What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] Adware HBHelper / Browser Hijacker Desktop

113 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #31
Are you still working on scanning the files in this post.


Then I also need you to do the following:

I would also like to see a list of files quarantined by ComboFix, so please do this:
Click Start > Run then copy/paste the following single-line command into the Run box and click OK:

"C:\Qoobox\ComboFix-quarantined-files.txt"

A text file should open. Post the contents of that file in your next reply.
Post #32
Winpatrol stopped the following attempt a few minutes ago: Scotty has detected a change in one your file associations. The program currently associated with the file tupe is: wows Internet iexlorer Microsoft C:program files\Internet Explorer\ explore.exe -no home a change was made to use the following program for this file type: Microsoft windows Operating system Microsoft corporation rundll 32.exe c:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen%1 when queried to accept I typed no. (working on the virus total files now) btw there is a duplicate explorer.exe file. do you want all dups?
Post #33
Thanks for letting me know about that WinPatrol warning. I'm looking into that. Could you please elaborate a little bit more on what you mean by there are duplicate explorer.exe files?
Post #34
i pasted the dups as well. the dup .exe has several trojans - I think. Take a look finisjhing the other files now. File explorer.exe received on 2010.03.25 13:18:27 (UTC) Antivirus Version Last Update Result a-squared 4.5.0.50 2010.03.25 - AhnLab-V3 5.0.0.2 2010.03.25 - AntiVir 7.10.5.213 2010.03.25 - Antiy-AVL 2.0.3.7 2010.03.24 - Authentium 5.2.0.5 2010.03.25 - Avast 4.8.1351.0 2010.03.25 - Avast5 5.0.332.0 2010.03.25 - AVG 9.0.0.787 2010.03.25 - BitDefender 7.2 2010.03.25 - CAT-QuickHeal 10.00 2010.03.25 - ClamAV 0.96.0.0-git 2010.03.25 - Comodo 4380 2010.03.25 - DrWeb 5.0.1.12222 2010.03.25 - eSafe 7.0.17.0 2010.03.24 - eTrust-Vet 35.2.7388 2010.03.25 - F-Prot 4.5.1.85 2010.03.24 - F-Secure 9.0.15370.0 2010.03.25 - Fortinet 4.0.14.0 2010.03.24 - GData 19 2010.03.25 - Ikarus T3.1.1.80.0 2010.03.25 - Jiangmin 13.0.900 2010.03.25 - K7AntiVirus 7.10.1004 2010.03.22 - Kaspersky 7.0.0.125 2010.03.25 - McAfee 5930 2010.03.24 - McAfee+Artemis 5930 2010.03.24 - McAfee-GW-Edition 6.8.5 2010.03.25 - Microsoft 1.5605 2010.03.25 - NOD32 4973 2010.03.25 - Norman 6.04.10 2010.03.25 - nProtect 2009.1.8.0 2010.03.25 - Panda 10.0.2.2 2010.03.24 - PCTools 7.0.3.5 2010.03.25 - Prevx 3.0 2010.03.25 - Rising 22.40.03.04 2010.03.25 - Sophos 4.52.0 2010.03.25 - Sunbelt 6079 2010.03.25 - Symantec 20091.2.0.41 2010.03.25 - TheHacker 6.5.2.0.242 2010.03.24 - TrendMicro 9.120.0.1004 2010.03.25 - VBA32 3.12.12.2 2010.03.25 - ViRobot 2010.3.25.2244 2010.03.25 - VirusBuster 5.0.27.0 2010.03.24 - Additional information File size: 1033728 bytes MD5   : 12896823fb95bfb3dc9b46bcaedc9923 SHA1  : 9d2bf84874abc5b6e9a2744b7865c193c08d362f SHA256: 1e675cb7df214172f7eb0497f7275556038a0d09c6e5a3e6862c5e26885ef455 PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1A55F
timedatestamp…..: 0x48025C30 (Sun Apr 13 21:17:04 2008)
machinetype…….: 0x14C (Intel I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x44C09 0x44E00 6.38 fd89c9ce334764ffdbb62637ad9b5809
.data 0x46000 0x1DB4 0x1800 1.30 983f35021232560eaaa99fcbc1b7d359
.rsrc 0x48000 0xB2268 0xB2400 6.63 95339c37646fa93e3695e06572a21889
.reloc 0xFB000 0x374C 0x3800 6.78 ec335057489badbf6d8142b57175fd91

( 0 imports )


( 0 exports )
TrID  : File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) ThreatExpert: http://www.threatexpert.com/report.aspx?md5=12896823fb95bfb3dc9b46bcaedc9923 ssdeep: 12288:HHmcoCUyZtwAvAs4wTCyrPTloHWYUrkf8w0Vnzac1/g/J/vMS:nmfty/wAvN7lrvbkf8w0VnH1/g/J/k sigcheck: publisher….: Microsoft Corporation
copyright….: © Microsoft Corporation. All rights reserved.
product……: Microsoft_ Windows_ Operating System
description..: Windows Explorer
original name: EXPLORER.EXE
internal name: explorer
file version.: 6.00.2900.5512 (xpsp.080413-2105)
comments…..: n/a
signers……: -
signing date.: -
verified…..: Unsigned
PEiD  : - PDFiD : ['-', None, None] RDS   : NSRL Reference Data Set
- ………………… File ctfmon.exe received on 2009.11.26 08:13:48 (UTC) Antivirus Version Last Update Result a-squared 4.5.0.43 2009.11.26 - AhnLab-V3 5.0.0.2 2009.11.26 - AntiVir 7.9.1.78 2009.11.25 - Antiy-AVL 2.0.3.7 2009.11.26 - Authentium 5.2.0.5 2009.11.26 - Avast 4.8.1351.0 2009.11.25 - AVG 8.5.0.425 2009.11.25 - BitDefender 7.2 2009.11.26 - CAT-QuickHeal 10.00 2009.11.26 - ClamAV 0.94.1 2009.11.26 - Comodo 3041 2009.11.26 - DrWeb 5.0.0.12182 2009.11.26 - eSafe 7.0.17.0 2009.11.24 - eTrust-Vet 35.1.7142 2009.11.25 - F-Prot 4.5.1.85 2009.11.25 - F-Secure 9.0.15370.0 2009.11.24 - Fortinet 4.0.14.0 2009.11.26 - GData 19 2009.11.26 - Ikarus T3.1.1.74.0 2009.11.26 - Jiangmin 11.0.800 2009.11.26 - K7AntiVirus 7.10.905 2009.11.25 - Kaspersky 7.0.0.125 2009.11.26 - McAfee 5813 2009.11.25 - McAfee+Artemis 5813 2009.11.25 - McAfee-GW-Edition 6.8.5 2009.11.26 - Microsoft 1.5302 2009.11.26 - NOD32 4637 2009.11.25 - Norman 6.03.02 2009.11.25 - nProtect 2009.1.8.0 2009.11.25 - Panda 10.0.2.2 2009.11.25 - PCTools 7.0.3.5 2009.11.26 - Prevx 3.0 2009.11.26 - Rising 22.23.03.05 2009.11.26 - Sophos 4.47.0 2009.11.26 - Sunbelt 3.2.1858.2 2009.11.26 - Symantec 1.4.4.12 2009.11.26 - TheHacker 6.5.0.2.078 2009.11.25 - TrendMicro 9.100.0.1001 2009.11.26 - VBA32 3.12.12.0 2009.11.26 - ViRobot 2009.11.26.2055 2009.11.26 - VirusBuster 5.0.21.0 2009.11.25 - Additional information File size: 13312 bytes MD5   : 85b1054db58d13aa42d7dca778c30f57 SHA1  : d417a4c91733071ec2c575a37732b2f90e1f14f0 SHA256: 2a2e395025b12f1c42fda711b05d377219fdc2a316e6929b5afe2f7bd637c5af PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x239F
timedatestamp…..: 0x3B7D849A (Fri Aug 17 22:54:50 2001)
machinetype…….: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x22E2 0x2400 6.87 b0374192c86348bd9972f16e7a164401
.data 0x4000 0x1D0 0x200 0.90 bb0feeecef7732637bcae84d5fb7b153
.rsrc 0x5000 0x870 0xA00 3.82 66a349776278632c1f107dddf58a92b4

( 0 imports )


( 0 exports )
TrID  : File type identification
Win64 Executable Generic (80.9%)
Win32 Executable Generic (8.0%)
Win32 Dynamic Link Library (generic) (7.1%)
Generic Win/DOS Executable (1.8%)
DOS Executable Generic (1.8%) ThreatExpert: http://www.threatexpert.com/report.aspx?md5=85b1054db58d13aa42d7dca778c30f57 ssdeep: 192:jF9ZGoaKlYWpj/O4T/Ml5jlvf5sgdD0yIyI/3eGyi+lokpBCjpAhwljr4rSbWEgW:R9Pmr1lvrDyu1iyCjpEwJmYWEgW PEiD  : - RDS   : NSRL Reference Data Set

( Microsoft )

Implementing and Supporting Microsoft Windows XP Professional: ctfmon.exeMicrosoft Security Resource Kit: ctfmon.exeMicrosoft TechNet Trial Software 2002 Volume 1: ctfmon.exeMSDN Disc 2041: ctfmon.exeMSDN Disc 2428: ctfmon.exeMSDN Disc 2428.1: ctfmon.exeMSDN Disc 2428.2: ctfmon.exeMSDN Disc 2428.4: ctfmon.exeMSDN Disc 2428.5: ctfmon.exeMSDN Disc2428.3: ctfmon.exePlatforms SDKs/DDKs: ctfmon.exePlatforms, SDK/DDK, Developer Tools: ctfmon.exeWindows CE .NET Evaluation Software: ctfmon.exeWindows XP: ctfmon.exeWindows XP: ctfmon.exeWindows XP: ctfmon.exeWindows XP eMbedded Evaluation Software: ctfmon.exeWindows XP Home Edition: ctfmon.exeWindows XP Professional: ctfmon.exe
( Compaq )

Compaq Operating System CD: ctfmon.exe
( Dell )

Reinstallation CD Microsoft Windows XP Professional: ctfmon.exe ///////////////////////////////// File ctfmon.kex received on 2010.03.25 13:34:30 (UTC) Antivirus Version Last Update Result a-squared 4.5.0.50 2010.03.25 - AhnLab-V3 5.0.0.2 2010.03.25 - AntiVir 7.10.5.213 2010.03.25 - Antiy-AVL 2.0.3.7 2010.03.24 - Authentium 5.2.0.5 2010.03.25 - Avast 4.8.1351.0 2010.03.25 - Avast5 5.0.332.0 2010.03.25 - AVG 9.0.0.787 2010.03.25 - BitDefender 7.2 2010.03.25 - CAT-QuickHeal 10.00 2010.03.25 - ClamAV 0.96.0.0-git 2010.03.25 - Comodo 4380 2010.03.25 - DrWeb 5.0.1.12222 2010.03.25 - eSafe 7.0.17.0 2010.03.24 Win32.Banker eTrust-Vet 35.2.7388 2010.03.25 - F-Prot 4.5.1.85 2010.03.24 - F-Secure 9.0.15370.0 2010.03.25 - Fortinet 4.0.14.0 2010.03.24 - GData 19 2010.03.25 - Ikarus T3.1.1.80.0 2010.03.25 - Jiangmin 13.0.900 2010.03.25 - K7AntiVirus 7.10.1004 2010.03.22 - Kaspersky 7.0.0.125 2010.03.25 - McAfee 5930 2010.03.24 - McAfee+Artemis 5930 2010.03.24 - McAfee-GW-Edition 6.8.5 2010.03.25 - Microsoft 1.5605 2010.03.25 - NOD32 4973 2010.03.25 - Norman 6.04.10 2010.03.25 - nProtect 2009.1.8.0 2010.03.25 - Panda 10.0.2.2 2010.03.24 - PCTools 7.0.3.5 2010.03.25 - Prevx 3.0 2010.03.25 - Rising 22.40.03.04 2010.03.25 - Sophos 4.52.0 2010.03.25 - Sunbelt 6079 2010.03.25 - Symantec 20091.2.0.41 2010.03.25 - TheHacker 6.5.2.0.242 2010.03.24 - TrendMicro 9.120.0.1004 2010.03.25 - VBA32 3.12.12.2 2010.03.25 - ViRobot 2010.3.25.2244 2010.03.25 - VirusBuster 5.0.27.0 2010.03.24 - Additional information File size: 15360 bytes MD5   : 5f1d5f88303d4a4dbc8e5f97ba967cc3 SHA1  : 99cb7370f16773c8e2d0c86fe805ec638ab126e9 SHA256: 5fb24fc7916a6e6b3be7d84cb1684215b266cd1495575c2e5672b8447932e5b1 PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x2E35
timedatestamp…..: 0x48025356 (Sun Apr 13 20:39:18 2008)
machinetype…….: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2AB8 0x2C00 6.75 414ce647d4328e7513d4155b1a2c9499
.data 0x4000 0x210 0x200 1.07 bd8c5cd346a9f53dc0dbc69260ab2240
.rsrc 0x5000 0x870 0xA00 3.85 421ca88053c2138f828a915f2a95d754

( 0 imports )


( 0 exports )
TrID  : File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) ThreatExpert: http://www.threatexpert.com/report.aspx?md5=5f1d5f88303d4a4dbc8e5f97ba967cc3 ssdeep: 192:W6hGoc4F/MNhlYWpjZ+o7NpO7MIl8SVPTI7mW7rOi7oLG9lMnjmxAITljrUFE3W3:FA1Eo7NY8MPTIaW7/lumxlJlWDlgW sigcheck: publisher….: Microsoft Corporation
copyright….: © Microsoft Corporation. All rights reserved.
product……: Microsoft_ Windows_ Operating System
description..: CTF Loader
original name: CTFMON.EXE
internal name: CTFMON
file version.: 5.1.2600.5512 (xpsp.080413-2105)
comments…..: n/a
signers……: -
signing date.: -
verified…..: Unsigned
PEiD  : - RDS   : NSRL Reference Data Set
- ////////////////////////////////// File explorer.exe received on 2010.02.23 19:42:25 (UTC) Antivirus Version Last Update Result a-squared 4.5.0.50 2010.02.23 - AhnLab-V3 5.0.0.2 2010.02.23 - AntiVir 8.2.1.172 2010.02.23 - Antiy-AVL 2.0.3.7 2010.02.23 Trojan/Win32.Patched.gen Authentium 5.2.0.5 2010.02.23 - Avast 4.8.1351.0 2010.02.23 - AVG 9.0.0.730 2010.02.23 - BitDefender 7.2 2010.02.23 - CAT-QuickHeal 10.00 2010.02.23 - ClamAV 0.96.0.0-git 2010.02.23 - Comodo 4038 2010.02.23 - DrWeb 5.0.1.12222 2010.02.23 - eSafe 7.0.17.0 2010.02.23 - eTrust-Vet 35.2.7323 2010.02.23 - F-Prot 4.5.1.85 2010.02.23 - F-Secure 9.0.15370.0 2010.02.23 - Fortinet 4.0.14.0 2010.02.21 - GData 19 2010.02.23 - Ikarus T3.1.1.80.0 2010.02.23 - Jiangmin 13.0.900 2010.02.23 - K7AntiVirus 7.10.981 2010.02.23 - Kaspersky 7.0.0.125 2010.02.23 - McAfee 5901 2010.02.23 - McAfee+Artemis 5901 2010.02.23 - McAfee-GW-Edition 6.8.5 2010.02.23 Heuristic.LooksLike.Win32.Suspicious.K Microsoft 1.5406 2010.02.23 - NOD32 4891 2010.02.23 - Norman 6.04.08 2010.02.23 - nProtect 2009.1.8.0 2010.02.23 - Panda 10.0.2.2 2010.02.23 - PCTools 7.0.3.5 2010.02.23 - Prevx 3.0 2010.02.23 - Rising 22.34.01.03 2010.02.11 - Sophos 4.50.0 2010.02.23 - Sunbelt 5694 2010.02.23 - Symantec 20091.2.0.41 2010.02.23 - TheHacker [removed].206 2010.02.23 - TrendMicro 9.120.0.1004 2010.02.23 - VBA32 3.12.12.2 2010.02.23 - ViRobot 2010.2.23.2198 2010.02.23 - VirusBuster 5.0.27.0 2010.02.23 - Additional information File size: 1000960 bytes MD5   : 5a26fc6010886d25b3e412493dd95ed8 SHA1  : 8d9775aa1047c2979407f6ee81d9fb9d8874a86c SHA256: 5d8a481acfdbfef783179f89e36d925dccca70fe49ef472a4cc23167f9962e9b PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x12C12
timedatestamp…..: 0x3B7DE06E (Sat Aug 18 05:26:38 2001)
machinetype…….: 0x14C (Intel I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x3CBC0 0x3CC00 6.48 329d41f4defcada66fb4ac776826135c
.data 0x3E000 0x1CA0 0x1C00 0.90 03ec2ef3f827c4feff2df2f5897dad57
.rsrc 0x40000 0xB2270 0xB2400 6.63 be23cbf9ca07e737fee310dd5ff7bea0
.reloc 0xF3000 0x3480 0x3600 6.73 ca92ab90e7fa7acac63ed08ba72f2588

( 13 imports )

> advapi32.dll: RegOpenKeyExW, RegNotifyChangeKeyValue, RegQueryValueExA, RegOpenKeyExA, RegQueryValueW, RegEnumKeyExW, RegCloseKey, RegCreateKeyW, RegDeleteValueW, RegEnumValueW, RegEnumKeyW, RegQueryInfoKeyW, RegQueryValueExW, RegCreateKeyExW, RegSetValueExW, RegSetValueW, GetUserNameW
> browseui.dll: -, -, -, -
> gdi32.dll: GetStockObject, CreatePatternBrush, OffsetViewportOrgEx, GetLayout, CombineRgn, CreateDIBSection, GetTextExtentPoint32W, StretchBlt, SetStretchBltMode, CreateRectRgn, GetClipRgn, IntersectClipRect, GetViewportOrgEx, SetViewportOrgEx, PatBlt, GetBkColor, CreateCompatibleDC, CreateCompatibleBitmap, OffsetWindowOrgEx, DeleteDC, SetBkColor, BitBlt, ExtTextOutW, GetTextExtentPointW, GetClipBox, GetObjectW, CreateRectRgnIndirect, CreateFontIndirectW, SetTextColor, SetBkMode, DeleteObject, GetTextMetricsW, SelectObject, GetDeviceCaps, TranslateCharsetInfo, SelectClipRgn
> kernel32.dll: GetLastError, CreateEventW, GetLocaleInfoW, FreeLibrary, GetSystemDefaultLCID, SetProcessShutdownParameters, ReleaseMutex, CreateMutexW, SetPriorityClass, GetCurrentProcess, GetStartupInfoW, GetCommandLineW, SetErrorMode, LeaveCriticalSection, EnterCriticalSection, CompareFileTime, GetSystemTimeAsFileTime, lstrcpynW, SetThreadPriority, GetCurrentThreadId, GetThreadPriority, GetCurrentThread, GetUserDefaultLangID, Sleep, GetBinaryTypeW, SystemTimeToFileTime, GetLocalTime, GetFileAttributesW, MoveFileW, OpenEventW, FindNextFileW, FindFirstFileW, IsBadCodePtr, SetEvent, GetCurrentProcessId, GetEnvironmentVariableW, lstrcatW, lstrcmpW, UnregisterWait, ResetEvent, GlobalGetAtomNameW, lstrcmpiA, RegisterWaitForSingleObject, GetDateFormatW, GetTimeFormatW, FlushInstructionCache, HeapFree, GetProcessHeap, HeapAlloc, HeapReAlloc, HeapSize, GetUserDefaultLCID, ReadProcessMemory, SetLastError, OpenProcess, InterlockedCompareExchange, LoadLibraryA, WaitForSingleObject, GetTickCount, ExpandEnvironmentStringsW, GetModuleFileNameW, GetPrivateProfileStringW, GetSystemDirectoryW, GetProfileStringW, GetWindowsDirectoryW, SetCurrentDirectoryW, CreateFileW, DeviceIoControl, lstrcmpiW, LocalAlloc, LocalFree, ExitProcess, CreateJobObjectW, CreateThread, CreateProcessW, AssignProcessToJobObject, ResumeThread, TerminateProcess, DelayLoadFailureHook, TerminateThread, GetQueuedCompletionStatus, CreateIoCompletionPort, SetInformationJobObject, CloseHandle, LoadLibraryW, GetModuleHandleW, GetProcAddress, DeleteCriticalSection, HeapDestroy, InitializeCriticalSection, lstrlenW, lstrcpyW, InterlockedDecrement, InterlockedIncrement, GetFileAttributesExW, MulDiv, GetLongPathNameW, GetProcessTimes, GetVersionExA, GetModuleHandleA, InterlockedExchange, GlobalFree, GlobalAlloc, CreateEventA, FindClose
> msvcrt.dll: _except_handler3, realloc, _ftol, memmove, _itow, free
> ntdll.dll: NtQueryInformationProcess, RtlNtStatusToDosError
> ole32.dll: CoUninitialize, CoCreateInstance, OleInitialize, CoRegisterClassObject, CoMarshalInterThreadInterfaceInStream, DoDragDrop, CoInitializeEx, OleUninitialize, RevokeDragDrop, RegisterDragDrop, CoFreeUnusedLibraries, CoRevokeClassObject
> oleaut32.dll: -, -
> shdocvw.dll: -, -, -
> shell32.dll: SHBindToParent, -, -, -, -, -, -, -, -, -, -, -, -, SHGetDesktopFolder, SHChangeNotify, SHAddToRecentDocs, -, -, -, DuplicateIcon, -, -, -, -, -, -, -, -, SHUpdateRecycleBinIcon, SHGetFolderLocation, SHGetPathFromIDListA, -, -, -, -, -, -, SHGetPathFromIDListW, -, -, -, -, -, -, -, ExtractIconExW, -, -, -, -, -, SHGetFolderPathW, -, SHGetSpecialFolderLocation, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, SHGetSpecialFolderPathW, ShellExecuteExW, -, -, -, -, -, -, -
> shlwapi.dll: -, StrCmpNW, -, -, -, -, -, -, -, -, AssocCreate, -, -, PathIsNetworkPathW, SHQueryValueExW, -, -, -, StrRetToStrW, StrRetToBufW, -, -, -, -, -, StrCpyW, -, StrCmpIW, -, -, -, -, -, -, SHGetValueW, -, wnsprintfW, PathUnquoteSpacesW, PathGetArgsW, -, SHDeleteEmptyKeyW, PathRemoveFileSpecW, PathFindFileNameW, StrCatBuffW, PathQuoteSpacesW, PathAppendW, StrCmpNIW, PathRemoveBlanksW, PathRemoveArgsW, StrStrIW, -, StrToIntW, SHRegGetBoolUSValueW, SHRegWriteUSValueW, SHRegCloseUSKey, SHRegCreateUSKeyW, SHRegGetUSValueW, -, -, -, -, -, PathCombineW, SHSetValueW, -, -, -, SHStrDupW, PathIsPrefixW, PathParseIconLocationW, AssocQueryKeyW, StrCatW, -, AssocQueryStringW, StrCmpW, -, -, -, -, -, -, -, -, SHRegQueryUSValueW, SHRegOpenUSKeyW, SHRegSetUSValueW, PathFindExtensionW, PathIsDirectoryW, -, StrChrW, -, PathFileExistsW, PathGetDriveNumberW, -, -, -, PathStripToRootW, -, -, SHOpenRegStream2W, -, StrCpyNW, -, -, StrDupW, SHDeleteValueW, SHDeleteKeyW
> user32.dll: IsHungAppWindow, EndTask, SwitchToThisWindow, InternalGetWindowText, GetDCEx, SetCursorPos, ChildWindowFromPoint, EndDialog, SendDlgItemMessageW, ChangeDisplaySettingsW, RegisterHotKey, UnregisterHotKey, SetCursor, SendMessageTimeoutW, GetWindowPlacement, LoadImageW, SetWindowRgn, IntersectRect, OffsetRect, EnumDisplayMonitors, RedrawWindow, SubtractRect, TranslateAcceleratorW, TranslateMessage, DispatchMessageW, WaitMessage, InflateRect, CallWindowProcW, GetDlgCtrlID, SetCapture, CopyRect, MonitorFromRect, MonitorFromPoint, RegisterClassW, SetPropW, GetWindowLongA, SetWindowLongW, FillRect, GetCursorPos, PtInRect, GetClassNameW, EndPaint, SetWindowTextW, GetAsyncKeyState, InvalidateRect, GetWindow, ShowWindowAsync, TrackPopupMenuEx, UpdateWindow, DestroyIcon, IsRectEmpty, SetActiveWindow, SetTimer, GetMenuItemID, TrackPopupMenu, DestroyWindow, SendMessageCallbackW, GetClassLongW, LoadIconW, SetScrollPos, ShowWindow, BringWindowToTop, GetDesktopWindow, CascadeWindows, TileWindows, GetScrollInfo, GetMenuItemCount, ModifyMenuW, InsertMenuW, IsWindowEnabled, GetMenuState, LoadCursorW, GetParent, OpenInputDesktop, CloseDesktop, EnumWindows, IsWindowVisible, GetClientRect, UnionRect, EqualRect, GetWindowThreadProcessId, GetForegroundWindow, GetSysColor, DrawTextW, KillTimer, GetClassInfoExW, DefWindowProcW, RegisterClassExW, GetIconInfo, SetScrollInfo, GetLastActivePopup, SetForegroundWindow, IsWindow, GetSystemMenu, IsIconic, IsZoomed, EnableMenuItem, SetMenuDefaultItem, MonitorFromWindow, GetMonitorInfoW, GetWindowInfo, GetFocus, SetFocus, MapWindowPoints, ScreenToClient, ClientToScreen, GetWindowRect, SetWindowPos, DeleteMenu, GetMenuItemInfoW, wsprintfW, SetMenuItemInfoW, CharUpperBuffW, PeekMessageW, PostMessageW, EnumDisplayDevicesW, EnumDisplaySettingsExW, GetDC, ReleaseDC, LoadStringW, MessageBoxW, GetShellWindow, FindWindowW, SystemParametersInfoW, GetSystemMetrics, GetDoubleClickTime, CharNextW, CreatePopupMenu, GetMenuDefaultItem, DestroyMenu, GetKeyState, RegisterWindowMessageW, SendMessageW, GetWindowLongW, EnumChildWindows, CreateWindowExW, DialogBoxParamW, MsgWaitForMultipleObjects, CharNextA, RegisterClipboardFormatW, EndDeferWindowPos, DeferWindowPos, BeginDeferWindowPos, PrintWindow, SetClassLongW, GetPropW, GetNextDlgGroupItem, GetNextDlgTabItem, ChildWindowFromPointEx, IsChild, NotifyWinEvent, TrackMouseEvent, GetCapture, GetAncestor, CharUpperW, SetWindowLongA, DrawCaption, RemovePropW, GetDlgItem, GetSysColorBrush, AllowSetForegroundWindow, LoadMenuW, GetSubMenu, RemoveMenu, SetParent, CheckDlgButton, GetMessagePos, EnableWindow, IsDlgButtonChecked, GetDlgItemInt, MoveWindow, CopyIcon, AdjustWindowRectEx, DrawFocusRect, DrawEdge, ExitWindowsEx, WindowFromPoint, SetRect, LoadAcceleratorsW, LoadBitmapW, SendNotifyMessageW, AppendMenuW, SetWindowPlacement, CheckMenuItem, MessageBeep, GetActiveWindow, BeginPaint, PostQuitMessage, SetDlgItemInt
> uxtheme.dll: GetThemeBackgroundContentRect, GetThemeBool, GetThemePartSize, DrawThemeParentBackground, OpenThemeData, CloseThemeData, DrawThemeBackground, SetWindowTheme, GetThemeTextExtent, DrawThemeText, IsAppThemed, GetThemeRect, GetThemeFont, GetThemeColor, GetThemeMargins, GetThemeBackgroundRegion, -

( 0 exports )
TrID  : File type identification
Win64 Executable Generic (80.9%)
Win32 Executable Generic (8.0%)
Win32 Dynamic Link Library (generic) (7.1%)
Generic Win/DOS Executable (1.8%)
DOS Executable Generic (1.8%) ThreatExpert: http://www.threatexpert.com/report.aspx?md5=5a26fc6010886d25b3e412493dd95ed8 ssdeep: 12288:6rOUP1aqsY5FI475+QRo7jlTncW/K1oHW62Rkf8f+skzax1/g/J/v:6rsqpI05D+lbQz1kf8f+skK1/g/J/ sigcheck: publisher….: Microsoft Corporation
copyright….: © Microsoft Corporation. All rights reserved.
product……: Microsoft_ Windows_ Operating System
description..: Windows Explorer
original name: EXPLORER.EXE
internal name: explorer
file version.: 6.00.2600.0000 (xpclient.010817-1148)
comments…..: n/a
signers……: -
signing date.: -
verified…..: Unsigned
PEiD  : - RDS   : NSRL Reference Data Set

( Microsoft )

Implementing and Supporting Microsoft Windows XP Professional: explorer.exeMicrosoft Security Resource Kit: explorer.exeMicrosoft TechNet Trial Software 2002 Volume 1: explorer.exeMSDN Disc 2041: explorer.exeMSDN Disc 2428: explorer.exeMSDN Disc 2428.1: explorer.exeMSDN Disc 2428.2: explorer.exeMSDN Disc 2428.4: explorer.exeMSDN Disc 2428.5: explorer.exeMSDN Disc2428.3: explorer.exePlatforms SDKs/DDKs: explorer.exePlatforms, SDK/DDK, Developer Tools: explorer.exeWindows CE .NET Evaluation Software: explorer.exeWindows XP: explorer.exeWindows XP: explorer.exeWindows XP: explorer.exeWindows XP eMbedded Evaluation Software: explorer.exeWindows XP . Home Edition: explorer.exeWindows XP Professional: explorer.exe
( Compaq )

Compaq Operating System CD: explorer.exe
( Dell )

Reinstallation CD Microsoft Windows XP Professional: explorer.exe ///////////////////////////////////////
Post #35
I sent reports for all files and duplicates this is the final send: File winlogon.exe received on 2010.03.23 23:12:28 (UTC) Antivirus Version Last Update Result a-squared 4.5.0.50 2010.03.24 - AhnLab-V3 5.0.0.2 2010.03.23 - AntiVir 8.2.1.196 2010.03.23 - Antiy-AVL 2.0.3.7 2010.03.23 - Authentium 5.2.0.5 2010.03.23 - Avast 4.8.1351.0 2010.03.23 - Avast5 5.0.332.0 2010.03.23 - AVG 9.0.0.787 2010.03.23 - BitDefender 7.2 2010.03.24 - CAT-QuickHeal 10.00 2010.03.23 - ClamAV 0.96.0.0-git 2010.03.23 - Comodo 4361 2010.03.23 - DrWeb 5.0.1.12222 2010.03.23 - eSafe 7.0.17.0 2010.03.23 - eTrust-Vet 35.2.7385 2010.03.23 - F-Prot 4.5.1.85 2010.03.23 - F-Secure 9.0.15370.0 2010.03.23 - Fortinet 4.0.14.0 2010.03.22 - GData 19 2010.03.23 - Ikarus T3.1.1.80.0 2010.03.23 - Jiangmin 13.0.900 2010.03.23 - K7AntiVirus 7.10.1004 2010.03.22 - Kaspersky 7.0.0.125 2010.03.24 - McAfee 5929 2010.03.23 - McAfee+Artemis 5929 2010.03.23 - McAfee-GW-Edition 6.8.5 2010.03.23 - Microsoft 1.5605 2010.03.23 - NOD32 4969 2010.03.23 - Norman 6.04.10 2010.03.23 - nProtect 2009.1.8.0 2010.03.23 - Panda 10.0.2.2 2010.03.23 - PCTools 7.0.3.5 2010.03.23 - Prevx 3.0 2010.03.24 - Rising 22.40.01.04 2010.03.23 - Sophos 4.51.0 2010.03.23 - Sunbelt 6031 2010.03.22 - Symantec 20091.2.0.41 2010.03.24 - TheHacker 6.5.2.0.242 2010.03.23 - TrendMicro 9.120.0.1004 2010.03.23 - VBA32 3.12.12.2 2010.03.23 - ViRobot 2010.3.23.2240 2010.03.23 - VirusBuster 5.0.27.0 2010.03.23 - Additional information File size: 507904 bytes MD5   : ed0ef0a136dec83df69f04118870003e SHA1  : f77a7cd78877527023ebfb35e83b75ef59d3df07 SHA256: 45377cb8e9f0120f836fc8261c711f7dbf7199117afb3652ebf100d5f0429b1e PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x3E5E1
timedatestamp…..: 0x48027549 (Sun Apr 13 23:04:09 2008)
machinetype…….: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x70991 0x70A00 6.82 39d0278af55c2446adf638b9f0236aff
.data 0x72000 0x4E70 0x2000 6.28 44bd27282514b5e3a27b570106930d8d
.rsrc 0x77000 0x9020 0x9200 3.62 8b50f3590d97bb27639f10bacbc53187

( 0 imports )


( 0 exports )
TrID  : File type identification
Win64 Executable Generic (80.9%)
Win32 Executable Generic (8.0%)
Win32 Dynamic Link Library (generic) (7.1%)
Generic Win/DOS Executable (1.8%)
DOS Executable Generic (1.8%) ThreatExpert: http://www.threatexpert.com/report.aspx?md5=ed0ef0a136dec83df69f04118870003e ssdeep: 6144:kNZlxEdL5RvGlcHF37newMLao6nMnKHOD13XRnCfOVSePfLtisgZYl:jdz+lcDKao6nSKHsRqOM gxZg sigcheck: publisher….: Microsoft Corporation
copyright….: © Microsoft Corporation. All rights reserved.
product……: Microsoft_ Windows_ Operating System
description..: Windows NT Logon Application
original name: WINLOGON.EXE
internal name: winlogon
file version.: 5.1.2600.5512 (xpsp.080413-2113)
comments…..: n/a
signers……: -
signing date.: -
verified…..: Unsigned
PEiD  : - RDS   : NSRL Reference Data Set
- ================================ File services.exe received on 2010.03.25 15:03:03 (UTC) Antivirus Version Last Update Result a-squared 4.5.0.50 2010.03.25 - AhnLab-V3 5.0.0.2 2010.03.25 - AntiVir 7.10.5.214 2010.03.25 - Antiy-AVL 2.0.3.7 2010.03.24 - Authentium 5.2.0.5 2010.03.25 - Avast 4.8.1351.0 2010.03.25 - Avast5 5.0.332.0 2010.03.25 - AVG 9.0.0.787 2010.03.25 - BitDefender 7.2 2010.03.25 - CAT-QuickHeal 10.00 2010.03.25 - ClamAV 0.96.0.0-git 2010.03.25 - Comodo 4381 2010.03.25 - DrWeb 5.0.1.12222 2010.03.25 - eSafe 7.0.17.0 2010.03.24 - eTrust-Vet 35.2.7388 2010.03.25 - F-Prot 4.5.1.85 2010.03.24 - F-Secure 9.0.15370.0 2010.03.25 - Fortinet 4.0.14.0 2010.03.24 - GData 19 2010.03.25 - Ikarus T3.1.1.80.0 2010.03.25 - Jiangmin 13.0.900 2010.03.25 - K7AntiVirus 7.10.1004 2010.03.22 - Kaspersky 7.0.0.125 2010.03.25 - McAfee 5930 2010.03.24 - McAfee+Artemis 5930 2010.03.24 - McAfee-GW-Edition 6.8.5 2010.03.25 Heuristic.LooksLike.Win32.Suspicious.H Microsoft 1.5605 2010.03.25 - NOD32 4973 2010.03.25 - Norman 6.04.10 2010.03.25 - nProtect 2009.1.8.0 2010.03.25 - Panda 10.0.2.2 2010.03.24 - PCTools 7.0.3.5 2010.03.25 - Rising 22.40.03.04 2010.03.25 - Sophos 4.52.0 2010.03.25 - Sunbelt 6080 2010.03.25 - Symantec 20091.2.0.41 2010.03.25 - TheHacker 6.5.2.0.242 2010.03.24 - TrendMicro 9.120.0.1004 2010.03.25 - VBA32 3.12.12.2 2010.03.25 - ViRobot 2010.3.25.2244 2010.03.25 - VirusBuster 5.0.27.0 2010.03.25 - Additional information File size: 110592 bytes MD5   : 65df52f5b8b6e9bbd183505225c37315 SHA1  : de3701d2c03d9ae29b2d87eccafbbcadf1bfb7e3 SHA256: 59c606977db40a3443dff0be2a4c761824881b22c9fdb3d23f6486db580e92a4 PEInfo: PE Structure information

( base data )
entrypointaddress.: 0xBF63
timedatestamp…..: 0x498C1AC8 (Fri Feb 6 12:11:04 2009)
machinetype…….: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x196A5 0x19800 6.23 bf32e1a6f4363e9fffea31d970bdebf2
.data 0x1B000 0xA38 0xC00 1.78 817a9a6979796d656eb64e994df5db0a
.rsrc 0x1C000 0x7B0 0x800 3.16 23ab6e3c1dc51af966dc27da2a957917

( 10 imports )

