.exe" "%L" mp3file="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "%L" mpegfile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:9 /Open "%L" mscfile=%SystemRoot%\system32\mmc.exe "%1" %* MSDASC=Rundll32.exe C:\PROGRA~1\COMMON~1\System\OLEDB~1\oledb32.dll,OpenDSLFile %1 msdigitallocker="%SystemRoot%\DigitalLocker\digitalx.exe" %1 MsdtManifest=%SystemRoot%\system32\msdt.exe /manifest "%1" Msi.Package="%SystemRoot%\System32\msiexec.exe" /i "%1" %* Msi.Patch="%SystemRoot%\System32\msiexec.exe" /p "%1" %* MSInfo.Document=C:\Program Files\Common Files\Microsoft Shared\MSInfo\MSInfo32.exe /msinfo_file %1 MSInfoFile=%SystemRoot%\system32\msinfo32.exe "%1" MSSLLFile="iexplore.exe" "%1" MSSLPUFile=C:\Windows\system32\rundll32.exe C:\Windows\system32\slcc.dll, OpenPackage %1 msstylesfile=%SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,Control_RunDLL %SystemRoot%\system32\desk.cpl desk,@Appearance /Action:OpenMSTheme /file:"%1" MSWinCollab="%ProgramFiles%\Windows Collaboration\WinCollab.exe" -f "%1" MusicDiscCreator Document="C:\Program Files\Roxio\Audio Master 10\MusicDiscCreator10.exe" "%1" MyDVD10.Project="C:\Program Files\Roxio\VideoUI 10\MyDVD10.exe" "%1" NickSig_auto_file="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" nntp="%ProgramFiles%\Windows Mail\WinMail.exe" /newsurl:"%1" OfficeListShortcut="C:\Program Files\Microsoft Office\Office12\MSPUB.EXE" %1 OfficeTheme.12="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" "%1" OISbmpfile="C:\PROGRA~1\MICROS~2\Office12\OIS.EXE" /shellOpen "%1" OISgiffile="C:\PROGRA~1\MICROS~2\Office12\OIS.EXE" /shellOpen "%1" OISjpegfile="C:\PROGRA~1\MICROS~2\Office12\OIS.EXE" /shellOpen "%1" OISpngfile="C:\PROGRA~1\MICROS~2\Office12\OIS.EXE" /shellOpen "%1" oms=rundll32.exe C:\PROGRA~1\MICROS~2\Office12\OMSMAIN.DLL, OmsProtocolHandler %1 OneNote=C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE /hyperlink "%1" OneNote.Package="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" "%1" OneNote.Section.1="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" "%1" OneNote.TableOfContents="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" /navigate "%1" OneNote.TableOfContents.12="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" /navigate "%1" otffile=%SystemRoot%\System32\fontview.exe %1 OutFileType=C:\PROGRA~1\SQIRLZ~1\SQIRLZ~1.EXE /dde Outlook.File.hol="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /hol "%1" Outlook.File.ibc="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /v "%1" Outlook.File.ics="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /ical "%1" Outlook.File.msg="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" /f "%1" Outlook.File.vcf="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /v "%1" Outlook.File.vcs="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /vcal "%1" Outlook.Template="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" /t "%1" Outlook.URL.feed="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /share "%1" Outlook.URL.mailto="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" -c IPM.Note /m "%1" Outlook.URL.stssync="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /share "%1" Outlook.URL.webcal="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /share "%1" outlookfeed="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /share "%1" outlookfeeds="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /share "%1" P7RFile=%SystemRoot%\system32\rundll32.exe cryptext.dll,CryptExtOpenP7R %1 P7SFile=%SystemRoot%\system32\\rundll32.exe cryptext.dll,CryptExtOpenPKCS7 %1 Paint.Picture=%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Gallery\PhotoViewer.dll", ImageView_Fullscreen %1 pbkfile=%SystemRoot%\system32\rasphone.exe -f "%1" pcast=C:\Program Files\iTunes\iTunes.exe /url "%1" PDXFileType="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrobat.exe" "%1" PerfFile=%SystemRoot%\system32\mmc.exe %systemroot%\system32\perfmon.msc /F "%1" pfmfile=%SystemRoot%\System32\fontview.exe %1 PhotoDVD project="C:\Program Files\vso\PhotoDVD\photodvd.exe" "%1" Photoshop.ActionsFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.AdobePlugin="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.ArbitraryMapFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.ASVColAdjFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.AXTAdjColFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.BMPFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.BrushesFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CameraRawFileCanon.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CameraRawFileCanon2.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CameraRawFileDigital.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CameraRawFileEpson.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CameraRawFileFoveon.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CameraRawFileFujifilm.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CameraRawFileKodak.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CameraRawFileLeaf.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CameraRawFileMinolta.