> advapi32.dll: AllocateLocallyUniqueId, RegOpenKeyW, ConvertSidToStringSidW, AllocateAndInitializeSid, FreeSid, LogonUserExW, LsaStorePrivateData, LsaLookupNames, AddAccessAllowedAce, SetTokenInformation, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, SetServiceStatus, SystemFunction029, SystemFunction005, CheckTokenMembership, LsaQueryInformationPolicy, OpenThreadToken, RegNotifyChangeKeyValue, InitializeSecurityDescriptor, SetSecurityDescriptorOwner, GetSecurityDescriptorDacl, GetLengthSid, CopySid, InitializeAcl, AddAce, SetSecurityDescriptorDacl, LsaOpenPolicy, LsaLookupSids, LsaFreeMemory, LsaClose, GetTokenInformation, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, InitiateSystemShutdownW, RevertToSelf, CreateProcessAsUserW, ImpersonateLoggedOnUser
> kernel32.dll: GetCurrentThread, CreateMutexW, ReleaseMutex, ExitThread, FormatMessageW, lstrcmpiW, SetProcessShutdownParameters, DelayLoadFailureHook, RaiseException, GetExitCodeThread, SetConsoleCtrlHandler, SetErrorMode, SetUnhandledExceptionFilter, LoadLibraryA, QueryPerformanceCounter, GetCurrentThreadId, GetCurrentProcess, UnhandledExceptionFilter, GetModuleHandleA, OpenEventW, LocalAlloc, LocalFree, Sleep, LeaveCriticalSection, EnterCriticalSection, SetLastError, CloseHandle, CreateThread, GetLastError, CreateProcessW, ExpandEnvironmentStringsW, InitializeCriticalSection, HeapAlloc, HeapFree, TerminateProcess, WaitForSingleObject, HeapCreate, FreeLibrary, GetProcAddress, GetModuleHandleExW, InterlockedCompareExchange, CreateNamedPipeW, ReadFile, CancelIo, GetOverlappedResult, WaitForMultipleObjects, ConnectNamedPipe, TransactNamedPipe, WriteFile, GetTickCount, GetSystemTimeAsFileTime, GetModuleHandleW, GetComputerNameW, CreateEventW, SetEvent, ResetEvent, DeviceIoControl, CreateFileW, ResumeThread, GetCurrentProcessId, LoadLibraryW, GetDriveTypeW
> msvcrt.dll: _itow, wcsrchr, time, _except_handler3, memmove, wcschr, _c_exit, _exit, wcsncmp, _XcptFilter, _cexit, exit, _wcsnicmp, __getmainargs, _initterm, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, _controlfp, _wtol, wcscpy, wcscat, wcsncpy, _wcsicmp, __initenv, wcslen, wcscspn, _ultow
> ncobjapi.dll: WmiCreateObjectWithFormat, WmiEventSourceConnect, WmiSetAndCommitObject
> ntdll.dll: RtlCreateSecurityDescriptor, RtlAddAccessAllowedAce, RtlCreateAcl, NtCreateKey, NtQueryValueKey, NtSetValueKey, NtDeleteValueKey, NtEnumerateKey, NtQuerySecurityObject, RtlFreeHeap, NtOpenKey, NtDeleteKey, RtlSetControlSecurityDescriptor, RtlValidSecurityDescriptor, RtlLengthSecurityDescriptor, NtPrivilegeObjectAuditAlarm, NtPrivilegeCheck, NtOpenThreadToken, NtAccessCheckAndAuditAlarm, NtSetInformationThread, NtAdjustPrivilegesToken, NtDuplicateToken, NtOpenProcessToken, RtlSetDaclSecurityDescriptor, RtlQuerySecurityObject, RtlSetSecurityObject, RtlValidRelativeSecurityDescriptor, RtlMapGenericMask, RtlCopyUnicodeString, NtSetInformationFile, NtQueryInformationFile, RtlAppendUnicodeStringToString, RtlAppendUnicodeToString, NtWaitForSingleObject, NtQueryDirectoryFile, NtDeleteFile, NtSetInformationProcess, RtlUnhandledExceptionFilter, NtSetEvent, RtlGetAce, RtlQueryInformationAcl, RtlGetDaclSecurityDescriptor, RtlAllocateHeap, RtlConvertSharedToExclusive, RtlConvertExclusiveToShared, RtlRegisterWait, RtlGetNtProductType, RtlEqualUnicodeString, RtlLengthSid, RtlCopySid, NtOpenDirectoryObject, NtQueryDirectoryObject, RtlUnicodeStringToAnsiString, RtlInitAnsiString, RtlAnsiStringToUnicodeString, RtlNewSecurityObject, RtlAddAce, RtlSetOwnerSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetSaclSecurityDescriptor, RtlSubAuthorityCountSid, RtlCompareUnicodeString, NtLoadDriver, NtUnloadDriver, RtlExpandEnvironmentStrings_U, RtlAdjustPrivilege, NtFlushKey, NtOpenFile, RtlDosPathNameToNtPathName_U, NtOpenSymbolicLinkObject, NtQuerySymbolicLinkObject, RtlFreeUnicodeString, RtlAreAllAccessesGranted, NtDeleteObjectAuditAlarm, NtCloseObjectAuditAlarm, RtlQueueWorkItem, RtlCopyLuid, RtlDeregisterWait, RtlReleaseResource, RtlAcquireResourceExclusive, RtlAcquireResourceShared, RtlInitializeResource, RtlDeleteSecurityObject, RtlLockBootStatusData, RtlGetSetBootStatusData, RtlUnlockBootStatusData, NtInitializeRegistry, NtQueryKey, NtClose, RtlInitUnicodeString, NtSetSystemEnvironmentValue, RtlNtStatusToDosError, NtShutdownSystem, NtQueryInformationToken, RtlMakeSelfRelativeSD, RtlInitializeSid, RtlLengthRequiredSid, RtlSubAuthoritySid, NtSetSecurityObject
> rpcrt4.dll: RpcServerRegisterAuthInfoW, RpcBindingFree, RpcEpResolveBinding, RpcBindingFromStringBindingW, RpcStringBindingComposeW, NdrClientCall2, RpcAsyncCompleteCall, RpcAsyncInitializeHandle, NdrAsyncServerCall, RpcServerListen, RpcMgmtStopServerListening, RpcMgmtWaitServerListen, RpcServerUnregisterIf, NdrAsyncClientCall, NdrServerCall2, I_RpcBindingIsClientLocal, RpcRevertToSelf, I_RpcMapWin32Status, RpcImpersonateClient, RpcStringBindingParseW, RpcStringFreeW, RpcBindingToStringBindingW, RpcServerRegisterIfEx, RpcServerUseProtseqEpW, RpcServerRegisterIf
> scesrv.dll: ScesrvInitializeServer, ScesrvTerminateServer
> umpnpmgr.dll: RegisterScmCallback, PNP_SetActiveService, PNP_GetDeviceRegProp, PNP_GetDeviceListSize, PNP_GetDeviceList, PNP_HwProfFlags, RegisterServiceNotification, DeleteServicePlugPlayRegKeys
> user32.dll: LoadStringW, wsprintfW, BroadcastSystemMessageW, MessageBoxW, RegisterServicesProcess
> userenv.dll: UnloadUserProfile, CreateEnvironmentBlock, LoadUserProfileW, DestroyEnvironmentBlock

( 0 exports )
TrID  : File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) ThreatExpert: http://www.threatexpert.com/report.aspx?md5=65df52f5b8b6e9bbd183505225c37315 ssdeep: 1536:HHj12id0hKy+k1DQ+7Gpj3r4M7TGfwG1K9IJvydlnk4pCxvN:HHG1DQgGpj3Cf1K9IBydlk+cvN sigcheck: publisher….: Microsoft Corporation
copyright….: © Microsoft Corporation. All rights reserved.
product……: Microsoft_ Windows_ Operating System
description..: Services and Controller app
original name: services.exe
internal name: services.exe
file version.: 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)
comments…..: n/a
signers……: -
signing date.: -
verified…..: Unsigned
PEiD  : - RDS   : NSRL Reference Data Set
- ===================================== File lsass.exe received on 2010.03.24 11:46:57 (UTC) Antivirus Version Last Update Result a-squared 4.5.0.50 2010.03.24 - AhnLab-V3 5.0.0.2 2010.03.24 - AntiVir 8.2.1.196 2010.03.24 - Antiy-AVL 2.0.3.7 2010.03.24 - Authentium 5.2.0.5 2010.03.24 - Avast 4.8.1351.0 2010.03.23 - Avast5 5.0.332.0 2010.03.23 - AVG 9.0.0.787 2010.03.24 - BitDefender 7.2 2010.03.24 - CAT-QuickHeal 10.00 2010.03.24 - ClamAV 0.96.0.0-git 2010.03.24 - Comodo 4367 2010.03.24 - DrWeb 5.0.1.12222 2010.03.24 - eSafe 7.0.17.0 2010.03.23 Win32.Banker eTrust-Vet 35.2.7386 2010.03.24 - F-Prot 4.5.1.85 2010.03.23 - F-Secure 9.0.15370.0 2010.03.24 - Fortinet 4.0.14.0 2010.03.24 - GData 19 2010.03.24 - Ikarus T3.1.1.80.0 2010.03.24 - Jiangmin 13.0.900 2010.03.24 - K7AntiVirus 7.10.1004 2010.03.22 - Kaspersky 7.0.0.125 2010.03.24 - McAfee 5929 2010.03.23 - McAfee+Artemis 5929 2010.03.23 - McAfee-GW-Edition 6.8.5 2010.03.24 - Microsoft 1.5605 2010.03.24 - NOD32 4970 2010.03.24 - Norman 6.04.10 2010.03.23 - nProtect 2009.1.8.0 2010.03.24 - Panda 10.0.2.2 2010.03.23 - PCTools 7.0.3.5 2010.03.24 - Prevx 3.0 2010.03.24 - Rising 22.40.02.03 2010.03.24 - Sophos 4.51.0 2010.03.24 - Sunbelt 6031 2010.03.22 - Symantec 20091.2.0.41 2010.03.24 - TheHacker 6.5.2.0.242 2010.03.24 - TrendMicro 9.120.0.1004 2010.03.24 - VBA32 3.12.12.2 2010.03.23 - ViRobot 2010.3.24.2242 2010.03.24 - VirusBuster 5.0.27.0 2010.03.23 - Additional information File size: 13312 bytes MD5   : bf2466b3e18e970d8a976fb95fc1ca85 SHA1  : de5a73cbb5f51f64c53fb4277ef2c23e70db123f SHA256: f7794b5d12dc5d820a162850f4388e2aa80426ad07cb221799cf941c682ab501 PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x10014BD
timedatestamp…..: 0x48025186 (Sun Apr 13 20:31:34 2008)
machinetype…….: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x10D0 0x1200 6.00 7d33d24893e1db0fa0ecbd7a8fa637bd
.data 0x3000 0x6C 0x200 0.20 86a789a893c60d5e207d053188cdc250
.rsrc 0x4000 0x1B30 0x1C00 7.15 54488850c25258396b2c9492c36b0bd5

( 0 imports )


( 0 exports )
TrID  : File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) ThreatExpert: http://www.threatexpert.com/report.aspx?md5=bf2466b3e18e970d8a976fb95fc1ca85 ssdeep: 384:ggHUJZXmtGDWkzLWT4a8WfMptsN0BhgO49:338z4zRfMpy0BF4 sigcheck: publisher….: Microsoft Corporation
copyright….: © Microsoft Corporation. All rights reserved.
product……: Microsoft_ Windows_ Operating System
description..: LSA Shell (Export Version)
original name: lsass.exe
internal name: lsass.exe
file version.: 5.1.2600.5512 (xpsp.080413-2113)
comments…..: n/a
signers……: -
signing date.: -
verified…..: Unsigned
PEiD  : - PDFiD : ['-', None, None] RDS   : NSRL Reference Data Set
- =========================== File lsass.exe received on 2010.03.15 22:10:54 (UTC) Antivirus Version Last Update Result a-squared 4.5.0.50 2010.03.15 - AhnLab-V3 5.0.0.2 2010.03.15 - AntiVir 8.2.1.180 2010.03.15 - Antiy-AVL 2.0.3.7 2010.03.15 - Authentium 5.2.0.5 2010.03.15 - Avast 4.8.1351.0 2010.03.15 - Avast5 5.0.332.0 2010.03.15 - AVG 9.0.0.787 2010.03.15 - BitDefender 7.2 2010.03.15 - CAT-QuickHeal 10.00 2010.03.15 - ClamAV 0.96.0.0-git 2010.03.15 - Comodo 4277 2010.03.15 - DrWeb 5.0.1.12222 2010.03.15 - eSafe 7.0.17.0 2010.03.15 - eTrust-Vet 35.2.7364 2010.03.15 - F-Prot 4.5.1.85 2010.03.15 - F-Secure 9.0.15370.0 2010.03.15 - Fortinet 4.0.14.0 2010.03.15 - GData 19 2010.03.15 - Ikarus T3.1.1.80.0 2010.03.15 - Jiangmin 13.0.900 2010.03.15 - K7AntiVirus 7.10.998 2010.03.15 - Kaspersky 7.0.0.125 2010.03.15 - McAfee 5921 2010.03.15 - McAfee+Artemis 5921 2010.03.15 - McAfee-GW-Edition 6.8.5 2010.03.15 - Microsoft 1.5502 2010.03.12 - NOD32 4947 2010.03.15 - Norman 6.04.08 2010.03.15 - nProtect 2009.1.8.0 2010.03.15 - Panda 10.0.2.2 2010.03.15 - PCTools 7.0.3.5 2010.03.15 - Prevx 3.0 2010.03.15 - Rising 22.39.00.04 2010.03.15 - Sophos 4.51.0 2010.03.15 - Sunbelt 5902 2010.03.15 - Symantec 20091.2.0.41 2010.03.15 - TheHacker 6.5.2.0.233 2010.03.15 - TrendMicro 9.120.0.1004 2010.03.15 - VBA32 3.12.12.2 2010.03.14 - ViRobot 2010.3.15.2228 2010.03.15 - VirusBuster 5.0.27.0 2010.03.15 - Additional information File size: 11776 bytes MD5   : 8a590ea109b5e0c7629e022f8a6b17c5 SHA1  : e2150bcd6ba44297e8335dbb2bd9d2a11ce5583a SHA256: 0e829c38ca282840fe468b2d9c2fc6f41805c06785ea111236d28ee7075ae8c5 PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1409
timedatestamp…..: 0x3B7D8373 (Fri Aug 17 22:49:55 2001)
machinetype…….: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xABA 0xC00 5.63 5e7e377bcfb4e0c2236642e6062da504
.data 0x2000 0x18 0x200 0.08 0945adc07006da56d9d8ce4836a46ac0
.rsrc 0x3000 0x1B30 0x1C00 7.15 90ffc61839796666925e5a5a76a79a70

( 0 imports )


( 0 exports )
TrID  : File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) ThreatExpert: http://www.threatexpert.com/report.aspx?md5=8a590ea109b5e0c7629e022f8a6b17c5 ssdeep: 192:XmuWp5b8OxP4QqhznNPzWWLWVwAJ+a8FgfMptZuNM/B7PSECbJio9Dp5/WZWIASs:W1ZahL1zWWLWP4a8WfMptsN0B hgO49 sigcheck: publisher….: Microsoft Corporation
copyright….: © Microsoft Corporation. All rights reserved.
product……: Microsoft_ Windows_ Operating System
description..: LSA Shell (Export Version)
original name: lsass.exe
internal name: lsass.exe
file version.: 5.1.2600.0 (xpclient.010817-1148)
comments…..: n/a
signers……: -
signing date.: -
verified…..: Unsigned
PEiD  : - RDS   : NSRL Reference Data Set

( Sony )

Sony VAIO Recover CDs: LSASS.EXEVaio Notebook : LSASS.EXE
( Microsoft )

Implementing and Supporting Microsoft Windows XP Professional: lsass.exeMicrosoft Security Resource Kit: lsass.exeMicrosoft TechNet Trial Software 2002 Volume 1: lsass.exeMSDN Disc 2041: lsass.exeMSDN Disc 2428: lsass.exeMSDN Disc 2428.1: lsass.exeMSDN Disc 2428.2: lsass.exeMSDN Disc 2428.4: lsass.exeMSDN Disc 2428.5: lsass.exeMSDN Disc2428.3: lsass.exePlatforms SDKs/DDKs: lsass.exePlatforms, SDK/DDK, Developer Tools: lsass.exeWindows CE .NET Evaluation Software: lsass.exeWindows XP: lsass.exeWindows XP: lsass.exeWindows XP: lsass.exeWindows XP eMbedded Evaluation Software: lsass.exeWindows XP Home Edition: lsass.exeWindows XP Professional: lsass.exe
( Compaq )

Compaq Operating System CD: lsass.exe
( Dell )

Reinstallation CD Microsoft Windows XP Professional: lsass.exe =================================== File 870508C509.dll received on 2010.03.25 16:58:21 (UTC) Antivirus Version Last Update Result a-squared 4.5.0.50 2010.03.25 - AhnLab-V3 5.0.0.2 2010.03.25 - AntiVir 7.10.5.215 2010.03.25 - Antiy-AVL 2.0.3.7 2010.03.24 - Authentium 5.2.0.5 2010.03.25 - Avast 4.8.1351.0 2010.03.25 - Avast5 5.0.332.0 2010.03.25 - AVG 9.0.0.787 2010.03.25 - BitDefender 7.2 2010.03.25 - CAT-QuickHeal 10.00 2010.03.25 - ClamAV 0.96.0.0-git 2010.03.25 - Comodo 4382 2010.03.25 - DrWeb 5.0.1.12222 2010.03.25 - eSafe 7.0.17.0 2010.03.25 - eTrust-Vet 35.2.7388 2010.03.25 - F-Prot 4.5.1.85 2010.03.24 - F-Secure 9.0.15370.0 2010.03.25 - Fortinet 4.0.14.0 2010.03.24 - GData 19 2010.03.25 - Ikarus T3.1.1.80.0 2010.03.25 - Jiangmin 13.0.900 2010.03.25 - K7AntiVirus 7.10.1004 2010.03.22 - Kaspersky 7.0.0.125 2010.03.25 - McAfee 5930 2010.03.24 - McAfee+Artemis 5930 2010.03.24 - McAfee-GW-Edition 6.8.5 2010.03.25 - Microsoft 1.5605 2010.03.25 - NOD32 4974 2010.03.25 - Norman 6.04.10 2010.03.25 - nProtect 2009.1.8.0 2010.03.25 - Panda 10.0.2.2 2010.03.24 - PCTools 7.0.3.5 2010.03.25 - Rising 22.40.03.04 2010.03.25 - Sophos 4.52.0 2010.03.25 - Sunbelt 6082 2010.03.25 - Symantec 20091.2.0.41 2010.03.25 - TheHacker 6.5.2.0.243 2010.03.25 - TrendMicro 9.120.0.1004 2010.03.25 - VBA32 3.12.12.2 2010.03.25 - ViRobot 2010.3.25.2244 2010.03.25 - VirusBuster 5.0.27.0 2010.03.25 - Additional information File size: 80 bytes MD5…: 9dc6d78c68fa4c6b9e7527eb6bc461a7 SHA1..: 3a92419e193c2ce09e6c4d64204d737e69a5a592 SHA256: a0689bfb411c69f8dc4df85d07bf00c673dbaefe06c3d00d59e82616f62839df ssdeep: 3:sl1l3lM9/aNzY+EQCdn:EvCs5EQen
PEiD..: - PEInfo: - RDS…: NSRL Reference Data Set
- pdfid.: - trid..: MS Flight Simulator Aircraft Performance Info (100.0%) sigcheck:
publisher….: n/a
copyright….: n/a
product……: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments…..: n/a
signers……: -
signing date.: -
verified…..: Unsigned
Post #36
I think I missed this one with Trojan in it: This was named explorer.exe (2) in wind ex File explorer.exe received on 2010.02.23 19:42:25 (UTC) Antivirus Version Last Update Result a-squared 4.5.0.50 2010.02.23 - AhnLab-V3 5.0.0.2 2010.02.23 - AntiVir 8.2.1.172 2010.02.23 - Antiy-AVL 2.0.3.7 2010.02.23 Trojan/Win32.Patched.gen Authentium 5.2.0.5 2010.02.23 - Avast 4.8.1351.0 2010.02.23 - AVG 9.0.0.730 2010.02.23 - BitDefender 7.2 2010.02.23 - CAT-QuickHeal 10.00 2010.02.23 - ClamAV 0.96.0.0-git 2010.02.23 - Comodo 4038 2010.02.23 - DrWeb 5.0.1.12222 2010.02.23 - eSafe 7.0.17.0 2010.02.23 - eTrust-Vet 35.2.7323 2010.02.23 - F-Prot 4.5.1.85 2010.02.23 - F-Secure 9.0.15370.0 2010.02.23 - Fortinet 4.0.14.0 2010.02.21 - GData 19 2010.02.23 - Ikarus T3.1.1.80.0 2010.02.23 - Jiangmin 13.0.900 2010.02.23 - K7AntiVirus 7.10.981 2010.02.23 - Kaspersky 7.0.0.125 2010.02.23 - McAfee 5901 2010.02.23 - McAfee+Artemis 5901 2010.02.23 - McAfee-GW-Edition 6.8.5 2010.02.23 Heuristic.LooksLike.Win32.Suspicious.K Microsoft 1.5406 2010.02.23 - NOD32 4891 2010.02.23 - Norman 6.04.08 2010.02.23 - nProtect 2009.1.8.0 2010.02.23 - Panda 10.0.2.2 2010.02.23 - PCTools 7.0.3.5 2010.02.23 - Prevx 3.0 2010.02.23 - Rising 22.34.01.03 2010.02.11 - Sophos 4.50.0 2010.02.23 - Sunbelt 5694 2010.02.23 - Symantec 20091.2.0.41 2010.02.23 - TheHacker [removed].206 2010.02.23 - TrendMicro 9.120.0.1004 2010.02.23 - VBA32 3.12.12.2 2010.02.23 - ViRobot 2010.2.23.2198 2010.02.23 - VirusBuster 5.0.27.0 2010.02.23 - Additional information File size: 1000960 bytes MD5   : 5a26fc6010886d25b3e412493dd95ed8 SHA1  : 8d9775aa1047c2979407f6ee81d9fb9d8874a86c SHA256: 5d8a481acfdbfef783179f89e36d925dccca70fe49ef472a4cc23167f9962e9b PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x12C12
timedatestamp…..: 0x3B7DE06E (Sat Aug 18 05:26:38 2001)
machinetype…….: 0x14C (Intel I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x3CBC0 0x3CC00 6.48 329d41f4defcada66fb4ac776826135c
.data 0x3E000 0x1CA0 0x1C00 0.90 03ec2ef3f827c4feff2df2f5897dad57
.rsrc 0x40000 0xB2270 0xB2400 6.63 be23cbf9ca07e737fee310dd5ff7bea0
.reloc 0xF3000 0x3480 0x3600 6.73 ca92ab90e7fa7acac63ed08ba72f2588

( 13 imports )

> advapi32.dll: RegOpenKeyExW, RegNotifyChangeKeyValue, RegQueryValueExA, RegOpenKeyExA, RegQueryValueW, RegEnumKeyExW, RegCloseKey, RegCreateKeyW, RegDeleteValueW, RegEnumValueW, RegEnumKeyW, RegQueryInfoKeyW, RegQueryValueExW, RegCreateKeyExW, RegSetValueExW, RegSetValueW, GetUserNameW
> browseui.dll: -, -, -, -
> gdi32.dll: GetStockObject, CreatePatternBrush, OffsetViewportOrgEx, GetLayout, CombineRgn, CreateDIBSection, GetTextExtentPoint32W, StretchBlt, SetStretchBltMode, CreateRectRgn, GetClipRgn, IntersectClipRect, GetViewportOrgEx, SetViewportOrgEx, PatBlt, GetBkColor, CreateCompatibleDC, CreateCompatibleBitmap, OffsetWindowOrgEx, DeleteDC, SetBkColor, BitBlt, ExtTextOutW, GetTextExtentPointW, GetClipBox, GetObjectW, CreateRectRgnIndirect, CreateFontIndirectW, SetTextColor, SetBkMode, DeleteObject, GetTextMetricsW, SelectObject, GetDeviceCaps, TranslateCharsetInfo, SelectClipRgn
> kernel32.dll: GetLastError, CreateEventW, GetLocaleInfoW, FreeLibrary, GetSystemDefaultLCID, SetProcessShutdownParameters, ReleaseMutex, CreateMutexW, SetPriorityClass, GetCurrentProcess, GetStartupInfoW, GetCommandLineW, SetErrorMode, LeaveCriticalSection, EnterCriticalSection, CompareFileTime, GetSystemTimeAsFileTime, lstrcpynW, SetThreadPriority, GetCurrentThreadId, GetThreadPriority, GetCurrentThread, GetUserDefaultLangID, Sleep, GetBinaryTypeW, SystemTimeToFileTime, GetLocalTime, GetFileAttributesW, MoveFileW, OpenEventW, FindNextFileW, FindFirstFileW, IsBadCodePtr, SetEvent, GetCurrentProcessId, GetEnvironmentVariableW, lstrcatW, lstrcmpW, UnregisterWait, ResetEvent, GlobalGetAtomNameW, lstrcmpiA, RegisterWaitForSingleObject, GetDateFormatW, GetTimeFormatW, FlushInstructionCache, HeapFree, GetProcessHeap, HeapAlloc, HeapReAlloc, HeapSize, GetUserDefaultLCID, ReadProcessMemory, SetLastError, OpenProcess, InterlockedCompareExchange, LoadLibraryA, WaitForSingleObject, GetTickCount, ExpandEnvironmentStringsW, GetModuleFileNameW, GetPrivateProfileStringW, GetSystemDirectoryW, GetProfileStringW, GetWindowsDirectoryW, SetCurrentDirectoryW, CreateFileW, DeviceIoControl, lstrcmpiW, LocalAlloc, LocalFree, ExitProcess, CreateJobObjectW, CreateThread, CreateProcessW, AssignProcessToJobObject, ResumeThread, TerminateProcess, DelayLoadFailureHook, TerminateThread, GetQueuedCompletionStatus, CreateIoCompletionPort, SetInformationJobObject, CloseHandle, LoadLibraryW, GetModuleHandleW, GetProcAddress, DeleteCriticalSection, HeapDestroy, InitializeCriticalSection, lstrlenW, lstrcpyW, InterlockedDecrement, InterlockedIncrement, GetFileAttributesExW, MulDiv, GetLongPathNameW, GetProcessTimes, GetVersionExA, GetModuleHandleA, InterlockedExchange, GlobalFree, GlobalAlloc, CreateEventA, FindClose
> msvcrt.dll: _except_handler3, realloc, _ftol, memmove, _itow, free
> ntdll.dll: NtQueryInformationProcess, RtlNtStatusToDosError
> ole32.dll: CoUninitialize, CoCreateInstance, OleInitialize, CoRegisterClassObject, CoMarshalInterThreadInterfaceInStream, DoDragDrop, CoInitializeEx, OleUninitialize, RevokeDragDrop, RegisterDragDrop, CoFreeUnusedLibraries, CoRevokeClassObject
> oleaut32.dll: -, -
> shdocvw.dll: -, -, -
> shell32.dll: SHBindToParent, -, -, -, -, -, -, -, -, -, -, -, -, SHGetDesktopFolder, SHChangeNotify, SHAddToRecentDocs, -, -, -, DuplicateIcon, -, -, -, -, -, -, -, -, SHUpdateRecycleBinIcon, SHGetFolderLocation, SHGetPathFromIDListA, -, -, -, -, -, -, SHGetPathFromIDListW, -, -, -, -, -, -, -, ExtractIconExW, -, -, -, -, -, SHGetFolderPathW, -, SHGetSpecialFolderLocation, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, SHGetSpecialFolderPathW, ShellExecuteExW, -, -, -, -, -, -, -
> shlwapi.dll: -, StrCmpNW, -, -, -, -, -, -, -, -, AssocCreate, -, -, PathIsNetworkPathW, SHQueryValueExW, -, -, -, StrRetToStrW, StrRetToBufW, -, -, -, -, -, StrCpyW, -, StrCmpIW, -, -, -, -, -, -, SHGetValueW, -, wnsprintfW, PathUnquoteSpacesW, PathGetArgsW, -, SHDeleteEmptyKeyW, PathRemoveFileSpecW, PathFindFileNameW, StrCatBuffW, PathQuoteSpacesW, PathAppendW, StrCmpNIW, PathRemoveBlanksW, PathRemoveArgsW, StrStrIW, -, StrToIntW, SHRegGetBoolUSValueW, SHRegWriteUSValueW, SHRegCloseUSKey, SHRegCreateUSKeyW, SHRegGetUSValueW, -, -, -, -, -, PathCombineW, SHSetValueW, -, -, -, SHStrDupW, PathIsPrefixW, PathParseIconLocationW, AssocQueryKeyW, StrCatW, -, AssocQueryStringW, StrCmpW, -, -, -, -, -, -, -, -, SHRegQueryUSValueW, SHRegOpenUSKeyW, SHRegSetUSValueW, PathFindExtensionW, PathIsDirectoryW, -, StrChrW, -, PathFileExistsW, PathGetDriveNumberW, -, -, -, PathStripToRootW, -, -, SHOpenRegStream2W, -, StrCpyNW, -, -, StrDupW, SHDeleteValueW, SHDeleteKeyW
> user32.dll: IsHungAppWindow, EndTask, SwitchToThisWindow, InternalGetWindowText, GetDCEx, SetCursorPos, ChildWindowFromPoint, EndDialog, SendDlgItemMessageW, ChangeDisplaySettingsW, RegisterHotKey, UnregisterHotKey, SetCursor, SendMessageTimeoutW, GetWindowPlacement, LoadImageW, SetWindowRgn, IntersectRect, OffsetRect, EnumDisplayMonitors, RedrawWindow, SubtractRect, TranslateAcceleratorW, TranslateMessage, DispatchMessageW, WaitMessage, InflateRect, CallWindowProcW, GetDlgCtrlID, SetCapture, CopyRect, MonitorFromRect, MonitorFromPoint, RegisterClassW, SetPropW, GetWindowLongA, SetWindowLongW, FillRect, GetCursorPos, PtInRect, GetClassNameW, EndPaint, SetWindowTextW, GetAsyncKeyState, InvalidateRect, GetWindow, ShowWindowAsync, TrackPopupMenuEx, UpdateWindow, DestroyIcon, IsRectEmpty, SetActiveWindow, SetTimer, GetMenuItemID, TrackPopupMenu, DestroyWindow, SendMessageCallbackW, GetClassLongW, LoadIconW, SetScrollPos, ShowWindow, BringWindowToTop, GetDesktopWindow, CascadeWindows, TileWindows, GetScrollInfo, GetMenuItemCount, ModifyMenuW, InsertMenuW, IsWindowEnabled, GetMenuState, LoadCursorW, GetParent, OpenInputDesktop, CloseDesktop, EnumWindows, IsWindowVisible, GetClientRect, UnionRect, EqualRect, GetWindowThreadProcessId, GetForegroundWindow, GetSysColor, DrawTextW, KillTimer, GetClassInfoExW, DefWindowProcW, RegisterClassExW, GetIconInfo, SetScrollInfo, GetLastActivePopup, SetForegroundWindow, IsWindow, GetSystemMenu, IsIconic, IsZoomed, EnableMenuItem, SetMenuDefaultItem, MonitorFromWindow, GetMonitorInfoW, GetWindowInfo, GetFocus, SetFocus, MapWindowPoints, ScreenToClient, ClientToScreen, GetWindowRect, SetWindowPos, DeleteMenu, GetMenuItemInfoW, wsprintfW, SetMenuItemInfoW, CharUpperBuffW, PeekMessageW, PostMessageW, EnumDisplayDevicesW, EnumDisplaySettingsExW, GetDC, ReleaseDC, LoadStringW, MessageBoxW, GetShellWindow, FindWindowW, SystemParametersInfoW, GetSystemMetrics, GetDoubleClickTime, CharNextW, CreatePopupMenu, GetMenuDefaultItem, DestroyMenu, GetKeyState, RegisterWindowMessageW, SendMessageW, GetWindowLongW, EnumChildWindows, CreateWindowExW, DialogBoxParamW, MsgWaitForMultipleObjects, CharNextA, RegisterClipboardFormatW, EndDeferWindowPos, DeferWindowPos, BeginDeferWindowPos, PrintWindow, SetClassLongW, GetPropW, GetNextDlgGroupItem, GetNextDlgTabItem, ChildWindowFromPointEx, IsChild, NotifyWinEvent, TrackMouseEvent, GetCapture, GetAncestor, CharUpperW, SetWindowLongA, DrawCaption, RemovePropW, GetDlgItem, GetSysColorBrush, AllowSetForegroundWindow, LoadMenuW, GetSubMenu, RemoveMenu, SetParent, CheckDlgButton, GetMessagePos, EnableWindow, IsDlgButtonChecked, GetDlgItemInt, MoveWindow, CopyIcon, AdjustWindowRectEx, DrawFocusRect, DrawEdge, ExitWindowsEx, WindowFromPoint, SetRect, LoadAcceleratorsW, LoadBitmapW, SendNotifyMessageW, AppendMenuW, SetWindowPlacement, CheckMenuItem, MessageBeep, GetActiveWindow, BeginPaint, PostQuitMessage, SetDlgItemInt
> uxtheme.dll: GetThemeBackgroundContentRect, GetThemeBool, GetThemePartSize, DrawThemeParentBackground, OpenThemeData, CloseThemeData, DrawThemeBackground, SetWindowTheme, GetThemeTextExtent, DrawThemeText, IsAppThemed, GetThemeRect, GetThemeFont, GetThemeColor, GetThemeMargins, GetThemeBackgroundRegion, -

( 0 exports )
TrID  : File type identification
Win64 Executable Generic (80.9%)
Win32 Executable Generic (8.0%)
Win32 Dynamic Link Library (generic) (7.1%)
Generic Win/DOS Executable (1.8%)
DOS Executable Generic (1.8%) ThreatExpert: http://www.threatexpert.com/report.aspx?md5=5a26fc6010886d25b3e412493dd95ed8 ssdeep: 12288:6rOUP1aqsY5FI475+QRo7jlTncW/K1oHW62Rkf8f+skzax1/g/J/v:6rsqpI05D+lbQz1kf8f+skK1/g/J/ sigcheck: publisher….: Microsoft Corporation
copyright….: © Microsoft Corporation. All rights reserved.
product……: Microsoft_ Windows_ Operating System
description..: Windows Explorer
original name: EXPLORER.EXE
internal name: explorer
file version.: 6.00.2600.0000 (xpclient.010817-1148)
comments…..: n/a
signers……: -
signing date.: -
verified…..: Unsigned
PEiD  : - RDS   : NSRL Reference Data Set

( Microsoft )

Implementing and Supporting Microsoft Windows XP Professional: explorer.exeMicrosoft Security Resource Kit: explorer.exeMicrosoft TechNet Trial Software 2002 Volume 1: explorer.exeMSDN Disc 2041: explorer.exeMSDN Disc 2428: explorer.exeMSDN Disc 2428.1: explorer.exeMSDN Disc 2428.2: explorer.exeMSDN Disc 2428.4: explorer.exeMSDN Disc 2428.5: explorer.exeMSDN Disc2428.3: explorer.exePlatforms SDKs/DDKs: explorer.exePlatforms, SDK/DDK, Developer Tools: explorer.exeWindows CE .NET Evaluation Software: explorer.exeWindows XP: explorer.exeWindows XP: explorer.exeWindows XP: explorer.exeWindows XP eMbedded Evaluation Software: explorer.exeWindows XP . Home Edition: explorer.exeWindows XP Professional: explorer.exe
( Compaq )

Compaq Operating System CD: explorer.exe
( Dell )

Reinstallation CD Microsoft Windows XP Professional: explorer.exe
Post #37
Hi. Also the Start - Search function no longer works. There is no text in the left sidebar: I can't type in the search parameters Had you seen - in my original post -, there was a start menu(2) entry in the Hijack this log? The Start - Run is also disabled. I get the "insufficient permissions" error when I test it. ( I just typed in regeedit/enter to see if was functional: it is not. )
Post #38
Okay. I'd like for you to try the program below and see if that helps with some of the windows issues you are experiencing, and I'd also like to grab a new GMER log, and a new OTL log. I'll post instructions for that below.


Dial-A-Fix

We need to repair some of windows' internal registration settings

  • Please download Dial-A-Fix from one of the following mirrors:
  • Extract the zip file to your desktop.
  • Double click Dial-a-Fix.exe to start the program.
  • Press the green double checkmark box (Looks like this: [external image: Posted Image])
  • UNcheck Empty Temp Folders, as well as Adjust Time/Date in the prep section. The prep section should then look like this:

    [external image: Posted Image]

    [external image: Posted Image]
  • Click on Go.
  • Exit/Close Dial-A-Fix.
After you've done the above please go ahead and restart your system.



NEXT:


Please delete the current copy of GMER that you have and download a fresh copy.

Please download GMER from one of the following locations and save it to your desktop:
  • Main Mirror
    This version will download a randomly named file (Recommended)
  • Zipped Mirror
    This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.
  • Disconnect from the Internet and close all running programs.
  • Temporarily disable any real-time active protection
    so your security programs will not conflict with gmer's driver.
  • Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.
  • Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.

    [external image: Posted Image]
  • GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)
  • If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system…click NO.
  • Now click the Scan button. If you see a rootkit warning window, click OK.
  • When the scan is finished, click the Save… button to save the scan results to your Desktop. Save the file as gmer.log.
  • Click the Copy button and paste the results into your next reply.
  • Exit GMER and re-enable all active protection when done.

NEXT:



Re-Running OTL
  • Please double click on the OTL icon which should be located on your desktop. This will run OTL. Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Check the boxes beside LOP Check and Purity Check.
  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open up a notepad window called OTL.txt.
    Note: This log can be located in the OTL folder on you C:\ drive if they fail to open automatically.
  • Please copy (Edit->Select All, Edit->Copy) the contents of the OTL.txt file, and post it with your next reply.

NEXT:



Please make sure you include the following items in your next post:

1. Any comments or questions you may have that you'd like for me to answer in my next post to you.
2. A confirmation that you have run Dial-A-Fix and have restarted your computer after running it.
3. The log that was produced after running a new GMER scan.
4. The log that was produced after running a new OTL scan.
5. An update on how your computer is currently running.

It would be helpful if you could answer each question in the order asked, as well as numbering your answers.
Post #39
running dial-a-fix: 1.the MSI section is greyed out. (fix window installer, etc) 2. Quote [An error occured during registration of the file C:/WINDOWS\system32\scrrun.dll (version 5.7.0.18066). The next dialog will contain an error code and possible suggestions.[ Quote [Error 0x80004005: Unspecified error. this object might be corrupted (try SFC/purgecache and SFC/scannow in the tools dialog) or try to find a replacement for this file.] 3. finished the scan. Rebooting with the partial work done. Should i proceed with next steps GMER etc?
Post #41
hi. gmer log in 2 posts. LENGTH)

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-03-25 13:45:11
Windows 5.1.2600 Service Pack 3
Running: ymzybyk7.exe; Driver: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fxtdypog.sys


—- Kernel IAT/EAT - GMER 1.0.15 —-

IAT \SystemRoot\System32\DRIVERS\tcpip.sys[NDIS.SYS!NdisCloseAdapter] [F753A300] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper Driver/Tall Emu Pty Ltd)
IAT \SystemRoot\System32\DRIVERS\tcpip.sys[NDIS.SYS!NdisOpenAdapter] [F753A360] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper Driver/Tall Emu Pty Ltd)
IAT \SystemRoot\System32\DRIVERS\tcpip.sys[NDIS.SYS!NdisRegisterProtocol] [F753A610] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper Driver/Tall Emu Pty Ltd)
IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisRegisterProtocol] [F753A610] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper Driver/Tall Emu Pty Ltd)
IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisDeregisterProtocol] [F753A650] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper Driver/Tall Emu Pty Ltd)
IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisCloseAdapter] [F753A300] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper Driver/Tall Emu Pty Ltd)
IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisOpenAdapter] [F753A360] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper Driver/Tall Emu Pty Ltd)

—- Devices - GMER 1.0.15 —-

Device \Driver\Tcpip \Device\Ip OAmon.sys (TDI Helper Driver/Tall Emu)
Device \Driver\Tcpip \Device\Tcp OAmon.sys (TDI Helper Driver/Tall Emu)
Device \Driver\Tcpip \Device\Udp OAmon.sys (TDI Helper Driver/Tall Emu)
Device \Driver\Tcpip \Device\RawIp OAmon.sys (TDI Helper Driver/Tall Emu)
Device \Driver\Tcpip \Device\IPMULTICAST OAmon.sys (TDI Helper Driver/Tall Emu)