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CameraRawFileNikon.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CameraRawFileOlympus.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CameraRawFilePentax.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CameraRawFileSony.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CHAFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CINFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.ColorTableFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CurvesFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CustomFilterKernel="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.CustomShapes="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.DuotoneSettingsFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.ExchangeableSwatchFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.FileInfo="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.Gradients="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.HalftoneScreens="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.HueSatFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.Image.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.KYSFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.LevelsFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.MenuCustomizationFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.MonitorSetupFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.OpenEXRFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.Patterns="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.PCDFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.PCXFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.PDDFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.PDFFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.PDPFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.PlugIn=C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe Photoshop.PortableBitMapFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.PreferencesFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.PrintingInksFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.ProofSetup="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.PSBFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.PXRFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.RadianceFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.SCTFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.SepTablesFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.ShapeCurves="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.SHHFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.STAFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.Styles="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.SwatchesFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.TGAFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.TIFFFile.10="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.TransferFunctionsFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" Photoshop.VariationsFile="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" PhotoViewer.FileAssoc.Bitmap=%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Gallery\PhotoViewer.dll", ImageView_Fullscreen %1 PhotoViewer.FileAssoc.JFIF=%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Gallery\PhotoViewer.dll", ImageView_Fullscreen %1 PhotoViewer.FileAssoc.Jpeg=%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Gallery\PhotoViewer.dll", ImageView_Fullscreen %1 PhotoViewer.FileAssoc.Png=%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Gallery\PhotoViewer.dll", ImageView_Fullscreen %1 PhotoViewer.FileAssoc.Tiff=%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Gallery\PhotoViewer.dll", ImageView_Fullscreen %1 PhotoViewer.FileAssoc.Wdp=%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Gallery\PhotoViewer.dll", ImageView_Fullscreen %1 piffile="%1" %* pjpegfile=rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1 pngfile=rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1 PNGFileType=C:\PROGRA~1\SQIRLZ~1\SQIRLZ~1.EXE /dde pnsfile="C:\Windows\system32\NvStView.exe" "%1" PowerPoint.Addin.12="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" "%1" PowerPoint.Addin.8="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" "%1" PowerPoint.OpenDocumentPresentation.12="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" "%1" PowerPoint.Show.12="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" "%1" PowerPoint.Show.4=C:\PROGRA~1\MICROS~2\Office12\POWERPNT.EXE "%1" PowerPoint.Show.7=C:\PROGRA~1\MICROS~2\Office12\POWERPNT.EXE "%1" PowerPoint.Show.8="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" "%1" PowerPoint.ShowMacroEnabled.12="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" "%1" PowerPoint.Slide.12=C:\PROGRA~1\MICROS~2\Office12\POWERPNT.EXE "%1" PowerPoint.Slide.4=C:\PROGRA~1\MICROS~2\Office12\POWERPNT.EXE "%1" PowerPoint.Slide.7=C:\PROGRA~1\MICROS~2\Office12\POWERPNT.EXE "%1" PowerPoint.Slide.8=C:\PROGRA~1\MICROS~2\Office12\POWERPNT.EXE "%1" PowerPoint.SlideMacroEnabled.12=C:\PROGRA~1\MICROS~2\Office12\POWERPNT.EXE "%1" PowerPoint.SlideShow.12="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" /s "%1" PowerPoint.SlideShow.8="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" /s "%1" PowerPoint.SlideShowMacroEnabled.12="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" /s "%1" PowerPoint.Template.12="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" "%1" PowerPoint.Template.8="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" "%1" PowerPoint.TemplateMacroEnabled.12="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" "%1" PowerPoint.Wizard.8="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" "%1" powerpointhtmlfile="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" powerpointhtmltemplate="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" powerpointxmlfile="C:\Program Files\Microsoft Office\Office12\POWERPNT.EXE" prffile=rundll32.exe msrating.dll,ClickedOnPRF %1 ProjectFileType=C:\PROGRA~1\SQIRLZ~1\SQIRLZ~1.EXE /dde Publisher.Document.12="C:\Program Files\Microsoft Office\Office12\MSPUB.EXE" %1 Publishing Folder=explorer.exe /idlist,%I,%L QuickTime.3g2=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.3gp=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.3gp2=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.3gpp=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.aac=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.ac3=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.adts=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.aif=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.aifc=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.aiff=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.amc=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.AMR=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.au=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.avi=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.bmp=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.bwf=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.caf=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.cdda=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.cel=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.dib=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.dif=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.dv=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.flc=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.fli=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.gif=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.gsm=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.jp2=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.jpe=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.jpeg=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.jpg=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.kar=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.m15=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.m1a=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.m1s=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.m1v=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.m3u=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.m3url=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.m4a=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.m4b=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.m4p=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.m4v=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.m75=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.mac=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.mid=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.midi=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.mov=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.mp2=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.mp3=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.mp4=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.mpa=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.mpeg=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.mpg=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.mpm=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.mpv=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.mqv=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.pct=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.pic=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.pict=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.png=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.pnt=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.pntg=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.psd=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.qcp=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.qht=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.qhtm=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.qt=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.qti=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.qtif=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.qtl=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.rgb=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.rts