—- Registry - GMER 1.0.15 —-

Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\DS@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\DS\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\DS\ObjectNames@Directory Service Object 7680
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\LSA@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\LSA\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\LSA\ObjectNames@PolicyObject 5632
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\LSA\ObjectNames@SecretObject 5648
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\LSA\ObjectNames@TrustedDomainObject 5664
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\LSA\ObjectNames@UserAccountObject 5680
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\NetDDE Object@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\NetDDE Object\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\NetDDE Object\ObjectNames@DDE Share 7424
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\SC Manager@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\SC Manager\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\SC Manager\ObjectNames@SC_MANAGER Object 7168
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\SC Manager\ObjectNames@SERVICE Object 7184
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security Account Manager@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security Account Manager\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_ALIAS 5424
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_DOMAIN 5392
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_GROUP 5408
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_SERVER 5376
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_USER 5440
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Spooler@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Spooler\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Spooler\ObjectNames@Document 6944
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Spooler\ObjectNames@Printer 6928
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Spooler\ObjectNames@Server 6912
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg@start 1
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg@type 1
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg@group file system
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg@imagepath \systemroot\system32\drivers\gasfkylkbtcsbo.sys
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main@aid 10063
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main@sid 0
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main@cmddelay 14400
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main\delete (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main\delete@C:\DOCUME~1\JEAN-P~1\LOCALS~1\Temp\gasfkyximcrvgvxo.tmp
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main\delete@C:\DOCUME~1\JEAN-P~1\LOCALS~1\Temp\gasfkyjcxwtlqppg.tmp
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main\injector (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main\injector@* gasfkywsp8.dll
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main\tasks (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\modules (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\[removed] \systemroot\system32\drivers\gasfkylkbtcsbo.sys
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\[removed] \systemroot\system32\gasfkydqmutslp.dll
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\[removed] \systemroot\system32\gasfkyoaemycxh.dat
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\[removed] \systemroot\system32\gasfkyrinbmrxb.dll
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\[removed] \systemroot\system32\gasfkydbfcnxyw.dat
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\[removed] \systemroot\system32\gasfkyckfhmais.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS\ObjectNames
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS\ObjectNames@Directory Service Object 7680
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames@PolicyObject 5632
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames@SecretObject 5648
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames@TrustedDomainObject 5664
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames@UserAccountObject 5680
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object\ObjectNames
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object\ObjectNames@DDE Share 7424
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames@SC_MANAGER Object 7168
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames@SERVICE Object 7184
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_ALIAS 5424
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_DOMAIN 5392
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_GROUP 5408
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_SERVER 5376
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_USER 5440
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames@Document 6944
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames@Printer 6928
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames@Server 6912
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\DS@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\DS\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\DS\ObjectNames@Directory Service Object 7680
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\LSA@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\LSA\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\LSA\ObjectNames@PolicyObject 5632
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\LSA\ObjectNames@SecretObject 5648
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\LSA\ObjectNames@TrustedDomainObject 5664
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\LSA\ObjectNames@UserAccountObject 5680
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\NetDDE Object@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\NetDDE Object\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\NetDDE Object\ObjectNames@DDE Share 7424
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\SC Manager@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\SC Manager\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\SC Manager\ObjectNames@SC_MANAGER Object 7168
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\SC Manager\ObjectNames@SERVICE Object 7184
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security Account Manager@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security Account Manager\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_ALIAS 5424
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_DOMAIN 5392
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_GROUP 5408
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_SERVER 5376
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security Account Manager\ObjectNames@SAM_USER 5440
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Spooler@ParameterMessageFile %SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Spooler\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Spooler\ObjectNames@Document 6944
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Spooler\ObjectNames@Printer 6928
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Spooler\ObjectNames@Server 6912
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System@OODEFRAG10.00.00.01WORKSTATION D98EFB25476BFE2C01EA2D0BE48CF6D8B52E8896AABC362E08A63B1349314E4D0E1266FB30EB497D
C3A1AADDF295FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9
E127BECC74CFEBC9E127BECC74CA6A0AC4980AC79338EDD5E5BE2F6E667A2D97226D213B555A6A0AC
4980AC7933D8672C9BB043E433B3B421ED62743119E59607255100CEBB5E0D9120ED5DE5686809E4F
BC84047FE712BEF8818F04D4FD9C94CA0D600CA58D746BCB96A45874069BDAB5BE2B451B3D7F84956
BFF91980CBBB2A4F506AA0136A55052019483B378C9474014FCC992901F1D008E411AB7FDCA693702
4388A5F6079CF3E5771FB7AE5EE37A383CA7D6C683D3143B4CC635715968438577388606AC20975A4
620A6D6E056E7218821D3A71D6962480D7E043DC6D7ACC94BAD9F19A181E99A44FE8A582611A8C4A5
EDB09608D3135BE700A3384DE76C9AC42879F69B282F21F805EEEE1E23E07FA5B617EDD06B5FC09E8
87CCBD74FD3D8F515A2C339F2D3D80D0F6C632BB636B2E0B1CF6F8B85C6D1DA646E71F8B1AAAD542D
F8CB44218A7583300607A7313B70F12B902A2F0E273DD25F6122252D9093A06EA6A924F4157DA298E
A2A8645F5B672BB0E2AFCD89EACFF1110B26D0CEC39C9E922455D0ADE35FCC79A60B3D5A3C2AA1361
1D94314289DAF4AC6ECDC8D397DA3AFC96625E1D9E1C95A3CD70
Reg HKLM\SOFTWARE\Classes\.3ivx@ Miro.1
Reg HKLM\SOFTWARE\Classes\.a52@ VLC.a52
Reg HKLM\SOFTWARE\Classes\.acp\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.acp\[removed].1
Reg HKLM\SOFTWARE\Classes\.anx@ Miro.1
Reg HKLM\SOFTWARE\Classes\.AudioCD\PersistentHandler
Reg HKLM\SOFTWARE\Classes\.AudioCD\PersistentHandler@ {098f2470-bae0-11cd-b579-08002b30bfeb}
Reg HKLM\SOFTWARE\Classes\.AUP@ Audacity.Project
Reg HKLM\SOFTWARE\Classes\.awb\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.awb\OpenWithProgIds@RealPlayer.AMR_WB.10
Reg HKLM\SOFTWARE\Classes\.B5@ Chinese.Big5.File
Reg HKLM\SOFTWARE\Classes\.B5\ShellNew
Reg HKLM\SOFTWARE\Classes\.B5\ShellNew@NullFile
Reg HKLM\SOFTWARE\Classes\.bms@ bmsfile
Reg HKLM\SOFTWARE\Classes\.BUP@ BUP_auto_file
Reg HKLM\SOFTWARE\Classes\.CTT@ MessengerContactList
Reg HKLM\SOFTWARE\Classes\.cue@ VLC.cue
Reg HKLM\SOFTWARE\Classes\.democracy@ Miro.1
Reg HKLM\SOFTWARE\Classes\.disabled@ SpybotSD.DisabledFile
Reg HKLM\SOFTWARE\Classes\.dss@ dssfile
Reg HKLM\SOFTWARE\Classes\.dts@ VLC.dts
Reg HKLM\SOFTWARE\Classes\.dvd\PersistentHandler
Reg HKLM\SOFTWARE\Classes\.dvd\PersistentHandler@ {098f2470-bae0-11cd-b579-08002b30bfeb}
Reg HKLM\SOFTWARE\Classes\.EVR\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.EVR\[removed].10
Reg HKLM\SOFTWARE\Classes\.EVRC\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.EVRC\[removed].10
Reg HKLM\SOFTWARE\Classes\.flac@ VLC.flac
Reg HKLM\SOFTWARE\Classes\.flv\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.flv\[removed].6
Reg HKLM\SOFTWARE\Classes\.Folder\PersistentHandler
Reg HKLM\SOFTWARE\Classes\.Folder\PersistentHandler@ {098f2470-bae0-11cd-b579-08002b30bfeb}
Reg HKLM\SOFTWARE\Classes\.GB@ Chinese.GB.File
Reg HKLM\SOFTWARE\Classes\.GB\ShellNew
Reg HKLM\SOFTWARE\Classes\.GB\ShellNew@NullFile
Reg HKLM\SOFTWARE\Classes\.icb@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.icb@ Photoshop.TGAFile.9
Reg HKLM\SOFTWARE\Classes\.ivr\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.ivr\[removed].6
Reg HKLM\SOFTWARE\Classes\.kml@Content Type application/vnd.google-earth.kml+xml
Reg HKLM\SOFTWARE\Classes\.kml@ Google Earth.kmlfile
Reg HKLM\SOFTWARE\Classes\.kml\Google Earth.kmlfile
Reg HKLM\SOFTWARE\Classes\.kml\Google Earth.kmlfile\ShellNew
Reg HKLM\SOFTWARE\Classes\.kmz@Content Type application/vnd.google-earth.kmz
Reg HKLM\SOFTWARE\Classes\.kmz@ Google Earth.kmzfile
Reg HKLM\SOFTWARE\Classes\.kmz\Google Earth.kmzfile
Reg HKLM\SOFTWARE\Classes\.kmz\Google Earth.kmzfile\ShellNew
Reg HKLM\SOFTWARE\Classes\.mbam@ mbam.script
Reg HKLM\SOFTWARE\Classes\.meo@ meofile
Reg HKLM\SOFTWARE\Classes\.mhtm@Content Type message/rfc822
Reg HKLM\SOFTWARE\Classes\.miro@ Miro.1
Reg HKLM\SOFTWARE\Classes\.mka@ VLC.mka
Reg HKLM\SOFTWARE\Classes\.mkv@ VLC.mkv
Reg HKLM\SOFTWARE\Classes\.moh@ mohfile
Reg HKLM\SOFTWARE\Classes\.mp1@ VLC.mp1
Reg HKLM\SOFTWARE\Classes\.mp1\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.mp1\OpenWithProgIds@RealPlayer.MP1.6
Reg HKLM\SOFTWARE\Classes\.mpdp@ mpdpfile
Reg HKLM\SOFTWARE\Classes\.mpeg1@ VLC.mpeg1
Reg HKLM\SOFTWARE\Classes\.mpeg2@ VLC.mpeg2
Reg HKLM\SOFTWARE\Classes\.mpeg4@ VLC.mpeg4
Reg HKLM\SOFTWARE\Classes\.mpga\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.mpga\[removed].6
Reg HKLM\SOFTWARE\Classes\.msam@ marketsamurai.Project
Reg HKLM\SOFTWARE\Classes\.msam@Content Type application/marketsamurai.project-file
Reg HKLM\SOFTWARE\Classes\.msam\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.msam\[removed]
Reg HKLM\SOFTWARE\Classes\.NJX@ NJStar.Document
Reg HKLM\SOFTWARE\Classes\.NJX\ShellNew
Reg HKLM\SOFTWARE\Classes\.NJX\ShellNew@NullFile
Reg HKLM\SOFTWARE\Classes\.nsv@ Miro.1
Reg HKLM\SOFTWARE\Classes\.ogg@ VLC.ogg
Reg HKLM\SOFTWARE\Classes\.ogm@ VLC.ogm
Reg HKLM\SOFTWARE\Classes\.[removed] Ogg media file
Reg HKLM\SOFTWARE\Classes\.ogm\ShellEx
Reg HKLM\SOFTWARE\Classes\.ogm\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}
Reg HKLM\SOFTWARE\Classes\.ogm\ShellEx\{BB2E617C-0920-11D1-9A0B-00C04FC2D6C1}@ {c5a40261-cd64-4ccf-84cb-c394da41d590}
Reg HKLM\SOFTWARE\Classes\.pcd@ Photoshop.PCDFile.9
Reg HKLM\SOFTWARE\Classes\.pce@ PCEFILE
Reg HKLM\SOFTWARE\Classes\.pcx@ Photoshop.PCXFile.9
Reg HKLM\SOFTWARE\Classes\.pdd@ Photoshop.PDDFile.9
Reg HKLM\SOFTWARE\Classes\.pdp@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.pdp@ Photoshop.PDPFile.9
Reg HKLM\SOFTWARE\Classes\.pva@ Miro.1
Reg HKLM\SOFTWARE\Classes\.pxr@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.pxr@ Photoshop.PXRFile.9
Reg HKLM\SOFTWARE\Classes\.ra\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.ra\[removed].6
Reg HKLM\SOFTWARE\Classes\.ram\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.ram\[removed].6
Reg HKLM\SOFTWARE\Classes\.raw@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.raw@ Photoshop.RAWFile.9
Reg HKLM\SOFTWARE\Classes\.rax\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rax\[removed].6
Reg HKLM\SOFTWARE\Classes\.rjt\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rjt\[removed].1
Reg HKLM\SOFTWARE\Classes\.rm\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rm\[removed].6
Reg HKLM\SOFTWARE\Classes\.rmj\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rmj\[removed].1
Reg HKLM\SOFTWARE\Classes\.rmm\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rmm\[removed].6
Reg HKLM\SOFTWARE\Classes\.rms\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rms\[removed].6
Reg HKLM\SOFTWARE\Classes\.rmvb\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rmvb\[removed].6
Reg HKLM\SOFTWARE\Classes\.rmx\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rmx\[removed].1
Reg HKLM\SOFTWARE\Classes\.rnx\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rnx\[removed].6
Reg HKLM\SOFTWARE\Classes\.rp\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rp\[removed].6
Reg HKLM\SOFTWARE\Classes\.rsml\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rsml\[removed].6
Reg HKLM\SOFTWARE\Classes\.rt\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rt\[removed].6
Reg HKLM\SOFTWARE\Classes\.rv\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rv\[removed].6
Reg HKLM\SOFTWARE\Classes\.rvx\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rvx\[removed].6
Reg HKLM\SOFTWARE\Classes\.sbe@ SpybotSD.SBEFile
Reg HKLM\SOFTWARE\Classes\.sbi@ SpybotSD.SBIFile
Reg HKLM\SOFTWARE\Classes\.sbs@ SpybotSD.SBSFile
Reg HKLM\SOFTWARE\Classes\.sis@ Sandra.Script
Reg HKLM\SOFTWARE\Classes\.sis@Content Type text/plain
Reg HKLM\SOFTWARE\Classes\.sis@PerceivedType text
Reg HKLM\SOFTWARE\Classes\.sis@shellex\{8895b1c6-b41f-4c1c-a562-0d564250836f} {1531d583-8375-4d3f-b5fb-d23bbd169f22}
Reg HKLM\SOFTWARE\Classes\.spx@ VLC.spx
Reg HKLM\SOFTWARE\Classes\.ssm\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.ssm\OpenWithProgIds@SSM
Reg HKLM\SOFTWARE\Classes\.stcp@ STGuru Code Conversion Pack
Reg HKLM\SOFTWARE\Classes\.stcp@Content Type application/stcp
Reg HKLM\SOFTWARE\Classes\.stcp\ShellNew
Reg HKLM\SOFTWARE\Classes\.stcp\ShellNew@NullFile
Reg HKLM\SOFTWARE\Classes\.tnfo@ SpybotSD.TInfoFile
Reg HKLM\SOFTWARE\Classes\.ts@ VLC.ts
Reg HKLM\SOFTWARE\Classes\.uti@ SpybotSD.UTIFile
Reg HKLM\SOFTWARE\Classes\.uts@ SpybotSD.UTSFile
Reg HKLM\SOFTWARE\Classes\.vda@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.vda@ Photoshop.TGAFile.9
Reg HKLM\SOFTWARE\Classes\.vlc@ VLC.vlc
Reg HKLM\SOFTWARE\Classes\.VOB@ VLC.vob
Reg HKLM\SOFTWARE\Classes\.[removed] VOB_auto_file
Reg HKLM\SOFTWARE\Classes\.vst@ Photoshop.TGAFile.9
Reg HKLM\SOFTWARE\Classes\.vst@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.x2@ wipe.Document
Reg HKLM\SOFTWARE\Classes\.xpl\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.xpl\[removed].6
Reg HKLM\SOFTWARE\Classes\.xvid@ Miro.1
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2@ ActiveSkin 4.3 Control
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2\CLSID
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2\CLSID@ {BA8C584B-209C-4d54-8BB1-8AB5F1DCA18E}
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2\CurVer
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2\CurVer@ ActiveSkin4.Skin.1
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2.1@ ActiveSkin 4.3 Control
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2.1\CLSID
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2.1\CLSID@ {BA8C584B-209C-4d54-8BB1-8AB5F1DCA18E}
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2@ SkinLabel 4.3 Control
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2\CLSID
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2\CLSID@ {D1698320-77BD-4776-96FD-C3C8D71E57E2}
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2\CurVer
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2\CurVer@ ActiveSkin4.SkinLabel2.1
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2.1@ SkinLabel 4.3 Control
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2.1\CLSID
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2.1\CLSID@ {D1698320-77BD-4776-96FD-C3C8D71E57E2}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash@ Splash Control
Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash\CLSID
Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash\CLSID@ {6241AF3F-2B41-41AD-A268-68CD710D34C2}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash\CurVer
Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash\CurVer@ ActiveSplash.Splash.1
Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash.1@ Splash Control
Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash.1\CLSID
Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash.1\CLSID@ {6241AF3F-2B41-41AD-A268-68CD710D34C2}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects@ SplashObjects Class
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects\CLSID
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects\CLSID@ {D4D72717-D96A-4BA1-A136-EADB379BE963}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects\CurVer
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects\CurVer@ ActiveSplash.SplashObjects.1
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects.1@ SplashObjects Class
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects.1\CLSID
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects.1\CLSID@ {D4D72717-D96A-4BA1-A136-EADB379BE963}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture@ SplashPicture Class
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture\CLSID
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture\CLSID@ {D1B5603A-54B5-4C23-BA4B-DEAA204AF07C}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture\CurVer
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture\CurVer@ ActiveSplash.SplashPicture.1
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture.1@ SplashPicture Class
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture.1\CLSID
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture.1\CLSID@ {D1B5603A-54B5-4C23-BA4B-DEAA204AF07C}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText@ SplashText Object
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText\CLSID
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText\CLSID@ {D88797FA-4784-4B40-8C5A-C4626297EC0E}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText\CurVer
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText\CurVer@ ActiveSplash.SplashText.1
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText.1@ SplashText Object
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText.1\CLSID
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText.1\CLSID@ {D88797FA-4784-4B40-8C5A-C4626297EC0E}
Reg HKLM\SOFTWARE\Classes\Amaya@ Amaya Files
Reg HKLM\SOFTWARE\Classes\Amaya\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Amaya\DefaultIcon@ C:\Program Files\Amaya\WindowsWX\bin\amaya.exe
Reg HKLM\SOFTWARE\Classes\Amaya\shell
Reg HKLM\SOFTWARE\Classes\Amaya\shell@ open
Reg HKLM\SOFTWARE\Classes\Amaya\shell\open
Reg HKLM\SOFTWARE\Classes\Amaya\shell\open\command
Reg HKLM\SOFTWARE\Classes\Amaya\shell\open\command@ "C:\Program Files\Amaya\WindowsWX\bin\amaya.exe" "%1"
Reg HKLM\SOFTWARE\Classes\ASP.HostEncode\CLSID
Reg HKLM\SOFTWARE\Classes\ASP.HostEncode\CLSID@ {0CF774D1-F077-11D1-B1BC-00C04F86C324}
Reg HKLM\SOFTWARE\Classes\Audacity.Project@ Audacity Project File
Reg HKLM\SOFTWARE\Classes\Audacity.Project\shell
Reg HKLM\SOFTWARE\Classes\Audacity.Project\shell@
Reg HKLM\SOFTWARE\Classes\Audacity.Project\shell\open
Reg HKLM\SOFTWARE\Classes\Audacity.Project\shell\open\command
Reg HKLM\SOFTWARE\Classes\Audacity.Project\shell\open\command@ "C:\Program Files\Audacity\audacity.exe" "%1"
Reg HKLM\SOFTWARE\Classes\AvantURL\shell
Reg HKLM\SOFTWARE\Classes\AvantURL\shell\open
Reg HKLM\SOFTWARE\Classes\AvantURL\shell\open\command
Reg HKLM\SOFTWARE\Classes\AvantURL\shell\open\command@ "C:\Program Files\Avant Browser\avant.exe" "%1"
Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector@ BabConnector Class
Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector\CLSID
Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector\CLSID@ {C430996F-4AA8-4AA8-81DE-F54432CD5786}
Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector\CurVer
Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector\CurVer@ BDesktopAgent.BabConnector.1
Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector.1@ BabConnector Class
Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector.1\CLSID
Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector.1\CLSID@ {C430996F-4AA8-4AA8-81DE-F54432CD5786}
Reg HKLM\SOFTWARE\Classes\bmsfile\shell
Reg HKLM\SOFTWARE\Classes\bmsfile\shell@ Open
Reg HKLM\SOFTWARE\Classes\bmsfile\shell\open
Reg HKLM\SOFTWARE\Classes\bmsfile\shell\open\command
Reg HKLM\SOFTWARE\Classes\bmsfile\shell\open\command@ "C:\Program Files\NCH Software\Debut\debut.exe" -extfind BMS "%L"
Reg HKLM\SOFTWARE\Classes\BrowserExeHTML@ HTML Document
Reg HKLM\SOFTWARE\Classes\BrowserExeHTML@FriendlyTypeName HTML Document
Reg HKLM\SOFTWARE\Classes\BrowserExeHTML\DefaultIcon
Reg HKLM\SOFTWARE\Classes\BrowserExeHTML\DefaultIcon@ C:\Program Files\Avant Browser\avant.exe,0
Reg HKLM\SOFTWARE\Classes\BrowserExeHTML\shell
Reg HKLM\SOFTWARE\Classes\BrowserExeHTML\shell\open
Reg HKLM\SOFTWARE\Classes\BrowserExeHTML\shell\open\command
Reg HKLM\SOFTWARE\Classes\BrowserExeHTML\shell\open\command@ "C:\Program Files\Avant Browser\avant.exe" "%1"
Reg HKLM\SOFTWARE\Classes\BrowserExeURL@ URL Link
Reg HKLM\SOFTWARE\Classes\BrowserExeURL@FriendlyTypeName URL Link
Reg HKLM\SOFTWARE\Classes\BrowserExeURL\DefaultIcon
Reg HKLM\SOFTWARE\Classes\BrowserExeURL\DefaultIcon@ C:\Program Files\Avant Browser\avant.exe,0
Reg HKLM\SOFTWARE\Classes\BUP_auto_file@
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell@ play
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\open
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\open@ &Open
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\open\command
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\open\command@ "C:\Program Files\iTunes\iTunes.exe" /open "%L"
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\play
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\play@ &Play
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\play\command
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\play\command@ "C:\Program Files\iTunes\iTunes.exe" /play "%L"
Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file@
Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell
Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\edit
Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\edit@ &Edit
Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\edit\command
Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\edit\command@ C:\WINDOWS\notepad.exe %1
Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\open
Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\open\command
Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\open\command@ %SystemRoot%\system32\NOTEPAD.EXE %1
Reg HKLM\SOFTWARE\Classes\ChromeHTML@URL Protocol
Reg HKLM\SOFTWARE\Classes\ChromeHTML@ Chrome HTML Document
Reg HKLM\SOFTWARE\Classes\ChromeHTML\DefaultIcon
Reg HKLM\SOFTWARE\Classes\ChromeHTML\DefaultIcon@ C:\Documents and Settings\Jean-Paul\Local Settings\Application Data\Google\Chrome\Application\chrome.exe,0
Reg HKLM\SOFTWARE\Classes\ChromeHTML\shell
Reg HKLM\SOFTWARE\Classes\ChromeHTML\shell\open
Reg HKLM\SOFTWARE\Classes\ChromeHTML\shell\open\command
Reg HKLM\SOFTWARE\Classes\ChromeHTML\shell\open\command@ "C:\Documents and Settings\Jean-Paul\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" – "%1"
Reg HKLM\SOFTWARE\Classes\CLSID\{410D4C51-CDEC-B5DA-B6A1-1B18DBCAF673}\InProcServer32@ %SystemRoot%\system32\SHELL32.dll
Reg HKLM\SOFTWARE\Classes\CLSID\{410D4C51-CDEC-B5DA-B6A1-1B18DBCAF673}\InProcServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl@ Microsoft ImageList Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl\CLSID@ {58DA8D8F-9D6A-101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl\CurVer
Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl\CurVer@ COMCTL.ImageListCtrl.1
Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl.1@ Microsoft ImageList Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl.1\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl.1\CLSID@ {58DA8D8F-9D6A-101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl@ Microsoft ListView Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl\CLSID@ {58DA8D8A-9D6A-101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl\CurVer
Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl\CurVer@ COMCTL.ListViewCtrl.1
Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl.1@ Microsoft ListView Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl.1\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl.1\CLSID@ {58DA8D8A-9D6A-101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl@ Microsoft ProgressBar Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl\CLSID@ {0713E8D2-850A-101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl\CurVer
Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl\CurVer@ COMCTL.ProgCtrl.1
Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl.1@ Microsoft ProgressBar Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl.1\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl.1\CLSID@ {0713E8D2-850A-101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl@ Microsoft StatusBar Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl\CLSID@ {6B7E638F-850A-101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl\CurVer
Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl\CurVer@ COMCTL.SBarCtrl.1
Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl.1@ Microsoft StatusBar Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl.1\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl.1\CLSID@ {6B7E638F-850A-101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.Slider@ Microsoft Slider Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.Slider\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.Slider\CLSID@ {373FF7F0-EB8B-11CD-8820-08002B2F4F5A}
Reg HKLM\SOFTWARE\Classes\COMCTL.Slider\CurVer
Reg HKLM\SOFTWARE\Classes\COMCTL.Slider\CurVer@ COMCTL.Slider.1
Reg HKLM\SOFTWARE\Classes\COMCTL.Slider.1@ Microsoft Slider Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.Slider.1\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.Slider.1\CLSID@ {373FF7F0-EB8B-11CD-8820-08002B2F4F5A}
Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip@ Microsoft TabStrip Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip\CLSID@ {9ED94440-E5E8-101B-B9B5-444553540000}
Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip\CurVer
Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip\CurVer@ COMCTL.TabStrip.1
Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip.1@ Microsoft TabStrip Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip.1\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip.1\CLSID@ {9ED94440-E5E8-101B-B9B5-444553540000}
Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar@ Microsoft Toolbar Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar\CLSID@ {612A8624-0FB3-11CE-8747-524153480004}
Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar\CurVer
Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar\CurVer@ COMCTL.Toolbar.1
Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar.1@ Microsoft Toolbar Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar.1\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar.1\CLSID@ {612A8624-0FB3-11CE-8747-524153480004}
Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl@ Microsoft TreeView Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl\CLSID@ {0713E8A2-850A-101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl\CurVer
Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl\CurVer@ COMCTL.TreeCtrl.1
Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl.1@ Microsoft TreeView Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl.1\CLSID
Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl.1\CLSID@ {0713E8A2-850A-101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler@ DeskbarEnabler Class
Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler\CLSID
Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler\CLSID@ {57CADC46-58FF-4105-B733-5A9F3FC9783C}
Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler\CurVer
Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler\CurVer@ ComObject.DeskbarEnabler.1
Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1@ DeskbarEnabler Class
Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1\CLSID
Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1\CLSID@ {57CADC46-58FF-4105-B733-5A9F3FC9783C}
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2@ Stitcher2 Class
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\//CLSID
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\//CLSID@ {8B0A08EF-0997-11D5-9322-0050BA834ACB}
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\//PixMaker
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\CLSID
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\CLSID@ {26CF8BB7-3E70-40d2-8FFF-756EEB62A504}
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\CurVer
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\CurVer@ ComStitch2.Stitcher2.1
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\Pro
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1@ Stitcher2 Class
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1\//CLSID
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1\//CLSID@ {8B0A08EF-0997-11D5-9322-0050BA834ACB}
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1\//PixMaker
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1\CLSID
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1\CLSID@ {26CF8BB7-3E70-40d2-8FFF-756EEB62A504}
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1\Pro
Reg HKLM\SOFTWARE\Classes\CTAPPDET.CTAppDetCtrl.1@ CTAppDet Control
Reg HKLM\SOFTWARE\Classes\CTAPPDET.CTAppDetCtrl.1\CLSID
Reg HKLM\SOFTWARE\Classes\CTAPPDET.CTAppDetCtrl.1\CLSID@ {4514001F-D1D8-4CCE-BAD6-AF0B7A705663}
Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs@ WebAPIs Class
Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs\CLSID
Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs\CLSID@ {0E57AA98-F169-4A68-BA8F-9E3BDAFFF9FD}
Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs\CurVer
Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs\CurVer@ CtORWebClient.WebAPIs.1
Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs.1@ WebAPIs Class
Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs.1\CLSID
Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs.1\CLSID@ {0E57AA98-F169-4A68-BA8F-9E3BDAFFF9FD}
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1@ MPEG Video
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\shell
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\shell\open
Reg HKLM\SOFTWARE\Classes\dctfile\shell
Reg HKLM\SOFTWARE\Classes\dctfile\shell@ Open
Reg HKLM\SOFTWARE\Classes\dctfile\shell\open
Reg HKLM\SOFTWARE\Classes\dctfile\shell\open\command
Reg HKLM\SOFTWARE\Classes\dctfile\shell\open\command@ "C:\Program Files\NCH Software\Debut\debut.exe" -extfind Scribe "%L"
Reg HKLM\SOFTWARE\Classes\dhSQLite.cColumn@ dhSQLite.cColumn
Reg HKLM\SOFTWARE\Classes\dhSQLite.cColumn\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cColumn\Clsid@ {D8D813A4-2F7E-415C-A92E-D7360DDAA7C0}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cColumns@ dhSQLite.cColumns
Reg HKLM\SOFTWARE\Classes\dhSQLite.cColumns\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cColumns\Clsid@ {E4139F89-0B72-498D-A4BB-5CB08E9B2EBD}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cCommand@ dhSQLite.cCommand
Reg HKLM\SOFTWARE\Classes\dhSQLite.cCommand\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cCommand\Clsid@ {FA1E015F-3766-458A-A7E5-72F0CE9EDE72}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cConnection@ dhSQLite.cConnection
Reg HKLM\SOFTWARE\Classes\dhSQLite.cConnection\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cConnection\Clsid@ {C1323921-ADC1-427F-B753-4D5769BE734E}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cDataBase@ dhSQLite.cDataBase
Reg HKLM\SOFTWARE\Classes\dhSQLite.cDataBase\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cDataBase\Clsid@ {AFD6D1A3-253A-4147-9FEC-0AC1CB2FEFB9}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cDataBases@ dhSQLite.cDataBases
Reg HKLM\SOFTWARE\Classes\dhSQLite.cDataBases\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cDataBases\Clsid@ {E35C32C4-B643-478D-BAE4-C14CA289854E}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cField@ dhSQLite.cField
Reg HKLM\SOFTWARE\Classes\dhSQLite.cField\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cField\Clsid@ {7803619D-EDB8-4E1E-B8D6-A4DCC2C6C159}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cFields@ dhSQLite.cFields
Reg HKLM\SOFTWARE\Classes\dhSQLite.cFields\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cFields\Clsid@ {FD3E6BA1-2D4F-4C47-973D-2D056142686C}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cIndex@ dhSQLite.cIndex
Reg HKLM\SOFTWARE\Classes\dhSQLite.cIndex\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cIndex\Clsid@ {218444F6-4CE0-4E11-AC58-C3819CB58FBE}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cIndexes@ dhSQLite.cIndexes
Reg HKLM\SOFTWARE\Classes\dhSQLite.cIndexes\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cIndexes\Clsid@ {776DACEC-3FF4-45A1-8B41-780C235F831E}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cRecordset@ dhSQLite.cRecordset
Reg HKLM\SOFTWARE\Classes\dhSQLite.cRecordset\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cRecordset\Clsid@ {0603D1C2-F3AC-4FC0-AF53-DE223ECF04D4}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cStringCompare@ dhSQLite.cStringCompare
Reg HKLM\SOFTWARE\Classes\dhSQLite.cStringCompare\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cStringCompare\Clsid@ {0A74CCF7-DBE8-4809-B880-8E8AA1E1A589}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTable@ dhSQLite.cTable
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTable\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTable\Clsid@ {27D1D3A3-E531-4861-B27F-864BD55D4FFD}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTables@ dhSQLite.cTables
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTables\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTables\Clsid@ {E85D3D3E-505E-45BC-9C50-DCEF0ED60DAE}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTrigger@ dhSQLite.cTrigger
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTrigger\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTrigger\Clsid@ {DBA2C12B-2F12-47A9-97ED-E615F1C37713}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTriggers@ dhSQLite.cTriggers
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTriggers\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTriggers\Clsid@ {26D04CDD-E236-467F-9070-8BB164708632}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cUDFMethods@ dhSQLite.cUDFMethods
Reg HKLM\SOFTWARE\Classes\dhSQLite.cUDFMethods\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cUDFMethods\Clsid@ {B7EC75A4-3146-49E1-AF92-372E5EAA3189}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cView@ dhSQLite.cView
Reg HKLM\SOFTWARE\Classes\dhSQLite.cView\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cView\Clsid@ {9978C6CF-1567-45EB-8BE7-A50CE42D3E69}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cViews@ dhSQLite.cViews
Reg HKLM\SOFTWARE\Classes\dhSQLite.cViews\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.cViews\Clsid@ {F4733C47-3E7E-4555-A900-6FFDAE27864D}
Reg HKLM\SOFTWARE\Classes\dhSQLite.IAggregateFunction@ dhSQLite.IAggregateFunction
Reg HKLM\SOFTWARE\Classes\dhSQLite.IAggregateFunction\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.IAggregateFunction\Clsid@ {6AA321B0-C03F-45A5-9B1F-079CFB130084}
Reg HKLM\SOFTWARE\Classes\dhSQLite.ICollation@ dhSQLite.ICollation
Reg HKLM\SOFTWARE\Classes\dhSQLite.ICollation\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.ICollation\Clsid@ {A88015DA-6127-49C1-B2A5-96663D017877}
Reg HKLM\SOFTWARE\Classes\dhSQLite.IFunction@ dhSQLite.IFunction
Reg HKLM\SOFTWARE\Classes\dhSQLite.IFunction\Clsid
Reg HKLM\SOFTWARE\Classes\dhSQLite.IFunction\Clsid@ {D2E6592A-AFED-4BD9-AB84-544E3BFB3770}
Reg HKLM\SOFTWARE\Classes\dssfile\shell
Reg HKLM\SOFTWARE\Classes\dssfile\shell@ Open
Reg HKLM\SOFTWARE\Classes\dssfile\shell\open
Reg HKLM\SOFTWARE\Classes\dssfile\shell\open\command
Reg HKLM\SOFTWARE\Classes\dssfile\shell\open\command@ "C:\Program Files\NCH Software\Debut\debut.exe" -extfind Scribe "%L"
Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper@ Evernote Web Clipper
Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper\CLSID
Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper\CLSID@ {BC0E0A5D-AB5A-4fa4-A5FA-280E1D58EEEE}
Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper\CurVer
Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper\CurVer@ Evernote35.Webclipper.1
Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper.1@ Evernote Web Clipper
Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper.1\CLSID
Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper.1\CLSID@ {BC0E0A5D-AB5A-4fa4-A5FA-280E1D58EEEE}
Reg HKLM\SOFTWARE\Classes\ExpressBurn.AutoPlay\Shell
Reg HKLM\SOFTWARE\Classes\ExpressBurn.AutoPlay\Shell\open
Reg HKLM\SOFTWARE\Classes\ExpressBurn.AutoPlay\Shell\open\command
Reg HKLM\SOFTWARE\Classes\ExpressBurn.AutoPlay\Shell\open\command@ C:\Program Files\NCH Swift Sound\ExpressBurn\expressburn.exe
Reg HKLM\SOFTWARE\Classes\FlashFactory.FlashFactory@ Macromedia Flash Factory Object
Reg HKLM\SOFTWARE\Classes\FlashFactory.FlashFactory\CLSID
Reg HKLM\SOFTWARE\Classes\FlashFactory.FlashFactory\CLSID@ {D27CDB70-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\FlashFactory.FlashFactory\CurVer
Reg HKLM\SOFTWARE\Classes\FlashFactory.FlashFactory\CurVer@ FlashFactory.FlashFactory.1
Reg HKLM\SOFTWARE\Classes\FlashFactory.FlashFactory.1@ Macromedia Flash Factory Object
Reg HKLM\SOFTWARE\Classes\FlashFactory.FlashFactory.1\CLSID
Reg HKLM\SOFTWARE\Classes\FlashFactory.FlashFactory.1\CLSID@ {D27CDB70-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\FlockHTML@ Flock Document
Reg HKLM\SOFTWARE\Classes\FlockHTML@FriendlyTypeName Flock Document
Reg HKLM\SOFTWARE\Classes\FlockHTML\DefaultIcon
Reg HKLM\SOFTWARE\Classes\FlockHTML\DefaultIcon@ C:\Program Files\Flock\flock.exe,1
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\Edit
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\Edit@ &Edit
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\Edit\command
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\Edit\command@ "E:\Program Files\Microsoft Office\Office\msohtmed.exe" %1
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\open
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\open\command
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\open\command@ "C:\Program Files\Flock\flock.exe" -requestPending -osint -url "%1"
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\open\ddeexec
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\open\ddeexec@ "%1",,0,0,,,,
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\open\ddeexec@NoActivateHandler
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\open\ddeexec\Application
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\open\ddeexec\Application@ Flock
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\open\ddeexec\Topic
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\open\ddeexec\Topic@ WWW_OpenURL
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\Print
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\Print@ &Print
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\Print\command
Reg HKLM\SOFTWARE\Classes\FlockHTML\shell\Print\command@ "E:\Program Files\Microsoft Office\Office\msohtmed.exe" /p %1
Reg HKLM\SOFTWARE\Classes\FlockURL@ Flock URL
Reg HKLM\SOFTWARE\Classes\FlockURL@FriendlyTypeName Flock URL
Reg HKLM\SOFTWARE\Classes\FlockURL@URL Protocol
Reg HKLM\SOFTWARE\Classes\FlockURL@EditFlags 2
Reg HKLM\SOFTWARE\Classes\FlockURL\DefaultIcon
Reg HKLM\SOFTWARE\Classes\FlockURL\DefaultIcon@ C:\Program Files\Flock\flock.exe,1
Reg HKLM\SOFTWARE\Classes\FlockURL\shell
Reg HKLM\SOFTWARE\Classes\FlockURL\shell\open
Reg HKLM\SOFTWARE\Classes\FlockURL\shell\open\command
Reg HKLM\SOFTWARE\Classes\FlockURL\shell\open\command@ "C:\Program Files\Flock\flock.exe" -requestPending -osint -url "%1"
Reg HKLM\SOFTWARE\Classes\FlockURL\shell\open\ddeexec
Reg HKLM\SOFTWARE\Classes\FlockURL\shell\open\ddeexec@ "%1",,0,0,,,,
Reg HKLM\SOFTWARE\Classes\FlockURL\shell\open\ddeexec@NoActivateHandler
Reg HKLM\SOFTWARE\Classes\FlockURL\shell\open\ddeexec\Application
Reg HKLM\SOFTWARE\Classes\FlockURL\shell\open\ddeexec\Application@ Flock
Reg HKLM\SOFTWARE\Classes\FlockURL\shell\open\ddeexec\Topic
Reg HKLM\SOFTWARE\Classes\FlockURL\shell\open\ddeexec\Topic@ WWW_OpenURL
Reg HKLM\SOFTWARE\Classes\FrontPage.Application@ Microsoft FrontPage Application
Reg HKLM\SOFTWARE\Classes\FrontPage.Application\CLSID
Reg HKLM\SOFTWARE\Classes\FrontPage.Application\CLSID@ {04DF1015-7007-11D1-83BC-006097ABE675}
Reg HKLM\SOFTWARE\Classes\FrontPage.Application\CurVer
Reg HKLM\SOFTWARE\Classes\FrontPage.Application\CurVer@ FrontPage.Application.4
Reg HKLM\SOFTWARE\Classes\GEAbstractBalloonCoClass.GEAbstract@ GEAbstractBalloonCoClass Object
Reg HKLM\SOFTWARE\Classes\GEAbstractBalloonCoClass.GEAbstract\CLSID
Reg HKLM\SOFTWARE\Classes\GEAbstractBalloonCoClass.GEAbstract\CLSID@ {B1068D20-A431-4dba-B1F8-990621E8A762}
Reg HKLM\SOFTWARE\Classes\GEAbstractBalloonCoClass.GEAbstract\CurVer
Reg HKLM\SOFTWARE\Classes\GEAbstractBalloonCoClass.GEAbstract\CurVer@ GEAbstractBalloonCoClass.GEAbstract.1.0
Reg HKLM\SOFTWARE\Classes\GEAbstractBalloonCoClass.GEAbstract.1.0@ GEAbstractBalloonCoClass Object
Reg HKLM\SOFTWARE\Classes\GEAbstractBalloonCoClass.GEAbstract.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEAbstractBalloonCoClass.GEAbstract.1.0\CLSID@ {B1068D20-A431-4dba-B1F8-990621E8A762}
Reg HKLM\SOFTWARE\Classes\GEBalloonState_CoClass.GEBalloonSta@ GEBalloonState_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEBalloonState_CoClass.GEBalloonSta\CLSID
Reg HKLM\SOFTWARE\Classes\GEBalloonState_CoClass.GEBalloonSta\CLSID@ {B29922E4-4279-4319-8153-6064BA4609AF}
Reg HKLM\SOFTWARE\Classes\GEBalloonState_CoClass.GEBalloonSta\CurVer
Reg HKLM\SOFTWARE\Classes\GEBalloonState_CoClass.GEBalloonSta\CurVer@ GEBalloonState_CoClass.GEBalloonSta.1.0
Reg HKLM\SOFTWARE\Classes\GEBalloonState_CoClass.GEBalloonSta.1.0@ GEBalloonState_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEBalloonState_CoClass.GEBalloonSta.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEBalloonState_CoClass.GEBalloonSta.1.0\CLSID@ {B29922E4-4279-4319-8153-6064BA4609AF}
Reg HKLM\SOFTWARE\Classes\GEBoundingBoxView_CoClass.GEBoundin@ GEBoundingBoxView_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEBoundingBoxView_CoClass.GEBoundin\CLSID
Reg HKLM\SOFTWARE\Classes\GEBoundingBoxView_CoClass.GEBoundin\CLSID@ {589c3930-f194-11dd-ba2f-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEBoundingBoxView_CoClass.GEBoundin\CurVer
Reg HKLM\SOFTWARE\Classes\GEBoundingBoxView_CoClass.GEBoundin\CurVer@ GEBoundingBoxView_CoClass.GEBoundin.1.0
Reg HKLM\SOFTWARE\Classes\GEBoundingBoxView_CoClass.GEBoundin.1.0@ GEBoundingBoxView_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEBoundingBoxView_CoClass.GEBoundin.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEBoundingBoxView_CoClass.GEBoundin.1.0\CLSID@ {589c3930-f194-11dd-ba2f-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEEventEmitterCoClass.GEEventEmitte@ GEEventEmitterCoClass Object
Reg HKLM\SOFTWARE\Classes\GEEventEmitterCoClass.GEEventEmitte\CLSID
Reg HKLM\SOFTWARE\Classes\GEEventEmitterCoClass.GEEventEmitte\CLSID@ {26ea376a-51e6-11dc-8314-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEEventEmitterCoClass.GEEventEmitte\CurVer
Reg HKLM\SOFTWARE\Classes\GEEventEmitterCoClass.GEEventEmitte\CurVer@ GEEventEmitterCoClass.GEEventEmitte.1.0
Reg HKLM\SOFTWARE\Classes\GEEventEmitterCoClass.GEEventEmitte.1.0@ GEEventEmitterCoClass Object
Reg HKLM\SOFTWARE\Classes\GEEventEmitterCoClass.GEEventEmitte.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEEventEmitterCoClass.GEEventEmitte.1.0\CLSID@ {26ea376a-51e6-11dc-8314-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEExecuteBatch_CoClass.GEExecuteBat@ GEExecuteBatch_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEExecuteBatch_CoClass.GEExecuteBat\CLSID
Reg HKLM\SOFTWARE\Classes\GEExecuteBatch_CoClass.GEExecuteBat\CLSID@ {2C64651A-7B7F-4ced-A051-16AD65AF57F5}
Reg HKLM\SOFTWARE\Classes\GEExecuteBatch_CoClass.GEExecuteBat\CurVer
Reg HKLM\SOFTWARE\Classes\GEExecuteBatch_CoClass.GEExecuteBat\CurVer@ GEExecuteBatch_CoClass.GEExecuteBat.1.0
Reg HKLM\SOFTWARE\Classes\GEExecuteBatch_CoClass.GEExecuteBat.1.0@ GEExecuteBatch_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEExecuteBatch_CoClass.GEExecuteBat.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEExecuteBatch_CoClass.GEExecuteBat.1.0\CLSID@ {2C64651A-7B7F-4ced-A051-16AD65AF57F5}
Reg HKLM\SOFTWARE\Classes\GEFeatureBalloonCoClass.GEFeatureBa@ GEFeatureBalloonCoClass Object
Reg HKLM\SOFTWARE\Classes\GEFeatureBalloonCoClass.GEFeatureBa\CLSID
Reg HKLM\SOFTWARE\Classes\GEFeatureBalloonCoClass.GEFeatureBa\CLSID@ {012B7A17-97C0-4506-B05C-FE051B88ECB7}
Reg HKLM\SOFTWARE\Classes\GEFeatureBalloonCoClass.GEFeatureBa\CurVer
Reg HKLM\SOFTWARE\Classes\GEFeatureBalloonCoClass.GEFeatureBa\CurVer@ GEFeatureBalloonCoClass.GEFeatureBa.1.0
Reg HKLM\SOFTWARE\Classes\GEFeatureBalloonCoClass.GEFeatureBa.1.0@ GEFeatureBalloonCoClass Object
Reg HKLM\SOFTWARE\Classes\GEFeatureBalloonCoClass.GEFeatureBa.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEFeatureBalloonCoClass.GEFeatureBa.1.0\CLSID@ {012B7A17-97C0-4506-B05C-FE051B88ECB7}
Reg HKLM\SOFTWARE\Classes\GEFeatureContainerCoClass.GEFeature@ GEFeatureContainerCoClass Object
Reg HKLM\SOFTWARE\Classes\GEFeatureContainerCoClass.GEFeature\CLSID
Reg HKLM\SOFTWARE\Classes\GEFeatureContainerCoClass.GEFeature\CLSID@ {56b61e20-0fc6-11dd-bd0b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEFeatureContainerCoClass.GEFeature\CurVer
Reg HKLM\SOFTWARE\Classes\GEFeatureContainerCoClass.GEFeature\CurVer@ GEFeatureContainerCoClass.GEFeature.1.0
Reg HKLM\SOFTWARE\Classes\GEFeatureContainerCoClass.GEFeature.1.0@ GEFeatureContainerCoClass Object
Reg HKLM\SOFTWARE\Classes\GEFeatureContainerCoClass.GEFeature.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEFeatureContainerCoClass.GEFeature.1.0\CLSID@ {56b61e20-0fc6-11dd-bd0b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEFeatureView_CoClass.GEFeatureView@ GEFeatureView_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEFeatureView_CoClass.GEFeatureView\CLSID
Reg HKLM\SOFTWARE\Classes\GEFeatureView_CoClass.GEFeatureView\CLSID@ {62bf65a0-f193-11dd-ba2f-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEFeatureView_CoClass.GEFeatureView\CurVer
Reg HKLM\SOFTWARE\Classes\GEFeatureView_CoClass.GEFeatureView\CurVer@ GEFeatureView_CoClass.GEFeatureView.1.0
Reg HKLM\SOFTWARE\Classes\GEFeatureView_CoClass.GEFeatureView.1.0@ GEFeatureView_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEFeatureView_CoClass.GEFeatureView.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEFeatureView_CoClass.GEFeatureView.1.0\CLSID@ {62bf65a0-f193-11dd-ba2f-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEFetchKmlHelper_CoClass.GEFetchKml@ GEFetchKmlHelper_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEFetchKmlHelper_CoClass.GEFetchKml\CLSID
Reg HKLM\SOFTWARE\Classes\GEFetchKmlHelper_CoClass.GEFetchKml\CLSID@ {288e09a2-927a-49a7-bb24-9481abf8817d}
Reg HKLM\SOFTWARE\Classes\GEFetchKmlHelper_CoClass.GEFetchKml\CurVer
Reg HKLM\SOFTWARE\Classes\GEFetchKmlHelper_CoClass.GEFetchKml\CurVer@ GEFetchKmlHelper_CoClass.GEFetchKml.1.0
Reg HKLM\SOFTWARE\Classes\GEFetchKmlHelper_CoClass.GEFetchKml.1.0@ GEFetchKmlHelper_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEFetchKmlHelper_CoClass.GEFetchKml.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEFetchKmlHelper_CoClass.GEFetchKml.1.0\CLSID@ {288e09a2-927a-49a7-bb24-9481abf8817d}
Reg HKLM\SOFTWARE\Classes\GEGeometryContainerCoClass.GEGeomet@ GEGeometryContainerCoClass Object
Reg HKLM\SOFTWARE\Classes\GEGeometryContainerCoClass.GEGeomet\CLSID
Reg HKLM\SOFTWARE\Classes\GEGeometryContainerCoClass.GEGeomet\CLSID@ {b1e81530-2120-11dd-bd0b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEGeometryContainerCoClass.GEGeomet\CurVer
Reg HKLM\SOFTWARE\Classes\GEGeometryContainerCoClass.GEGeomet\CurVer@ GEGeometryContainerCoClass.GEGeomet.1.0
Reg HKLM\SOFTWARE\Classes\GEGeometryContainerCoClass.GEGeomet.1.0@ GEGeometryContainerCoClass Object
Reg HKLM\SOFTWARE\Classes\GEGeometryContainerCoClass.GEGeomet.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEGeometryContainerCoClass.GEGeomet.1.0\CLSID@ {b1e81530-2120-11dd-bd0b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEGlobeCoClass.GEGlobeCoClass@ GEGlobeCoClass Object
Reg HKLM\SOFTWARE\Classes\GEGlobeCoClass.GEGlobeCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\GEGlobeCoClass.GEGlobeCoClass\CLSID@ {288e09a2-927a-49a7-bb24-2988abdd83ef}
Reg HKLM\SOFTWARE\Classes\GEGlobeCoClass.GEGlobeCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\GEGlobeCoClass.GEGlobeCoClass\CurVer@ GEGlobeCoClass.GEGlobeCoClass.1.0
Reg HKLM\SOFTWARE\Classes\GEGlobeCoClass.GEGlobeCoClass.1.0@ GEGlobeCoClass Object
Reg HKLM\SOFTWARE\Classes\GEGlobeCoClass.GEGlobeCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEGlobeCoClass.GEGlobeCoClass.1.0\CLSID@ {288e09a2-927a-49a7-bb24-2988abdd83ef}
Reg HKLM\SOFTWARE\Classes\GEHitTestResultCoClass.GEHitTestRes@ GEHitTestResultCoClass Object
Reg HKLM\SOFTWARE\Classes\GEHitTestResultCoClass.GEHitTestRes\CLSID
Reg HKLM\SOFTWARE\Classes\GEHitTestResultCoClass.GEHitTestRes\CLSID@ {2040ddef-7dd9-4903-a552-dc82c74a3c0f}
Reg HKLM\SOFTWARE\Classes\GEHitTestResultCoClass.GEHitTestRes\CurVer
Reg HKLM\SOFTWARE\Classes\GEHitTestResultCoClass.GEHitTestRes\CurVer@ GEHitTestResultCoClass.GEHitTestRes.1.0
Reg HKLM\SOFTWARE\Classes\GEHitTestResultCoClass.GEHitTestRes.1.0@ GEHitTestResultCoClass Object
Reg HKLM\SOFTWARE\Classes\GEHitTestResultCoClass.GEHitTestRes.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEHitTestResultCoClass.GEHitTestRes.1.0\CLSID@ {2040ddef-7dd9-4903-a552-dc82c74a3c0f}
Reg HKLM\SOFTWARE\Classes\GEHtmlBalloonCoClass.GEHtmlBalloonC@ GEHtmlBalloonCoClass Object
Reg HKLM\SOFTWARE\Classes\GEHtmlBalloonCoClass.GEHtmlBalloonC\CLSID
Reg HKLM\SOFTWARE\Classes\GEHtmlBalloonCoClass.GEHtmlBalloonC\CLSID@ {A52BFCF1-6B91-4acc-9566-8F018C044E61}
Reg HKLM\SOFTWARE\Classes\GEHtmlBalloonCoClass.GEHtmlBalloonC\CurVer
Reg HKLM\SOFTWARE\Classes\GEHtmlBalloonCoClass.GEHtmlBalloonC\CurVer@ GEHtmlBalloonCoClass.GEHtmlBalloonC.1.0
Reg HKLM\SOFTWARE\Classes\GEHtmlBalloonCoClass.GEHtmlBalloonC.1.0@ GEHtmlBalloonCoClass Object
Reg HKLM\SOFTWARE\Classes\GEHtmlBalloonCoClass.GEHtmlBalloonC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEHtmlBalloonCoClass.GEHtmlBalloonC.1.0\CLSID@ {A52BFCF1-6B91-4acc-9566-8F018C044E61}
Reg HKLM\SOFTWARE\Classes\GEHtmlDivBalloonCoClass.GEHtmlDivBa@ GEHtmlDivBalloonCoClass Object
Reg HKLM\SOFTWARE\Classes\GEHtmlDivBalloonCoClass.GEHtmlDivBa\CLSID
Reg HKLM\SOFTWARE\Classes\GEHtmlDivBalloonCoClass.GEHtmlDivBa\CLSID@ {07E8E5BA-2347-47bd-9113-44D275F36205}
Reg HKLM\SOFTWARE\Classes\GEHtmlDivBalloonCoClass.GEHtmlDivBa\CurVer
Reg HKLM\SOFTWARE\Classes\GEHtmlDivBalloonCoClass.GEHtmlDivBa\CurVer@ GEHtmlDivBalloonCoClass.GEHtmlDivBa.1.0
Reg HKLM\SOFTWARE\Classes\GEHtmlDivBalloonCoClass.GEHtmlDivBa.1.0@ GEHtmlDivBalloonCoClass Object
Reg HKLM\SOFTWARE\Classes\GEHtmlDivBalloonCoClass.GEHtmlDivBa.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEHtmlDivBalloonCoClass.GEHtmlDivBa.1.0\CLSID@ {07E8E5BA-2347-47bd-9113-44D275F36205}
Reg HKLM\SOFTWARE\Classes\GEHtmlStringBalloonCoClass.GEHtmlSt@ GEHtmlStringBalloonCoClass Object
Reg HKLM\SOFTWARE\Classes\GEHtmlStringBalloonCoClass.GEHtmlSt\CLSID
Reg HKLM\SOFTWARE\Classes\GEHtmlStringBalloonCoClass.GEHtmlSt\CLSID@ {9C23E22F-BEBE-4e75-86C1-68C08607574B}
Reg HKLM\SOFTWARE\Classes\GEHtmlStringBalloonCoClass.GEHtmlSt\CurVer
Reg HKLM\SOFTWARE\Classes\GEHtmlStringBalloonCoClass.GEHtmlSt\CurVer@ GEHtmlStringBalloonCoClass.GEHtmlSt.1.0
Reg HKLM\SOFTWARE\Classes\GEHtmlStringBalloonCoClass.GEHtmlSt.1.0@ GEHtmlStringBalloonCoClass Object
Reg HKLM\SOFTWARE\Classes\GEHtmlStringBalloonCoClass.GEHtmlSt.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEHtmlStringBalloonCoClass.GEHtmlSt.1.0\CLSID@ {9C23E22F-BEBE-4e75-86C1-68C08607574B}
Reg HKLM\SOFTWARE\Classes\GELinearRingContainerCoClass.GELine@ GELinearRingContainerCoClass Object
Reg HKLM\SOFTWARE\Classes\GELinearRingContainerCoClass.GELine\CLSID
Reg HKLM\SOFTWARE\Classes\GELinearRingContainerCoClass.GELine\CLSID@ {546864f0-1bf8-11dd-bd0b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GELinearRingContainerCoClass.GELine\CurVer
Reg HKLM\SOFTWARE\Classes\GELinearRingContainerCoClass.GELine\CurVer@ GELinearRingContainerCoClass.GELine.1.0
Reg HKLM\SOFTWARE\Classes\GELinearRingContainerCoClass.GELine.1.0@ GELinearRingContainerCoClass Object
Reg HKLM\SOFTWARE\Classes\GELinearRingContainerCoClass.GELine.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GELinearRingContainerCoClass.GELine.1.0\CLSID@ {546864f0-1bf8-11dd-bd0b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEModeler_CoClass.GEModeler_CoClass@ GEModeler_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEModeler_CoClass.GEModeler_CoClass\CLSID
Reg HKLM\SOFTWARE\Classes\GEModeler_CoClass.GEModeler_CoClass\CLSID@ {ca5a19c0-c269-11dd-ad8b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEModeler_CoClass.GEModeler_CoClass\CurVer
Reg HKLM\SOFTWARE\Classes\GEModeler_CoClass.GEModeler_CoClass\CurVer@ GEModeler_CoClass.GEModeler_CoClass.1.0
Reg HKLM\SOFTWARE\Classes\GEModeler_CoClass.GEModeler_CoClass.1.0@ GEModeler_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEModeler_CoClass.GEModeler_CoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEModeler_CoClass.GEModeler_CoClass.1.0\CLSID@ {ca5a19c0-c269-11dd-ad8b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GENavigationControlCoClass.GENaviga@ GENavigationControlCoClass Object
Reg HKLM\SOFTWARE\Classes\GENavigationControlCoClass.GENaviga\CLSID
Reg HKLM\SOFTWARE\Classes\GENavigationControlCoClass.GENaviga\CLSID@ {23144a1f-af18-4815-82e0-3d198ef782ab}
Reg HKLM\SOFTWARE\Classes\GENavigationControlCoClass.GENaviga\CurVer
Reg HKLM\SOFTWARE\Classes\GENavigationControlCoClass.GENaviga\CurVer@ GENavigationControlCoClass.GENaviga.1.0
Reg HKLM\SOFTWARE\Classes\GENavigationControlCoClass.GENaviga.1.0@ GENavigationControlCoClass Object
Reg HKLM\SOFTWARE\Classes\GENavigationControlCoClass.GENaviga.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GENavigationControlCoClass.GENaviga.1.0\CLSID@ {23144a1f-af18-4815-82e0-3d198ef782ab}
Reg HKLM\SOFTWARE\Classes\GEOptionsCoClass.GEOptionsCoClass@ GEOptionsCoClass Object
Reg HKLM\SOFTWARE\Classes\GEOptionsCoClass.GEOptionsCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\GEOptionsCoClass.GEOptionsCoClass\CLSID@ {051064bb-aef7-4815-82e0-3d155ff09f8a}
Reg HKLM\SOFTWARE\Classes\GEOptionsCoClass.GEOptionsCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\GEOptionsCoClass.GEOptionsCoClass\CurVer@ GEOptionsCoClass.GEOptionsCoClass.1.0
Reg HKLM\SOFTWARE\Classes\GEOptionsCoClass.GEOptionsCoClass.1.0@ GEOptionsCoClass Object
Reg HKLM\SOFTWARE\Classes\GEOptionsCoClass.GEOptionsCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEOptionsCoClass.GEOptionsCoClass.1.0\CLSID@ {051064bb-aef7-4815-82e0-3d155ff09f8a}
Reg HKLM\SOFTWARE\Classes\GEPhotoControlCoClass.GEPhotoContro@ GEPhotoControlCoClass Object
Reg HKLM\SOFTWARE\Classes\GEPhotoControlCoClass.GEPhotoContro\CLSID
Reg HKLM\SOFTWARE\Classes\GEPhotoControlCoClass.GEPhotoContro\CLSID@ {EEFEC232-DD4E-4da8-9777-C3AFB8520D73}
Reg HKLM\SOFTWARE\Classes\GEPhotoControlCoClass.GEPhotoContro\CurVer
Reg HKLM\SOFTWARE\Classes\GEPhotoControlCoClass.GEPhotoContro\CurVer@ GEPhotoControlCoClass.GEPhotoContro.1.0
Reg HKLM\SOFTWARE\Classes\GEPhotoControlCoClass.GEPhotoContro.1.0@ GEPhotoControlCoClass Object
Reg HKLM\SOFTWARE\Classes\GEPhotoControlCoClass.GEPhotoContro.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEPhotoControlCoClass.GEPhotoContro.1.0\CLSID@ {EEFEC232-DD4E-4da8-9777-C3AFB8520D73}
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayViewerCoClass.GEPhoto@ GEPhotoOverlayViewerCoClass Object
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayViewerCoClass.GEPhoto\CLSID
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayViewerCoClass.GEPhoto\CLSID@ {bb465410-0465-11de-8c30-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayViewerCoClass.GEPhoto\CurVer
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayViewerCoClass.GEPhoto\CurVer@ GEPhotoOverlayViewerCoClass.GEPhoto.1.0
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayViewerCoClass.GEPhoto.1.0@ GEPhotoOverlayViewerCoClass Object
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayViewerCoClass.GEPhoto.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayViewerCoClass.GEPhoto.1.0\CLSID@ {bb465410-0465-11de-8c30-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayView_CoClass.GEPhotoO@ GEPhotoOverlayView_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayView_CoClass.GEPhotoO\CLSID
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayView_CoClass.GEPhotoO\CLSID@ {bbbfd220-f193-11dd-ba2f-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayView_CoClass.GEPhotoO\CurVer
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayView_CoClass.GEPhotoO\CurVer@ GEPhotoOverlayView_CoClass.GEPhotoO.1.0
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayView_CoClass.GEPhotoO.1.0@ GEPhotoOverlayView_CoClass Object
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayView_CoClass.GEPhotoO.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEPhotoOverlayView_CoClass.GEPhotoO.1.0\CLSID@ {bbbfd220-f193-11dd-ba2f-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEPluginCoClass.GEPluginCoClass@ GEPluginCoClass Object
Reg HKLM\SOFTWARE\Classes\GEPluginCoClass.GEPluginCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\GEPluginCoClass.GEPluginCoClass\CLSID@ {F9152AEC-3462-4632-8087-EEE3C3CDDA24}
Reg HKLM\SOFTWARE\Classes\GEPluginCoClass.GEPluginCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\GEPluginCoClass.GEPluginCoClass\CurVer@ GEPluginCoClass.GEPluginCoClass.1.0
Reg HKLM\SOFTWARE\Classes\GEPluginCoClass.GEPluginCoClass.1.0@ GEPluginCoClass Object
Reg HKLM\SOFTWARE\Classes\GEPluginCoClass.GEPluginCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEPluginCoClass.GEPluginCoClass.1.0\CLSID@ {F9152AEC-3462-4632-8087-EEE3C3CDDA24}
Reg HKLM\SOFTWARE\Classes\GESchemaObjectCoClass.GESchemaObjec@ GESchemaObjectCoClass Object
Reg HKLM\SOFTWARE\Classes\GESchemaObjectCoClass.GESchemaObjec\CLSID
Reg HKLM\SOFTWARE\Classes\GESchemaObjectCoClass.GESchemaObjec\CLSID@ {4060edfe-cc12-489c-9d95-62f7fd9a1a8c}
Reg HKLM\SOFTWARE\Classes\GESchemaObjectCoClass.GESchemaObjec\CurVer
Reg HKLM\SOFTWARE\Classes\GESchemaObjectCoClass.GESchemaObjec\CurVer@ GESchemaObjectCoClass.GESchemaObjec.1.0
Reg HKLM\SOFTWARE\Classes\GESchemaObjectCoClass.GESchemaObjec.1.0@ GESchemaObjectCoClass Object
Reg HKLM\SOFTWARE\Classes\GESchemaObjectCoClass.GESchemaObjec.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GESchemaObjectCoClass.GESchemaObjec.1.0\CLSID@ {4060edfe-cc12-489c-9d95-62f7fd9a1a8c}
Reg HKLM\SOFTWARE\Classes\GESchemaObjectContainerCoClass.GESc@ GESchemaObjectContainerCoClass Object
Reg HKLM\SOFTWARE\Classes\GESchemaObjectContainerCoClass.GESc\CLSID
Reg HKLM\SOFTWARE\Classes\GESchemaObjectContainerCoClass.GESc\CLSID@ {8de80270-0cd6-11dd-bd0b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GESchemaObjectContainerCoClass.GESc\CurVer
Reg HKLM\SOFTWARE\Classes\GESchemaObjectContainerCoClass.GESc\CurVer@ GESchemaObjectContainerCoClass.GESc.1.0
Reg HKLM\SOFTWARE\Classes\GESchemaObjectContainerCoClass.GESc.1.0@ GESchemaObjectContainerCoClass Object
Reg HKLM\SOFTWARE\Classes\GESchemaObjectContainerCoClass.GESc.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GESchemaObjectContainerCoClass.GESc.1.0\CLSID@ {8de80270-0cd6-11dd-bd0b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GESideDatabaseHelper_CoClass.GESide@ GESideDatabaseHelper_CoClass Object
Reg HKLM\SOFTWARE\Classes\GESideDatabaseHelper_CoClass.GESide\CLSID
Reg HKLM\SOFTWARE\Classes\GESideDatabaseHelper_CoClass.GESide\CLSID@ {CC1B9A74-16E2-4DAC-9FC8-430785F0A452}
Reg HKLM\SOFTWARE\Classes\GESideDatabaseHelper_CoClass.GESide\CurVer
Reg HKLM\SOFTWARE\Classes\GESideDatabaseHelper_CoClass.GESide\CurVer@ GESideDatabaseHelper_CoClass.GESide.1.0
Reg HKLM\SOFTWARE\Classes\GESideDatabaseHelper_CoClass.GESide.1.0@ GESideDatabaseHelper_CoClass Object
Reg HKLM\SOFTWARE\Classes\GESideDatabaseHelper_CoClass.GESide.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GESideDatabaseHelper_CoClass.GESide.1.0\CLSID@ {CC1B9A74-16E2-4DAC-9FC8-430785F0A452}
Reg HKLM\SOFTWARE\Classes\GEStyleSelectorContainerCoClass.GES@ GEStyleSelectorContainerCoClass Object
Reg HKLM\SOFTWARE\Classes\GEStyleSelectorContainerCoClass.GES\CLSID
Reg HKLM\SOFTWARE\Classes\GEStyleSelectorContainerCoClass.GES\CLSID@ {03a81800-0cd8-11dd-bd0b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEStyleSelectorContainerCoClass.GES\CurVer
Reg HKLM\SOFTWARE\Classes\GEStyleSelectorContainerCoClass.GES\CurVer@ GEStyleSelectorContainerCoClass.GES.1.0
Reg HKLM\SOFTWARE\Classes\GEStyleSelectorContainerCoClass.GES.1.0@ GEStyleSelectorContainerCoClass Object
Reg HKLM\SOFTWARE\Classes\GEStyleSelectorContainerCoClass.GES.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEStyleSelectorContainerCoClass.GES.1.0\CLSID@ {03a81800-0cd8-11dd-bd0b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GESunCoClass.GESunCoClass@ GESunCoClass Object
Reg HKLM\SOFTWARE\Classes\GESunCoClass.GESunCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\GESunCoClass.GESunCoClass\CLSID@ {2938abf2-9123-4112-ba24-38771abbc34c}
Reg HKLM\SOFTWARE\Classes\GESunCoClass.GESunCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\GESunCoClass.GESunCoClass\CurVer@ GESunCoClass.GESunCoClass.1.0
Reg HKLM\SOFTWARE\Classes\GESunCoClass.GESunCoClass.1.0@ GESunCoClass Object
Reg HKLM\SOFTWARE\Classes\GESunCoClass.GESunCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GESunCoClass.GESunCoClass.1.0\CLSID@ {2938abf2-9123-4112-ba24-38771abbc34c}
Reg HKLM\SOFTWARE\Classes\GETourPlayerCoClass.GETourPlayerCoC@ GETourPlayerCoClass Object
Reg HKLM\SOFTWARE\Classes\GETourPlayerCoClass.GETourPlayerCoC\CLSID
Reg HKLM\SOFTWARE\Classes\GETourPlayerCoClass.GETourPlayerCoC\CLSID@ {1b9d5a00-f252-11dd-ba2f-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GETourPlayerCoClass.GETourPlayerCoC\CurVer
Reg HKLM\SOFTWARE\Classes\GETourPlayerCoClass.GETourPlayerCoC\CurVer@ GETourPlayerCoClass.GETourPlayerCoC.1.0
Reg HKLM\SOFTWARE\Classes\GETourPlayerCoClass.GETourPlayerCoC.1.0@ GETourPlayerCoClass Object
Reg HKLM\SOFTWARE\Classes\GETourPlayerCoClass.GETourPlayerCoC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GETourPlayerCoClass.GETourPlayerCoC.1.0\CLSID@ {1b9d5a00-f252-11dd-ba2f-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GETourView_CoClass.GETourView_CoCla@ GETourView_CoClass Object
Reg HKLM\SOFTWARE\Classes\GETourView_CoClass.GETourView_CoCla\CLSID
Reg HKLM\SOFTWARE\Classes\GETourView_CoClass.GETourView_CoCla\CLSID@ {a8469360-c168-11dd-ad8b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GETourView_CoClass.GETourView_CoCla\CurVer
Reg HKLM\SOFTWARE\Classes\GETourView_CoClass.GETourView_CoCla\CurVer@ GETourView_CoClass.GETourView_CoCla.1.0
Reg HKLM\SOFTWARE\Classes\GETourView_CoClass.GETourView_CoCla.1.0@ GETourView_CoClass Object
Reg HKLM\SOFTWARE\Classes\GETourView_CoClass.GETourView_CoCla.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GETourView_CoClass.GETourView_CoCla.1.0\CLSID@ {a8469360-c168-11dd-ad8b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEViewCoClass.GEViewCoClass@ GEViewCoClass Object
Reg HKLM\SOFTWARE\Classes\GEViewCoClass.GEViewCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\GEViewCoClass.GEViewCoClass\CLSID@ {f2aa8ff0-0201-11dd-95ff-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEViewCoClass.GEViewCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\GEViewCoClass.GEViewCoClass\CurVer@ GEViewCoClass.GEViewCoClass.1.0
Reg HKLM\SOFTWARE\Classes\GEViewCoClass.GEViewCoClass.1.0@ GEViewCoClass Object
Reg HKLM\SOFTWARE\Classes\GEViewCoClass.GEViewCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEViewCoClass.GEViewCoClass.1.0\CLSID@ {f2aa8ff0-0201-11dd-95ff-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\GEWindowCoClass.GEWindowCoClass@ GEWindowCoClass Object
Reg HKLM\SOFTWARE\Classes\GEWindowCoClass.GEWindowCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\GEWindowCoClass.GEWindowCoClass\CLSID@ {288e09a2-927a-49a7-bb24-58e48ebad58c}
Reg HKLM\SOFTWARE\Classes\GEWindowCoClass.GEWindowCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\GEWindowCoClass.GEWindowCoClass\CurVer@ GEWindowCoClass.GEWindowCoClass.1.0
Reg HKLM\SOFTWARE\Classes\GEWindowCoClass.GEWindowCoClass.1.0@ GEWindowCoClass Object
Reg HKLM\SOFTWARE\Classes\GEWindowCoClass.GEWindowCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GEWindowCoClass.GEWindowCoClass.1.0\CLSID@ {288e09a2-927a-49a7-bb24-58e48ebad58c}
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\DefaultIcon@ "E:\Program Files\Google\Picasa3\PicasaPhotoViewer.exe",-102
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell@ Preview
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Open
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Open\Command
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Open\Command@ "E:\Program Files\Google\Picasa3\PicasaPhotoViewer.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Preview
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Preview\Command
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Preview\Command@ "E:\Program Files\Google\Picasa3\PicasaPhotoViewer.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Upload To Picasa Web Albums
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Upload To Picasa Web Albums@ Upload to Web Albums…
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Upload To Picasa Web Albums\Command
Reg HKLM\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Upload To Picasa Web Albums\Command@ "E:\Program Files\Google\Picasa3\PicasaPhotoViewer.exe" /upload "%1"
Reg HKLM\SOFTWARE\Classes\GoogleEarth.AnimationControllerGE@ AnimationControllerGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.AnimationControllerGE\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.AnimationControllerGE\CLSID@ {1A239250-B650-4B63-B4CF-7FCC4DC07DC6}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.AnimationControllerGE\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleEarth.AnimationControllerGE\CurVer@ GoogleEarth.AnimationControllerGE.1
Reg HKLM\SOFTWARE\Classes\GoogleEarth.AnimationControllerGE.1@ AnimationControllerGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.AnimationControllerGE.1\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.AnimationControllerGE.1\CLSID@ {1A239250-B650-4B63-B4CF-7FCC4DC07DC6}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ApplicationGE@ ApplicationGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ApplicationGE\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ApplicationGE\CLSID@ {8097D7E9-DB9E-4AEF-9B28-61D82A1DF784}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ApplicationGE\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ApplicationGE\CurVer@ GoogleEarth.ApplicationGE.1
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ApplicationGE.1@ ApplicationGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ApplicationGE.1\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ApplicationGE.1\CLSID@ {8097D7E9-DB9E-4AEF-9B28-61D82A1DF784}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.CameraInfoGE@ CameraInfoGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.CameraInfoGE\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.CameraInfoGE\CLSID@ {645EEE5A-BD51-4C05-A6AF-6F2CF8950AAB}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.CameraInfoGE\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleEarth.CameraInfoGE\CurVer@ GoogleEarth.CameraInfoGE.1
Reg HKLM\SOFTWARE\Classes\GoogleEarth.CameraInfoGE.1@ CameraInfoGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.CameraInfoGE.1\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.CameraInfoGE.1\CLSID@ {645EEE5A-BD51-4C05-A6AF-6F2CF8950AAB}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureCollectionGE@ FeatureCollectionGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureCollectionGE\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureCollectionGE\CLSID@ {9059C329-4661-49B2-9984-8753C45DB7B9}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureCollectionGE\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureCollectionGE\CurVer@ GoogleEarth.FeatureCollectionGE.1
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureCollectionGE.1@ FeatureCollection Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureCollectionGE.1\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureCollectionGE.1\CLSID@ {9059C329-4661-49B2-9984-8753C45DB7B9}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureGE@ FeatureGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureGE\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureGE\CLSID@ {CBD4FB70-F00B-4963-B249-4B056E6A981A}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureGE\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureGE\CurVer@ GoogleEarth.FeatureGE.1
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureGE.1@ FeatureGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureGE.1\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.FeatureGE.1\CLSID@ {CBD4FB70-F00B-4963-B249-4B056E6A981A}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.PointOnTerrainGE@ PointOnTerrainGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.PointOnTerrainGE\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.PointOnTerrainGE\CLSID@ {1796A329-04C1-4C07-B28E-E4A807935C06}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.PointOnTerrainGE\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleEarth.PointOnTerrainGE\CurVer@ GoogleEarth.PointOnTerrainGE.1
Reg HKLM\SOFTWARE\Classes\GoogleEarth.PointOnTerrainGE.1@ PointOnTerrainGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.PointOnTerrainGE.1\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.PointOnTerrainGE.1\CLSID@ {1796A329-04C1-4C07-B28E-E4A807935C06}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.SearchControllerGE@ SearchControllerGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.SearchControllerGE\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.SearchControllerGE\CLSID@ {A4F65992-5738-475B-9C16-CF102BCDE153}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.SearchControllerGE\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleEarth.SearchControllerGE\CurVer@ GoogleEarth.SearchControllerGE.1
Reg HKLM\SOFTWARE\Classes\GoogleEarth.SearchControllerGE.1@ SearchControllerGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.SearchControllerGE.1\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.SearchControllerGE.1\CLSID@ {A4F65992-5738-475B-9C16-CF102BCDE153}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeGE@ TimeGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeGE\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeGE\CLSID@ {1AEDB68D-18A7-4CA9-B41B-3CE7E59FAB24}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeGE\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeGE\CurVer@ GoogleEarth.TimeGE.1
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeGE.1@ TimeGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeGE.1\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeGE.1\CLSID@ {1AEDB68D-18A7-4CA9-B41B-3CE7E59FAB24}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeIntervalGE@ TimeIntervalGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeIntervalGE\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeIntervalGE\CLSID@ {42DF0D46-7D49-4AE5-8EF6-9CA6E41EFEC1}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeIntervalGE\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeIntervalGE\CurVer@ GoogleEarth.TimeIntervalGE.1
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeIntervalGE.1@ TimeIntervalGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeIntervalGE.1\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TimeIntervalGE.1\CLSID@ {42DF0D46-7D49-4AE5-8EF6-9CA6E41EFEC1}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TourControllerGE@ TourControllerGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TourControllerGE\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TourControllerGE\CLSID@ {77C4C807-E257-43AD-BB3F-7CA88760BD29}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TourControllerGE\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TourControllerGE\CurVer@ GoogleEarth.TourControllerGE.1
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TourControllerGE.1@ TourControllerGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TourControllerGE.1\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.TourControllerGE.1\CLSID@ {77C4C807-E257-43AD-BB3F-7CA88760BD29}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ViewExtentsGE@ ViewExtentsGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ViewExtentsGE\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ViewExtentsGE\CLSID@ {D93BF052-FC68-4DB6-A4F8-A4DC9BEEB1C0}
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ViewExtentsGE\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ViewExtentsGE\CurVer@ GoogleEarth.ViewExtentsGE.1
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ViewExtentsGE.1@ ViewExtentsGE Class
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ViewExtentsGE.1\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleEarth.ViewExtentsGE.1\CLSID@ {D93BF052-FC68-4DB6-A4F8-A4DC9BEEB1C0}
Reg HKLM\SOFTWARE\Classes\GoogleTranslator.IEExtension@ GoogleTranslator.IEExtension
Reg HKLM\SOFTWARE\Classes\GoogleTranslator.IEExtension\Clsid
Reg HKLM\SOFTWARE\Classes\GoogleTranslator.IEExtension\Clsid@ {26440D84-AE46-49B0-9833-C29BF093F2F4}
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass@ Google Update Core Class
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass\CLSID@ {E225E692-4B47-4777-9BED-4FD7FE257F0E}
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass\CurVer@ GoogleUpdate.CoreClass.1
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass.1@ Google Update Core Class
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass.1\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass.1\CLSID@ {E225E692-4B47-4777-9BED-4FD7FE257F0E}
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine@ GoogleUpdate.OnDemandCOMClass
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine\CLSID@ {6F8BD55B-E83D-4A47-85BE-81FFA8057A69}
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine\CurVer@ GoogleUpdate.OnDemandCOMClassMachine.1.0
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine.1.0@ GoogleUpdate.OnDemandCOMClass
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine.1.0\CLSID@ {6F8BD55B-E83D-4A47-85BE-81FFA8057A69}
Reg HKLM\SOFTWARE\Classes\GoogleUpdateProcessLauncher@ Google Update Process Launcher Class
Reg HKLM\SOFTWARE\Classes\GoogleUpdateProcessLauncher\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleUpdateProcessLauncher\CLSID@ {ABC01078-F197-4B0B-ADBC-CFE684B39C82}
Reg HKLM\SOFTWARE\Classes\GoogleUpdateProcessLauncher\CurVer
Reg HKLM\SOFTWARE\Classes\GoogleUpdateProcessLauncher\CurVer@ GoogleUpdateProcessLauncher.1.0
Reg HKLM\SOFTWARE\Classes\GoogleUpdateProcessLauncher.1.0@ Google Update Process Launcher Class
Reg HKLM\SOFTWARE\Classes\GoogleUpdateProcessLauncher.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\GoogleUpdateProcessLauncher.1.0\CLSID@ {ABC01078-F197-4B0B-ADBC-CFE684B39C82}
Reg HKLM\SOFTWARE\Classes\GrabberObj.GrabberObj@ GrabberObj Class
Reg HKLM\SOFTWARE\Classes\GrabberObj.GrabberObj\CurVer
Reg HKLM\SOFTWARE\Classes\GrabberObj.GrabberObj\CurVer@ GrabberObj.GrabberObj.1
Reg HKLM\SOFTWARE\Classes\GrabberObj.GrabberObj.1@ GrabberObj Class
Reg HKLM\SOFTWARE\Classes\GrabberObj.GrabberObj.1\CLSID
Reg HKLM\SOFTWARE\Classes\GrabberObj.GrabberObj.1\CLSID@ {FF7C3CF0-4B15-11D1-ABED-709549C10000}
Reg HKLM\SOFTWARE\Classes\GUSchedulerCtl.UpdaterScheduler@ Google Updater Scheduler class
Reg HKLM\SOFTWARE\Classes\GUSchedulerCtl.UpdaterScheduler\CLSID
Reg HKLM\SOFTWARE\Classes\GUSchedulerCtl.UpdaterScheduler\CLSID@ {B53B7061-6584-46AA-A033-D610EB10BD9B}
Reg HKLM\SOFTWARE\Classes\GUSchedulerCtl.UpdaterScheduler\CurVer
Reg HKLM\SOFTWARE\Classes\GUSchedulerCtl.UpdaterScheduler\CurVer@ GUSchedulerCtl.UpdaterScheduler.1
Reg HKLM\SOFTWARE\Classes\GUSchedulerCtl.UpdaterScheduler.1@ Google Updater Scheduler class
Reg HKLM\SOFTWARE\Classes\GUSchedulerCtl.UpdaterScheduler.1\CLSID
Reg HKLM\SOFTWARE\Classes\GUSchedulerCtl.UpdaterScheduler.1\CLSID@ {B53B7061-6584-46AA-A033-D610EB10BD9B}
Reg HKLM\SOFTWARE\Classes\GUServiceCtl.SilentUpdater@ Google Silent Updater class
Reg HKLM\SOFTWARE\Classes\GUServiceCtl.SilentUpdater\CLSID
Reg HKLM\SOFTWARE\Classes\GUServiceCtl.SilentUpdater\CLSID@ {89DAE4CD-9F17-4980-902A-99BA84A8F5C8}
Reg HKLM\SOFTWARE\Classes\GUServiceCtl.SilentUpdater\CurVer
Reg HKLM\SOFTWARE\Classes\GUServiceCtl.SilentUpdater\CurVer@ GUServiceCtl.SilentUpdater.1
Reg HKLM\SOFTWARE\Classes\GUServiceCtl.SilentUpdater.1@ Google Silent Updater class
Reg HKLM\SOFTWARE\Classes\GUServiceCtl.SilentUpdater.1\CLSID
Reg HKLM\SOFTWARE\Classes\GUServiceCtl.SilentUpdater.1\CLSID@ {89DAE4CD-9F17-4980-902A-99BA84A8F5C8}
Reg HKLM\SOFTWARE\Classes\HjDict.HJDict@ HJDict Class
Reg HKLM\SOFTWARE\Classes\HjDict.HJDict\CLSID
Reg HKLM\SOFTWARE\Classes\HjDict.HJDict\CLSID@ {0631B62B-67EA-46D5-B5C9-E632E0D1493D}
Reg HKLM\SOFTWARE\Classes\HjDict.HJDict\CurVer
Reg HKLM\SOFTWARE\Classes\HjDict.HJDict\CurVer@ HjDict.HJDict.1
Reg HKLM\SOFTWARE\Classes\HjDict.HJDict.1@ HJDict Class
Reg HKLM\SOFTWARE\Classes\HjDict.HJDict.1\CLSID
Reg HKLM\SOFTWARE\Classes\HjDict.HJDict.1\CLSID@ {0631B62B-67EA-46D5-B5C9-E632E0D1493D}
Reg HKLM\SOFTWARE\Classes\HTML.HostEncode\CLSID
Reg HKLM\SOFTWARE\Classes\HTML.HostEncode\CLSID@ {0CF774D0-F077-11D1-B1BC-00C04F86C324}
Reg HKLM\SOFTWARE\Classes\ID1@ ImeSingleKanjiDict
Reg HKLM\SOFTWARE\Classes\ID1\CLSID
Reg HKLM\SOFTWARE\Classes\ID1\CLSID@ {BE4191FB-59EF-4825-AEFC-109727951E42}
Reg HKLM\SOFTWARE\Classes\ID1\CurVer
Reg HKLM\SOFTWARE\Classes\ID1\CurVer@ ID2
Reg HKLM\SOFTWARE\Classes\ID2@ ImeSingleKanjiDict
Reg HKLM\SOFTWARE\Classes\ID2\CLSID
Reg HKLM\SOFTWARE\Classes\ID2\CLSID@ {BE4191FB-59EF-4825-AEFC-109727951E42}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Data@ Microsoft IMAPI v2, Standard Data Writer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Data\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Data\CLSID@ {2735412A-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Data\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Data\CurVer@ IMAPI2.MsftDiscFormat2Data.1
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Data.1@ Microsoft IMAPI v2, Standard Data Writer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Data.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Data.1\CLSID@ {2735412A-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Erase@ Microsoft IMAPI v2, Media Erase
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Erase\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Erase\CLSID@ {2735412B-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Erase\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Erase\CurVer@ IMAPI2.MsftDiscFormat2Erase.1
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Erase.1@ Microsoft IMAPI v2, Media Erase
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Erase.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2Erase.1\CLSID@ {2735412B-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2RawCD@ Microsoft IMAPI v2, RAW Disc-At-Once CD Writer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2RawCD\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2RawCD\CLSID@ {27354128-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2RawCD\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2RawCD\CurVer@ IMAPI2.MsftDiscFormat2RawCD.1
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2RawCD.1@ Microsoft IMAPI v2, RAW Disc-At-Once CD Writer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2RawCD.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2RawCD.1\CLSID@ {27354128-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2TrackAtOnce@ Microsoft IMAPI v2, Audio CD Writer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2TrackAtOnce\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2TrackAtOnce\CLSID@ {27354129-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2TrackAtOnce\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2TrackAtOnce\CurVer@ IMAPI2.MsftDiscFormat2TrackAtOnce.1
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2TrackAtOnce.1@ Microsoft IMAPI v2, Audio CD Writer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2TrackAtOnce.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscFormat2TrackAtOnce.1\CLSID@ {27354129-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscMaster2@ Microsoft IMAPI v2, Disc Master
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscMaster2\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscMaster2\CLSID@ {2735412E-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscMaster2\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscMaster2\CurVer@ IMAPI2.MsftDiscMaster2.1
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscMaster2.1@ Microsoft IMAPI v2, Disc Master
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscMaster2.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscMaster2.1\CLSID@ {2735412E-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscRecorder2@ Microsoft IMAPI v2, CD DVD Device Object
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscRecorder2\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscRecorder2\CLSID@ {2735412D-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscRecorder2\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscRecorder2\CurVer@ IMAPI2.MsftDiscRecorder2.1
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscRecorder2.1@ Microsoft IMAPI v2, CD DVD Device Object
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscRecorder2.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftDiscRecorder2.1\CLSID@ {2735412D-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftRawCDImageCreator@ Microsoft IMAPI v2, RAW Image Creator
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftRawCDImageCreator\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftRawCDImageCreator\CLSID@ {25983561-9D65-49CE-B335-40630D901227}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftRawCDImageCreator\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftRawCDImageCreator\CurVer@ IMAPI2.MsftRawCDImageCreator.1
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftRawCDImageCreator.1@ Microsoft IMAPI v2, RAW Image Creator
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftRawCDImageCreator.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftRawCDImageCreator.1\CLSID@ {25983561-9D65-49CE-B335-40630D901227}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamConcatenate@ Microsoft IMAPI v2, Stream concatenation utility
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamConcatenate\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamConcatenate\CLSID@ {27354125-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamConcatenate\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamConcatenate\CurVer@ IMAPI2.MsftStreamConcatenate.1
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamConcatenate.1@ Microsoft IMAPI v2, Stream concatenation utility
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamConcatenate.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamConcatenate.1\CLSID@ {27354125-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamInterleave@ Microsoft IMAPI v2, Stream interleave utility
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamInterleave\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamInterleave\CLSID@ {27354124-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamInterleave\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamInterleave\CurVer@ IMAPI2.MsftStreamInterleave.1
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamInterleave.1@ Microsoft IMAPI v2, Stream interleave utility
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamInterleave.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamInterleave.1\CLSID@ {27354124-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamPrng001@ Microsoft IMAPI v2, PRNG based stream
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamPrng001\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamPrng001\CLSID@ {27354126-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamPrng001\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamPrng001\CurVer@ IMAPI2.MsftStreamPrng001.1
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamPrng001.1@ Microsoft IMAPI v2, PRNG based stream
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamPrng001.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamPrng001.1\CLSID@ {27354126-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamZero@ Microsoft IMAPI v2, Zero stream
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamZero\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamZero\CLSID@ {27354127-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamZero\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamZero\CurVer@ IMAPI2.MsftDevZero.1
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamZero.1@ Microsoft IMAPI v2, Zero stream
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamZero.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftStreamZero.1\CLSID@ {27354127-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftWriteEngine2@ Microsoft IMAPI v2, Write Engine
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftWriteEngine2\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftWriteEngine2\CLSID@ {2735412C-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftWriteEngine2\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftWriteEngine2\CurVer@ IMAPI2.MsftWriteEngine2.1
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftWriteEngine2.1@ Microsoft IMAPI v2, Write Engine
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftWriteEngine2.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2.MsftWriteEngine2.1\CLSID@ {2735412C-7F64-5B0F-8F00-5D77AFBE261E}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.BootOptions@ BootOptions Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.BootOptions\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.BootOptions\CLSID@ {2C941FCE-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.BootOptions\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.BootOptions\CurVer@ IMAPI2FS.BootOptions.1
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.BootOptions.1@ BootOptions Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.BootOptions.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.BootOptions.1\CLSID@ {2C941FCE-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumFsiItems@ EnumFsiItems Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumFsiItems\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumFsiItems\CLSID@ {2C941FC6-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumFsiItems\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumFsiItems\CurVer@ IMAPI2FS.EnumFsiItems.1
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumFsiItems.1@ EnumFsiItems Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumFsiItems.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumFsiItems.1\CLSID@ {2C941FC6-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumProgressItems@ EnumProgressItems Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumProgressItems\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumProgressItems\CLSID@ {2C941FCA-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumProgressItems\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumProgressItems\CurVer@ IMAPI2FS.EnumProgressItems.1
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumProgressItems.1@ EnumProgressItems Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumProgressItems.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.EnumProgressItems.1\CLSID@ {2C941FCA-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FileSystemImageResult@ FileSystemImageResult Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FileSystemImageResult\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FileSystemImageResult\CLSID@ {2C941FCC-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FileSystemImageResult\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FileSystemImageResult\CurVer@ IMAPI2FS.FileSystemImageResult.1
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FileSystemImageResult.1@ FileSystemImageResult Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FileSystemImageResult.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FileSystemImageResult.1\CLSID@ {2C941FCC-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiDirectoryItem@ FsiDirectoryItem Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiDirectoryItem\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiDirectoryItem\CLSID@ {2C941FC8-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiDirectoryItem\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiDirectoryItem\CurVer@ IMAPI2FS.FsiDirectoryItem.1
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiDirectoryItem.1@ FsiDirectoryItem Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiDirectoryItem.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiDirectoryItem.1\CLSID@ {2C941FC8-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiFileItem@ FsiFileItem Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiFileItem\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiFileItem\CLSID@ {2C941FC7-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiFileItem\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiFileItem\CurVer@ IMAPI2FS.FsiFileItem.1
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiFileItem.1@ FsiFileItem Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiFileItem.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiFileItem.1\CLSID@ {2C941FC7-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiNamedStreams@ FsiNamedStreams Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiNamedStreams\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiNamedStreams\CLSID@ {C6B6F8ED-6D19-44b4-B539-B159B793A32D}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiNamedStreams\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiNamedStreams\CurVer@ IMAPI2FS.FsiNamedStreams.1
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiNamedStreams.1@ FsiNamedStreams Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiNamedStreams.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiNamedStreams.1\CLSID@ {C6B6F8ED-6D19-44b4-B539-B159B793A32D}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiStream@ FsiStream Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiStream\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiStream\CLSID@ {2C941FCD-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiStream\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiStream\CurVer@ IMAPI2FS.FsiStream.1
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiStream.1@ FsiStream Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiStream.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.FsiStream.1\CLSID@ {2C941FCD-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftFileSystemImage@ FileSystemImage Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftFileSystemImage\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftFileSystemImage\CLSID@ {2C941FC5-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftFileSystemImage\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftFileSystemImage\CurVer@ IMAPI2FS.MsftFileSystemImage.1
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftFileSystemImage.1@ FileSystemImage Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftFileSystemImage.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftFileSystemImage.1\CLSID@ {2C941FC5-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftIsoImageManager@ Microsoft IMAPI v2, .ISO Image Manager utility
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftIsoImageManager\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftIsoImageManager\CLSID@ {CEEE3B62-8F56-4056-869B-EF16917E3EFC}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftIsoImageManager\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftIsoImageManager\CurVer@ IMAPI2FS.MsftFileSystemImage.1
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftIsoImageManager.1@ Microsoft IMAPI v2, .ISO Image Manager utility
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftIsoImageManager.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.MsftIsoImageManager.1\CLSID@ {CEEE3B62-8F56-4056-869B-EF16917E3EFC}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItem@ ProgressItem Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItem\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItem\CLSID@ {2C941FCB-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItem\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItem\CurVer@ IMAPI2FS.ProgressItem.1
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItem.1@ ProgressItem Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItem.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItem.1\CLSID@ {2C941FCB-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItems@ ProgressItems Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItems\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItems\CLSID@ {2C941FC9-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItems\CurVer
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItems\CurVer@ IMAPI2FS.ProgressItems.1
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItems.1@ ProgressItems Class
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItems.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMAPI2FS.ProgressItems.1\CLSID@ {2C941FC9-975B-59BE-A960-9A2A262853A5}
Reg HKLM\SOFTWARE\Classes\IMECheckDefaultInputProfile.Japan@ IIMECheckDefaultInputProfile
Reg HKLM\SOFTWARE\Classes\IMECheckDefaultInputProfile.Japan\CLSID
Reg HKLM\SOFTWARE\Classes\IMECheckDefaultInputProfile.Japan\CLSID@ {1C4661AE-05A2-4F63-A548-7943FACCED21}
Reg HKLM\SOFTWARE\Classes\IMECheckDefaultInputProfile.Japan\CurVer
Reg HKLM\SOFTWARE\Classes\IMECheckDefaultInputProfile.Japan\CurVer@ IMECheckDefaultInputProfile.Japan.2
Reg HKLM\SOFTWARE\Classes\IMECheckDefaultInputProfile.Japan.2@ IIMECheckDefaultInputProfile
Reg HKLM\SOFTWARE\Classes\IMECheckDefaultInputProfile.Japan.2\CLSID
Reg HKLM\SOFTWARE\Classes\IMECheckDefaultInputProfile.Japan.2\CLSID@ {1C4661AE-05A2-4F63-A548-7943FACCED21}
Reg HKLM\SOFTWARE\Classes\IMEPad.HWR@ MS IME 5.1a HandWriting Applet
Reg HKLM\SOFTWARE\Classes\IMEPad.HWR\CLSID
Reg HKLM\SOFTWARE\Classes\IMEPad.HWR\CLSID@ {B95BCCA6-DDDF-4FFD-9B5E-663AA2FF350F}
Reg HKLM\SOFTWARE\Classes\IMEPad.HWR\CurVer
Reg HKLM\SOFTWARE\Classes\IMEPad.HWR\CurVer@ IMEPad.HWR.8
Reg HKLM\SOFTWARE\Classes\IMEPad.HWR.6.1@ MS Korean IME 6.1 HandWriting Applet
Reg HKLM\SOFTWARE\Classes\IMEPad.HWR.6.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMEPad.HWR.6.1\CLSID@ {35CC8482-4FB1-11D3-A5DA-00C04F88249B}
Reg HKLM\SOFTWARE\Classes\IMEPad.HWR.8@ MS IME 5.1a HandWriting Applet
Reg HKLM\SOFTWARE\Classes\IMEPad.HWR.8\CLSID
Reg HKLM\SOFTWARE\Classes\IMEPad.HWR.8\CLSID@ {B95BCCA6-DDDF-4FFD-9B5E-663AA2FF350F}
Reg HKLM\SOFTWARE\Classes\IMEPad.SKF@ MS IME 2002a SKF Applet
Reg HKLM\SOFTWARE\Classes\IMEPad.SKF\CLSID
Reg HKLM\SOFTWARE\Classes\IMEPad.SKF\CLSID@ {040BFFEC-A42F-4BCF-8F67-00D6A8D3953C}
Reg HKLM\SOFTWARE\Classes\IMEPad.SKF\CurVer
Reg HKLM\SOFTWARE\Classes\IMEPad.SKF\CurVer@ IMEPad.SKF.8
Reg HKLM\SOFTWARE\Classes\IMEPad.SKF.8@ MS IME 2002a SKF Applet
Reg HKLM\SOFTWARE\Classes\IMEPad.SKF.8\CLSID
Reg HKLM\SOFTWARE\Classes\IMEPad.SKF.8\CLSID@ {040BFFEC-A42F-4BCF-8F67-00D6A8D3953C}
Reg HKLM\SOFTWARE\Classes\IMEPad.Speech@ Microsoft IME VoicePad Applet
Reg HKLM\SOFTWARE\Classes\IMEPad.Speech\CLSID
Reg HKLM\SOFTWARE\Classes\IMEPad.Speech\CLSID@ {6B467D45-324F-4FDB-AB1A-ABFFBD06F5EA}
Reg HKLM\SOFTWARE\Classes\IMEPad.Speech\CurVer
Reg HKLM\SOFTWARE\Classes\IMEPad.Speech\CurVer@ IMEPad.Speech.8.1
Reg HKLM\SOFTWARE\Classes\IMEPad.Speech.8.1@ Microsoft IME VoicePad Applet
Reg HKLM\SOFTWARE\Classes\IMEPad.Speech.8.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMEPad.Speech.8.1\CLSID@ {6B467D45-324F-4FDB-AB1A-ABFFBD06F5EA}
Reg HKLM\SOFTWARE\Classes\IMESingleKanjiDict@ Microsoft IME SingleKanjiDictionary interface
Reg HKLM\SOFTWARE\Classes\IMESingleKanjiDict\CLSID
Reg HKLM\SOFTWARE\Classes\IMESingleKanjiDict\CLSID@ {6E3197A3-BBC3-11D4-84C0-00C04F7A06E5}
Reg HKLM\SOFTWARE\Classes\IMESingleKanjiDict\CurVer
Reg HKLM\SOFTWARE\Classes\IMESingleKanjiDict\CurVer@ IMESingleKanjiDict.8.1
Reg HKLM\SOFTWARE\Classes\IMESingleKanjiDict.8.1@ Microsoft IME SingleKanjiDictionary interface
Reg HKLM\SOFTWARE\Classes\IMESingleKanjiDict.8.1\CLSID
Reg HKLM\SOFTWARE\Classes\IMESingleKanjiDict.8.1\CLSID@ {6E3197A3-BBC3-11D4-84C0-00C04F7A06E5}
Reg HKLM\SOFTWARE\Classes\imgfile\Shell
Reg HKLM\SOFTWARE\Classes\imgfile\Shell\-exit -isowrite
Reg HKLM\SOFTWARE\Classes\imgfile\Shell\-exit -isowrite\command
Reg HKLM\SOFTWARE\Classes\imgfile\Shell\-exit -isowrite\command@ "C:\Program Files\NCH Swift Sound\ExpressBurn\expressburn.exe" "%L"
Reg HKLM\SOFTWARE\Classes\IMLANG@
Reg HKLM\SOFTWARE\Classes\IMLANG\CLSID
Reg HKLM\SOFTWARE\Classes\IMLANG\CLSID@ {EFA75289-066E-4A8F-A978-749B1DD23858}
Reg HKLM\SOFTWARE\Classes\IMLANG.81@
Reg HKLM\SOFTWARE\Classes\IMLANG.81\CLSID
Reg HKLM\SOFTWARE\Classes\IMLANG.81\CLSID@ {EFA75289-066E-4A8F-A978-749B1DD23858}
Reg HKLM\SOFTWARE\Classes\IMLANG.81\CurVer
Reg HKLM\SOFTWARE\Classes\IMLANG.81\CurVer@ IMLANG
Reg HKLM\SOFTWARE\Classes\JSFile.HostEncode\CLSID
Reg HKLM\SOFTWARE\Classes\JSFile.HostEncode\CLSID@ {85131630-480C-11D2-B1F9-00C04F86C324}
Reg HKLM\SOFTWARE\Classes\Keyhole.KHFeature@ KHFeature Class
Reg HKLM\SOFTWARE\Classes\Keyhole.KHFeature\CLSID
Reg HKLM\SOFTWARE\Classes\Keyhole.KHFeature\CLSID@ {B153D707-447A-4538-913E-6146B3FDEE02}
Reg HKLM\SOFTWARE\Classes\Keyhole.KHFeature.1@ KHFeature Class
Reg HKLM\SOFTWARE\Classes\Keyhole.KHFeature.1\CLSID
Reg HKLM\SOFTWARE\Classes\Keyhole.KHFeature.1\CLSID@ {B153D707-447A-4538-913E-6146B3FDEE02}
Reg HKLM\SOFTWARE\Classes\Keyhole.KHInterface@ KHInterface Class
Reg HKLM\SOFTWARE\Classes\Keyhole.KHInterface\CLSID
Reg HKLM\SOFTWARE\Classes\Keyhole.KHInterface\CLSID@ {AFD07A5E-3E20-4D77-825C-2F6D1A50BE5B}
Reg HKLM\SOFTWARE\Classes\Keyhole.KHInterface\CurVer
Reg HKLM\SOFTWARE\Classes\Keyhole.KHInterface\CurVer@ Keyhole.KHInterface.1
Reg HKLM\SOFTWARE\Classes\Keyhole.KHInterface.1@ KHInterface Class
Reg HKLM\SOFTWARE\Classes\Keyhole.KHInterface.1\CLSID
Reg HKLM\SOFTWARE\Classes\Keyhole.KHInterface.1\CLSID@ {AFD07A5E-3E20-4D77-825C-2F6D1A50BE5B}
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewExtents@ KHViewExtents Class
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewExtents\CLSID
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewExtents\CLSID@ {63E6BE14-A742-4EEA-8AF3-0EC39F10F850}
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewExtents.1@ KHViewExtents Class
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewExtents.1\CLSID
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewExtents.1\CLSID@ {63E6BE14-A742-4EEA-8AF3-0EC39F10F850}
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewInfo@ KHViewInfo Class
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewInfo\CLSID
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewInfo\CLSID@ {A2D4475B-C9AA-48E2-A029-1DB829DACF7B}
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewInfo\CurVer
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewInfo\CurVer@ Keyhole.KHViewInfo.1
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewInfo.1@ KHViewInfo Class
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewInfo.1\CLSID
Reg HKLM\SOFTWARE\Classes\Keyhole.KHViewInfo.1\CLSID@ {A2D4475B-C9AA-48E2-A029-1DB829DACF7B}
Reg HKLM\SOFTWARE\Classes\KmlAbstractViewCoClass.KmlAbstractV@ KmlAbstractViewCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlAbstractViewCoClass.KmlAbstractV\CLSID
Reg HKLM\SOFTWARE\Classes\KmlAbstractViewCoClass.KmlAbstractV\CLSID@ {a4155c74-d67f-11dc-91f3-896c55d89593}
Reg HKLM\SOFTWARE\Classes\KmlAbstractViewCoClass.KmlAbstractV\CurVer
Reg HKLM\SOFTWARE\Classes\KmlAbstractViewCoClass.KmlAbstractV\CurVer@ KmlAbstractViewCoClass.KmlAbstractV.1.0
Reg HKLM\SOFTWARE\Classes\KmlAbstractViewCoClass.KmlAbstractV.1.0@ KmlAbstractViewCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlAbstractViewCoClass.KmlAbstractV.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlAbstractViewCoClass.KmlAbstractV.1.0\CLSID@ {a4155c74-d67f-11dc-91f3-896c55d89593}
Reg HKLM\SOFTWARE\Classes\KmlBalloonOpeningEventCoClass.KmlBa@ KmlBalloonOpeningEventCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlBalloonOpeningEventCoClass.KmlBa\CLSID
Reg HKLM\SOFTWARE\Classes\KmlBalloonOpeningEventCoClass.KmlBa\CLSID@ {765ea019-3e9f-4122-90b5-65b68362b814}
Reg HKLM\SOFTWARE\Classes\KmlBalloonOpeningEventCoClass.KmlBa\CurVer
Reg HKLM\SOFTWARE\Classes\KmlBalloonOpeningEventCoClass.KmlBa\CurVer@ KmlBalloonOpeningEventCoClass.KmlBa.1.0
Reg HKLM\SOFTWARE\Classes\KmlBalloonOpeningEventCoClass.KmlBa.1.0@ KmlBalloonOpeningEventCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlBalloonOpeningEventCoClass.KmlBa.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlBalloonOpeningEventCoClass.KmlBa.1.0\CLSID@ {765ea019-3e9f-4122-90b5-65b68362b814}
Reg HKLM\SOFTWARE\Classes\KmlBalloonStyleCoClass.KmlBalloonSt@ KmlBalloonStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlBalloonStyleCoClass.KmlBalloonSt\CLSID
Reg HKLM\SOFTWARE\Classes\KmlBalloonStyleCoClass.KmlBalloonSt\CLSID@ {5dec30f0-8361-4403-8d65-496a0f1e43cc}
Reg HKLM\SOFTWARE\Classes\KmlBalloonStyleCoClass.KmlBalloonSt\CurVer
Reg HKLM\SOFTWARE\Classes\KmlBalloonStyleCoClass.KmlBalloonSt\CurVer@ KmlBalloonStyleCoClass.KmlBalloonSt.1.0
Reg HKLM\SOFTWARE\Classes\KmlBalloonStyleCoClass.KmlBalloonSt.1.0@ KmlBalloonStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlBalloonStyleCoClass.KmlBalloonSt.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlBalloonStyleCoClass.KmlBalloonSt.1.0\CLSID@ {5dec30f0-8361-4403-8d65-496a0f1e43cc}
Reg HKLM\SOFTWARE\Classes\KmlCameraCoClass.KmlCameraCoClass@ KmlCameraCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlCameraCoClass.KmlCameraCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlCameraCoClass.KmlCameraCoClass\CLSID@ {bf356210-dc0b-11dc-95ff-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\KmlCameraCoClass.KmlCameraCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlCameraCoClass.KmlCameraCoClass\CurVer@ KmlCameraCoClass.KmlCameraCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlCameraCoClass.KmlCameraCoClass.1.0@ KmlCameraCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlCameraCoClass.KmlCameraCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlCameraCoClass.KmlCameraCoClass.1.0\CLSID@ {bf356210-dc0b-11dc-95ff-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\KmlColorCoClass.KmlColorCoClass@ KmlColorCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlColorCoClass.KmlColorCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlColorCoClass.KmlColorCoClass\CLSID@ {8a2cf8a4-b7ea-484b-bf26-83771abb3281}
Reg HKLM\SOFTWARE\Classes\KmlColorCoClass.KmlColorCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlColorCoClass.KmlColorCoClass\CurVer@ KmlColorCoClass.KmlColorCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlColorCoClass.KmlColorCoClass.1.0@ KmlColorCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlColorCoClass.KmlColorCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlColorCoClass.KmlColorCoClass.1.0\CLSID@ {8a2cf8a4-b7ea-484b-bf26-83771abb3281}
Reg HKLM\SOFTWARE\Classes\KmlColorStyleCoClass.KmlColorStyleC@ KmlColorStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlColorStyleCoClass.KmlColorStyleC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlColorStyleCoClass.KmlColorStyleC\CLSID@ {8a2cf8a4-b7ea-484b-bf26-5172089c88a0}
Reg HKLM\SOFTWARE\Classes\KmlColorStyleCoClass.KmlColorStyleC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlColorStyleCoClass.KmlColorStyleC\CurVer@ KmlColorStyleCoClass.KmlColorStyleC.1.0
Reg HKLM\SOFTWARE\Classes\KmlColorStyleCoClass.KmlColorStyleC.1.0@ KmlColorStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlColorStyleCoClass.KmlColorStyleC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlColorStyleCoClass.KmlColorStyleC.1.0\CLSID@ {8a2cf8a4-b7ea-484b-bf26-5172089c88a0}
Reg HKLM\SOFTWARE\Classes\KmlContainerCoClass.KmlContainerCoC@ KmlContainerCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlContainerCoClass.KmlContainerCoC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlContainerCoClass.KmlContainerCoC\CLSID@ {DE556AEC-1266-2931-2441-D203819332AF}
Reg HKLM\SOFTWARE\Classes\KmlContainerCoClass.KmlContainerCoC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlContainerCoClass.KmlContainerCoC\CurVer@ KmlContainerCoClass.KmlContainerCoC.1.0
Reg HKLM\SOFTWARE\Classes\KmlContainerCoClass.KmlContainerCoC.1.0@ KmlContainerCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlContainerCoClass.KmlContainerCoC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlContainerCoClass.KmlContainerCoC.1.0\CLSID@ {DE556AEC-1266-2931-2441-D203819332AF}
Reg HKLM\SOFTWARE\Classes\KmlCoordArrayCoClass.KmlCoordArrayC@ KmlCoordArrayCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlCoordArrayCoClass.KmlCoordArrayC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlCoordArrayCoClass.KmlCoordArrayC\CLSID@ {94b91ab6-ac08-4c5b-9b80-f195024b6923}
Reg HKLM\SOFTWARE\Classes\KmlCoordArrayCoClass.KmlCoordArrayC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlCoordArrayCoClass.KmlCoordArrayC\CurVer@ KmlCoordArrayCoClass.KmlCoordArrayC.1.0
Reg HKLM\SOFTWARE\Classes\KmlCoordArrayCoClass.KmlCoordArrayC.1.0@ KmlCoordArrayCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlCoordArrayCoClass.KmlCoordArrayC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlCoordArrayCoClass.KmlCoordArrayC.1.0\CLSID@ {94b91ab6-ac08-4c5b-9b80-f195024b6923}
Reg HKLM\SOFTWARE\Classes\KmlCoordCoClass.KmlCoordCoClass@ KmlCoordCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlCoordCoClass.KmlCoordCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlCoordCoClass.KmlCoordCoClass\CLSID@ {F9152AEC-3462-9202-3411-175546271882}
Reg HKLM\SOFTWARE\Classes\KmlCoordCoClass.KmlCoordCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlCoordCoClass.KmlCoordCoClass\CurVer@
Post #42
GMER 2