=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.rtsp=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.sd2=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.sdp=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.sdv=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.sgi=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.smf=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.smi=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.smil=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.sml=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.snd=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.swa=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.targa=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.tga=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.tif=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.tiff=C:\Program Files\QuickTime\PictureViewer.exe "%1" QuickTime.ulw=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.vfw=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" QuickTime.wav=C:\Program Files\QuickTime\QuickTimePlayer.exe "%1" ratfile=rundll32.exe msrating.dll,ClickedOnRAT %1 rbcBackupCentral.File="C:\Program Files\Roxio\BackupCentral\Main\Backup_Central10.exe" "%1" ReflectType=C:\PROGRA~1\SQIRLZ~1\SQIRLZ~1.EXE /dde regedit=regedit.exe %1 regfile=regedit.exe "%1" RemoteAssistance.1="%systemRoot%\system32\msra.exe" -openfile "%1" rfiEasyArchivePlugin.File="C:\Program Files\Roxio\BackupCentral\Main\Backup_Central10.exe" "%1" rlefile="%systemroot%\system32\mspaint.exe" "%1" rlogin=rundll32.exe url.dll,TelnetProtocolHandler %l RoxioCentral.File="C:\Program Files\Common Files\Roxio Shared\10.0\Roxio Central36\Main\Roxio_Central36.exe" "%1" RoxioEMC10.DMSS="C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWizardLauncher10.exe" /{60D18B54-E220-434E-A8ED-2FA796251F6B} "%1" ROXIOPS10.BMP="C:\Program Files\Roxio\PhotoSuite 10\PhotoSuite10.exe" /Edit "%1" ROXIOPS10.DMSP="C:\Program Files\Roxio\PhotoSuite 10\PhotoSuite10.exe" "%1" ROXIOPS10.GIF="C:\Program Files\Roxio\PhotoSuite 10\PhotoSuite10.exe" /Edit "%1" ROXIOPS10.JPG="C:\Program Files\Roxio\PhotoSuite 10\PhotoSuite10.exe" /Edit "%1" ROXIOPS10.PNG="C:\Program Files\Roxio\PhotoSuite 10\PhotoSuite10.exe" /Edit "%1" ROXIOPS10.PSPD="C:\Program Files\Roxio\PhotoSuite 10\PhotoSuite10.exe" "%1" ROXIOPS10.TIF="C:\Program Files\Roxio\PhotoSuite 10\PhotoSuite10.exe" /Edit "%1" rtffile="%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE" "%1" SavedDsQuery=%SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\dsquery.dll,OpenSavedDsQuery %1 scrfile="%1" /S scriptletfile="C:\Windows\system32\NOTEPAD.EXE" "%1" search=%SystemRoot%\Explorer.exe /separate,/idlist,%I,%L search-ms=%SystemRoot%\Explorer.exe /separate,/idlist,%I,%L SHCmdFile=%SystemRoot%\explorer.exe ShockwaveFlash.ShockwaveFlash="C:\Program Files\Adobe\Adobe Flash CS3\Players\FlashPlayer.exe" %1 snews="%ProgramFiles%\Windows Mail\WinMail.exe" /newsurl:"%1" SoundboothFile_aif="C:\Program Files\Adobe\Adobe Soundbooth CS3\Adobe Soundbooth CS3.exe" "%1" SoundboothFile_sbsc="C:\Program Files\Adobe\Adobe Soundbooth CS3\Adobe Soundbooth CS3.exe" "%1" SoundboothFile_sbst="C:\Program Files\Adobe\Adobe Soundbooth CS3\Adobe Soundbooth CS3.exe" "%1" SoundboothFile_wav="C:\Program Files\Adobe\Adobe Soundbooth CS3\Adobe Soundbooth CS3.exe" "%1" SoundEditor Document="C:\Program Files\Roxio\Sound Editor 10\SoundEdit10.exe" "%1" SoundRec="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" SPCFile=%SystemRoot%\system32\rundll32.exe cryptext.dll,CryptExtOpenPKCS7 %1 STLFile=%SystemRoot%\system32\rundll32.exe cryptext.dll,CryptExtOpenCTL %1 stssync="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /share "%1" teamspeak=C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe "%1" TeamViewerSession="C:\Program Files\TeamViewer\Version4\TeamViewer.exe" --play "%1" telnet=rundll32.exe url.dll,TelnetProtocolHandler %l themefile=%SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,Control_RunDLL %SystemRoot%\system32\desk.cpl desk,@Themes /Action:OpenTheme /file:"%1" TIFFFileType=C:\PROGRA~1\SQIRLZ~1\SQIRLZ~1.EXE /dde TIFImage.Document=%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Gallery\PhotoViewer.dll", ImageView_Fullscreen %1 tn3270=rundll32.exe url.dll,TelnetProtocolHandler %l TPairFileType=C:\PROGRA~1\SQIRLZ~1\SQIRLZ~1.EXE /dde ttcfile=%SystemRoot%\System32\fontview.exe %1 ttffile=%SystemRoot%\System32\fontview.exe %1 txtfile=%SystemRoot%\system32\NOTEPAD.EXE %1 VBEFile="%SystemRoot%\System32\WScript.exe" "%1" %* VBSFile="%SystemRoot%\System32\WScript.exe" "%1" %* vcard_wab_auto_file="%ProgramFiles%\Windows Mail\wab.exe" /vcard "%1" Ventrilo=D:\PROGRA~1\Ventrilo\Ventrilo.exe -l%1 VideoConvert Document10="C:\Program Files\Roxio\Video Convert 10\VideoConvert10.exe" "%1" VideoWave10.Project="C:\Program Files\Roxio\VideoUI 10\VideoWave10.exe" /Edit %1 Viper1_auto_file="C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" "%1" VisioViewer.Viewer="C:\Program Files\Internet Explorer\iexplore.exe" -nohome wab_auto_file="%ProgramFiles%\Windows Mail\wab.exe" /Import "%1" WAXFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" wbcatfile=%SystemRoot%\system32\sdclt.exe /restorepage wdpfile=%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Gallery\PhotoViewer.dll", ImageView_Fullscreen %1 webcal="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /share "%1" webcals="C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" /share "%1" webpnpFile=%SystemRoot%\system32\wpnpinst.exe %1 Windows.CompositeFont="%WinDir%\System32\notepad.exe" "%1" Windows.gadget=%ProgramFiles%\Windows Sidebar\Sidebar.exe Windows.Movie.Maker="%ProgramFiles%\Movie Maker\moviemk.exe" "%1" Windows.XamlDocument="C:\Windows\System32\PresentationHost.exe" "%1" %* Windows.Xbap="C:\Windows\System32\PresentationHost.exe" "%1" %* WindowsCalendar.FileIcs.1="%ProgramFiles%\Windows Calendar\wincal.exe" /icsfile "%1" WindowsCalendar.UrlWebcal.1="%ProgramFiles%\Windows Calendar\wincal.exe" /webcal "%1" WindowsMail.Url.Mailto="%ProgramFiles%\Windows Mail\WinMail.exe" /mailurl:"%1" WindowsMail.Url.news="%ProgramFiles%\Windows Mail\WinMail.exe" /newsurl:"%1" WindowsMail.Url.nntp="%ProgramFiles%\Windows Mail\WinMail.exe" /newsurl:"%1" WindowsMail.Url.snews="%ProgramFiles%\Windows Mail\WinMail.exe" /newsurl:"%1" WinRAR="C:\Program Files\WinRAR\WinRAR.exe" "%1" WinRAR.REV="C:\Program Files\WinRAR\WinRAR.exe" "%1" WinRAR.ZIP="C:\Program Files\WinRAR\WinRAR.exe" "%1" wmafile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:5 /Open "%L" WMDFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /WMPackage:"%L" wmffile="%systemroot%\system32\mspaint.exe" "%1" WMP.DVR-MSFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" WMP11.AssocFile.AIFF="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" WMP11.AssocFile.ASF="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Open "%L" WMP11.AssocFile.ASX="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" WMP11.AssocFile.AU="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" WMP11.AssocFile.AVI="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:8 /Open "%L" WMP11.AssocFile.CDA="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" WMP11.AssocFile.m3u="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "%L" WMP11.AssocFile.MIDI="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" WMP11.AssocFile.MP3="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "%L" WMP11.AssocFile.MPEG="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:9 /Open "%L" WMP11.AssocFile.WAV="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" WMP11.AssocFile.WAX="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" WMP11.AssocFile.WMA="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:5 /Open "%L" WMP11.AssocFile.WMD="%ProgramFiles%\Windows Media Player\wmplayer.exe" /WMPackage:"%L" WMP11.AssocFile.WMS="%ProgramFiles%\Windows Media Player\wmplayer.exe" /layout:"%L" WMP11.AssocFile.WMV="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Open "%L" WMP11.AssocFile.WMZ="%ProgramFiles%\Windows Media Player\wmplayer.exe" /layout:"%L" WMP11.AssocFile.WPL="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" WMP11.AssocFile.WVX="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" WMP11.AssocProtocol.MMS="%ProgramFiles%\Windows Media Player\wmplayer.exe" "%L" WMSFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /layout:"%L" WMVFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /prefetch:7 /Open "%L" WMZFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /layout:"%L" Word.Backup.8="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde Word.Document.12="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde Word.Document.8="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde Word.DocumentMacroEnabled.12="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde Word.OpenDocumentText.12="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde Word.RTF.8="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde Word.Template.12="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde Word.Template.8="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde Word.TemplateMacroEnabled.12="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde wordhtmlfile="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" wordhtmltemplate="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" Wordpad.Document.1="%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE" "%1" WPLFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" WSFFile="%SystemRoot%\System32\WScript.exe" "%1" %* WSHFile="%SystemRoot%\System32\WScript.exe" "%1" %* WVXFile="%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L" XEV.FailSafeApp=%SystemRoot%\system32\NOTEPAD.EXE %1 XEV.GenericApp="C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1" XEV.OriginalApp="C:\Program Files\Internet Explorer\iexplore.exe" -nohome Xfire=C:\Program Files\Xfire\Xfire.exe /url %1 xmlfile="C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLED.EXE" /verb open "%1" XPSViewer.Document.1="C:\Windows\System32\XPSViewer\XPSViewer.exe" "%1" %* xslfile="C:\Program Files\Internet Explorer\iexplore.exe" -nohome zapfile=%SystemRoot%\system32\NOTEPAD.EXE %1