Reg HKLM\SOFTWARE\Classes\KmlCoordCoClass.KmlCoordCoClass.1.0@ KmlCoordCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlCoordCoClass.KmlCoordCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlCoordCoClass.KmlCoordCoClass.1.0\CLSID@ {F9152AEC-3462-9202-3411-175546271882}
Reg HKLM\SOFTWARE\Classes\KmlDocumentCoClass.KmlDocumentCoCla@ KmlDocumentCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlDocumentCoClass.KmlDocumentCoCla\CLSID
Reg HKLM\SOFTWARE\Classes\KmlDocumentCoClass.KmlDocumentCoCla\CLSID@ {1CCCB35C-7924-4244-ADC3-0CCD16034A71}
Reg HKLM\SOFTWARE\Classes\KmlDocumentCoClass.KmlDocumentCoCla\CurVer
Reg HKLM\SOFTWARE\Classes\KmlDocumentCoClass.KmlDocumentCoCla\CurVer@ KmlDocumentCoClass.KmlDocumentCoCla.1.0
Reg HKLM\SOFTWARE\Classes\KmlDocumentCoClass.KmlDocumentCoCla.1.0@ KmlDocumentCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlDocumentCoClass.KmlDocumentCoCla.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlDocumentCoClass.KmlDocumentCoCla.1.0\CLSID@ {1CCCB35C-7924-4244-ADC3-0CCD16034A71}
Reg HKLM\SOFTWARE\Classes\KmlEventCoClass.KmlEventCoClass@ KmlEventCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlEventCoClass.KmlEventCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlEventCoClass.KmlEventCoClass\CLSID@ {6e7b1428-73a7-420e-9601-bc0fd12f7881}
Reg HKLM\SOFTWARE\Classes\KmlEventCoClass.KmlEventCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlEventCoClass.KmlEventCoClass\CurVer@ KmlEventCoClass.KmlEventCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlEventCoClass.KmlEventCoClass.1.0@ KmlEventCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlEventCoClass.KmlEventCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlEventCoClass.KmlEventCoClass.1.0\CLSID@ {6e7b1428-73a7-420e-9601-bc0fd12f7881}
Reg HKLM\SOFTWARE\Classes\KmlExtrudableGeometryCoClass.KmlExt@ KmlExtrudableGeometryCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlExtrudableGeometryCoClass.KmlExt\CLSID
Reg HKLM\SOFTWARE\Classes\KmlExtrudableGeometryCoClass.KmlExt\CLSID@ {49274e02-ac7e-431b-8c24-3005c2f00cb0}
Reg HKLM\SOFTWARE\Classes\KmlExtrudableGeometryCoClass.KmlExt\CurVer
Reg HKLM\SOFTWARE\Classes\KmlExtrudableGeometryCoClass.KmlExt\CurVer@ KmlExtrudableGeometryCoClass.KmlExt.1.0
Reg HKLM\SOFTWARE\Classes\KmlExtrudableGeometryCoClass.KmlExt.1.0@ KmlExtrudableGeometryCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlExtrudableGeometryCoClass.KmlExt.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlExtrudableGeometryCoClass.KmlExt.1.0\CLSID@ {49274e02-ac7e-431b-8c24-3005c2f00cb0}
Reg HKLM\SOFTWARE\Classes\KmlFeatureCoClass.KmlFeatureCoClass@ KmlFeatureCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlFeatureCoClass.KmlFeatureCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlFeatureCoClass.KmlFeatureCoClass\CLSID@ {F9152AEC-3462-4632-8087-F23539485E40}
Reg HKLM\SOFTWARE\Classes\KmlFeatureCoClass.KmlFeatureCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlFeatureCoClass.KmlFeatureCoClass\CurVer@ KmlFeatureCoClass.KmlFeatureCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlFeatureCoClass.KmlFeatureCoClass.1.0@ KmlFeatureCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlFeatureCoClass.KmlFeatureCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlFeatureCoClass.KmlFeatureCoClass.1.0\CLSID@ {F9152AEC-3462-4632-8087-F23539485E40}
Reg HKLM\SOFTWARE\Classes\KmlFolderCoClass.KmlFolderCoClass@ KmlFolderCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlFolderCoClass.KmlFolderCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlFolderCoClass.KmlFolderCoClass\CLSID@ {DE556AEC-F321-1EF3-2441-921ABFEDD133}
Reg HKLM\SOFTWARE\Classes\KmlFolderCoClass.KmlFolderCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlFolderCoClass.KmlFolderCoClass\CurVer@ KmlFolderCoClass.KmlFolderCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlFolderCoClass.KmlFolderCoClass.1.0@ KmlFolderCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlFolderCoClass.KmlFolderCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlFolderCoClass.KmlFolderCoClass.1.0\CLSID@ {DE556AEC-F321-1EF3-2441-921ABFEDD133}
Reg HKLM\SOFTWARE\Classes\KmlGeometryCoClass.KmlGeometryCoCla@ KmlGeometryCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlGeometryCoClass.KmlGeometryCoCla\CLSID
Reg HKLM\SOFTWARE\Classes\KmlGeometryCoClass.KmlGeometryCoCla\CLSID@ {F9152AEC-3462-4632-8087-F123B498BC3C}
Reg HKLM\SOFTWARE\Classes\KmlGeometryCoClass.KmlGeometryCoCla\CurVer
Reg HKLM\SOFTWARE\Classes\KmlGeometryCoClass.KmlGeometryCoCla\CurVer@ KmlGeometryCoClass.KmlGeometryCoCla.1.0
Reg HKLM\SOFTWARE\Classes\KmlGeometryCoClass.KmlGeometryCoCla.1.0@ KmlGeometryCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlGeometryCoClass.KmlGeometryCoCla.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlGeometryCoClass.KmlGeometryCoCla.1.0\CLSID@ {F9152AEC-3462-4632-8087-F123B498BC3C}
Reg HKLM\SOFTWARE\Classes\KmlGroundOverlayCoClass.KmlGroundOv@ KmlGroundOverlayCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlGroundOverlayCoClass.KmlGroundOv\CLSID
Reg HKLM\SOFTWARE\Classes\KmlGroundOverlayCoClass.KmlGroundOv\CLSID@ {8ABBC112-3462-4632-8087-1199A8BEED11}
Reg HKLM\SOFTWARE\Classes\KmlGroundOverlayCoClass.KmlGroundOv\CurVer
Reg HKLM\SOFTWARE\Classes\KmlGroundOverlayCoClass.KmlGroundOv\CurVer@ KmlGroundOverlayCoClass.KmlGroundOv.1.0
Reg HKLM\SOFTWARE\Classes\KmlGroundOverlayCoClass.KmlGroundOv.1.0@ KmlGroundOverlayCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlGroundOverlayCoClass.KmlGroundOv.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlGroundOverlayCoClass.KmlGroundOv.1.0\CLSID@ {8ABBC112-3462-4632-8087-1199A8BEED11}
Reg HKLM\SOFTWARE\Classes\KmlIconCoClass.KmlIconCoClass@ KmlIconCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlIconCoClass.KmlIconCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlIconCoClass.KmlIconCoClass\CLSID@ {3a508b42-fffe-4b78-acfd-ef66a94cd156}
Reg HKLM\SOFTWARE\Classes\KmlIconCoClass.KmlIconCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlIconCoClass.KmlIconCoClass\CurVer@ KmlIconCoClass.KmlIconCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlIconCoClass.KmlIconCoClass.1.0@ KmlIconCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlIconCoClass.KmlIconCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlIconCoClass.KmlIconCoClass.1.0\CLSID@ {3a508b42-fffe-4b78-acfd-ef66a94cd156}
Reg HKLM\SOFTWARE\Classes\KmlIconStyleCoClass.KmlIconStyleCoC@ KmlIconStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlIconStyleCoClass.KmlIconStyleCoC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlIconStyleCoClass.KmlIconStyleCoC\CLSID@ {f99a79e0-13e1-478a-8836-56add3610c90}
Reg HKLM\SOFTWARE\Classes\KmlIconStyleCoClass.KmlIconStyleCoC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlIconStyleCoClass.KmlIconStyleCoC\CurVer@ KmlIconStyleCoClass.KmlIconStyleCoC.1.0
Reg HKLM\SOFTWARE\Classes\KmlIconStyleCoClass.KmlIconStyleCoC.1.0@ KmlIconStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlIconStyleCoClass.KmlIconStyleCoC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlIconStyleCoClass.KmlIconStyleCoC.1.0\CLSID@ {f99a79e0-13e1-478a-8836-56add3610c90}
Reg HKLM\SOFTWARE\Classes\KmlLabelStyleCoClass.KmlLabelStyleC@ KmlLabelStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLabelStyleCoClass.KmlLabelStyleC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLabelStyleCoClass.KmlLabelStyleC\CLSID@ {b7a51621-758f-42b7-9365-7f8cbcbbed08}
Reg HKLM\SOFTWARE\Classes\KmlLabelStyleCoClass.KmlLabelStyleC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlLabelStyleCoClass.KmlLabelStyleC\CurVer@ KmlLabelStyleCoClass.KmlLabelStyleC.1.0
Reg HKLM\SOFTWARE\Classes\KmlLabelStyleCoClass.KmlLabelStyleC.1.0@ KmlLabelStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLabelStyleCoClass.KmlLabelStyleC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLabelStyleCoClass.KmlLabelStyleC.1.0\CLSID@ {b7a51621-758f-42b7-9365-7f8cbcbbed08}
Reg HKLM\SOFTWARE\Classes\KmlLatLonAltBoxCoClass.KmlLatLonAlt@ KmlLatLonAltBoxCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLatLonAltBoxCoClass.KmlLatLonAlt\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLatLonAltBoxCoClass.KmlLatLonAlt\CLSID@ {15beb520-8337-4cb3-97f4-39a8710bc739}
Reg HKLM\SOFTWARE\Classes\KmlLatLonAltBoxCoClass.KmlLatLonAlt\CurVer
Reg HKLM\SOFTWARE\Classes\KmlLatLonAltBoxCoClass.KmlLatLonAlt\CurVer@ KmlLatLonAltBoxCoClass.KmlLatLonAlt.1.0
Reg HKLM\SOFTWARE\Classes\KmlLatLonAltBoxCoClass.KmlLatLonAlt.1.0@ KmlLatLonAltBoxCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLatLonAltBoxCoClass.KmlLatLonAlt.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLatLonAltBoxCoClass.KmlLatLonAlt.1.0\CLSID@ {15beb520-8337-4cb3-97f4-39a8710bc739}
Reg HKLM\SOFTWARE\Classes\KmlLatLonBoxCoClass.KmlLatLonBoxCoC@ KmlLatLonBoxCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLatLonBoxCoClass.KmlLatLonBoxCoC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLatLonBoxCoClass.KmlLatLonBoxCoC\CLSID@ {15beb520-8337-4cb3-97f4-62e0721371a3}
Reg HKLM\SOFTWARE\Classes\KmlLatLonBoxCoClass.KmlLatLonBoxCoC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlLatLonBoxCoClass.KmlLatLonBoxCoC\CurVer@ KmlLatLonBoxCoClass.KmlLatLonBoxCoC.1.0
Reg HKLM\SOFTWARE\Classes\KmlLatLonBoxCoClass.KmlLatLonBoxCoC.1.0@ KmlLatLonBoxCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLatLonBoxCoClass.KmlLatLonBoxCoC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLatLonBoxCoClass.KmlLatLonBoxCoC.1.0\CLSID@ {15beb520-8337-4cb3-97f4-62e0721371a3}
Reg HKLM\SOFTWARE\Classes\KmlLayerCoClass.KmlLayerCoClass@ KmlLayerCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLayerCoClass.KmlLayerCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLayerCoClass.KmlLayerCoClass\CLSID@ {399e09a4-826a-49a7-bb24-2988abdd7700}
Reg HKLM\SOFTWARE\Classes\KmlLayerCoClass.KmlLayerCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlLayerCoClass.KmlLayerCoClass\CurVer@ KmlLayerCoClass.KmlLayerCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlLayerCoClass.KmlLayerCoClass.1.0@ KmlLayerCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLayerCoClass.KmlLayerCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLayerCoClass.KmlLayerCoClass.1.0\CLSID@ {399e09a4-826a-49a7-bb24-2988abdd7700}
Reg HKLM\SOFTWARE\Classes\KmlLayerRootCoClass.KmlLayerRootCoC@ KmlLayerRootCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLayerRootCoClass.KmlLayerRootCoC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLayerRootCoClass.KmlLayerRootCoC\CLSID@ {048313F0-A816-11DC-8EBB-C0CA56D89593}
Reg HKLM\SOFTWARE\Classes\KmlLayerRootCoClass.KmlLayerRootCoC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlLayerRootCoClass.KmlLayerRootCoC\CurVer@ KmlLayerRootCoClass.KmlLayerRootCoC.1.0
Reg HKLM\SOFTWARE\Classes\KmlLayerRootCoClass.KmlLayerRootCoC.1.0@ KmlLayerRootCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLayerRootCoClass.KmlLayerRootCoC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLayerRootCoClass.KmlLayerRootCoC.1.0\CLSID@ {048313F0-A816-11DC-8EBB-C0CA56D89593}
Reg HKLM\SOFTWARE\Classes\KmlLinearRingCoClass.KmlLinearRingC@ KmlLinearRingCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLinearRingCoClass.KmlLinearRingC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLinearRingCoClass.KmlLinearRingC\CLSID@ {B918AB28-1266-2931-E9A2-837488ABC211}
Reg HKLM\SOFTWARE\Classes\KmlLinearRingCoClass.KmlLinearRingC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlLinearRingCoClass.KmlLinearRingC\CurVer@ KmlLinearRingCoClass.KmlLinearRingC.1.0
Reg HKLM\SOFTWARE\Classes\KmlLinearRingCoClass.KmlLinearRingC.1.0@ KmlLinearRingCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLinearRingCoClass.KmlLinearRingC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLinearRingCoClass.KmlLinearRingC.1.0\CLSID@ {B918AB28-1266-2931-E9A2-837488ABC211}
Reg HKLM\SOFTWARE\Classes\KmlLineStringCoClass.KmlLineStringC@ KmlLineStringCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLineStringCoClass.KmlLineStringC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLineStringCoClass.KmlLineStringC\CLSID@ {DE556AEC-1266-2931-2441-0BFC47A92DD2}
Reg HKLM\SOFTWARE\Classes\KmlLineStringCoClass.KmlLineStringC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlLineStringCoClass.KmlLineStringC\CurVer@ KmlLineStringCoClass.KmlLineStringC.1.0
Reg HKLM\SOFTWARE\Classes\KmlLineStringCoClass.KmlLineStringC.1.0@ KmlLineStringCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLineStringCoClass.KmlLineStringC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLineStringCoClass.KmlLineStringC.1.0\CLSID@ {DE556AEC-1266-2931-2441-0BFC47A92DD2}
Reg HKLM\SOFTWARE\Classes\KmlLineStyleCoClass.KmlLineStyleCoC@ KmlLineStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLineStyleCoClass.KmlLineStyleCoC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLineStyleCoClass.KmlLineStyleCoC\CLSID@ {e0ccee92-6573-4549-9721-5cfd87360a01}
Reg HKLM\SOFTWARE\Classes\KmlLineStyleCoClass.KmlLineStyleCoC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlLineStyleCoClass.KmlLineStyleCoC\CurVer@ KmlLineStyleCoClass.KmlLineStyleCoC.1.0
Reg HKLM\SOFTWARE\Classes\KmlLineStyleCoClass.KmlLineStyleCoC.1.0@ KmlLineStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLineStyleCoClass.KmlLineStyleCoC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLineStyleCoClass.KmlLineStyleCoC.1.0\CLSID@ {e0ccee92-6573-4549-9721-5cfd87360a01}
Reg HKLM\SOFTWARE\Classes\KmlLinkCoClass.KmlLinkCoClass@ KmlLinkCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLinkCoClass.KmlLinkCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLinkCoClass.KmlLinkCoClass\CLSID@ {b692b1c4-8973-4db8-9fce-9813a057ed09}
Reg HKLM\SOFTWARE\Classes\KmlLinkCoClass.KmlLinkCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlLinkCoClass.KmlLinkCoClass\CurVer@ KmlLinkCoClass.KmlLinkCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlLinkCoClass.KmlLinkCoClass.1.0@ KmlLinkCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLinkCoClass.KmlLinkCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLinkCoClass.KmlLinkCoClass.1.0\CLSID@ {b692b1c4-8973-4db8-9fce-9813a057ed09}
Reg HKLM\SOFTWARE\Classes\KmlListStyleCoClass.KmlListStyleCoC@ KmlListStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlListStyleCoClass.KmlListStyleCoC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlListStyleCoClass.KmlListStyleCoC\CLSID@ {f3b378cc-345e-4435-a1b3-788455599c7b}
Reg HKLM\SOFTWARE\Classes\KmlListStyleCoClass.KmlListStyleCoC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlListStyleCoClass.KmlListStyleCoC\CurVer@ KmlListStyleCoClass.KmlListStyleCoC.1.0
Reg HKLM\SOFTWARE\Classes\KmlListStyleCoClass.KmlListStyleCoC.1.0@ KmlListStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlListStyleCoClass.KmlListStyleCoC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlListStyleCoClass.KmlListStyleCoC.1.0\CLSID@ {f3b378cc-345e-4435-a1b3-788455599c7b}
Reg HKLM\SOFTWARE\Classes\KmlLocationCoClass.KmlLocationCoCla@ KmlLocationCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLocationCoClass.KmlLocationCoCla\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLocationCoClass.KmlLocationCoCla\CLSID@ {7C730856-A82B-11DC-91EB-7AC855D89593}
Reg HKLM\SOFTWARE\Classes\KmlLocationCoClass.KmlLocationCoCla\CurVer
Reg HKLM\SOFTWARE\Classes\KmlLocationCoClass.KmlLocationCoCla\CurVer@ KmlLocationCoClass.KmlLocationCoCla.1.0
Reg HKLM\SOFTWARE\Classes\KmlLocationCoClass.KmlLocationCoCla.1.0@ KmlLocationCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLocationCoClass.KmlLocationCoCla.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLocationCoClass.KmlLocationCoCla.1.0\CLSID@ {7C730856-A82B-11DC-91EB-7AC855D89593}
Reg HKLM\SOFTWARE\Classes\KmlLodCoClass.KmlLodCoClass@ KmlLodCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLodCoClass.KmlLodCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLodCoClass.KmlLodCoClass\CLSID@ {b50f4299-76e8-475e-b4b6-34b30bd89619}
Reg HKLM\SOFTWARE\Classes\KmlLodCoClass.KmlLodCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlLodCoClass.KmlLodCoClass\CurVer@ KmlLodCoClass.KmlLodCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlLodCoClass.KmlLodCoClass.1.0@ KmlLodCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLodCoClass.KmlLodCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLodCoClass.KmlLodCoClass.1.0\CLSID@ {b50f4299-76e8-475e-b4b6-34b30bd89619}
Reg HKLM\SOFTWARE\Classes\KmlLookAtCoClass.KmlLookAtCoClass@ KmlLookAtCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLookAtCoClass.KmlLookAtCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLookAtCoClass.KmlLookAtCoClass\CLSID@ {F9152AEC-3462-4632-8087-F1232355FD63}
Reg HKLM\SOFTWARE\Classes\KmlLookAtCoClass.KmlLookAtCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlLookAtCoClass.KmlLookAtCoClass\CurVer@ KmlLookAtCoClass.KmlLookAtCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlLookAtCoClass.KmlLookAtCoClass.1.0@ KmlLookAtCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlLookAtCoClass.KmlLookAtCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlLookAtCoClass.KmlLookAtCoClass.1.0\CLSID@ {F9152AEC-3462-4632-8087-F1232355FD63}
Reg HKLM\SOFTWARE\Classes\KmlModelCoClass.KmlModelCoClass@ KmlModelCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlModelCoClass.KmlModelCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlModelCoClass.KmlModelCoClass\CLSID@ {38d274e5-9232-4444-915e-9a5731409fd3}
Reg HKLM\SOFTWARE\Classes\KmlModelCoClass.KmlModelCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlModelCoClass.KmlModelCoClass\CurVer@ KmlModelCoClass.KmlModelCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlModelCoClass.KmlModelCoClass.1.0@ KmlModelCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlModelCoClass.KmlModelCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlModelCoClass.KmlModelCoClass.1.0\CLSID@ {38d274e5-9232-4444-915e-9a5731409fd3}
Reg HKLM\SOFTWARE\Classes\KmlMouseEventCoClass.KmlMouseEventC@ KmlMouseEventCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlMouseEventCoClass.KmlMouseEventC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlMouseEventCoClass.KmlMouseEventC\CLSID@ {397d6d52-48dc-4fa5-9736-7afb30ca2850}
Reg HKLM\SOFTWARE\Classes\KmlMouseEventCoClass.KmlMouseEventC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlMouseEventCoClass.KmlMouseEventC\CurVer@ KmlMouseEventCoClass.KmlMouseEventC.1.0
Reg HKLM\SOFTWARE\Classes\KmlMouseEventCoClass.KmlMouseEventC.1.0@ KmlMouseEventCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlMouseEventCoClass.KmlMouseEventC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlMouseEventCoClass.KmlMouseEventC.1.0\CLSID@ {397d6d52-48dc-4fa5-9736-7afb30ca2850}
Reg HKLM\SOFTWARE\Classes\KmlMultiGeometryCoClass.KmlMultiGeo@ KmlMultiGeometryCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlMultiGeometryCoClass.KmlMultiGeo\CLSID
Reg HKLM\SOFTWARE\Classes\KmlMultiGeometryCoClass.KmlMultiGeo\CLSID@ {82eafae0-1bf8-11dd-bd0b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\KmlMultiGeometryCoClass.KmlMultiGeo\CurVer
Reg HKLM\SOFTWARE\Classes\KmlMultiGeometryCoClass.KmlMultiGeo\CurVer@ KmlMultiGeometryCoClass.KmlMultiGeo.1.0
Reg HKLM\SOFTWARE\Classes\KmlMultiGeometryCoClass.KmlMultiGeo.1.0@ KmlMultiGeometryCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlMultiGeometryCoClass.KmlMultiGeo.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlMultiGeometryCoClass.KmlMultiGeo.1.0\CLSID@ {82eafae0-1bf8-11dd-bd0b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\KmlNetworkLinkCoClass.KmlNetworkLin@ KmlNetworkLinkCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlNetworkLinkCoClass.KmlNetworkLin\CLSID
Reg HKLM\SOFTWARE\Classes\KmlNetworkLinkCoClass.KmlNetworkLin\CLSID@ {ebe69a72-7483-410c-b50c-2b40885e6f5b}
Reg HKLM\SOFTWARE\Classes\KmlNetworkLinkCoClass.KmlNetworkLin\CurVer
Reg HKLM\SOFTWARE\Classes\KmlNetworkLinkCoClass.KmlNetworkLin\CurVer@ KmlNetworkLinkCoClass.KmlNetworkLin.1.0
Reg HKLM\SOFTWARE\Classes\KmlNetworkLinkCoClass.KmlNetworkLin.1.0@ KmlNetworkLinkCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlNetworkLinkCoClass.KmlNetworkLin.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlNetworkLinkCoClass.KmlNetworkLin.1.0\CLSID@ {ebe69a72-7483-410c-b50c-2b40885e6f5b}
Reg HKLM\SOFTWARE\Classes\KmlObjectBaseCoClass.KmlObjectBaseC@ KmlObjectBaseCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlObjectBaseCoClass.KmlObjectBaseC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlObjectBaseCoClass.KmlObjectBaseC\CLSID@ {1d7ca30a-3d39-435f-9507-702fe5309312}
Reg HKLM\SOFTWARE\Classes\KmlObjectBaseCoClass.KmlObjectBaseC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlObjectBaseCoClass.KmlObjectBaseC\CurVer@ KmlObjectBaseCoClass.KmlObjectBaseC.1.0
Reg HKLM\SOFTWARE\Classes\KmlObjectBaseCoClass.KmlObjectBaseC.1.0@ KmlObjectBaseCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlObjectBaseCoClass.KmlObjectBaseC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlObjectBaseCoClass.KmlObjectBaseC.1.0\CLSID@ {1d7ca30a-3d39-435f-9507-702fe5309312}
Reg HKLM\SOFTWARE\Classes\KmlObjectCoClass.KmlObjectCoClass@ KmlObjectCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlObjectCoClass.KmlObjectCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlObjectCoClass.KmlObjectCoClass\CLSID@ {F9152AEC-3462-4632-8087-F235A566FE30}
Reg HKLM\SOFTWARE\Classes\KmlObjectCoClass.KmlObjectCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlObjectCoClass.KmlObjectCoClass\CurVer@ KmlObjectCoClass.KmlObjectCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlObjectCoClass.KmlObjectCoClass.1.0@ KmlObjectCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlObjectCoClass.KmlObjectCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlObjectCoClass.KmlObjectCoClass.1.0\CLSID@ {F9152AEC-3462-4632-8087-F235A566FE30}
Reg HKLM\SOFTWARE\Classes\KmlObjectListCoClass.KmlObjectListC@ KmlObjectListCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlObjectListCoClass.KmlObjectListC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlObjectListCoClass.KmlObjectListC\CLSID@ {33393037-2a45-4449-a0ab-4e5f2beff220}
Reg HKLM\SOFTWARE\Classes\KmlObjectListCoClass.KmlObjectListC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlObjectListCoClass.KmlObjectListC\CurVer@ KmlObjectListCoClass.KmlObjectListC.1.0
Reg HKLM\SOFTWARE\Classes\KmlObjectListCoClass.KmlObjectListC.1.0@ KmlObjectListCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlObjectListCoClass.KmlObjectListC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlObjectListCoClass.KmlObjectListC.1.0\CLSID@ {33393037-2a45-4449-a0ab-4e5f2beff220}
Reg HKLM\SOFTWARE\Classes\KmlOrientationCoClass.KmlOrientatio@ KmlOrientationCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlOrientationCoClass.KmlOrientatio\CLSID
Reg HKLM\SOFTWARE\Classes\KmlOrientationCoClass.KmlOrientatio\CLSID@ {38c744ab-b64a-4df1-8871-d3479155fadf}
Reg HKLM\SOFTWARE\Classes\KmlOrientationCoClass.KmlOrientatio\CurVer
Reg HKLM\SOFTWARE\Classes\KmlOrientationCoClass.KmlOrientatio\CurVer@ KmlOrientationCoClass.KmlOrientatio.1.0
Reg HKLM\SOFTWARE\Classes\KmlOrientationCoClass.KmlOrientatio.1.0@ KmlOrientationCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlOrientationCoClass.KmlOrientatio.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlOrientationCoClass.KmlOrientatio.1.0\CLSID@ {38c744ab-b64a-4df1-8871-d3479155fadf}
Reg HKLM\SOFTWARE\Classes\KmlOverlayCoClass.KmlOverlayCoClass@ KmlOverlayCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlOverlayCoClass.KmlOverlayCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlOverlayCoClass.KmlOverlayCoClass\CLSID@ {F9152AEC-3462-4632-8087-F23CA598FF34}
Reg HKLM\SOFTWARE\Classes\KmlOverlayCoClass.KmlOverlayCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlOverlayCoClass.KmlOverlayCoClass\CurVer@ KmlOverlayCoClass.KmlOverlayCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlOverlayCoClass.KmlOverlayCoClass.1.0@ KmlOverlayCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlOverlayCoClass.KmlOverlayCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlOverlayCoClass.KmlOverlayCoClass.1.0\CLSID@ {F9152AEC-3462-4632-8087-F23CA598FF34}
Reg HKLM\SOFTWARE\Classes\KmlPhotoOverlayCoClass.KmlPhotoOver@ KmlPhotoOverlayCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlPhotoOverlayCoClass.KmlPhotoOver\CLSID
Reg HKLM\SOFTWARE\Classes\KmlPhotoOverlayCoClass.KmlPhotoOver\CLSID@ {00ab1ef0-c172-11dd-ad8b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\KmlPhotoOverlayCoClass.KmlPhotoOver\CurVer
Reg HKLM\SOFTWARE\Classes\KmlPhotoOverlayCoClass.KmlPhotoOver\CurVer@ KmlPhotoOverlayCoClass.KmlPhotoOver.1.0
Reg HKLM\SOFTWARE\Classes\KmlPhotoOverlayCoClass.KmlPhotoOver.1.0@ KmlPhotoOverlayCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlPhotoOverlayCoClass.KmlPhotoOver.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlPhotoOverlayCoClass.KmlPhotoOver.1.0\CLSID@ {00ab1ef0-c172-11dd-ad8b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\KmlPlacemarkCoClass.KmlPlacemarkCoC@ KmlPlacemarkCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlPlacemarkCoClass.KmlPlacemarkCoC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlPlacemarkCoClass.KmlPlacemarkCoC\CLSID@ {F912DCEC-3462-4632-8087-FEEFB45AE521}
Reg HKLM\SOFTWARE\Classes\KmlPlacemarkCoClass.KmlPlacemarkCoC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlPlacemarkCoClass.KmlPlacemarkCoC\CurVer@ KmlPlacemarkCoClass.KmlPlacemarkCoC.1.0
Reg HKLM\SOFTWARE\Classes\KmlPlacemarkCoClass.KmlPlacemarkCoC.1.0@ KmlPlacemarkCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlPlacemarkCoClass.KmlPlacemarkCoC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlPlacemarkCoClass.KmlPlacemarkCoC.1.0\CLSID@ {F912DCEC-3462-4632-8087-FEEFB45AE521}
Reg HKLM\SOFTWARE\Classes\KmlPointCoClass.KmlPointCoClass@ KmlPointCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlPointCoClass.KmlPointCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlPointCoClass.KmlPointCoClass\CLSID@ {DE556AEC-1266-7632-8087-9847DEFB2172}
Reg HKLM\SOFTWARE\Classes\KmlPointCoClass.KmlPointCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlPointCoClass.KmlPointCoClass\CurVer@ KmlPointCoClass.KmlPointCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlPointCoClass.KmlPointCoClass.1.0@ KmlPointCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlPointCoClass.KmlPointCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlPointCoClass.KmlPointCoClass.1.0\CLSID@ {DE556AEC-1266-7632-8087-9847DEFB2172}
Reg HKLM\SOFTWARE\Classes\KmlPolygonCoClass.KmlPolygonCoClass@ KmlPolygonCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlPolygonCoClass.KmlPolygonCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlPolygonCoClass.KmlPolygonCoClass\CLSID@ {2a9990a5-e235-4ae6-972c-edc30b6192e5}
Reg HKLM\SOFTWARE\Classes\KmlPolygonCoClass.KmlPolygonCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlPolygonCoClass.KmlPolygonCoClass\CurVer@ KmlPolygonCoClass.KmlPolygonCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlPolygonCoClass.KmlPolygonCoClass.1.0@ KmlPolygonCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlPolygonCoClass.KmlPolygonCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlPolygonCoClass.KmlPolygonCoClass.1.0\CLSID@ {2a9990a5-e235-4ae6-972c-edc30b6192e5}
Reg HKLM\SOFTWARE\Classes\KmlPolyStyleCoClass.KmlPolyStyleCoC@ KmlPolyStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlPolyStyleCoClass.KmlPolyStyleCoC\CLSID
Reg HKLM\SOFTWARE\Classes\KmlPolyStyleCoClass.KmlPolyStyleCoC\CLSID@ {553f44fe-a225-4783-a084-478d54edc63b}
Reg HKLM\SOFTWARE\Classes\KmlPolyStyleCoClass.KmlPolyStyleCoC\CurVer
Reg HKLM\SOFTWARE\Classes\KmlPolyStyleCoClass.KmlPolyStyleCoC\CurVer@ KmlPolyStyleCoClass.KmlPolyStyleCoC.1.0
Reg HKLM\SOFTWARE\Classes\KmlPolyStyleCoClass.KmlPolyStyleCoC.1.0@ KmlPolyStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlPolyStyleCoClass.KmlPolyStyleCoC.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlPolyStyleCoClass.KmlPolyStyleCoC.1.0\CLSID@ {553f44fe-a225-4783-a084-478d54edc63b}
Reg HKLM\SOFTWARE\Classes\KmlRegionCoClass.KmlRegionCoClass@ KmlRegionCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlRegionCoClass.KmlRegionCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlRegionCoClass.KmlRegionCoClass\CLSID@ {eca7f061-70d0-4507-babd-f1b0b653cc6a}
Reg HKLM\SOFTWARE\Classes\KmlRegionCoClass.KmlRegionCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlRegionCoClass.KmlRegionCoClass\CurVer@ KmlRegionCoClass.KmlRegionCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlRegionCoClass.KmlRegionCoClass.1.0@ KmlRegionCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlRegionCoClass.KmlRegionCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlRegionCoClass.KmlRegionCoClass.1.0\CLSID@ {eca7f061-70d0-4507-babd-f1b0b653cc6a}
Reg HKLM\SOFTWARE\Classes\KmlScaleCoClass.KmlScaleCoClass@ KmlScaleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlScaleCoClass.KmlScaleCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlScaleCoClass.KmlScaleCoClass\CLSID@ {47b797f2-e873-4f47-a999-693a9fdf9e54}
Reg HKLM\SOFTWARE\Classes\KmlScaleCoClass.KmlScaleCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlScaleCoClass.KmlScaleCoClass\CurVer@ KmlScaleCoClass.KmlScaleCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlScaleCoClass.KmlScaleCoClass.1.0@ KmlScaleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlScaleCoClass.KmlScaleCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlScaleCoClass.KmlScaleCoClass.1.0\CLSID@ {47b797f2-e873-4f47-a999-693a9fdf9e54}
Reg HKLM\SOFTWARE\Classes\KmlScreenOverlayCoClass.KmlScreenOv@ KmlScreenOverlayCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlScreenOverlayCoClass.KmlScreenOv\CLSID
Reg HKLM\SOFTWARE\Classes\KmlScreenOverlayCoClass.KmlScreenOv\CLSID@ {88a9100b-231a-421a-8aab-918bffe22c14}
Reg HKLM\SOFTWARE\Classes\KmlScreenOverlayCoClass.KmlScreenOv\CurVer
Reg HKLM\SOFTWARE\Classes\KmlScreenOverlayCoClass.KmlScreenOv\CurVer@ KmlScreenOverlayCoClass.KmlScreenOv.1.0
Reg HKLM\SOFTWARE\Classes\KmlScreenOverlayCoClass.KmlScreenOv.1.0@ KmlScreenOverlayCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlScreenOverlayCoClass.KmlScreenOv.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlScreenOverlayCoClass.KmlScreenOv.1.0\CLSID@ {88a9100b-231a-421a-8aab-918bffe22c14}
Reg HKLM\SOFTWARE\Classes\KmlStyleCoClass.KmlStyleCoClass@ KmlStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlStyleCoClass.KmlStyleCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlStyleCoClass.KmlStyleCoClass\CLSID@ {44afac41-d98b-4a3f-bb75-5aa4cc4d9763}
Reg HKLM\SOFTWARE\Classes\KmlStyleCoClass.KmlStyleCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlStyleCoClass.KmlStyleCoClass\CurVer@ KmlStyleCoClass.KmlStyleCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlStyleCoClass.KmlStyleCoClass.1.0@ KmlStyleCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlStyleCoClass.KmlStyleCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlStyleCoClass.KmlStyleCoClass.1.0\CLSID@ {44afac41-d98b-4a3f-bb75-5aa4cc4d9763}
Reg HKLM\SOFTWARE\Classes\KmlStyleMapCoClass.KmlStyleMapCoCla@ KmlStyleMapCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlStyleMapCoClass.KmlStyleMapCoCla\CLSID
Reg HKLM\SOFTWARE\Classes\KmlStyleMapCoClass.KmlStyleMapCoCla\CLSID@ {855dbc4d-c8d7-4816-b1ea-a5eba403907e}
Reg HKLM\SOFTWARE\Classes\KmlStyleMapCoClass.KmlStyleMapCoCla\CurVer
Reg HKLM\SOFTWARE\Classes\KmlStyleMapCoClass.KmlStyleMapCoCla\CurVer@ KmlStyleMapCoClass.KmlStyleMapCoCla.1.0
Reg HKLM\SOFTWARE\Classes\KmlStyleMapCoClass.KmlStyleMapCoCla.1.0@ KmlStyleMapCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlStyleMapCoClass.KmlStyleMapCoCla.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlStyleMapCoClass.KmlStyleMapCoCla.1.0\CLSID@ {855dbc4d-c8d7-4816-b1ea-a5eba403907e}
Reg HKLM\SOFTWARE\Classes\KmlStyleSelectorCoClass.KmlStyleSel@ KmlStyleSelectorCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlStyleSelectorCoClass.KmlStyleSel\CLSID
Reg HKLM\SOFTWARE\Classes\KmlStyleSelectorCoClass.KmlStyleSel\CLSID@ {8a36a57e-ced8-4997-b3fb-19801ef969fd}
Reg HKLM\SOFTWARE\Classes\KmlStyleSelectorCoClass.KmlStyleSel\CurVer
Reg HKLM\SOFTWARE\Classes\KmlStyleSelectorCoClass.KmlStyleSel\CurVer@ KmlStyleSelectorCoClass.KmlStyleSel.1.0
Reg HKLM\SOFTWARE\Classes\KmlStyleSelectorCoClass.KmlStyleSel.1.0@ KmlStyleSelectorCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlStyleSelectorCoClass.KmlStyleSel.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlStyleSelectorCoClass.KmlStyleSel.1.0\CLSID@ {8a36a57e-ced8-4997-b3fb-19801ef969fd}
Reg HKLM\SOFTWARE\Classes\KmlTourCoClass.KmlTourCoClass@ KmlTourCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlTourCoClass.KmlTourCoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlTourCoClass.KmlTourCoClass\CLSID@ {2711bc60-c16e-11dd-ad8b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\KmlTourCoClass.KmlTourCoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlTourCoClass.KmlTourCoClass\CurVer@ KmlTourCoClass.KmlTourCoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlTourCoClass.KmlTourCoClass.1.0@ KmlTourCoClass Object
Reg HKLM\SOFTWARE\Classes\KmlTourCoClass.KmlTourCoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlTourCoClass.KmlTourCoClass.1.0\CLSID@ {2711bc60-c16e-11dd-ad8b-0800200c9a66}
Reg HKLM\SOFTWARE\Classes\KmlVec2CoClass.KmlVec2CoClass@ KmlVec2CoClass Object
Reg HKLM\SOFTWARE\Classes\KmlVec2CoClass.KmlVec2CoClass\CLSID
Reg HKLM\SOFTWARE\Classes\KmlVec2CoClass.KmlVec2CoClass\CLSID@ {d6cb4b7a-10cf-4e51-b237-41d59b17cee6}
Reg HKLM\SOFTWARE\Classes\KmlVec2CoClass.KmlVec2CoClass\CurVer
Reg HKLM\SOFTWARE\Classes\KmlVec2CoClass.KmlVec2CoClass\CurVer@ KmlVec2CoClass.KmlVec2CoClass.1.0
Reg HKLM\SOFTWARE\Classes\KmlVec2CoClass.KmlVec2CoClass.1.0@ KmlVec2CoClass Object
Reg HKLM\SOFTWARE\Classes\KmlVec2CoClass.KmlVec2CoClass.1.0\CLSID
Reg HKLM\SOFTWARE\Classes\KmlVec2CoClass.KmlVec2CoClass.1.0\CLSID@ {d6cb4b7a-10cf-4e51-b237-41d59b17cee6}
Reg HKLM\SOFTWARE\Classes\LiveUpdate.MIDI.6@ MIDI Audio
Reg HKLM\SOFTWARE\Classes\LiveUpdate.MIDI.6\shell
Reg HKLM\SOFTWARE\Classes\LiveUpdate.MIDI.6\shell\open
Reg HKLM\SOFTWARE\Classes\m4vfile\Shell
Reg HKLM\SOFTWARE\Classes\m4vfile\Shell\Convert with Prism Video Converter
Reg HKLM\SOFTWARE\Classes\m4vfile\Shell\Convert with Prism Video Converter\command
Reg HKLM\SOFTWARE\Classes\m4vfile\Shell\Convert with Prism Video Converter\command@ "C:\Program Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\m4vfile\shellex
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper@ Macromedia Flash Paper
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\CLSID
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\DefaultIcon
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\DefaultIcon@ C:\Program Files\Internet Explorer\IEXPLORE.EXE,-17
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\shell
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\shell\open
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\shell\open\command
Reg HKLM\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\shell\open\command@ "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome "%1"
Reg HKLM\SOFTWARE\Classes\mbam.script@ Malwarebytes' Anti-Malware script
Reg HKLM\SOFTWARE\Classes\mbam.script\shell
Reg HKLM\SOFTWARE\Classes\mbam.script\shell\open
Reg HKLM\SOFTWARE\Classes\mbam.script\shell\open\command
Reg HKLM\SOFTWARE\Classes\mbam.script\shell\open\command@ "E:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" %1
Reg HKLM\SOFTWARE\Classes\meofile\shell
Reg HKLM\SOFTWARE\Classes\meofile\shell@ Open
Reg HKLM\SOFTWARE\Classes\meofile\shell\open
Reg HKLM\SOFTWARE\Classes\meofile\shell\open\command
Reg HKLM\SOFTWARE\Classes\meofile\shell\open\command@ "C:\Program Files\NCH Software\Debut\debut.exe" -extfind Meo "%L"
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager@ Messenger Extensions Manager Object
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager\CLSID@ {BC20CB75-A981-460e-81D4-F06F61B59247}
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager\CurVer
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager\CurVer@ Messenger.MessengerExtensions.1
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager.1@ Messenger Extensions Manager Object
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager.1\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.ExtensionsManager.1\CLSID@ {BC20CB75-A981-460e-81D4-F06F61B59247}
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp@ Messenger Application
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp\CLSID@ {FB7199AB-79BF-11d2-8D94-0000F875C541}
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp\CurVer
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp\CurVer@ Messenger.MessengerApp.1
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp.1@ Messenger Application
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp.1\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.MessengerApp.1\CLSID@ {FB7199AB-79BF-11d2-8D94-0000F875C541}
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject@ Messenger Object
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject\CLSID@ {F3A614DC-ABE0-11d2-A441-00C04F795683}
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject\CurVer
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject\CurVer@ Messenger.MsgrObject.1
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject.1@ Messenger Object
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject.1\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.MsgrObject.1\CLSID@ {F3A614DC-ABE0-11d2-A441-00C04F795683}
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation@ Messenger Object
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation\CLSID@ {B69003B3-C55E-4b48-836C-BC5946FC3B28}
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation\CurVer
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation\CurVer@ Messenger.UIAutomation.1
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation.1@ Messenger Object
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation.1\CLSID
Reg HKLM\SOFTWARE\Classes\Messenger.UIAutomation.1\CLSID@ {B69003B3-C55E-4b48-836C-BC5946FC3B28}
Reg HKLM\SOFTWARE\Classes\MessengerContactList@ Messenger Contact List
Reg HKLM\SOFTWARE\Classes\MessengerContactList@NoOpen You cannot open this file directly. You must open Messenger and select "Import Contacts…" from the "File" menu.
Reg HKLM\SOFTWARE\Classes\MessengerContactList\DefaultIcon
Reg HKLM\SOFTWARE\Classes\MessengerContactList\DefaultIcon@ C:\Program Files\Messenger\msmsgs.exe,-1
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv@ Messenger Private Object
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv\CLSID
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv\CLSID@ {AB1D8565-40E9-4616-984D-98465687E82C}
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv\CurVer
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv\CurVer@ MessengerPrivate.MessengerPriv.1
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv.1@ Messenger Private Object
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv.1\CLSID
Reg HKLM\SOFTWARE\Classes\MessengerPrivate.MessengerPriv.1\CLSID@ {AB1D8565-40E9-4616-984D-98465687E82C}
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Document@ Windows XPS Document
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Document\shellex
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Document\shellex\PropertyHandler
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Document\shellex\PropertyHandler@ {45670FA8-ED97-4F44-BC93-305082590BFB}
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Document\shellex\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Document\shellex\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}@ {44121072-A222-48f2-A58A-6D9AD51EBBE9}
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Metadata@ Windows XPS Document Metadata Handler
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Metadata\CLSID
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Metadata\CLSID@ {45670FA8-ED97-4F44-BC93-305082590BFB}
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Metadata\Curver
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Metadata\Curver@ Microsoft.XPS.Shell.Metadata.1
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Metadata.1@ Windows XPS Document Metadata Handler
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Metadata.1\CLSID
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Metadata.1\CLSID@ {45670FA8-ED97-4F44-BC93-305082590BFB}
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Thumbnail@ Windows XPS Document Thumbnail Handler
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Thumbnail\CLSID
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Thumbnail\CLSID@ {44121072-A222-48f2-A58A-6D9AD51EBBE9}
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Thumbnail\Curver
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Thumbnail\Curver@ Microsoft.XPS.Shell.Thumbnail.1
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Thumbnail.1@ Windows XPS Document Thumbnail Handler
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Thumbnail.1\CLSID
Reg HKLM\SOFTWARE\Classes\Microsoft.XPS.Shell.Thumbnail.1\CLSID@ {44121072-A222-48f2-A58A-6D9AD51EBBE9}
Reg HKLM\SOFTWARE\Classes\Miro.1@ Miro
Reg HKLM\SOFTWARE\Classes\Miro.1@EditFlags 65536
Reg HKLM\SOFTWARE\Classes\Miro.1\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Miro.1\DefaultIcon@ C:\Program Files\Participatory Culture Foundation\Miro\Miro.exe,0
Reg HKLM\SOFTWARE\Classes\Miro.1\shell
Reg HKLM\SOFTWARE\Classes\Miro.1\shell@ open
Reg HKLM\SOFTWARE\Classes\Miro.1\shell\edit
Reg HKLM\SOFTWARE\Classes\Miro.1\shell\edit@ Edit Options File
Reg HKLM\SOFTWARE\Classes\Miro.1\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Miro.1\shell\edit\command@ C:\Program Files\Participatory Culture Foundation\Miro\Miro.exe "%1"
Reg HKLM\SOFTWARE\Classes\Miro.1\shell\open
Reg HKLM\SOFTWARE\Classes\Miro.1\shell\open\command
Reg HKLM\SOFTWARE\Classes\Miro.1\shell\open\command@ C:\Program Files\Participatory Culture Foundation\Miro\Miro.exe "%1"
Reg HKLM\SOFTWARE\Classes\mohfile\shell
Reg HKLM\SOFTWARE\Classes\mohfile\shell@ Open
Reg HKLM\SOFTWARE\Classes\mohfile\shell\open
Reg HKLM\SOFTWARE\Classes\mohfile\shell\open\command
Reg HKLM\SOFTWARE\Classes\mohfile\shell\open\command@ "C:\Program Files\NCH Software\Debut\debut.exe" -extfind IMS "%L"
Reg HKLM\SOFTWARE\Classes\mpdpfile\shell
Reg HKLM\SOFTWARE\Classes\mpdpfile\shell@ Open
Reg HKLM\SOFTWARE\Classes\mpdpfile\shell\open
Reg HKLM\SOFTWARE\Classes\mpdpfile\shell\open\command
Reg HKLM\SOFTWARE\Classes\mpdpfile\shell\open\command@ "C:\Program Files\NCH Software\Debut\debut.exe" -extfind MixPad "%L"
Reg HKLM\SOFTWARE\Classes\MSIME.China@ PINTLGNT
Reg HKLM\SOFTWARE\Classes\MSIME.China\CLSID
Reg HKLM\SOFTWARE\Classes\MSIME.China\CLSID@ {E4288337-873B-11D1-BAA0-00AA00BBB8C0}
Reg HKLM\SOFTWARE\Classes\MSIME.China\CurVer
Reg HKLM\SOFTWARE\Classes\MSIME.China\CurVer@ MSIME.China.1
Reg HKLM\SOFTWARE\Classes\MSIME.China.1@ PINTLGNT
Reg HKLM\SOFTWARE\Classes\MSIME.China.1\CLSID
Reg HKLM\SOFTWARE\Classes\MSIME.China.1\CLSID@ {E4288337-873B-11D1-BAA0-00AA00BBB8C0}
Reg HKLM\SOFTWARE\Classes\MSIME.Japan@ Microsoft IME (Japanese)
Reg HKLM\SOFTWARE\Classes\MSIME.Japan\CLSID
Reg HKLM\SOFTWARE\Classes\MSIME.Japan\CLSID@ {AF9EE286-8CD3-445E-8842-433E5C460775}
Reg HKLM\SOFTWARE\Classes\MSIME.Japan\CurVer
Reg HKLM\SOFTWARE\Classes\MSIME.Japan\CurVer@ MSIME.Japan.9
Reg HKLM\SOFTWARE\Classes\MSIME.Japan.9@ Microsoft IME (Japanese)
Reg HKLM\SOFTWARE\Classes\MSIME.Japan.9\CLSID
Reg HKLM\SOFTWARE\Classes\MSIME.Japan.9\CLSID@ {AF9EE286-8CD3-445E-8842-433E5C460775}
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan@ TINTLGNT
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan\CLSID
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan\CLSID@ {1C092C21-882C-11CF-A7BB-0080C7B2D682}
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan\CurVer
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan\CurVer@ MSIME.Taiwan.1
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan.1@ TINTLGNT
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan.1\CLSID
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan.1\CLSID@ {1C092C21-882C-11CF-A7BB-0080C7B2D682}
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan.ImeBbo@ MSIME ImeBbo Language Model
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan.ImeBbo\CLSID
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan.ImeBbo\CLSID@ {D8B9F622-3C24-11D4-97C2-0080C882687E}
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan.ImeBbo\CurVer
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan.ImeBbo\CurVer@ MSIME.Taiwan.ImeBbo.1
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan.ImeBbo.1@ MSIME ImeBbo Language Model
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan.ImeBbo.1\CLSID
Reg HKLM\SOFTWARE\Classes\MSIME.Taiwan.ImeBbo.1\CLSID@ {D8B9F622-3C24-11D4-97C2-0080C882687E}
Reg HKLM\SOFTWARE\Classes\MSPY3.ImeBbo@ MSPY 3.0 ImeBbo Language Model
Reg HKLM\SOFTWARE\Classes\MSPY3.ImeBbo\CLSID
Reg HKLM\SOFTWARE\Classes\MSPY3.ImeBbo\CLSID@ {D8B9F621-3C24-11D4-97C2-0080C882687E}
Reg HKLM\SOFTWARE\Classes\MSPY3.ImeBbo\CurVer
Reg HKLM\SOFTWARE\Classes\MSPY3.ImeBbo\CurVer@ MSPY3.ImeBbo.1
Reg HKLM\SOFTWARE\Classes\MSPY3.ImeBbo.1@ MSPY 3.0 ImeBbo Language Model
Reg HKLM\SOFTWARE\Classes\MSPY3.ImeBbo.1\CLSID
Reg HKLM\SOFTWARE\Classes\MSPY3.ImeBbo.1\CLSID@ {D8B9F621-3C24-11D4-97C2-0080C882687E}
Reg HKLM\SOFTWARE\Classes\Msxml2.DOMDocument.6.0@ XML DOM Document 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.DOMDocument.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.DOMDocument.6.0\CLSID@ {88d96a05-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.FreeThreadedDOMDocument.6.0@ Free Threaded XML DOM Document 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.FreeThreadedDOMDocument.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.FreeThreadedDOMDocument.6.0\CLSID@ {88d96a06-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.MXHTMLWriter.6.0@ MXHTMLWriter 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.MXHTMLWriter.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.MXHTMLWriter.6.0\CLSID@ {88d96a10-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.MXNamespaceManager.6.0@ MXNamespaceManager 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.MXNamespaceManager.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.MXNamespaceManager.6.0\CLSID@ {88d96a11-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.MXXMLWriter.6.0@ MXXMLWriter 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.MXXMLWriter.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.MXXMLWriter.6.0\CLSID@ {88d96a0f-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXAttributes.6.0@ SAXAttributes 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXAttributes.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXAttributes.6.0\CLSID@ {88d96a0e-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXXMLReader.6.0@ SAX XML Reader 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXXMLReader.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXXMLReader.6.0\CLSID@ {88d96a0c-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.ServerXMLHTTP.6.0@ Server XML HTTP 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.ServerXMLHTTP.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.ServerXMLHTTP.6.0\CLSID@ {88d96a0b-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLHTTP.6.0@ XML HTTP 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLHTTP.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLHTTP.6.0\CLSID@ {88d96a0a-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLSchemaCache.6.0@ XML Schema Cache 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLSchemaCache.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLSchemaCache.6.0\CLSID@ {88d96a07-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\Msxml2.XSLTemplate.6.0@ XSL Template 6.0
Reg HKLM\SOFTWARE\Classes\Msxml2.XSLTemplate.6.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.XSLTemplate.6.0\CLSID@ {88d96a08-f192-11d4-a65f-0040963251e5}
Reg HKLM\SOFTWARE\Classes\NLG.Japanese Stemmer@ Japanese_Default Stemmer Class
Reg HKLM\SOFTWARE\Classes\NLG.Japanese Stemmer\CLSID
Reg HKLM\SOFTWARE\Classes\NLG.Japanese Stemmer\CLSID@ {CA2043A8-64C9-48ed-AB7E-BB5BBF735D2B}
Reg HKLM\SOFTWARE\Classes\NLG.Japanese Stemmer.4@ Japanese_Default Stemmer Class
Reg HKLM\SOFTWARE\Classes\NLG.Japanese Stemmer.4\CLSID
Reg HKLM\SOFTWARE\Classes\NLG.Japanese Stemmer.4\CLSID@ {CA2043A8-64C9-48ed-AB7E-BB5BBF735D2B}
Reg HKLM\SOFTWARE\Classes\NLG.Japanese Wordbreaker@ Japanese_Default Word Breaker Class
Reg HKLM\SOFTWARE\Classes\NLG.Japanese Wordbreaker\CLSID
Reg HKLM\SOFTWARE\Classes\NLG.Japanese Wordbreaker\CLSID@ {BE41F4E6-9EAD-498f-A473-F3CA66F9BE8B}
Reg HKLM\SOFTWARE\Classes\NLG.Japanese Wordbreaker.4@ Japanese_Default Word Breaker Class
Reg HKLM\SOFTWARE\Classes\NLG.Japanese Wordbreaker.4\CLSID
Reg HKLM\SOFTWARE\Classes\NLG.Japanese Wordbreaker.4\CLSID@ {BE41F4E6-9EAD-498f-A473-F3CA66F9BE8B}
Reg HKLM\SOFTWARE\Classes\OR Web Client@ Creative Product Registration ActiveX Control Module
Reg HKLM\SOFTWARE\Classes\OR Web Client\CLSID
Reg HKLM\SOFTWARE\Classes\OR Web Client\CLSID@ {E56347B0-6C2B-4C2E-939F-EE513EAC80BC}
Reg HKLM\SOFTWARE\Classes\OR Web Client\Insertable
Reg HKLM\SOFTWARE\Classes\OR Web Client\Insertable@
Reg HKLM\SOFTWARE\Classes\pando\Shell
Reg HKLM\SOFTWARE\Classes\pando\Shell\Open
Reg HKLM\SOFTWARE\Classes\pando\Shell\Open\Command
Reg HKLM\SOFTWARE\Classes\pando\Shell\Open\Command@ C:\WINDOWS\system32\cmd.exe /Q /D /C "start http://www.pando.com/link/pmb_pando"
Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl@ PandoWebInstCtrl Class
Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl\CLSID
Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl\CLSID@ {68979310-D979-4CCA-AB57-83BEFB03E0D3}
Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl\CurVer
Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl\CurVer@ PandoWebInst.PandoWebInstCtrl.1
Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl.1@ PandoWebInstCtrl Class
Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl.1\CLSID
Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl.1\CLSID@ {68979310-D979-4CCA-AB57-83BEFB03E0D3}
Reg HKLM\SOFTWARE\Classes\PCEFILE@ PCEFILE
Reg HKLM\SOFTWARE\Classes\PCEFILE\DefaultIcon
Reg HKLM\SOFTWARE\Classes\PCEFILE\DefaultIcon@ C:\Program Files\PP Chinese Expert\CHNEXP\win32\ChExp.ico
Reg HKLM\SOFTWARE\Classes\PCEFILE\shell
Reg HKLM\SOFTWARE\Classes\PCEFILE\shell\open
Reg HKLM\SOFTWARE\Classes\PCEFILE\shell\open\command
Reg HKLM\SOFTWARE\Classes\PCEFILE\shell\open\command@ C:\Program Files\PP Chinese Expert\CHNEXP\win32\ChExp.exe %l
Reg HKLM\SOFTWARE\Classes\picasa@ Picasa Command protocol
Reg HKLM\SOFTWARE\Classes\picasa@URL Protocol
Reg HKLM\SOFTWARE\Classes\picasa\shell
Reg HKLM\SOFTWARE\Classes\picasa\shell\open
Reg HKLM\SOFTWARE\Classes\picasa\shell\open\command
Reg HKLM\SOFTWARE\Classes\picasa\shell\open\command@ "E:\Program Files\Google\Picasa3\Picasa3.exe" "%1"
Reg HKLM\SOFTWARE\Classes\picasa2.autoplay@DefaultIcon E:\Program Files\Google\Picasa3\Picasa3.exe,1
Reg HKLM\SOFTWARE\Classes\picasa2.autoplay\shell
Reg HKLM\SOFTWARE\Classes\picasa2.autoplay\shell\import
Reg HKLM\SOFTWARE\Classes\picasa2.autoplay\shell\import\command
Reg HKLM\SOFTWARE\Classes\picasa2.autoplay\shell\import\command@ E:\Program Files\Google\Picasa3\Picasa3.exe "%1"
Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot@ PixHotspot Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot\CLSID
Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot\CLSID@ {2E41758B-912C-4ec5-BD6C-187A05C7FFEA}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot\CurVer
Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot\CurVer@ Piwe2.PixHotspot.1
Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot.1@ PixHotspot Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot.1\CLSID
Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot.1\CLSID@ {2E41758B-912C-4ec5-BD6C-187A05C7FFEA}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode@ PixNode Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode\CLSID
Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode\CLSID@ {98AFDFB6-72AE-444b-9AE1-1F740BEF411E}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode\CurVer
Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode\CurVer@ Piwe2.PixNode.1
Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode.1@ PixNode Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode.1\CLSID
Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode.1\CLSID@ {98AFDFB6-72AE-444b-9AE1-1F740BEF411E}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs@ PixPixHs Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs\CLSID
Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs\CLSID@ {1D13DB21-CF59-4549-911E-D6461D43702C}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs\CurVer
Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs\CurVer@ Piwe2.PixPixHs.1
Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs.1@ PixPixHs Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs.1\CLSID
Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs.1\CLSID@ {1D13DB21-CF59-4549-911E-D6461D43702C}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView@ PixScreenView Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView\CLSID
Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView\CLSID@ {4118FE34-5C50-4D44-8F76-D63D4D0F4225}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView\CurVer
Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView\CurVer@ Piwe2.PixScreenView.1
Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView.1@ PixScreenView Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView.1\CLSID
Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView.1\CLSID@ {4118FE34-5C50-4D44-8F76-D63D4D0F4225}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs@ PixSndHs Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs\CLSID
Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs\CLSID@ {1E5F91E8-2B50-4307-BC81-FE8C21A65AD3}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs\CurVer
Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs\CurVer@ Piwe2.PixSndHs.1
Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs.1@ PixSndHs Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs.1\CLSID
Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs.1\CLSID@ {1E5F91E8-2B50-4307-BC81-FE8C21A65AD3}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs@ PixUrlHs Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs\CLSID
Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs\CLSID@ {F205B775-4FDA-45ad-9631-AD90F3F643FF}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs\CurVer
Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs\CurVer@ Piwe2.PixUrlHs.1
Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs.1@ PixUrlHs Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs.1\CLSID
Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs.1\CLSID@ {F205B775-4FDA-45ad-9631-AD90F3F643FF}
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2@ Codecs2 Class
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2\CurVer
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2\CurVer@ PixAround.Codecs2.11
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11@ Codecs2 Class
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\//CLSID
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\//CLSID@ {7C46C300-99F0-11d4-8E22-009027A23A3F}
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\//PixMaker
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\CLSID
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\CLSID@ {68FB2ECB-4D53-4c9c-81E4-D0F26513A612}
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\Pro
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\Value
Reg HKLM\SOFTWARE\Classes\PixAround.Image2@ MyImage2 Class
Reg HKLM\SOFTWARE\Classes\PixAround.Image2\CurVer
Reg HKLM\SOFTWARE\Classes\PixAround.Image2\CurVer@ PixAround.Image2.11
Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11@ MyImage2 Class
Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11\//CLSID
Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11\//CLSID@ {D5D52450-9917-11D4-8E22-009027A23A3F}
Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11\//PixMaker
Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11\CLSID
Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11\CLSID@ {13C320CE-D30A-4f6e-8A46-F5FFACD91A83}
Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11\Pro
Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline@ CoFilterPipeline Class
Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline\CLSID
Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline\CLSID@ {d54378cd-91d8-4e10-a00b-819f9a9efcb1}
Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline\CurVer
Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline\CurVer@ PrintSys.CoFilterPipeline.1
Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline.1@ CoFilterPipeline Class
Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline.1\CLSID
Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline.1\CLSID@ {d54378cd-91d8-4e10-a00b-819f9a9efcb1}
Reg HKLM\SOFTWARE\Classes\Program ID@ MS PinYin 3.0 Dictionary Applet
Reg HKLM\SOFTWARE\Classes\Program ID\CLSID
Reg HKLM\SOFTWARE\Classes\Program ID\CLSID@ {6D0FD33B-0F59-4861-858C-17FCC56C7E50}
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1@ AAC for SD
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\shell
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\shell\open
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1@ CD Audio
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\shell
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\shell\open
Reg HKLM\SOFTWARE\Classes\RealJukebox.wma.1@ Windows Media™ Audio Track
Reg HKLM\SOFTWARE\Classes\RealJukebox.wma.1\shell
Reg HKLM\SOFTWARE\Classes\RealJukebox.wma.1\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6@ AAC Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.AIFF.6@ AIFF Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.AIFF.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.AIFF.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.AU.6@ AU Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.AU.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.AU.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6@ AVI Video
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6@ RealPlayer AutoPlay for Blank DVD
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6@URL Protocol
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10@ Qualcomm Enhanced Variable Rate
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6@ AAC Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP1.6@ MP1 Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP1.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP1.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6@ MP2 Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6@ MP3 Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6@ MP3 Audio PlayList
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6@ MPA Media
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6@ MPEG Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6@ Audio PlayList
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10@ Qualcomm PureVoice and Enhanced Variable Rate
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.WAV.6@ WAV Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.WAV.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.WAV.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6@ Windows Media™ Audio Shortcut
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6@ Windows Media™ Audio/Video File
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6@ Windows Media™ Audio File
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6@ Windows Media™ Video File
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmx.6@ Windows Media™ Audio/Video Shortcut
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmx.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmx.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.wvx.6@ Windows Media™ Video Shortcut
Reg HKLM\SOFTWARE\Classes\RealPlayer.wvx.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.wvx.6\shell\open
Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl@ Microsoft Rich Textbox Control 6.0 (SP6)
Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl\CLSID
Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl\CLSID@ {3B7C8860-D78F-101B-B9B5-04021C009402}
Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl\CurVer
Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl\CurVer@ RICHTEXT.RichtextCtrl.1
Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl.1@ Microsoft Rich Textbox Control 6.0 (SP6)
Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl.1\CLSID
Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl.1\CLSID@ {3B7C8860-D78F-101B-B9B5-04021C009402}
Reg HKLM\SOFTWARE\Classes\Sandra.Script@ SiSoftware Sandra Professional Home Script
Reg HKLM\SOFTWARE\Classes\Sandra.Script@Content Type text/plain
Reg HKLM\SOFTWARE\Classes\Sandra.Script@PerceivedType text
Reg HKLM\SOFTWARE\Classes\Sandra.Script\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Sandra.Script\DefaultIcon@ E:\Program Files\SiSoftware\SiSoftware Sandra Professional Home 2009.SP3c\sandra.exe,1
Reg HKLM\SOFTWARE\Classes\Sandra.Script\shell
Reg HKLM\SOFTWARE\Classes\Sandra.Script\shell\open
Reg HKLM\SOFTWARE\Classes\Sandra.Script\shell\open\command
Reg HKLM\SOFTWARE\Classes\Sandra.Script\shell\open\command@ "E:\Program Files\SiSoftware\SiSoftware Sandra Professional Home 2009.SP3c\sandra.exe" /r "%1"
Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar@ IE Toolbar
Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar\CLSID
Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar\CLSID@ {0329E7D6-6F54-462D-93F6-F5C3118BADF2}
Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar\CurVer
Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar\CurVer@ SBCONVERT.IEToolbar.1
Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar.1@ IE Toolbar
Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar.1\CLSID
Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar.1\CLSID@ {0329E7D6-6F54-462D-93F6-F5C3118BADF2}
Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT@ SpeedBit Video Downloader
Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT\CLSID
Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT\CLSID@ {0329E7D6-6F54-462D-93F6-F5C3118BADF2}
Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT\CurVer
Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT\CurVer@ SBCONVERT.SBCONVERT.3
Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT.3@ SpeedBit Video Downloader
Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT.3\CLSID
Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT.3\CLSID@ {0329E7D6-6F54-462D-93F6-F5C3118BADF2}
Reg HKLM\SOFTWARE\Classes\Scripting.Dictionary@ Scripting.Dictionary
Reg HKLM\SOFTWARE\Classes\Scripting.Dictionary\CLSID
Reg HKLM\SOFTWARE\Classes\Scripting.Dictionary\CLSID@ {EE09B103-97E0-11CF-978F-00A02463E06F}
Reg HKLM\SOFTWARE\Classes\Scripting.Encoder@ Script Encoder Object
Reg HKLM\SOFTWARE\Classes\Scripting.Encoder\CLSID
Reg HKLM\SOFTWARE\Classes\Scripting.Encoder\CLSID@ {32DA2B15-CFED-11D1-B747-00C04FC2B085}
Reg HKLM\SOFTWARE\Classes\Scripting.FileSystemObject@ FileSystem Object
Reg HKLM\SOFTWARE\Classes\Scripting.FileSystemObject\CLSID
Reg HKLM\SOFTWARE\Classes\Scripting.FileSystemObject\CLSID@ {0D43FE01-F093-11CF-8940-00A0C9054228}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\CurVer
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\CurVer@ ShockwaveFlash.ShockwaveFlash.10
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.1@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.1\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.1\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.10@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.10\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.10\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.3@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.3\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.3\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.4@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.4\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.4\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.5@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.5\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.5\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.6@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.6\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.6\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.7@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.7\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.7\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.8@ Shockwave Flash Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.8\CLSID
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.8\CLSID@ {D27CDB6E-AE6D-11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl@ SightSpeedWebImpl Class
Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl\CLSID
Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl\CLSID@ {57B2CA01-6C40-44BB-9FCC-BFA7FADAA6E3}
Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl\CurVer
Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl\CurVer@ sightspeedweb.SightSpeedWebImpl.1
Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl.1@ SightSpeedWebImpl Class
Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl.1\CLSID
Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl.1\CLSID@ {57B2CA01-6C40-44BB-9FCC-BFA7FADAA6E3}
Reg HKLM\SOFTWARE\Classes\SmartMenuXPLibrary.LibSmartMenuXP@ SmartMenuXPLibrary.LibSmartMenuXP
Reg HKLM\SOFTWARE\Classes\SmartMenuXPLibrary.LibSmartMenuXP\Clsid
Reg HKLM\SOFTWARE\Classes\SmartMenuXPLibrary.LibSmartMenuXP\Clsid@ {69D7483A-D984-4441-9A8F-42BF5C2970B0}
Reg HKLM\SOFTWARE\Classes\SmartNetButtonProject.SmartNetButton@ SmartNetButtonProject.SmartNetButton
Reg HKLM\SOFTWARE\Classes\SmartNetButtonProject.SmartNetButton\Clsid
Reg HKLM\SOFTWARE\Classes\SmartNetButtonProject.SmartNetButton\Clsid@ {1DAB2964-890E-424B-99C7-1D0FFDD0D574}
Reg HKLM\SOFTWARE\Classes\SmartSubClassLib.SmartSubClass@ SmartSubClassLib.SmartSubClass
Reg HKLM\SOFTWARE\Classes\SmartSubClassLib.SmartSubClass\Clsid
Reg HKLM\SOFTWARE\Classes\SmartSubClassLib.SmartSubClass\Clsid@ {7EAD12E0-1130-48ED-9EBE-48917F876C58}
Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile@ Disabled startup file
Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile\DefaultIcon@ "E:\program files\Spybot - Search & Destroy\blindman.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile\shell
Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile\shell\open
Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile\shell\open\command@ "E:\program files\Spybot - Search & Destroy\blindman.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile@ Spyware exclude file
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile\DefaultIcon@ "E:\program files\Spybot - Search & Destroy\SpybotSD.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile\shell
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile\shell\open
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile\shell\open\command@ "E:\program files\Spybot - Search & Destroy\SpybotSD.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile@ Spyware include file
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile\DefaultIcon@ "E:\program files\Spybot - Search & Destroy\SpybotSD.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile\shell
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile\shell\open
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile\shell\open\command@ "E:\program files\Spybot - Search & Destroy\SpybotSD.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile@ Spyware supplemental file
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile\DefaultIcon@ "E:\program files\Spybot - Search & Destroy\SpybotSD.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile\shell
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile\shell\open
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile\shell\open\command@ "E:\program files\Spybot - Search & Destroy\SpybotSD.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile@ Internal informations
Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile\DefaultIcon@ "E:\program files\Spybot - Search & Destroy\SpybotSD.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile\shell
Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile\shell\open
Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile\shell\open\command@ "E:\program files\Spybot - Search & Destroy\SpybotSD.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile@ Usage tracks include file
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile\DefaultIcon@ "E:\program files\Spybot - Search & Destroy\SpybotSD.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile\shell
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile\shell\open
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile\shell\open\command@ "E:\program files\Spybot - Search & Destroy\SpybotSD.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile@ Usage tracks supplemental file
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile\DefaultIcon@ "E:\program files\Spybot - Search & Destroy\SpybotSD.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile\shell
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile\shell\open
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile\shell\open\command@ "E:\program files\Spybot - Search & Destroy\SpybotSD.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SSM@ Streaming Media Metafile
Reg HKLM\SOFTWARE\Classes\SSM\shell
Reg HKLM\SOFTWARE\Classes\SSM\shell\open
Reg HKLM\SOFTWARE\Classes\SSubTimer6.CTimer@ SSubTimer6.CTimer
Reg HKLM\SOFTWARE\Classes\SSubTimer6.CTimer\Clsid
Reg HKLM\SOFTWARE\Classes\SSubTimer6.CTimer\Clsid@ {71A27034-C7D8-11D2-BEF8-525400DFB47A}
Reg HKLM\SOFTWARE\Classes\SSubTimer6.GSubclass@ SSubTimer6.GSubclass
Reg HKLM\SOFTWARE\Classes\SSubTimer6.GSubclass\Clsid
Reg HKLM\SOFTWARE\Classes\SSubTimer6.GSubclass\Clsid@ {71A27032-C7D8-11D2-BEF8-525400DFB47A}
Reg HKLM\SOFTWARE\Classes\SSubTimer6.ISubclass@ SSubTimer6.ISubclass
Reg HKLM\SOFTWARE\Classes\SSubTimer6.ISubclass\Clsid
Reg HKLM\SOFTWARE\Classes\SSubTimer6.ISubclass\Clsid@ {71A2702F-C7D8-11D2-BEF8-525400DFB47A}
Reg HKLM\SOFTWARE\Classes\Toolbar.CT1060933\CLSID
Reg HKLM\SOFTWARE\Classes\Toolbar.CT1060933\CLSID@ {d50f932f-a950-44ef-9bac-ae203967504f}
Reg HKLM\SOFTWARE\Classes\Toolbar.CT1714219\CLSID
Reg HKLM\SOFTWARE\Classes\Toolbar.CT1714219\CLSID@ {041d868b-eac9-4d0f-9125-85be9b61052b}
Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier@ ContextMenuNotifier Class
Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier\CLSID
Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier\CLSID@ {9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier\CurVer
Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier\CurVer@ Toolbar3.ContextMenuNotifier.1
Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1@ ContextMenuNotifier Class
Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1\CLSID
Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1\CLSID@ {9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
Reg HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl@ CustomInternetSecurityImpl Class
Reg HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl\CLSID
Reg HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl\CLSID@ {D565B35E-B787-40FA-95E3-E3562F8FC1A0}
Reg HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl\CurVer
Reg HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl\CurVer@ Toolbar3.CustomInternetSecurityImpl.1
Reg HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1@ CustomInternetSecurityImpl Class
Reg HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1\CLSID
Reg HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1\CLSID@ {D565B35E-B787-40FA-95E3-E3562F8FC1A0}
Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT@ SBCONVERT Class
Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT\CLSID
Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT\CLSID@ {3017FB3E-9A77-4396-88C5-0EC9548FB42F}
Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT\CurVer
Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT\CurVer@ Toolbar3.SBCONVERT.1
Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT.1@ SBCONVERT Class
Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT.1\CLSID
Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT.1\CLSID@ {3017FB3E-9A77-4396-88C5-0EC9548FB42F}
Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine@ AtcmTTSEngine Class
Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine\CLSID
Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine\CLSID@ {22FEDDD4-F1F0-4797-8CF9-0DD09F9E626C}
Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine\CurVer
Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine\CurVer@ TtsEng.AtcmTTSEngine.1
Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine.1@ AtcmTTSEngine Class
Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine.1\CLSID
Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine.1\CLSID@ {22FEDDD4-F1F0-4797-8CF9-0DD09F9E626C}
Reg HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook@ ToolbarURLSearchHook Class
Reg HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook\CLSID
Reg HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook\CLSID@ {CA3EB689-8F09-4026-AA10-B9534C691CE0}
Reg HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1@ ToolbarURLSearchHook Class
Reg HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1\CLSID
Reg HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1\CLSID@ {CA3EB689-8F09-4026-AA10-B9534C691CE0}
Reg HKLM\SOFTWARE\Classes\Valve.SteamP2P\shell
Reg HKLM\SOFTWARE\Classes\Valve.SteamP2P\shell\open
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridCell@ vbAcceleratorSGrid6.cGridCell
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridCell\Clsid
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridCell\Clsid@ {9BD3A001-42A2-491E-AACA-9512F6CF4CDB}
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridSortObject@ vbAcceleratorSGrid6.cGridSortObject
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridSortObject\Clsid
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridSortObject\Clsid@ {D2129738-6A78-4BCB-915A-412982CAA23D}
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.IGridCellOwnerDraw@ vbAcceleratorSGrid6.IGridCellOwnerDraw
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.IGridCellOwnerDraw\Clsid
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.IGridCellOwnerDraw\Clsid@ {DC90EAA6-69B8-4DE4-9A7B-5B2C5B3FEACD}
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.vbalGrid@ vbAccelerator Grid Control
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.vbalGrid\Clsid
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.vbalGrid\Clsid@ {C5DA1F2B-B2BF-4DFC-BC9A-439133543A67}
Reg HKLM\SOFTWARE\Classes\VBSFile.HostEncode\CLSID
Reg HKLM\SOFTWARE\Classes\VBSFile.HostEncode\CLSID@ {85131631-480C-11D2-B1F9-00C04F86C324}
Reg HKLM\SOFTWARE\Classes\VBSmartXPMenu.SmartMenuList@ VBSmartXPMenu.SmartMenuList
Reg HKLM\SOFTWARE\Classes\VBSmartXPMenu.SmartMenuList\Clsid
Reg HKLM\SOFTWARE\Classes\VBSmartXPMenu.SmartMenuList\Clsid@ {79D8BAC6-B95C-45D8-BA59-2C000E663532}
Reg HKLM\SOFTWARE\Classes\VBSmartXPMenu.SmartMenuXP@ VBSmartXPMenu.SmartMenuXP
Reg HKLM\SOFTWARE\Classes\VBSmartXPMenu.SmartMenuXP\Clsid
Reg HKLM\SOFTWARE\Classes\VBSmartXPMenu.SmartMenuXP\Clsid@ {BEBE0B18-F5AA-4F91-8E43-0309F73ED35A}
Reg HKLM\SOFTWARE\Classes\VerID@ MS PinYin 3.0 Dictionary Applet
Reg HKLM\SOFTWARE\Classes\VerID\CLSID
Reg HKLM\SOFTWARE\Classes\VerID\CLSID@ {6D0FD33B-0F59-4861-858C-17FCC56C7E50}
Reg HKLM\SOFTWARE\Classes\VerID\CurVer
Reg HKLM\SOFTWARE\Classes\VerID\CurVer@ Program ID
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin@ VideoLAN VLC ActiveX Plugin v2
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin\CLSID
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin\CLSID@ {9BE31822-FDAD-461B-AD51-BE1D1C159921}
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin\CurVer
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin\CurVer@ VideoLAN.VLCPlugin.2
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin.1@ VideoLAN VLC ActiveX Plugin v1
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin.1\CLSID
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin.1\CLSID@ {E23FE9C6-778E-49D4-B537-38FCDE4887D8}
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin.2@ VideoLAN VLC ActiveX Plugin v2
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin.2\CLSID
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin.2\CLSID@ {9BE31822-FDAD-461B-AD51-BE1D1C159921}
Reg HKLM\SOFTWARE\Classes\VLC.a52@ VLC media file (.a52)
Reg HKLM\SOFTWARE\Classes\VLC.a52\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.a52\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.a52\shell
Reg HKLM\SOFTWARE\Classes\VLC.a52\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.a52\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.a52\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.a52\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.aac@ VLC media file (.aac)
Reg HKLM\SOFTWARE\Classes\VLC.aac\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.aac\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.aac\shell
Reg HKLM\SOFTWARE\Classes\VLC.aac\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.aac\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.aac\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.aac\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.ac3@ VLC media file (.ac3)
Reg HKLM\SOFTWARE\Classes\VLC.ac3\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.ac3\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.ac3\shell
Reg HKLM\SOFTWARE\Classes\VLC.ac3\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.ac3\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.ac3\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.ac3\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.asf@ VLC media file (.asf)
Reg HKLM\SOFTWARE\Classes\VLC.asf\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.asf\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.asf\shell
Reg HKLM\SOFTWARE\Classes\VLC.asf\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.asf\shell\Convert with Prism Video Converter
Reg HKLM\SOFTWARE\Classes\VLC.asf\shell\Convert with Prism Video Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.asf\shell\Convert with Prism Video Converter\command@ "C:\Program Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.asf\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.asf\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.asf\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.asx@ VLC media file (.asx)
Reg HKLM\SOFTWARE\Classes\VLC.asx\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.asx\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.asx\shell
Reg HKLM\SOFTWARE\Classes\VLC.asx\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.asx\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.asx\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.asx\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.avi@ VLC media file (.avi)
Reg HKLM\SOFTWARE\Classes\VLC.avi\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.avi\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.avi\shell
Reg HKLM\SOFTWARE\Classes\VLC.avi\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.avi\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.avi\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.avi\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.bin@ VLC media file (.bin)
Reg HKLM\SOFTWARE\Classes\VLC.bin\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.bin\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.bin\shell
Reg HKLM\SOFTWARE\Classes\VLC.bin\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.bin\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.bin\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.bin\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.CDAudio@ VLC CD Audio
Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\shell
Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\shell\Play\command@ C:\Program Files\VideoLAN\VLC\vlc.exe –started-from-file cdda:%1
Reg HKLM\SOFTWARE\Classes\VLC.cue@ VLC media file (.cue)
Reg HKLM\SOFTWARE\Classes\VLC.cue\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.cue\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.cue\shell
Reg HKLM\SOFTWARE\Classes\VLC.cue\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.cue\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.cue\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.cue\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.divx@ VLC media file (.divx)
Reg HKLM\SOFTWARE\Classes\VLC.divx\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.divx\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.divx\shell
Reg HKLM\SOFTWARE\Classes\VLC.divx\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.divx\shell\Convert with Prism Video Converter
Reg HKLM\SOFTWARE\Classes\VLC.divx\shell\Convert with Prism Video Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.divx\shell\Convert with Prism Video Converter\command@ "C:\Program Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.divx\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.divx\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.divx\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.dts@ VLC media file (.dts)
Reg HKLM\SOFTWARE\Classes\VLC.dts\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.dts\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.dts\shell
Reg HKLM\SOFTWARE\Classes\VLC.dts\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.dts\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.dts\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.dts\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.dv@ VLC media file (.dv)
Reg HKLM\SOFTWARE\Classes\VLC.dv\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.dv\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.dv\shell
Reg HKLM\SOFTWARE\Classes\VLC.dv\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.dv\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.dv\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.dv\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie@ VLC DVD Movie
Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\shell
Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\shell\Play\command@ C:\Program Files\VideoLAN\VLC\vlc.exe –started-from-file dvd:%1
Reg HKLM\SOFTWARE\Classes\VLC.flac@ VLC media file (.flac)
Reg HKLM\SOFTWARE\Classes\VLC.flac\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.flac\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.flac\shell
Reg HKLM\SOFTWARE\Classes\VLC.flac\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.flac\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.flac\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.flac\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.m1v@ VLC media file (.m1v)
Reg HKLM\SOFTWARE\Classes\VLC.m1v\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.m1v\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.m1v\shell
Reg HKLM\SOFTWARE\Classes\VLC.m1v\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.m1v\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.m1v\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.m1v\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.m2v@ VLC media file (.m2v)
Reg HKLM\SOFTWARE\Classes\VLC.m2v\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.m2v\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.m2v\shell
Reg HKLM\SOFTWARE\Classes\VLC.m2v\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.m2v\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.m2v\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.m2v\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.m3u@ VLC media file (.m3u)
Reg HKLM\SOFTWARE\Classes\VLC.m3u\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.m3u\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.m3u\shell
Reg HKLM\SOFTWARE\Classes\VLC.m3u\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.m3u\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.m3u\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.m3u\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mka@ VLC media file (.mka)
Reg HKLM\SOFTWARE\Classes\VLC.mka\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.mka\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mka\shell
Reg HKLM\SOFTWARE\Classes\VLC.mka\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.mka\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.mka\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.mka\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mkv@ VLC media file (.mkv)
Reg HKLM\SOFTWARE\Classes\VLC.mkv\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.mkv\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell
Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell\Convert with Prism Video Converter
Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell\Convert with Prism Video Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell\Convert with Prism Video Converter\command@ "C:\Program Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mov@ VLC media file (.mov)
Reg HKLM\SOFTWARE\Classes\VLC.mov\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.mov\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mov\shell
Reg HKLM\SOFTWARE\Classes\VLC.mov\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.mov\shell\Convert with Prism Video Converter
Reg HKLM\SOFTWARE\Classes\VLC.mov\shell\Convert with Prism Video Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.mov\shell\Convert with Prism Video Converter\command@ "C:\Program Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.mov\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.mov\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.mov\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mov\shellex
Reg HKLM\SOFTWARE\Classes\VLC.mp1@ VLC media file (.mp1)
Reg HKLM\SOFTWARE\Classes\VLC.mp1\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.mp1\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mp1\shell
Reg HKLM\SOFTWARE\Classes\VLC.mp1\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.mp1\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.mp1\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.mp1\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mp2@ VLC media file (.mp2)
Reg HKLM\SOFTWARE\Classes\VLC.mp2\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.mp2\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mp2\shell
Reg HKLM\SOFTWARE\Classes\VLC.mp2\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.mp2\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.mp2\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.mp2\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mp3@ VLC media file (.mp3)
Reg HKLM\SOFTWARE\Classes\VLC.mp3\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.mp3\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mp3\shell
Reg HKLM\SOFTWARE\Classes\VLC.mp3\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.mp3\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.mp3\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.mp3\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mp4@ VLC media file (.mp4)
Reg HKLM\SOFTWARE\Classes\VLC.mp4\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.mp4\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell\Convert with Prism Video Converter
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell\Convert with Prism Video Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell\Convert with Prism Video Converter\command@ "C:\Program Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shellex
Reg HKLM\SOFTWARE\Classes\VLC.mpeg@ VLC media file (.mpeg)
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell\Convert with Prism Video Converter
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell\Convert with Prism Video Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell\Convert with Prism Video Converter\command@ "C:\Program Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mpeg1@ VLC media file (.mpeg1)
Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\shell
Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mpeg2@ VLC media file (.mpeg2)
Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\shell
Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mpeg4@ VLC media file (.mpeg4)
Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\shell
Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mpg@ VLC media file (.mpg)
Reg HKLM\SOFTWARE\Classes\VLC.mpg\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.mpg\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell
Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell\Convert with Prism Video Converter
Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell\Convert with Prism Video Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell\Convert with Prism Video Converter\command@ "C:\Program Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.ogg@ VLC media file (.ogg)
Reg HKLM\SOFTWARE\Classes\VLC.ogg\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.ogg\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.ogg\shell
Reg HKLM\SOFTWARE\Classes\VLC.ogg\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.ogg\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.ogg\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.ogg\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.ogm@ VLC media file (.ogm)
Reg HKLM\SOFTWARE\Classes\VLC.ogm\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.ogm\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.ogm\shell
Reg HKLM\SOFTWARE\Classes\VLC.ogm\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.ogm\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.ogm\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.ogm\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.pls@ VLC media file (.pls)
Reg HKLM\SOFTWARE\Classes\VLC.pls\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.pls\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.pls\shell
Reg HKLM\SOFTWARE\Classes\VLC.pls\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.pls\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.pls\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.pls\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.ps@ VLC media file (.ps)
Reg HKLM\SOFTWARE\Classes\VLC.ps\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.ps\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.ps\shell
Reg HKLM\SOFTWARE\Classes\VLC.ps\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.ps\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.ps\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.ps\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.spx@ VLC media file (.spx)
Reg HKLM\SOFTWARE\Classes\VLC.spx\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.spx\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.spx\shell
Reg HKLM\SOFTWARE\Classes\VLC.spx\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.spx\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.spx\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.spx\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.ts@ VLC media file (.ts)
Reg HKLM\SOFTWARE\Classes\VLC.ts\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.ts\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.ts\shell
Reg HKLM\SOFTWARE\Classes\VLC.ts\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.ts\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.ts\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.ts\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.vlc@ VLC media file (.vlc)
Reg HKLM\SOFTWARE\Classes\VLC.vlc\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.vlc\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.vlc\shell
Reg HKLM\SOFTWARE\Classes\VLC.vlc\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.vlc\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.vlc\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.vlc\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.vob@ VLC media file (.vob)
Reg HKLM\SOFTWARE\Classes\VLC.vob\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.vob\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.vob\shell
Reg HKLM\SOFTWARE\Classes\VLC.vob\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.vob\shell\Convert with Prism Video Converter
Reg HKLM\SOFTWARE\Classes\VLC.vob\shell\Convert with Prism Video Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.vob\shell\Convert with Prism Video Converter\command@ "C:\Program Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.vob\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.vob\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.vob\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.wav@ VLC media file (.wav)
Reg HKLM\SOFTWARE\Classes\VLC.wav\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.wav\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.wav\shell
Reg HKLM\SOFTWARE\Classes\VLC.wav\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.wav\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.wav\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.wav\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.wma@ VLC media file (.wma)
Reg HKLM\SOFTWARE\Classes\VLC.wma\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.wma\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.wma\shell
Reg HKLM\SOFTWARE\Classes\VLC.wma\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.wma\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.wma\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.wma\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.wmv@ VLC media file (.wmv)
Reg HKLM\SOFTWARE\Classes\VLC.wmv\DefaultIcon
Reg HKLM\SOFTWARE\Classes\VLC.wmv\DefaultIcon@ "C:\Program Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.wmv\shell
Reg HKLM\SOFTWARE\Classes\VLC.wmv\shell@ Play
Reg HKLM\SOFTWARE\Classes\VLC.wmv\shell\Play
Reg HKLM\SOFTWARE\Classes\VLC.wmv\shell\Play\command
Reg HKLM\SOFTWARE\Classes\VLC.wmv\shell\Play\command@ "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VOB_auto_file@
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell@ play
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\open
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\open@ &Open
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\open\command
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\open\command@ "C:\Program Files\iTunes\iTunes.exe" /open "%L"
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\play
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\play@ &Play
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\play\command
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\play\command@ "C:\Program Files\iTunes\iTunes.exe" /play "%L"
Reg HKLM\SOFTWARE\Classes\vpjfile@ VideoPad Project
Reg HKLM\SOFTWARE\Classes\wipe.Document@ wipe Document
Reg HKLM\SOFTWARE\Classes\wipe.Document\shell
Reg HKLM\SOFTWARE\Classes\wipe.Document\shell\open
Reg HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar@ Yahoo! Toolbar
Reg HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1@ Yahoo! Toolbar

—- EOF - GMER 1.0.15 —-
Post #43
1.- OTL run from safe mode.
- Should I reinstall Avast? It poofed!!!! I am running super antispyware pro real time right now.
2. dial a fix was run and comp rebootrd
3. gmer sent
4. otl log below
5. i will go back to normal mode to see how things are running.
cheers: JP

OTL log

OTL logfile created on: 3/25/2010 2:03:04 PM - Run 2
OTL by OldTimer - Version 3.1.37.3 Folder = C:\Documents and Settings\Administrator\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 90.00% Memory free
5.00 Gb Paging File | 5.00 Gb Available in Paging File | 98.00% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.52 Gb Total Space | 14.89 Gb Free Space | 19.98% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 74.52 Gb Total Space | 48.87 Gb Free Space | 65.58% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: JPRIG
Current User Name: Administrator
Logged in as Administrator.

Current Boot Mode: SafeMode with Networking
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Administrator\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Administrator\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msacm32.dll (Microsoft Corporation)
MOD - C:\WINDOWS\AppPatch\acgenral.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (SoundMovieServer) – File not found
SRV - (avast! Web Scanner) – File not found
SRV - (avast! Mail Scanner) – File not found
SRV - (avast! Antivirus) – File not found
SRV - (aswUpdSv) – File not found
SRV - (VideoAcceleratorService) – C:\Program Files\SpeedBit Video Accelerator\VideoAcceleratorService.exe (Speedbit Ltd.)
SRV - (BroadCamService) – C:\Program Files\NCH Software\BroadCam\broadcam.exe (NCH Software)
SRV - (SvcOnlineArmor) – C:\Program Files\Tall Emu\Online Armor\oasrv.exe (Tall Emu)
SRV - (OAcat) – C:\Program Files\Tall Emu\Online Armor\OAcat.exe (Tall Emu)
SRV - (TekSIP) – E:\Program Files\TekSIP\TekSIP.exe (Yasin KAPLAN)
SRV - (DvmMDES) – C:\ASUS.SYS\config\DVMExportService.exe (DeviceVM)
SRV - (AODService) – C:\Program Files\AMD\OverDrive\AODAssist.exe ()
SRV - (AMD_RAIDXpert) – C:\Program Files\AMD\RAIDXpert\bin\RAIDXpertService.exe (AMD)
SRV - (AsSysCtrlService) – C:\Program Files\ASUS\AsSysCtrlService\1.00.00\AsSysCtrlService.exe ()
SRV - (WinDefend) – C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\HPZipm12.exe (HP)


========== Driver Services (SafeList) ==========

DRV - (aswTdi) – C:\WINDOWS\system32\drivers\aswTdi.sys (ALWIL Software)
DRV - (aswSP) – C:\WINDOWS\system32\drivers\aswSP.sys (ALWIL Software)
DRV - (aswRdr) – C:\WINDOWS\system32\drivers\aswRdr.sys (ALWIL Software)
DRV - (aswMon2) – C:\WINDOWS\system32\drivers\aswmon2.sys (ALWIL Software)
DRV - (aswFsBlk) – C:\WINDOWS\system32\drivers\aswFsBlk.sys (ALWIL Software)
DRV - (Aavmker4) – C:\WINDOWS\system32\drivers\aavmker4.sys (ALWIL Software)
DRV - (OAmon) – C:\WINDOWS\system32\drivers\OAmon.sys (Tall Emu)
DRV - (OAnet) – C:\WINDOWS\system32\drivers\OAnet.sys (Tall Emu Pty Ltd)
DRV - (OADevice) – C:\WINDOWS\system32\drivers\OADriver.sys (Tall Emu)
DRV - (L1e) – C:\WINDOWS\system32\drivers\l1e51x86.sys (Atheros Communications, Inc.)
DRV - (NuidFltr) – C:\WINDOWS\system32\drivers\nuidfltr.sys (Microsoft Corporation)
DRV - (cpuz132) – C:\WINDOWS\system32\drivers\cpuz132_x32.sys (Windows ® Codename Longhorn DDK provider)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (ZSMC30x) – C:\WINDOWS\system32\drivers\ZS211.sys (ZSMC.Corporation)
DRV - (vvftav211) – C:\WINDOWS\system32\drivers\vvftav211.sys (Vimicro Corporation)
DRV - (VIAHdAudAddService) – C:\WINDOWS\system32\drivers\viahduaa.sys (VIA Technologies, Inc.)
DRV - (dvd43llh) – C:\WINDOWS\system32\drivers\dvd43llh.sys (RIF)
DRV - (MovRVDrv32) – C:\WINDOWS\system32\drivers\MovRVDrv32.sys (Windows ® 2000 DDK provider)
DRV - (SndTDriverV32) – C:\WINDOWS\system32\drivers\SndTDriverV32.sys (Windows ® 2000/XP)
DRV - (SASENUM) – E:\program files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) – E:\program files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASDIFSV) – E:\program files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (MovPDrv32) – C:\WINDOWS\system32\drivers\MovPDrv32.sys (Windows ® 2000/XP)
DRV - (gameenum) – C:\WINDOWS\system32\drivers\gameenum.sys (Microsoft Corporation)
DRV - (usbaudio) USB Audio Driver (WDM) – C:\WINDOWS\system32\drivers\usbaudio.sys (Microsoft Corporation)
DRV - (HDAudBus) – C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider)
DRV - (monfilt) – C:\WINDOWS\system32\drivers\monfilt.sys (Creative Technology Ltd.)
DRV - (AsIO) – C:\WINDOWS\system32\drivers\AsIO.sys ()
DRV - (nxsIO32) – C:\WINDOWS\system32\drivers\nxsIO32.sys ()
DRV - (LMouFilt) – C:\WINDOWS\system32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) – C:\WINDOWS\system32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (L8042Kbd) – C:\WINDOWS\system32\drivers\L8042Kbd.sys (Logitech Inc.)
DRV - (SaiNtBus) – C:\WINDOWS\system32\drivers\SaiBus.sys (Saitek)
DRV - (SaiMini) – C:\WINDOWS\system32\drivers\SaiMini.sys (Saitek)
DRV - (SaiU0004) – C:\WINDOWS\system32\drivers\SaiU0004.sys (Saitek)
DRV - (SaiH0004) – C:\WINDOWS\system32\drivers\SaiH0004.sys (Saitek)
DRV - (SaiL0004) – C:\WINDOWS\system32\drivers\SaiL0004.sys (Saitek)
DRV - (Alpham) – C:\WINDOWS\system32\drivers\Alpham.sys (Ideazon Corporation)
DRV - (dfmirage) – C:\WINDOWS\system32\drivers\dfmirage.sys (DemoForge, LLC)
DRV - (NCPro) – C:\WINDOWS\system32\drivers\MTictwl.sys ()
DRV - (MagicTune) – C:\WINDOWS\system32\drivers\MTictwl.sys ()
DRV - (ATITool) – C:\WINDOWS\system32\drivers\ATITool.sys ()
DRV - (nvnforce) Service for NVIDIA® nForce™ – C:\WINDOWS\system32\drivers\nvapu.sys (NVIDIA Corporation)
DRV - (nvax) Service for NVIDIA® nForce™ – C:\WINDOWS\system32\drivers\nvax.sys (NVIDIA Corporation)
DRV - (P0630VID) – C:\WINDOWS\system32\drivers\P0630Vid.sys (Creative Technology Ltd.)
DRV - (BANTExt) – C:\WINDOWS\System32\Drivers\BANTExt.sys ()
DRV - (nvatabus) – C:\WINDOWS\System32\DRIVERS\nvatabus.sys (NVIDIA Corporation)
DRV - (nvnetbus) – C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (NVENETFD) – C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) – C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (ULCDRHlp) – C:\WINDOWS\system32\drivers\ULCDRHlp.sys (Ulead Systems, Inc.)
DRV - (MTsensor) – C:\WINDOWS\system32\drivers\ASACPI.sys ()
DRV - (es1371) Creative AudioPCI (ES1371,ES1373) (WDM) – C:\WINDOWS\system32\drivers\es1371mp.sys (Creative Technology Ltd.)
DRV - (Sentinel) – C:\WINDOWS\System32\Drivers\SENTINEL.SYS (Rainbow Technologies, Inc.)
DRV - (Sntnlusb) – C:\WINDOWS\system32\drivers\SNTNLUSB.SYS (Rainbow Technologies Inc.)
DRV - (DS1410D) – C:\WINDOWS\system32\drivers\ds1410d.sys ()
DRV - (sbpci) SB AudioPCI Audio Driver (WDM) – C:\WINDOWS\system32\drivers\sbpci.sys (Creative Technology Ltd.)
DRV - (PfModNT) – C:\WINDOWS\system32\PfModNT.sys (Creative Technology Ltd.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {0329E7D6-6F54-462D-93F6-F5C3118BADF2}:2.1.5
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.5.4.20081105
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..keyword.URL: "http://www.ask.com/web?o=13796&l;=dis&q;="


FF - HKLM\software\mozilla\Firefox\Extensions\\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}: C:\Program Files\SpeedBit Video Downloader\SPFireFox [2010/02/24 09:39:39 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Flock 2.5.5\extensions\\Components: C:\Program Files\Flock\components [2010/02/25 14:25:12 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Flock 2.5.5\extensions\\Plugins: C:\Program Files\Flock\plugins [2010/02/25 14:25:17 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/03/21 21:26:48 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/03/07 17:31:39 | 000,000,000 | —D | M]

[2008/09/17 15:34:57 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator\Application Data\Mozilla\Extensions
[2010/03/24 15:10:20 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\bo4nnl5q.default\extensions
[2010/03/07 17:27:56 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\bo4nnl5q.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/03/07 17:28:03 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\bo4nnl5q.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010/03/25 11:05:26 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
[2010/03/14 17:10:48 | 000,000,000 | —D | M] (Skype extension for Firefox) – C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010/03/07 17:28:02 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2008/01/23 01:20:30 | 000,491,520 | —- | M] (BitComet) – C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[2008/07/16 23:36:16 | 000,204,800 | —- | M] (Dimdim Inc.) – C:\Program Files\Mozilla Firefox\plugins\npDimdimControl.dll
[2009/10/03 13:15:57 | 000,238,776 | —- | M] (Pando Networks) – C:\Program Files\Mozilla Firefox\plugins\npPandoWebInst.dll
[2008/03/12 15:04:10 | 000,086,016 | —- | M] (SpiralFrog Inc.) – C:\Program Files\Mozilla Firefox\plugins\NPSFDMGR.dll

O1 HOSTS File: ([2010/03/21 16:22:34 | 000,348,846 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 11960 more lines…
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Freecorder Toolbar) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll (Conduit Ltd.)
O2 - BHO: (Solid Converter PDF) - {259F616C-A300-44F5-B04A-ED001A26C85C} - E:\program files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll (VoyagerSoft, LLC)
O2 - BHO: (EWPBrowseObject Class) - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll ()
O2 - BHO: (ChromeFrame BHO) - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files\Google\Chrome Frame\Application\5.0.342.0\npchrome_frame.dll (@COMPANY_FULLNAME@)
O2 - BHO: (GrabberObj Class) - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\SpeedBit Video Downloader\Toolbar\Grabber.dll (Speedbit Ltd.)
O3 - HKLM\..\Toolbar: (Freecorder Toolbar) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Solid Converter PDF) - {259F616C-A300-44F5-B04A-ED001A26C85C} - E:\program files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll (VoyagerSoft, LLC)
O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O4 - HKLM..\Run: [Ai Nap] C:\Program Files\ASUS\AI Suite\Q-Button\QButton.exe ()
O4 - HKLM..\Run: [Domino] C:\WINDOWS\Domino.exe ()
O4 - HKLM..\Run: [dvd43] C:\Program Files\dvd43\DVD43_Tray.exe ()
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe ()
O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [QFan Help] C:\Program Files\ASUS\AI Suite\QFan3\QFanHelp.exe ()
O4 - HKLM..\Run: [ZSSnp211] C:\WINDOWS\ZSSnp211.exe (ZSMCSNAP)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver; - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - E:\program files\Evernote\Evernote3.5\enbar.dll (Evernote Corporation)
O9 - Extra 'Tools' menuitem : Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - E:\program files\Evernote\Evernote3.5\enbar.dll (Evernote Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\SpeedBit Video Accelerator\sblsp.dll (Speedbit Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\SpeedBit Video Accelerator\sblsp.dll (Speedbit Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\SpeedBit Video Accelerator\sblsp.dll (Speedbit Ltd.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/3/9…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {19E28AFC-EAE3-4CE5-AC83-2407B42F57C9} http://protect.microsoft.com/security/prot…b?1116220378452 (MSSecurityAdvisor Class)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2…78f/wvc1dmo.cab (Reg Error: Value error.)
O16 - DPF: {33564D57-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/D/0…D0C/wmv9dmo.cab (Reg Error: Value error.)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdat…b?1221690851234 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_01)
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa…ash/swflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)
O18 - Protocol\Handler\cf - No CLSID value found
O18 - Protocol\Handler\gcf {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files\Google\Chrome Frame\Application\5.0.342.0\npchrome_frame.dll (@COMPANY_FULLNAME@)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {4F07DA45-8170-4859-9B5F-037EF2970034} - C:\Program Files\Tall Emu\Online Armor\oaevent.dll (Tall Emu)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - E:\program files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/05/06 13:47:37 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (autocheck autocheck lsdelete) - File not found
O34 - HKLM BootExecute: (OODBS) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/03/25 14:00:23 | 000,555,520 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Administrator\Desktop\OTL.exe
[2010/03/25 13:14:55 | 000,000,000 | R–D | C] – C:\Documents and Settings\Administrator\My Documents\My Pictures
[2010/03/25 13:14:55 | 000,000,000 | R–D | C] – C:\Documents and Settings\Administrator\My Documents\My Music
[2010/03/25 13:07:23 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2010/03/25 13:03:46 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Desktop\Dial-a-fix-v0.60.0.24
[2010/03/24 18:59:48 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2010/03/24 18:37:12 | 000,000,000 | —D | C] – C:\WINDOWS\temp
[2010/03/24 18:29:36 | 000,000,000 | —D | C] – C:\nicnpjnp
[2010/03/24 15:17:39 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Desktop\OTL
[2010/03/23 19:23:11 | 000,000,000 | RHSD | C] – C:\cmdcons
[2010/03/23 19:22:03 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2010/03/23 19:22:03 | 000,161,792 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2010/03/23 19:22:03 | 000,136,704 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2010/03/23 19:22:03 | 000,031,232 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2010/03/23 19:21:26 | 000,000,000 | —D | C] – C:\Qoobox
[2010/03/22 17:07:41 | 000,000,000 | —D | C] – C:\Program Files\Trend Micro
[2010/03/22 15:34:34 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010/03/20 21:54:34 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\SUPERAntiSpyware.com
[2010/03/20 19:26:07 | 000,000,000 | —D | C] – C:\Program Files\uTorrent
[2010/03/20 19:24:54 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\uTorrent
[2010/03/18 15:35:13 | 000,000,000 | —D | C] – C:\Program Files\GiPo@Utilities
[2010/03/18 15:35:13 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Gibinsoft Shared
[2010/03/14 17:10:37 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Skype
[2010/03/12 18:38:05 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/03/12 14:06:55 | 000,000,000 | —D | C] – C:\Program Files\Microsoft
[2010/03/12 14:06:45 | 000,000,000 | —D | C] – C:\Program Files\MSN Toolbar
[2010/03/12 14:06:32 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010/03/12 14:05:46 | 000,000,000 | —D | C] – C:\Program Files\MSN Toolbar Installer
[2010/03/12 14:05:00 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Sun
[2010/03/12 14:04:03 | 000,153,376 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2010/03/12 14:04:03 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2010/03/12 14:04:03 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2010/03/12 11:23:48 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Alwil Software
[2010/03/10 11:17:51 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2010/03/07 18:10:09 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\OnlineArmor
[2010/03/07 18:09:48 | 000,223,312 | —- | C] (Tall Emu) – C:\WINDOWS\System32\drivers\OADriver.sys
[2010/03/07 18:09:48 | 000,029,776 | —- | C] (Tall Emu Pty Ltd) – C:\WINDOWS\System32\drivers\OAnet.sys
[2010/03/07 18:09:48 | 000,024,656 | —- | C] (Tall Emu) – C:\WINDOWS\System32\drivers\OAmon.sys
[2010/03/07 18:09:47 | 000,000,000 | —D | C] – C:\Program Files\Tall Emu
[2010/03/07 17:34:29 | 000,000,000 | —D | C] – C:\WINDOWS\ERDNT
[2010/03/07 17:33:50 | 000,000,000 | —D | C] – C:\Program Files\ERUNT
[2010/03/07 17:28:44 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\My Documents\Downloads
[2010/03/07 17:23:11 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\IObit
[2010/03/07 17:22:06 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Administrator\Recent
[2010/03/07 17:12:57 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\Macromedia
[2010/03/07 16:57:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Local Settings\Application Data\Identities
[2010/03/07 16:57:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\Identities
[2010/03/07 16:40:03 | 000,401,720 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\Administrator\Desktop\HijackThis.exe
[2010/03/07 16:38:44 | 000,401,720 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\Administrator\My Documents\HijackThis.exe
[2010/03/07 16:33:36 | 009,758,152 | —- | C] (Microsoft Corporation) – C:\Documents and Settings\Administrator\My Documents\windows-kb890830-v3.4.exe
[2010/03/07 16:32:49 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Local Settings\Application Data\Opera
[2010/03/07 16:32:48 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\Opera
[2010/03/07 11:09:10 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\Malwarebytes
[2010/03/02 09:49:48 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\hidserv.dll
[2010/02/25 12:12:09 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Apple Computer
[2010/02/25 12:11:57 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Application Data\Apple Computer
[2010/02/23 18:44:30 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Real
[2010/02/23 16:55:55 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Dimdim
[2010/02/23 16:55:50 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Application Data\{BF03BF7A-B118-4C26-B9F7-08C12D3D06E3}
[2009/10/22 13:37:00 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2009/10/22 13:32:20 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2009/01/16 12:52:55 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Freecorder
[2008/10/08 10:55:50 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2008/09/23 12:43:00 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Application Data\Microsoft
[2008/07/29 23:13:03 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2008/07/23 15:19:17 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Adobe
[2008/07/23 15:19:02 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Application Data\Adobe
[2008/07/23 15:18:27 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Mozilla
[2008/07/23 15:18:27 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Application Data\Mozilla
[1998/12/08 13:53:54 | 000,186,368 | —- | C] (Symantec Corp., Peter Norton Computing Group) – C:\Program Files\Common Files\IRAREG.DLL
[1998/12/08 13:53:54 | 000,099,840 | —- | C] (Symantec Corp.) – C:\Program Files\Common Files\IRAABOUT.DLL
[1998/12/08 13:53:54 | 000,070,144 | —- | C] (Symantec Corp., Peter Norton Computing Group) – C:\Program Files\Common Files\IRAMDMTR.DLL
[1998/12/08 13:53:54 | 000,048,640 | —- | C] (Symantec Corp., Peter Norton Computing Group) – C:\Program Files\Common Files\IRALPTTR.DLL
[1998/12/08 13:53:54 | 000,031,744 | —- | C] (Symantec Corp., Peter Norton Computing Group) – C:\Program Files\Common Files\IRAWEBTR.DLL
[1998/12/08 13:53:54 | 000,017,920 | —- | C] (Symantec Corp.) – C:\Program Files\Common Files\IRASRIAL.DLL
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/03/25 14:00:23 | 000,555,520 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Administrator\Desktop\OTL.exe
[2010/03/25 13:23:09 | 000,293,376 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\ymzybyk7.exe
[2010/03/25 13:23:07 | 000,533,362 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2010/03/25 13:23:07 | 000,448,550 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010/03/25 13:23:07 | 000,074,948 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010/03/25 13:19:38 | 000,001,374 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/03/25 13:18:51 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/03/25 13:17:45 | 004,718,592 | —- | M] () – C:\Documents and Settings\Administrator\ntuser.dat
[2010/03/25 13:17:45 | 000,000,178 | -HS- | M] () – C:\Documents and Settings\Administrator\ntuser.ini
[2010/03/25 13:17:43 | 006,880,656 | -H– | M] () – C:\Documents and Settings\Administrator\Local Settings\Application Data\IconCache.db
[2010/03/25 13:07:54 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2010/03/25 13:07:54 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2010/03/25 13:03:04 | 000,335,992 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\Dial-a-fix-v0.60.0.24.zip
[2010/03/25 12:59:46 | 000,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2010/03/25 12:57:53 | 000,000,888 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/03/25 12:53:00 | 000,000,892 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/03/25 12:52:08 | 000,000,012 | -H– | M] () – C:\WINDOWS\System32\%sdvmexp.idx
[2010/03/25 12:18:00 | 000,000,994 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2000478354-725345543-1003UA.job
[2010/03/25 11:18:00 | 000,000,942 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2000478354-725345543-1003Core.job
[2010/03/24 18:35:27 | 000,000,227 | —- | M] () – C:\WINDOWS\system.ini
[2010/03/24 18:28:39 | 003,899,286 | R— | M] () – C:\Documents and Settings\Administrator\Desktop\nicnpjnp.exe
[2010/03/24 18:00:00 | 000,000,454 | —- | M] () – C:\WINDOWS\tasks\next.job
[2010/03/24 14:40:32 | 000,001,519 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\Notepad.lnk
[2010/03/23 19:23:15 | 000,000,281 | RHS- | M] () – C:\boot.ini
[2010/03/23 13:48:16 | 2145,386,496 | —- | M] () – C:\WINDOWS\MEMORY.DMP
[2010/03/23 01:48:00 | 000,000,330 | -H– | M] () – C:\WINDOWS\tasks\MP Scheduled Scan.job
[2010/03/22 20:10:41 | 000,001,958 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Age Of Empires II - The Age Of Kings.lnk
[2010/03/22 20:10:41 | 000,001,949 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Age Of Empires II - The Conquerors.lnk
[2010/03/22 15:17:36 | 000,001,543 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\Command Prompt.lnk
[2010/03/21 16:22:34 | 000,348,846 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2010/03/20 23:11:06 | 000,000,534 | —- | M] () – C:\Documents and Settings\All Users\Desktop\µTorrent.lnk
[2010/03/20 22:25:34 | 000,059,360 | —- | M] () – C:\Documents and Settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/03/20 21:49:30 | 000,001,324 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2010/03/20 20:33:34 | 000,002,137 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/03/19 10:52:00 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/03/12 18:33:39 | 000,001,854 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2010/03/12 18:02:38 | 000,261,632 | —- | M] () – C:\WINDOWS\PEV.exe
[2010/03/12 11:24:23 | 000,001,700 | —- | M] () – C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2010/03/12 11:24:22 | 000,002,688 | —- | M] () – C:\WINDOWS\System32\config.nt
[2010/03/10 13:43:43 | 000,001,675 | —- | M] () – C:\Documents and Settings\All Users\Desktop\FileZilla Client.lnk
[2010/03/09 06:24:23 | 000,038,848 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\avastSS.scr
[2010/03/09 06:24:05 | 000,153,184 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\aswBoot.exe
[2010/03/09 06:12:54 | 000,046,672 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswTdi.sys
[2010/03/09 06:12:33 | 000,162,640 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswSP.sys
[2010/03/09 06:09:08 | 000,023,376 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswRdr.sys
[2010/03/09 06:08:41 | 000,100,432 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswmon2.sys
[2010/03/09 06:08:38 | 000,094,800 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswmon.sys
[2010/03/09 06:08:30 | 000,019,024 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010/03/09 06:08:15 | 000,028,880 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aavmker4.sys
[2010/03/07 18:10:10 | 000,095,020 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts.idx
[2010/03/07 18:01:08 | 000,001,347 | —- | M] () – C:\WINDOWS\win.ini
[2010/03/07 18:01:08 | 000,000,211 | —- | M] () – C:\Boot.bak
[2010/03/07 17:38:28 | 004,718,592 | -H– | M] () – C:\Documents and Settings\Administrator\ntuser.bak
[2010/03/07 17:33:50 | 000,000,611 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\NTREGOPT.lnk
[2010/03/07 17:33:50 | 000,000,592 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\ERUNT.lnk
[2010/03/07 17:31:42 | 000,001,602 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/03/07 17:22:59 | 000,000,682 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\Shortcut to CCleaner.lnk
[2010/03/07 17:22:37 | 000,000,406 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\cc_20100307_162230.reg
[2010/03/07 17:21:39 | 000,000,664 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\CCleaner.lnk
[2010/03/07 17:18:27 | 000,126,424 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\cc_20100307_161800.reg
[2010/03/07 16:56:58 | 000,001,297 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\WinXP_EXE_Fix.reg
[2010/03/07 16:40:03 | 000,401,720 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\Administrator\Desktop\HijackThis.exe
[2010/03/07 16:38:44 | 000,401,720 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\Administrator\My Documents\HijackThis.exe
[2010/03/07 16:33:36 | 009,758,152 | —- | M] (Microsoft Corporation) – C:\Documents and Settings\Administrator\My Documents\windows-kb890830-v3.4.exe
[2010/03/07 16:24:52 | 000,000,438 | RHS- | M] () – C:\Documents and Settings\Administrator\ntuser.pol
[2010/03/07 15:40:14 | 000,001,475 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\Windows Explorer.lnk
[2010/03/02 09:49:51 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2010/02/23 18:46:29 | 000,000,100 | —- | M] () – C:\WINDOWS\cdplayer.ini
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/03/25 13:23:09 | 000,293,376 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\ymzybyk7.exe
[2010/03/25 13:03:01 | 000,335,992 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\Dial-a-fix-v0.60.0.24.zip
[2010/03/24 18:28:39 | 003,899,286 | R— | C] () – C:\Documents and Settings\Administrator\Desktop\nicnpjnp.exe
[2010/03/24 17:20:52 | 000,000,012 | -H– | C] () – C:\WINDOWS\System32\%sdvmexp.idx
[2010/03/24 14:40:32 | 000,001,519 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\Notepad.lnk
[2010/03/23 19:23:15 | 000,000,211 | —- | C] () – C:\Boot.bak
[2010/03/23 19:23:13 | 000,260,272 | —- | C] () – C:\cmldr
[2010/03/23 19:22:03 | 000,261,632 | —- | C] () – C:\WINDOWS\PEV.exe
[2010/03/23 19:22:03 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2010/03/23 19:22:03 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2010/03/23 19:22:03 | 000,077,312 | —- | C] () – C:\WINDOWS\MBR.exe
[2010/03/23 19:22:03 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2010/03/22 20:10:41 | 000,001,958 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Age Of Empires II - The Age Of Kings.lnk
[2010/03/22 20:10:41 | 000,001,949 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Age Of Empires II - The Conquerors.lnk
[2010/03/22 15:17:29 | 000,001,543 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\Command Prompt.lnk
[2010/03/20 19:26:07 | 000,000,534 | —- | C] () – C:\Documents and Settings\All Users\Desktop\µTorrent.lnk
[2010/03/12 18:38:46 | 000,002,137 | —- | C] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/03/12 11:24:23 | 000,001,700 | —- | C] () – C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2010/03/07 17:33:50 | 000,000,611 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\NTREGOPT.lnk
[2010/03/07 17:33:50 | 000,000,592 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\ERUNT.lnk
[2010/03/07 17:22:59 | 000,000,682 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\Shortcut to CCleaner.lnk
[2010/03/07 17:22:34 | 000,000,406 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\cc_20100307_162230.reg
[2010/03/07 17:21:39 | 000,000,664 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\CCleaner.lnk
[2010/03/07 17:18:16 | 000,126,424 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\cc_20100307_161800.reg
[2010/03/07 16:56:58 | 000,001,297 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\WinXP_EXE_Fix.reg
[2010/03/07 16:24:52 | 000,000,438 | RHS- | C] () – C:\Documents and Settings\Administrator\ntuser.pol
[2010/03/07 15:39:54 | 000,001,475 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\Windows Explorer.lnk
[2010/03/02 09:49:51 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2010/02/23 16:56:03 | 000,000,454 | —- | C] () – C:\WINDOWS\tasks\next.job
[2009/09/19 16:04:20 | 000,000,116 | —- | C] () – C:\WINDOWS\ConverterCore.INI
[2009/09/11 19:28:23 | 000,000,000 | —- | C] () – C:\WINDOWS\SETUP32.INI
[2009/08/26 17:31:10 | 000,000,039 | —- | C] () – C:\WINDOWS\System32\PCE_TRIAL_VERSIONs.sys
[2009/08/16 14:23:44 | 000,000,080 | RHS- | C] () – C:\WINDOWS\System32\870508C509.dll
[2009/07/31 00:10:14 | 000,000,991 | —- | C] () – C:\Program Files\GH3D.txt
[2009/07/31 00:10:14 | 000,000,142 | —- | C] () – C:\Program Files\GamersHell.url
[2009/06/13 19:43:52 | 000,000,091 | —- | C] () – C:\WINDOWS\System32\avalokitesvara2.ini
[2009/06/13 19:42:52 | 000,000,091 | —- | C] () – C:\WINDOWS\System32\quanyin waterfall.ini
[2009/06/13 19:22:32 | 000,000,091 | —- | C] () – C:\WINDOWS\System32\krishna_flute.ini
[2009/05/25 14:37:21 | 000,000,128 | —- | C] () – C:\Documents and Settings\All Users\Application Data\sandra.ldb
[2009/05/25 14:35:24 | 010,440,704 | —- | C] () – C:\Documents and Settings\All Users\Application Data\sandra.mda
[2009/05/24 20:15:32 | 000,219,136 | —- | C] () – C:\WINDOWS\sqlite3_engine.dll
[2009/05/21 01:46:09 | 000,004,588 | —- | C] () – C:\WINDOWS\AbleBurn.ini
[2009/05/21 01:42:55 | 000,000,111 | —- | C] () – C:\WINDOWS\TruDirect.ini
[2009/05/19 22:43:04 | 000,024,576 | R— | C] () – C:\WINDOWS\System32\AsIO.dll
[2009/05/19 22:43:04 | 000,012,400 | R— | C] () – C:\WINDOWS\System32\drivers\AsIO.sys
[2009/05/19 22:39:04 | 000,001,746 | —- | C] () – C:\WINDOWS\Language_trs.ini
[2009/05/19 22:36:47 | 000,005,810 | R— | C] () – C:\WINDOWS\System32\drivers\ASACPI.sys
[2009/05/19 22:36:26 | 000,040,216 | —- | C] () – C:\WINDOWS\Ascd_tmp.ini
[2009/05/19 22:36:25 | 000,010,296 | —- | C] () – C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2008/11/26 01:08:23 | 000,000,120 | —- | C] () – C:\WINDOWS\NVPerformance.INI
[2008/10/08 02:36:58 | 000,090,668 | —- | C] () – C:\WINDOWS\System32\vobis32.dll
[2008/10/08 01:48:54 | 000,000,036 | —- | C] () – C:\WINDOWS\Progs_.ini
[2008/10/08 01:48:49 | 000,000,601 | —- | C] () – C:\WINDOWS\1Way.ini
[2008/07/04 03:07:00 | 000,532,480 | —- | C] () – C:\WINDOWS\System32\libxml2.dll
[2007/11/08 18:52:07 | 000,013,396 | —- | C] () – C:\WINDOWS\System32\drivers\MTictwl.sys
[2007/06/25 16:30:17 | 000,000,057 | —- | C] () – C:\WINDOWS\TUTORI~1.INI
[2007/04/28 13:49:17 | 000,000,477 | —- | C] () – C:\WINDOWS\System32\ntmsqapi.dll
[2007/04/28 13:41:24 | 000,002,208 | —- | C] () – C:\WINDOWS\System32\drivers\nxsIO32.sys
[2007/02/13 12:32:28 | 000,006,592 | —- | C] () – C:\WINDOWS\System32\drivers\ds1410d.sys
[2006/12/14 15:32:52 | 000,000,009 | —- | C] () – C:\Documents and Settings\All Users\Application Data\DragToDiscUserNameD.txt
[2006/11/16 21:43:33 | 000,667,648 | —- | C] () – C:\WINDOWS\System32\FreeImage.dll
[2006/11/16 18:44:53 | 000,003,840 | —- | C] () – C:\WINDOWS\System32\drivers\BANTExt.sys
[2006/11/16 18:43:07 | 000,176,235 | —- | C] () – C:\WINDOWS\System32\Primomonnt.dll
[2006/08/31 11:46:13 | 000,000,310 | —- | C] () – C:\WINDOWS\primopdf.ini
[2006/08/22 11:57:37 | 000,077,824 | R— | C] () – C:\WINDOWS\System32\hpzids01.dll
[2006/07/30 17:05:23 | 000,000,049 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2006/05/12 04:09:38 | 000,579,602 | —- | C] () – C:\WINDOWS\System32\x264vfw.dll
[2006/05/07 20:55:05 | 000,001,755 | —- | C] () – C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2006/05/07 13:26:58 | 000,154,112 | —- | C] () – C:\WINDOWS\System32\dxr.dll
[2006/05/07 13:24:54 | 000,099,840 | —- | C] () – C:\WINDOWS\System32\mkx.dll
[2006/05/07 13:24:42 | 000,051,200 | —- | C] () – C:\WINDOWS\System32\avi.dll
[2006/05/07 13:24:30 | 000,061,440 | —- | C] () – C:\WINDOWS\System32\mmfinfo.dll
[2006/05/07 13:24:16 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\mp4.dll
[2006/05/07 13:24:04 | 000,057,856 | —- | C] () – C:\WINDOWS\System32\ogm.dll
[2006/05/07 13:23:46 | 000,045,568 | —- | C] () – C:\WINDOWS\System32\mkzlib.dll
[2006/05/07 13:23:42 | 000,023,552 | —- | C] () – C:\WINDOWS\System32\mkunicode.dll
[2006/04/18 17:30:56 | 003,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2006/04/17 16:19:39 | 000,000,285 | —- | C] () – C:\WINDOWS\MusicEditor.INI
[2006/04/16 19:32:39 | 000,069,632 | —- | C] () – C:\WINDOWS\System32\xmltok.dll
[2006/04/16 19:32:39 | 000,036,864 | —- | C] () – C:\WINDOWS\System32\xmlparse.dll
[2006/03/21 14:13:33 | 000,012,288 | —- | C] () – C:\WINDOWS\System32\DivXWMPExtType.dll
[2006/02/22 11:21:25 | 000,053,248 | —- | C] () – C:\WINDOWS\System32\unrar.dll
[2006/02/22 11:21:25 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\unace.dll
[2005/12/30 15:18:26 | 000,139,264 | —- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2005/12/30 15:10:30 | 000,524,288 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2005/11/29 15:17:16 | 000,005,632 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll
[2005/11/29 15:14:42 | 002,675,712 | —- | C] () – C:\WINDOWS\System32\libavcodec.dll
[2005/11/29 15:11:30 | 000,371,200 | —- | C] () – C:\WINDOWS\System32\libmplayer.dll
[2005/11/29 15:10:46 | 000,217,088 | —- | C] () – C:\WINDOWS\System32\ff_kernelDeint.dll
[2005/11/29 15:10:10 | 000,118,784 | —- | C] () – C:\WINDOWS\System32\libmpeg2_ff.dll
[2005/11/29 15:10:06 | 000,512,000 | —- | C] () – C:\WINDOWS\System32\ff_x264.dll
[2005/11/29 15:09:54 | 000,143,360 | —- | C] () – C:\WINDOWS\System32\ff_realaac.dll
[2005/11/29 15:09:50 | 000,200,704 | —- | C] () – C:\WINDOWS\System32\TomsMoComp_ff.dll
[2005/11/29 15:09:30 | 000,036,864 | —- | C] () – C:\WINDOWS\System32\ff_wmv9.dll
[2005/11/29 15:09:24 | 000,056,320 | —- | C] () – C:\WINDOWS\System32\ff_unrar.dll
[2005/11/29 15:09:14 | 000,200,704 | —- | C] () – C:\WINDOWS\System32\ff_theora.dll
[2005/11/29 15:09:06 | 000,131,072 | —- | C] () – C:\WINDOWS\System32\ff_samplerate.dll
[2005/11/29 15:09:04 | 000,155,648 | —- | C] () – C:\WINDOWS\System32\ff_libmad.dll
[2005/11/29 15:09:00 | 000,167,936 | —- | C] () – C:\WINDOWS\System32\ff_libdts.dll
[2005/11/29 15:09:00 | 000,053,248 | —- | C] () – C:\WINDOWS\System32\ff_liba52.dll
[2005/11/05 08:31:14 | 000,000,547 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll.manifest
[2005/09/26 04:24:38 | 000,024,064 | —- | C] () – C:\WINDOWS\System32\drivers\ATITool.sys
[2005/07/23 20:43:24 | 000,000,063 | —- | C] () – C:\WINDOWS\WININIT.INI
[2005/07/23 19:22:32 | 000,000,374 | —- | C] () – C:\WINDOWS\dreamsp.ini
[2005/07/13 10:36:48 | 000,000,100 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2005/06/12 17:55:30 | 000,000,535 | —- | C] () – C:\WINDOWS\CleaningLab.INI
[2005/06/12 17:48:59 | 000,019,968 | —- | C] () – C:\WINDOWS\System32\cpuinf32.dll
[2005/06/12 17:46:13 | 000,000,919 | —- | C] () – C:\WINDOWS\mgxoschk.ini
[2005/06/12 17:46:13 | 000,000,024 | —- | C] () – C:\WINDOWS\magix.ini
[2005/06/12 16:53:50 | 000,000,063 | —- | C] () – C:\WINDOWS\mdm.ini
[2005/05/16 04:55:24 | 000,003,972 | —- | C] () – C:\WINDOWS\System32\drivers\PciBus.sys
[2005/05/16 02:23:16 | 000,156,672 | —- | C] () – C:\WINDOWS\System32\RTLCPAPI.dll
[2005/05/16 02:03:27 | 000,000,590 | —- | C] () – C:\WINDOWS\ODBC.INI
[2005/05/06 13:57:18 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\psisdecd.dll
[2004/10/15 12:10:04 | 000,217,088 | —- | C] () – C:\WINDOWS\NVGfxOgl.dll
[2003/02/10 03:13:10 | 000,000,416 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\systmsp2pb6
[2002/05/17 17:18:30 | 000,124,928 | —- | C] () – C:\WINDOWS\System32\mp4fil32.dll
[1999/01/22 05:46:58 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\MSRTEDIT.DLL

========== LOP Check ==========

[2010/03/23 18:38:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator\Application Data\IObit
[2010/03/07 16:32:48 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator\Application Data\Opera
[2010/03/20 19:30:08 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator\Application Data\uTorrent
[2009/05/22 00:17:04 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\1Click DVD Copy
[2008/12/04 20:48:01 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Age of Empires 3
[2010/03/12 11:23:48 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Alwil Software
[2009/05/21 15:17:38 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Applications
[2009/05/21 19:38:13 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ASUS OC Profiles
[2009/08/16 09:19:54 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Broderbund
[2006/12/14 11:45:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\CA
[2006/11/16 18:30:54 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\CanonBJ
[2009/08/26 17:31:13 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Chexp
[2010/02/23 16:55:55 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Dimdim
[2008/09/18 03:38:31 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\fsribcre
[2010/03/23 18:38:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\IObit
[2009/08/26 17:30:26 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ITRI mTTS
[2009/10/19 15:51:00 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MyDefrag
[2007/06/25 15:45:08 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Nuance
[2010/03/07 18:41:00 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\OnlineArmor
[2008/09/20 15:29:25 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2009/10/03 13:17:05 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PMB Files
[2007/06/25 15:45:27 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ScanSoft
[2009/10/10 23:19:41 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SpeedBit
[2009/05/21 20:43:35 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Spiralfrog
[2010/02/25 12:14:24 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2009/09/30 22:25:15 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Transparent
[2009/06/05 22:47:38 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2009/09/16 10:25:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/05/29 20:47:49 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2010/02/23 16:55:58 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{BF03BF7A-B118-4C26-B9F7-08C12D3D06E3}
[2010/02/09 12:09:02 | 000,000,306 | —- | M] () – C:\WINDOWS\Tasks\expressburnSevenDays.job
[2010/02/09 12:09:02 | 000,000,312 | —- | M] () – C:\WINDOWS\Tasks\expressburnSevenDaysInit.job
[2010/03/23 01:48:00 | 000,000,330 | -H– | M] () – C:\WINDOWS\Tasks\MP Scheduled Scan.job
[2010/03/24 18:00:00 | 000,000,454 | —- | M] () – C:\WINDOWS\Tasks\next.job
[2010/02/09 12:08:46 | 000,000,288 | —- | M] () – C:\WINDOWS\Tasks\videopadSevenDays.job
[2010/02/09 12:08:45 | 000,000,288 | —- | M] () – C:\WINDOWS\Tasks\videopadShakeIcon.job

========== Purity Check ==========



========== Files - Unicode (All) ==========
[2009/11/03 12:15:34 | 000,000,000 | —D | M](C:\Documents and Settings\All Users\Desktop\Adobe 9 Reader ????) – C:\Documents and Settings\All Users\Desktop\Adobe 9 Reader 安装程序
[2009/11/03 12:15:25 | 000,000,000 | —D | C](C:\Documents and Settings\All Users\Desktop\Adobe 9 Reader ????) – C:\Documents and Settings\All Users\Desktop\Adobe 9 Reader 安装程序

========== Alternate Data Streams ==========

@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AC6124CA
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0F8F5844
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C97C8631
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C176AF6C
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
< End of report >
Post #44
Checking out Normal mode functionality. 1.When I pressed the Restart button to get out of safe mode, nothing happened. 2. I used the reset button to reboot in normal mode. 3. Normal mode opened. 4.Tried to open Control Panerl/User Accounts and got the "windows cannot access… " error 5. Same error with avast setup exe 6. same error with start/run/ 7. start/search has no text So, so change in functionality yet. Turning it off. will be on laptop till next set of instructions. Cheers. JP
Post #45
Hello!

Please hold off on reinstalling avast.

Questions:
I'm seeing some remedies of a Symantec product being installed on your computer. Your not still using this product are you?



NEXT:



OTL Fix
Run OTL.exe
  • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

    :Services
:OTL
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2…78f/wvc1dmo.cab (Reg Error: Value error.)
O16 - DPF: {33564D57-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/D/0…D0C/wmv9dmo.cab (Reg Error: Value error.)
O18 - Protocol\Handler\cf - No CLSID value found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (autocheck autocheck lsdelete) - File not found
O34 - HKLM BootExecute: (OODBS) - File not found
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
[2009/08/26 17:31:10 | 000,000,039 | —- | C] () – C:\WINDOWS\System32\PCE_TRIAL_VERSIONs.sys
[2009/08/16 14:23:44 | 000,000,080 | RHS- | C] () – C:\WINDOWS\System32\870508C509.dll
[2009/07/31 00:10:14 | 000,000,991 | —- | C] () – C:\Program Files\GH3D.txt
[2009/06/13 19:43:52 | 000,000,091 | —- | C] () – C:\WINDOWS\System32\avalokitesvara2.ini
[2009/06/13 19:42:52 | 000,000,091 | —- | C] () – C:\WINDOWS\System32\quanyin waterfall.ini
[2009/06/13 19:22:32 | 000,000,091 | —- | C] () – C:\WINDOWS\System32\krishna_flute.ini
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AC6124CA
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0F8F5844
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C97C8631
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C176AF6C
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
:Commands
[emptytemp]
[EMPTYFLASH]
[start explorer]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot when it is done

NEXT:



GooredFix
Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2
  • Ensure all Firefox windows are closed.
  • To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
  • When prompted to run the scan, click Yes.
  • GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).

NEXT:




Extract the file and run it.

Once completed it will create a log in your C:\ drive called TDSSKiller_* (* denotes version & date)

Please post the content of that log TDSSKiller.



NEXT:



OTL Custom Scan
  • Double click on the OTL icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Check the boxes beside LOP Check and Purity Check.
  • Under Custom Scan paste this in


    C:\nicnpjnp /s
    C:\Documents and Settings\All Users\Application Data\fsribcre /s
    C:\Documents and Settings\All Users\Application Data\ITRI mTTS /s

  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
  • You may need two posts to fit them both in.

NEXT:



Please make sure you include the following items in your next post:

1. Any comments or questions you may have that you'd like for me to answer in my next post to you.
2. An answer to my question posed to you under the Question section.
3. The log that was produced after running the OTL fix.
4. The log that was produced after running the GooredFix scan. (GooredFix.txt)
5. The log that was produced after running the TDSSKiller scan.
6. The log that was produced after running the OTL scan.
7. An update on how your computer is currently running.

It would be helpful if you could answer each question in the order asked, as well as numbering your answers.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI