[Resolved] Adware HBHelper / Browser Hijacker Desktop

Goored and TDSSKiller logs. Will now runOTL GooredFix by jpshortstuff (08.01.10.1) Log created at 18:20 on 25/03/2010 (Administrator) Firefox version 3.6 (en-US) ========== GooredScan ========== ========== GooredLog ========== C:\Program Files\Mozilla Firefox\extensions\ [removed] [00:25 27/08/2009] {972ce4c6-7e08-4474-a285-3208198ce6fd} [01:26 08/05/2005] {AB2CE124-6272-4b12-94A9-7303C7397BD1} [22:10 14/03/2010] {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} [21:21 02/07/2008] {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} [01:51 11/12/2008] {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} [22:57 29/07/2009] {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} [19:04 12/03/2010] C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\bo4nnl5q.default\extensions\ {20a82645-c095-46ed-80e3-08825760534b} [22:27 07/03/2010] {635abd67-4fe9-1b23-4f01-e679fa7484c1} [22:21 07/03/2010] [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "[removed]"="C:\Program Files\Java\jre6\lib\deploy\jqs\ff" [22:57 29/07/2009] "{20a82645-c095-46ed-80e3-08825760534b}"="C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\" [06:01 22/08/2009] "{0329E7D6-6F54-462D-93F6-F5C3118BADF2}"="C:\Program Files\SpeedBit Video Downloader\SPFireFox" [04:19 11/10/2009] -=E.O.F=- =========================== 18:21:24:328 1820 TDSS rootkit removing tool 2.2.8.1 Mar 22 2010 10:43:04 18:21:24:328 1820 ================================================================================ 18:21:24:328 1820 SystemInfo: 18:21:24:328 1820 OS Version: 5.1.2600 ServicePack: 3.0 18:21:24:328 1820 Product type: Workstation 18:21:24:328 1820 ComputerName: JPRIG 18:21:24:328 1820 UserName: Administrator 18:21:24:328 1820 Windows directory: C:\WINDOWS 18:21:24:328 1820 Processor architecture: Intel x86 18:21:24:328 1820 Number of processors: 3 18:21:24:328 1820 Page size: 0x1000 18:21:24:328 1820 Boot type: Safe boot with network 18:21:24:328 1820 ================================================================================ 18:21:24:328 1820 UnloadDriverW: NtUnloadDriver error 2 18:21:24:328 1820 ForceUnloadDriverW: UnloadDriverW(klmd21) error 2 18:21:24:343 1820 wfopen_ex: Trying to open file C:\WINDOWS\system32\config\system 18:21:24:343 1820 wfopen_ex: MyNtCreateFileW error 32 (C0000043) 18:21:24:343 1820 wfopen_ex: Trying to KLMD file open 18:21:24:343 1820 wfopen_ex: File opened ok (Flags 2) 18:21:24:343 1820 wfopen_ex: Trying to open file C:\WINDOWS\system32\config\software 18:21:24:343 1820 wfopen_ex: MyNtCreateFileW error 32 (C0000043) 18:21:24:343 1820 wfopen_ex: Trying to KLMD file open 18:21:24:343 1820 wfopen_ex: File opened ok (Flags 2) 18:21:24:343 1820 Initialize success 18:21:24:343 1820 18:21:24:343 1820 Scanning Services … 18:21:29:062 1820 Raw services enum returned 425 services 18:21:29:078 1820 18:21:29:078 1820 Scanning Kernel memory … 18:21:29:078 1820 Devices to scan: 4 18:21:29:078 1820 18:21:29:078 1820 Driver Name: Disk 18:21:29:078 1820 IRP_MJ_CREATE : F765DBB0 18:21:29:078 1820 IRP_MJ_CREATE_NAMED_PIPE : 804F9759 18:21:29:078 1820 IRP_MJ_CLOSE : F765DBB0 18:21:29:078 1820 IRP_MJ_READ : F7657D1F 18:21:29:078 1820 IRP_MJ_WRITE : F7657D1F 18:21:29:078 1820 IRP_MJ_QUERY_INFORMATION : 804F9759 18:21:29:078 1820 IRP_MJ_SET_INFORMATION : 804F9759 18:21:29:078 1820 IRP_MJ_QUERY_EA : 804F9759 18:21:29:078 1820 IRP_MJ_SET_EA : 804F9759 18:21:29:078 1820 IRP_MJ_FLUSH_BUFFERS : F76582E2 18:21:29:078 1820 IRP_MJ_QUERY_VOLUME_INFORMATION : 804F9759 18:21:29:078 1820 IRP_MJ_SET_VOLUME_INFORMATION : 804F9759 18:21:29:078 1820 IRP_MJ_DIRECTORY_CONTROL : 804F9759 18:21:29:078 1820 IRP_MJ_FILE_SYSTEM_CONTROL : 804F9759 18:21:29:078 1820 IRP_MJ_DEVICE_CONTROL : F76583BB 18:21:29:078 1820 IRP_MJ_INTERNAL_DEVICE_CONTROL : F765BF28 18:21:29:078 1820 IRP_MJ_SHUTDOWN : F76582E2 18:21:29:078 1820 IRP_MJ_LOCK_CONTROL : 804F9759 18:21:29:078 1820 IRP_MJ_CLEANUP : 804F9759 18:21:29:078 1820 IRP_MJ_CREATE_MAILSLOT : 804F9759 18:21:29:078 1820 IRP_MJ_QUERY_SECURITY : 804F9759 18:21:29:078 1820 IRP_MJ_SET_SECURITY : 804F9759 18:21:29:078 1820 IRP_MJ_POWER : F7659C82 18:21:29:078 1820 IRP_MJ_SYSTEM_CONTROL : F765E99E 18:21:29:078 1820 IRP_MJ_DEVICE_CHANGE : 804F9759 18:21:29:078 1820 IRP_MJ_QUERY_QUOTA : 804F9759 18:21:29:078 1820 IRP_MJ_SET_QUOTA : 804F9759 18:21:29:109 1820 C:\WINDOWS\system32\DRIVERS\disk.sys - Verdict: 1 18:21:29:109 1820 18:21:29:109 1820 Driver Name: Disk 18:21:29:109 1820 IRP_MJ_CREATE : F765DBB0 18:21:29:109 1820 IRP_MJ_CREATE_NAMED_PIPE : 804F9759 18:21:29:109 1820 IRP_MJ_CLOSE : F765DBB0 18:21:29:109 1820 IRP_MJ_READ : F7657D1F 18:21:29:109 1820 IRP_MJ_WRITE : F7657D1F 18:21:29:109 1820 IRP_MJ_QUERY_INFORMATION : 804F9759 18:21:29:109 1820 IRP_MJ_SET_INFORMATION : 804F9759 18:21:29:109 1820 IRP_MJ_QUERY_EA : 804F9759 18:21:29:109 1820 IRP_MJ_SET_EA : 804F9759 18:21:29:109 1820 IRP_MJ_FLUSH_BUFFERS : F76582E2 18:21:29:109 1820 IRP_MJ_QUERY_VOLUME_INFORMATION : 804F9759 18:21:29:109 1820 IRP_MJ_SET_VOLUME_INFORMATION : 804F9759 18:21:29:109 1820 IRP_MJ_DIRECTORY_CONTROL : 804F9759 18:21:29:109 1820 IRP_MJ_FILE_SYSTEM_CONTROL : 804F9759 18:21:29:109 1820 IRP_MJ_DEVICE_CONTROL : F76583BB 18:21:29:109 1820 IRP_MJ_INTERNAL_DEVICE_CONTROL : F765BF28 18:21:29:109 1820 IRP_MJ_SHUTDOWN : F76582E2 18:21:29:109 1820 IRP_MJ_LOCK_CONTROL : 804F9759 18:21:29:109 1820 IRP_MJ_CLEANUP : 804F9759 18:21:29:109 1820 IRP_MJ_CREATE_MAILSLOT : 804F9759 18:21:29:109 1820 IRP_MJ_QUERY_SECURITY : 804F9759 18:21:29:109 1820 IRP_MJ_SET_SECURITY : 804F9759 18:21:29:109 1820 IRP_MJ_POWER : F7659C82 18:21:29:109 1820 IRP_MJ_SYSTEM_CONTROL : F765E99E 18:21:29:109 1820 IRP_MJ_DEVICE_CHANGE : 804F9759 18:21:29:109 1820 IRP_MJ_QUERY_QUOTA : 804F9759 18:21:29:109 1820 IRP_MJ_SET_QUOTA : 804F9759 18:21:29:109 1820 C:\WINDOWS\system32\DRIVERS\disk.sys - Verdict: 1 18:21:29:109 1820 18:21:29:109 1820 Driver Name: atapi 18:21:29:109 1820 IRP_MJ_CREATE : F74A46F2 18:21:29:109 1820 IRP_MJ_CREATE_NAMED_PIPE : 804F9759 18:21:29:109 1820 IRP_MJ_CLOSE : F74A46F2 18:21:29:109 1820 IRP_MJ_READ : 804F9759 18:21:29:109 1820 IRP_MJ_WRITE : 804F9759 18:21:29:109 1820 IRP_MJ_QUERY_INFORMATION : 804F9759 18:21:29:109 1820 IRP_MJ_SET_INFORMATION : 804F9759 18:21:29:109 1820 IRP_MJ_QUERY_EA : 804F9759 18:21:29:109 1820 IRP_MJ_SET_EA : 804F9759 18:21:29:109 1820 IRP_MJ_FLUSH_BUFFERS : 804F9759 18:21:29:109 1820 IRP_MJ_QUERY_VOLUME_INFORMATION : 804F9759 18:21:29:109 1820 IRP_MJ_SET_VOLUME_INFORMATION : 804F9759 18:21:29:109 1820 IRP_MJ_DIRECTORY_CONTROL : 804F9759 18:21:29:109 1820 IRP_MJ_FILE_SYSTEM_CONTROL : 804F9759 18:21:29:109 1820 IRP_MJ_DEVICE_CONTROL : F74A4712 18:21:29:109 1820 IRP_MJ_INTERNAL_DEVICE_CONTROL : F74A0852 18:21:29:109 1820 IRP_MJ_SHUTDOWN : 804F9759 18:21:29:109 1820 IRP_MJ_LOCK_CONTROL : 804F9759 18:21:29:109 1820 IRP_MJ_CLEANUP : 804F9759 18:21:29:109 1820 IRP_MJ_CREATE_MAILSLOT : 804F9759 18:21:29:109 1820 IRP_MJ_QUERY_SECURITY : 804F9759 18:21:29:109 1820 IRP_MJ_SET_SECURITY : 804F9759 18:21:29:109 1820 IRP_MJ_POWER : F74A473C 18:21:29:109 1820 IRP_MJ_SYSTEM_CONTROL : F74AB336 18:21:29:109 1820 IRP_MJ_DEVICE_CHANGE : 804F9759 18:21:29:109 1820 IRP_MJ_QUERY_QUOTA : 804F9759 18:21:29:109 1820 IRP_MJ_SET_QUOTA : 804F9759 18:21:29:125 1820 C:\WINDOWS\system32\DRIVERS\atapi.sys - Verdict: 1 18:21:29:125 1820 18:21:29:125 1820 Driver Name: atapi 18:21:29:125 1820 IRP_MJ_CREATE : F74A46F2 18:21:29:125 1820 IRP_MJ_CREATE_NAMED_PIPE : 804F9759 18:21:29:125 1820 IRP_MJ_CLOSE : F74A46F2 18:21:29:125 1820 IRP_MJ_READ : 804F9759 18:21:29:125 1820 IRP_MJ_WRITE : 804F9759 18:21:29:125 1820 IRP_MJ_QUERY_INFORMATION : 804F9759 18:21:29:125 1820 IRP_MJ_SET_INFORMATION : 804F9759 18:21:29:125 1820 IRP_MJ_QUERY_EA : 804F9759 18:21:29:125 1820 IRP_MJ_SET_EA : 804F9759 18:21:29:125 1820 IRP_MJ_FLUSH_BUFFERS : 804F9759 18:21:29:125 1820 IRP_MJ_QUERY_VOLUME_INFORMATION : 804F9759 18:21:29:125 1820 IRP_MJ_SET_VOLUME_INFORMATION : 804F9759 18:21:29:125 1820 IRP_MJ_DIRECTORY_CONTROL : 804F9759 18:21:29:125 1820 IRP_MJ_FILE_SYSTEM_CONTROL : 804F9759 18:21:29:125 1820 IRP_MJ_DEVICE_CONTROL : F74A4712 18:21:29:125 1820 IRP_MJ_INTERNAL_DEVICE_CONTROL : F74A0852 18:21:29:125 1820 IRP_MJ_SHUTDOWN : 804F9759 18:21:29:125 1820 IRP_MJ_LOCK_CONTROL : 804F9759 18:21:29:125 1820 IRP_MJ_CLEANUP : 804F9759 18:21:29:125 1820 IRP_MJ_CREATE_MAILSLOT : 804F9759 18:21:29:125 1820 IRP_MJ_QUERY_SECURITY : 804F9759 18:21:29:125 1820 IRP_MJ_SET_SECURITY : 804F9759 18:21:29:125 1820 IRP_MJ_POWER : F74A473C 18:21:29:125 1820 IRP_MJ_SYSTEM_CONTROL : F74AB336 18:21:29:125 1820 IRP_MJ_DEVICE_CHANGE : 804F9759 18:21:29:125 1820 IRP_MJ_QUERY_QUOTA : 804F9759 18:21:29:125 1820 IRP_MJ_SET_QUOTA : 804F9759 18:21:29:125 1820 C:\WINDOWS\system32\DRIVERS\atapi.sys - Verdict: 1 18:21:29:125 1820 18:21:29:125 1820 Completed 18:21:29:125 1820 18:21:29:125 1820 Results: 18:21:29:125 1820 Memory objects infected / cured / cured on reboot: 0 / 0 / 0 18:21:29:125 1820 Registry objects infected / cured / cured on reboot: 0 / 0 / 0 18:21:29:125 1820 File objects infected / cured / cured on reboot: 0 / 0 / 0 18:21:29:125 1820 18:21:29:125 1820 fclose_ex: Trying to close file C:\WINDOWS\system32\config\system 18:21:29:125 1820 fclose_ex: Trying to close file C:\WINDOWS\system32\config\software 18:21:29:140 1820 KLMD(ARK) unloaded successfully

OTL Log. This time there was no Extras.txt generated. ?I did a Start/Search: no Extras.txt. Settings for OTL were as specified by you.
Here is the OTL.txt that popped. (twice actually)

Questions:
1. Not a question, but I will be out of pocket pretty much all day tomorrow. Will check in in the late afternoon.
2. Haven't uset Symantec for years.
3. OTL log for fix was not generated
4.Goored log in previous post
5. TDSKillerelog also in previous post
6. OTL scan log below. No extras generated.
I will look for the missing OTL log after posting this.
Cheers. This is like a major guild run. Thanks for your unflinching help.
JPS

OTL logfile created on: 3/25/2010 6:32:25 PM - Run 2
OTL by OldTimer - Version 3.1.37.3 Folder = C:\Documents and Settings\Administrator\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 90.00% Memory free
5.00 Gb Paging File | 5.00 Gb Available in Paging File | 98.00% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.52 Gb Total Space | 15.07 Gb Free Space | 20.22% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 74.52 Gb Total Space | 48.87 Gb Free Space | 65.58% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: JPRIG
Current User Name: Administrator
Logged in as Administrator.

Current Boot Mode: SafeMode with Networking
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Administrator\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Administrator\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msacm32.dll (Microsoft Corporation)
MOD - C:\WINDOWS\AppPatch\acgenral.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (SoundMovieServer) – File not found
SRV - (avast! Web Scanner) – File not found
SRV - (avast! Mail Scanner) – File not found
SRV - (avast! Antivirus) – File not found
SRV - (aswUpdSv) – File not found
SRV - (VideoAcceleratorService) – C:\Program Files\SpeedBit Video Accelerator\VideoAcceleratorService.exe (Speedbit Ltd.)
SRV - (BroadCamService) – C:\Program Files\NCH Software\BroadCam\broadcam.exe (NCH Software)
SRV - (SvcOnlineArmor) – C:\Program Files\Tall Emu\Online Armor\oasrv.exe (Tall Emu)
SRV - (OAcat) – C:\Program Files\Tall Emu\Online Armor\OAcat.exe (Tall Emu)
SRV - (TekSIP) – E:\Program Files\TekSIP\TekSIP.exe (Yasin KAPLAN)
SRV - (DvmMDES) – C:\ASUS.SYS\config\DVMExportService.exe (DeviceVM)
SRV - (AODService) – C:\Program Files\AMD\OverDrive\AODAssist.exe ()
SRV - (AMD_RAIDXpert) – C:\Program Files\AMD\RAIDXpert\bin\RAIDXpertService.exe (AMD)
SRV - (AsSysCtrlService) – C:\Program Files\ASUS\AsSysCtrlService\1.00.00\AsSysCtrlService.exe ()
SRV - (WinDefend) – C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\HPZipm12.exe (HP)


========== Driver Services (SafeList) ==========

DRV - (aswTdi) – C:\WINDOWS\system32\drivers\aswTdi.sys (ALWIL Software)
DRV - (aswSP) – C:\WINDOWS\system32\drivers\aswSP.sys (ALWIL Software)
DRV - (aswRdr) – C:\WINDOWS\system32\drivers\aswRdr.sys (ALWIL Software)
DRV - (aswMon2) – C:\WINDOWS\system32\drivers\aswmon2.sys (ALWIL Software)
DRV - (aswFsBlk) – C:\WINDOWS\system32\drivers\aswFsBlk.sys (ALWIL Software)
DRV - (Aavmker4) – C:\WINDOWS\system32\drivers\aavmker4.sys (ALWIL Software)
DRV - (OAmon) – C:\WINDOWS\system32\drivers\OAmon.sys (Tall Emu)
DRV - (OAnet) – C:\WINDOWS\system32\drivers\OAnet.sys (Tall Emu Pty Ltd)
DRV - (OADevice) – C:\WINDOWS\system32\drivers\OADriver.sys (Tall Emu)
DRV - (L1e) – C:\WINDOWS\system32\drivers\l1e51x86.sys (Atheros Communications, Inc.)
DRV - (NuidFltr) – C:\WINDOWS\system32\drivers\nuidfltr.sys (Microsoft Corporation)
DRV - (cpuz132) – C:\WINDOWS\system32\drivers\cpuz132_x32.sys (Windows ® Codename Longhorn DDK provider)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (ZSMC30x) – C:\WINDOWS\system32\drivers\ZS211.sys (ZSMC.Corporation)
DRV - (vvftav211) – C:\WINDOWS\system32\drivers\vvftav211.sys (Vimicro Corporation)
DRV - (VIAHdAudAddService) – C:\WINDOWS\system32\drivers\viahduaa.sys (VIA Technologies, Inc.)
DRV - (dvd43llh) – C:\WINDOWS\system32\drivers\dvd43llh.sys (RIF)
DRV - (MovRVDrv32) – C:\WINDOWS\system32\drivers\MovRVDrv32.sys (Windows ® 2000 DDK provider)
DRV - (SndTDriverV32) – C:\WINDOWS\system32\drivers\SndTDriverV32.sys (Windows ® 2000/XP)
DRV - (SASENUM) – E:\program files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) – E:\program files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASDIFSV) – E:\program files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (MovPDrv32) – C:\WINDOWS\system32\drivers\MovPDrv32.sys (Windows ® 2000/XP)
DRV - (gameenum) – C:\WINDOWS\system32\drivers\gameenum.sys (Microsoft Corporation)
DRV - (usbaudio) USB Audio Driver (WDM) – C:\WINDOWS\system32\drivers\usbaudio.sys (Microsoft Corporation)
DRV - (HDAudBus) – C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider)
DRV - (monfilt) – C:\WINDOWS\system32\drivers\monfilt.sys (Creative Technology Ltd.)
DRV - (AsIO) – C:\WINDOWS\system32\drivers\AsIO.sys ()
DRV - (nxsIO32) – C:\WINDOWS\system32\drivers\nxsIO32.sys ()
DRV - (LMouFilt) – C:\WINDOWS\system32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) – C:\WINDOWS\system32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (L8042Kbd) – C:\WINDOWS\system32\drivers\L8042Kbd.sys (Logitech Inc.)
DRV - (SaiNtBus) – C:\WINDOWS\system32\drivers\SaiBus.sys (Saitek)
DRV - (SaiMini) – C:\WINDOWS\system32\drivers\SaiMini.sys (Saitek)
DRV - (SaiU0004) – C:\WINDOWS\system32\drivers\SaiU0004.sys (Saitek)
DRV - (SaiH0004) – C:\WINDOWS\system32\drivers\SaiH0004.sys (Saitek)
DRV - (SaiL0004) – C:\WINDOWS\system32\drivers\SaiL0004.sys (Saitek)
DRV - (Alpham) – C:\WINDOWS\system32\drivers\Alpham.sys (Ideazon Corporation)
DRV - (dfmirage) – C:\WINDOWS\system32\drivers\dfmirage.sys (DemoForge, LLC)
DRV - (NCPro) – C:\WINDOWS\system32\drivers\MTictwl.sys ()
DRV - (MagicTune) – C:\WINDOWS\system32\drivers\MTictwl.sys ()
DRV - (ATITool) – C:\WINDOWS\system32\drivers\ATITool.sys ()
DRV - (nvnforce) Service for NVIDIA® nForce™ – C:\WINDOWS\system32\drivers\nvapu.sys (NVIDIA Corporation)
DRV - (nvax) Service for NVIDIA® nForce™ – C:\WINDOWS\system32\drivers\nvax.sys (NVIDIA Corporation)
DRV - (P0630VID) – C:\WINDOWS\system32\drivers\P0630Vid.sys (Creative Technology Ltd.)
DRV - (BANTExt) – C:\WINDOWS\System32\Drivers\BANTExt.sys ()
DRV - (nvatabus) – C:\WINDOWS\System32\DRIVERS\nvatabus.sys (NVIDIA Corporation)
DRV - (nvnetbus) – C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (NVENETFD) – C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) – C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (ULCDRHlp) – C:\WINDOWS\system32\drivers\ULCDRHlp.sys (Ulead Systems, Inc.)
DRV - (MTsensor) – C:\WINDOWS\system32\drivers\ASACPI.sys ()
DRV - (es1371) Creative AudioPCI (ES1371,ES1373) (WDM) – C:\WINDOWS\system32\drivers\es1371mp.sys (Creative Technology Ltd.)
DRV - (Sentinel) – C:\WINDOWS\System32\Drivers\SENTINEL.SYS (Rainbow Technologies, Inc.)
DRV - (Sntnlusb) – C:\WINDOWS\system32\drivers\SNTNLUSB.SYS (Rainbow Technologies Inc.)
DRV - (DS1410D) – C:\WINDOWS\system32\drivers\ds1410d.sys ()
DRV - (sbpci) SB AudioPCI Audio Driver (WDM) – C:\WINDOWS\system32\drivers\sbpci.sys (Creative Technology Ltd.)
DRV - (PfModNT) – C:\WINDOWS\system32\PfModNT.sys (Creative Technology Ltd.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {0329E7D6-6F54-462D-93F6-F5C3118BADF2}:2.1.5
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.5.4.20081105
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..keyword.URL: "http://www.ask.com/web?o=13796&l=dis&q="


FF - HKLM\software\mozilla\Firefox\Extensions\\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}: C:\Program Files\SpeedBit Video Downloader\SPFireFox [2010/02/24 09:39:39 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Flock 2.5.5\extensions\\Components: C:\Program Files\Flock\components [2010/02/25 14:25:12 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Flock 2.5.5\extensions\\Plugins: C:\Program Files\Flock\plugins [2010/02/25 14:25:17 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/03/21 21:26:48 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/03/07 17:31:39 | 000,000,000 | —D | M]

[2008/09/17 15:34:57 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator\Application Data\Mozilla\Extensions
[2010/03/24 15:10:20 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\bo4nnl5q.default\extensions
[2010/03/07 17:27:56 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\bo4nnl5q.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/03/07 17:28:03 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\bo4nnl5q.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010/03/25 11:05:26 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
[2010/03/14 17:10:48 | 000,000,000 | —D | M] (Skype extension for Firefox) – C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010/03/07 17:28:02 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2008/01/23 01:20:30 | 000,491,520 | —- | M] (BitComet) – C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[2008/07/16 23:36:16 | 000,204,800 | —- | M] (Dimdim Inc.) – C:\Program Files\Mozilla Firefox\plugins\npDimdimControl.dll
[2009/10/03 13:15:57 | 000,238,776 | —- | M] (Pando Networks) – C:\Program Files\Mozilla Firefox\plugins\npPandoWebInst.dll
[2008/03/12 15:04:10 | 000,086,016 | —- | M] (SpiralFrog Inc.) – C:\Program Files\Mozilla Firefox\plugins\NPSFDMGR.dll

O1 HOSTS File: ([2010/03/21 16:22:34 | 000,348,846 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 11960 more lines…
O2 - BHO: (Freecorder Toolbar) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll (Conduit Ltd.)
O2 - BHO: (Solid Converter PDF) - {259F616C-A300-44F5-B04A-ED001A26C85C} - E:\program files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll (VoyagerSoft, LLC)
O2 - BHO: (EWPBrowseObject Class) - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll ()
O2 - BHO: (ChromeFrame BHO) - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files\Google\Chrome Frame\Application\5.0.342.0\npchrome_frame.dll (@COMPANY_FULLNAME@)
O2 - BHO: (GrabberObj Class) - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\SpeedBit Video Downloader\Toolbar\Grabber.dll (Speedbit Ltd.)
O3 - HKLM\..\Toolbar: (Freecorder Toolbar) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFre1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Solid Converter PDF) - {259F616C-A300-44F5-B04A-ED001A26C85C} - E:\program files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll (VoyagerSoft, LLC)
O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O4 - HKLM..\Run: [Ai Nap] C:\Program Files\ASUS\AI Suite\Q-Button\QButton.exe ()
O4 - HKLM..\Run: [Domino] C:\WINDOWS\Domino.exe ()
O4 - HKLM..\Run: [dvd43] C:\Program Files\dvd43\DVD43_Tray.exe ()
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe ()
O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [QFan Help] C:\Program Files\ASUS\AI Suite\QFan3\QFanHelp.exe ()
O4 - HKLM..\Run: [ZSSnp211] C:\WINDOWS\ZSSnp211.exe (ZSMCSNAP)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - E:\program files\Evernote\Evernote3.5\enbar.dll (Evernote Corporation)
O9 - Extra 'Tools' menuitem : Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - E:\program files\Evernote\Evernote3.5\enbar.dll (Evernote Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\SpeedBit Video Accelerator\sblsp.dll (Speedbit Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\SpeedBit Video Accelerator\sblsp.dll (Speedbit Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\SpeedBit Video Accelerator\sblsp.dll (Speedbit Ltd.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/3/9…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {19E28AFC-EAE3-4CE5-AC83-2407B42F57C9} http://protect.microsoft.com/security/prot…b?1116220378452 (MSSecurityAdvisor Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdat…b?1221690851234 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_01)
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)
O18 - Protocol\Handler\gcf {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files\Google\Chrome Frame\Application\5.0.342.0\npchrome_frame.dll (@COMPANY_FULLNAME@)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {4F07DA45-8170-4859-9B5F-037EF2970034} - C:\Program Files\Tall Emu\Online Armor\oaevent.dll (Tall Emu)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - E:\program files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/05/06 13:47:37 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/03/25 18:21:04 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Desktop\tdsskiller
[2010/03/25 18:20:13 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Desktop\GooredFix Backups
[2010/03/25 18:18:18 | 000,070,858 | —- | C] (jpshortstuff) – C:\Documents and Settings\Administrator\Desktop\GooredFix.exe
[2010/03/25 18:14:28 | 000,000,000 | —D | C] – C:\_OTL
[2010/03/25 14:00:23 | 000,555,520 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Administrator\Desktop\OTL.exe
[2010/03/25 13:14:55 | 000,000,000 | R–D | C] – C:\Documents and Settings\Administrator\My Documents\My Pictures
[2010/03/25 13:14:55 | 000,000,000 | R–D | C] – C:\Documents and Settings\Administrator\My Documents\My Music
[2010/03/25 13:07:23 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2010/03/25 13:03:46 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Desktop\Dial-a-fix-v0.60.0.24
[2010/03/24 18:59:48 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2010/03/24 18:37:12 | 000,000,000 | —D | C] – C:\WINDOWS\temp
[2010/03/24 18:29:36 | 000,000,000 | —D | C] – C:\nicnpjnp
[2010/03/23 19:23:11 | 000,000,000 | RHSD | C] – C:\cmdcons
[2010/03/23 19:22:03 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2010/03/23 19:22:03 | 000,161,792 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2010/03/23 19:22:03 | 000,136,704 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2010/03/23 19:22:03 | 000,031,232 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2010/03/23 19:21:26 | 000,000,000 | —D | C] – C:\Qoobox
[2010/03/22 17:07:41 | 000,000,000 | —D | C] – C:\Program Files\Trend Micro
[2010/03/22 15:34:34 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010/03/20 21:54:34 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\SUPERAntiSpyware.com
[2010/03/20 19:26:07 | 000,000,000 | —D | C] – C:\Program Files\uTorrent
[2010/03/20 19:24:54 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\uTorrent
[2010/03/18 15:35:13 | 000,000,000 | —D | C] – C:\Program Files\GiPo@Utilities
[2010/03/18 15:35:13 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Gibinsoft Shared
[2010/03/14 17:10:37 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Skype
[2010/03/12 18:38:05 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/03/12 14:06:55 | 000,000,000 | —D | C] – C:\Program Files\Microsoft
[2010/03/12 14:06:45 | 000,000,000 | —D | C] – C:\Program Files\MSN Toolbar
[2010/03/12 14:06:32 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010/03/12 14:05:46 | 000,000,000 | —D | C] – C:\Program Files\MSN Toolbar Installer
[2010/03/12 14:05:00 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Sun
[2010/03/12 14:04:03 | 000,153,376 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2010/03/12 14:04:03 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2010/03/12 14:04:03 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2010/03/12 11:23:48 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Alwil Software
[2010/03/10 11:17:51 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2010/03/07 18:10:09 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\OnlineArmor
[2010/03/07 18:09:48 | 000,223,312 | —- | C] (Tall Emu) – C:\WINDOWS\System32\drivers\OADriver.sys
[2010/03/07 18:09:48 | 000,029,776 | —- | C] (Tall Emu Pty Ltd) – C:\WINDOWS\System32\drivers\OAnet.sys
[2010/03/07 18:09:48 | 000,024,656 | —- | C] (Tall Emu) – C:\WINDOWS\System32\drivers\OAmon.sys
[2010/03/07 18:09:47 | 000,000,000 | —D | C] – C:\Program Files\Tall Emu
[2010/03/07 17:34:29 | 000,000,000 | —D | C] – C:\WINDOWS\ERDNT
[2010/03/07 17:33:50 | 000,000,000 | —D | C] – C:\Program Files\ERUNT
[2010/03/07 17:28:44 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\My Documents\Downloads
[2010/03/07 17:23:11 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\IObit
[2010/03/07 17:22:06 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Administrator\Recent
[2010/03/07 17:12:57 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\Macromedia
[2010/03/07 16:57:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Local Settings\Application Data\Identities
[2010/03/07 16:57:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\Identities
[2010/03/07 16:40:03 | 000,401,720 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\Administrator\Desktop\HijackThis.exe
[2010/03/07 16:38:44 | 000,401,720 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\Administrator\My Documents\HijackThis.exe
[2010/03/07 16:33:36 | 009,758,152 | —- | C] (Microsoft Corporation) – C:\Documents and Settings\Administrator\My Documents\windows-kb890830-v3.4.exe
[2010/03/07 16:32:49 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Local Settings\Application Data\Opera
[2010/03/07 16:32:48 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\Opera
[2010/03/07 11:09:10 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator\Application Data\Malwarebytes
[2010/03/02 09:49:48 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\hidserv.dll
[2010/02/25 12:12:09 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Apple Computer
[2010/02/25 12:11:57 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Application Data\Apple Computer
[2010/02/23 18:44:30 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Real
[2009/10/22 13:37:00 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2009/10/22 13:32:20 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2009/01/16 12:52:55 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Freecorder
[2008/10/08 10:55:50 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2008/09/23 12:43:00 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Application Data\Microsoft
[2008/07/29 23:13:03 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2008/07/23 15:19:17 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Adobe
[2008/07/23 15:19:02 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Application Data\Adobe
[2008/07/23 15:18:27 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Mozilla
[2008/07/23 15:18:27 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Application Data\Mozilla
[1998/12/08 13:53:54 | 000,186,368 | —- | C] (Symantec Corp., Peter Norton Computing Group) – C:\Program Files\Common Files\IRAREG.DLL
[1998/12/08 13:53:54 | 000,099,840 | —- | C] (Symantec Corp.) – C:\Program Files\Common Files\IRAABOUT.DLL
[1998/12/08 13:53:54 | 000,070,144 | —- | C] (Symantec Corp., Peter Norton Computing Group) – C:\Program Files\Common Files\IRAMDMTR.DLL
[1998/12/08 13:53:54 | 000,048,640 | —- | C] (Symantec Corp., Peter Norton Computing Group) – C:\Program Files\Common Files\IRALPTTR.DLL
[1998/12/08 13:53:54 | 000,031,744 | —- | C] (Symantec Corp., Peter Norton Computing Group) – C:\Program Files\Common Files\IRAWEBTR.DLL
[1998/12/08 13:53:54 | 000,017,920 | —- | C] (Symantec Corp.) – C:\Program Files\Common Files\IRASRIAL.DLL

========== Files - Modified Within 30 Days ==========

[2010/03/25 18:20:18 | 000,533,362 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2010/03/25 18:20:18 | 000,448,550 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010/03/25 18:20:18 | 000,074,948 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010/03/25 18:18:34 | 000,154,469 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\tdsskiller.zip
[2010/03/25 18:18:18 | 000,070,858 | —- | M] (jpshortstuff) – C:\Documents and Settings\Administrator\Desktop\GooredFix.exe
[2010/03/25 18:16:23 | 000,001,374 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/03/25 18:16:02 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/03/25 18:14:43 | 004,718,592 | —- | M] () – C:\Documents and Settings\Administrator\ntuser.dat
[2010/03/25 18:14:43 | 000,000,178 | -HS- | M] () – C:\Documents and Settings\Administrator\ntuser.ini
[2010/03/25 14:28:58 | 000,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2010/03/25 14:21:19 | 000,000,888 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/03/25 14:17:29 | 007,408,656 | -H– | M] () – C:\Documents and Settings\Administrator\Local Settings\Application Data\IconCache.db
[2010/03/25 14:00:23 | 000,555,520 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Administrator\Desktop\OTL.exe
[2010/03/25 13:23:09 | 000,293,376 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\ymzybyk7.exe
[2010/03/25 13:07:54 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2010/03/25 13:07:54 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2010/03/25 13:03:04 | 000,335,992 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\Dial-a-fix-v0.60.0.24.zip
[2010/03/25 12:53:00 | 000,000,892 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/03/25 12:52:08 | 000,000,012 | -H– | M] () – C:\WINDOWS\System32\%sdvmexp.idx
[2010/03/25 12:18:00 | 000,000,994 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2000478354-725345543-1003UA.job
[2010/03/25 11:18:00 | 000,000,942 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2000478354-725345543-1003Core.job
[2010/03/24 18:35:27 | 000,000,227 | —- | M] () – C:\WINDOWS\system.ini
[2010/03/24 18:28:39 | 003,899,286 | R— | M] () – C:\Documents and Settings\Administrator\Desktop\nicnpjnp.exe
[2010/03/24 18:00:00 | 000,000,454 | —- | M] () – C:\WINDOWS\tasks\next.job
[2010/03/24 14:40:32 | 000,001,519 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\Notepad.lnk
[2010/03/23 19:23:15 | 000,000,281 | RHS- | M] () – C:\boot.ini
[2010/03/23 13:48:16 | 2145,386,496 | —- | M] () – C:\WINDOWS\MEMORY.DMP
[2010/03/23 01:48:00 | 000,000,330 | -H– | M] () – C:\WINDOWS\tasks\MP Scheduled Scan.job
[2010/03/22 20:10:41 | 000,001,958 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Age Of Empires II - The Age Of Kings.lnk
[2010/03/22 20:10:41 | 000,001,949 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Age Of Empires II - The Conquerors.lnk
[2010/03/22 15:17:36 | 000,001,543 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\Command Prompt.lnk
[2010/03/21 16:22:34 | 000,348,846 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2010/03/20 22:25:34 | 000,059,360 | —- | M] () – C:\Documents and Settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/03/20 21:49:30 | 000,001,324 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2010/03/20 20:33:34 | 000,002,137 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/03/19 10:52:00 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/03/12 18:33:39 | 000,001,854 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2010/03/12 18:02:38 | 000,261,632 | —- | M] () – C:\WINDOWS\PEV.exe
[2010/03/12 11:24:23 | 000,001,700 | —- | M] () – C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2010/03/12 11:24:22 | 000,002,688 | —- | M] () – C:\WINDOWS\System32\config.nt
[2010/03/10 13:43:43 | 000,001,675 | —- | M] () – C:\Documents and Settings\All Users\Desktop\FileZilla Client.lnk
[2010/03/09 06:24:23 | 000,038,848 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\avastSS.scr
[2010/03/09 06:24:05 | 000,153,184 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\aswBoot.exe
[2010/03/09 06:12:54 | 000,046,672 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswTdi.sys
[2010/03/09 06:12:33 | 000,162,640 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswSP.sys
[2010/03/09 06:09:08 | 000,023,376 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswRdr.sys
[2010/03/09 06:08:41 | 000,100,432 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswmon2.sys
[2010/03/09 06:08:38 | 000,094,800 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswmon.sys
[2010/03/09 06:08:30 | 000,019,024 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010/03/09 06:08:15 | 000,028,880 | —- | M] (ALWIL Software) – C:\WINDOWS\System32\drivers\aavmker4.sys
[2010/03/07 18:10:10 | 000,095,020 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts.idx
[2010/03/07 18:01:08 | 000,001,347 | —- | M] () – C:\WINDOWS\win.ini
[2010/03/07 18:01:08 | 000,000,211 | —- | M] () – C:\Boot.bak
[2010/03/07 17:38:28 | 004,718,592 | -H– | M] () – C:\Documents and Settings\Administrator\ntuser.bak
[2010/03/07 17:33:50 | 000,000,611 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\NTREGOPT.lnk
[2010/03/07 17:33:50 | 000,000,592 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\ERUNT.lnk
[2010/03/07 17:31:42 | 000,001,602 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/03/07 17:22:59 | 000,000,682 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\Shortcut to CCleaner.lnk
[2010/03/07 17:22:37 | 000,000,406 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\cc_20100307_162230.reg
[2010/03/07 17:21:39 | 000,000,664 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\CCleaner.lnk
[2010/03/07 17:18:27 | 000,126,424 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\cc_20100307_161800.reg
[2010/03/07 16:56:58 | 000,001,297 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\WinXP_EXE_Fix.reg
[2010/03/07 16:40:03 | 000,401,720 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\Administrator\Desktop\HijackThis.exe
[2010/03/07 16:38:44 | 000,401,720 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\Administrator\My Documents\HijackThis.exe
[2010/03/07 16:33:36 | 009,758,152 | —- | M] (Microsoft Corporation) – C:\Documents and Settings\Administrator\My Documents\windows-kb890830-v3.4.exe
[2010/03/07 16:24:52 | 000,000,438 | RHS- | M] () – C:\Documents and Settings\Administrator\ntuser.pol
[2010/03/07 15:40:14 | 000,001,475 | —- | M] () – C:\Documents and Settings\Administrator\Desktop\Windows Explorer.lnk
[2010/03/02 09:49:51 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2010/02/23 18:46:29 | 000,000,100 | —- | M] () – C:\WINDOWS\cdplayer.ini

========== Files Created - No Company Name ==========

[2010/03/25 18:18:33 | 000,154,469 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\tdsskiller.zip
[2010/03/25 13:23:09 | 000,293,376 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\ymzybyk7.exe
[2010/03/25 13:03:01 | 000,335,992 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\Dial-a-fix-v0.60.0.24.zip
[2010/03/24 18:28:39 | 003,899,286 | R— | C] () – C:\Documents and Settings\Administrator\Desktop\nicnpjnp.exe
[2010/03/24 17:20:52 | 000,000,012 | -H– | C] () – C:\WINDOWS\System32\%sdvmexp.idx
[2010/03/24 14:40:32 | 000,001,519 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\Notepad.lnk
[2010/03/23 19:23:15 | 000,000,211 | —- | C] () – C:\Boot.bak
[2010/03/23 19:23:13 | 000,260,272 | —- | C] () – C:\cmldr
[2010/03/23 19:22:03 | 000,261,632 | —- | C] () – C:\WINDOWS\PEV.exe
[2010/03/23 19:22:03 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2010/03/23 19:22:03 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2010/03/23 19:22:03 | 000,077,312 | —- | C] () – C:\WINDOWS\MBR.exe
[2010/03/23 19:22:03 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2010/03/22 20:10:41 | 000,001,958 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Age Of Empires II - The Age Of Kings.lnk
[2010/03/22 20:10:41 | 000,001,949 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Age Of Empires II - The Conquerors.lnk
[2010/03/22 15:17:29 | 000,001,543 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\Command Prompt.lnk
[2010/03/12 18:38:46 | 000,002,137 | —- | C] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/03/12 11:24:23 | 000,001,700 | —- | C] () – C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2010/03/07 17:33:50 | 000,000,611 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\NTREGOPT.lnk
[2010/03/07 17:33:50 | 000,000,592 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\ERUNT.lnk
[2010/03/07 17:22:59 | 000,000,682 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\Shortcut to CCleaner.lnk
[2010/03/07 17:22:34 | 000,000,406 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\cc_20100307_162230.reg
[2010/03/07 17:21:39 | 000,000,664 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\CCleaner.lnk
[2010/03/07 17:18:16 | 000,126,424 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\cc_20100307_161800.reg
[2010/03/07 16:56:58 | 000,001,297 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\WinXP_EXE_Fix.reg
[2010/03/07 16:24:52 | 000,000,438 | RHS- | C] () – C:\Documents and Settings\Administrator\ntuser.pol
[2010/03/07 15:39:54 | 000,001,475 | —- | C] () – C:\Documents and Settings\Administrator\Desktop\Windows Explorer.lnk
[2010/03/02 09:49:51 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2009/09/19 16:04:20 | 000,000,116 | —- | C] () – C:\WINDOWS\ConverterCore.INI
[2009/09/11 19:28:23 | 000,000,000 | —- | C] () – C:\WINDOWS\SETUP32.INI
[2009/07/31 00:10:14 | 000,000,142 | —- | C] () – C:\Program Files\GamersHell.url
[2009/05/25 14:37:21 | 000,000,128 | —- | C] () – C:\Documents and Settings\All Users\Application Data\sandra.ldb
[2009/05/25 14:35:24 | 010,440,704 | —- | C] () – C:\Documents and Settings\All Users\Application Data\sandra.mda
[2009/05/24 20:15:32 | 000,219,136 | —- | C] () – C:\WINDOWS\sqlite3_engine.dll
[2009/05/21 01:46:09 | 000,004,588 | —- | C] () – C:\WINDOWS\AbleBurn.ini
[2009/05/21 01:42:55 | 000,000,111 | —- | C] () – C:\WINDOWS\TruDirect.ini
[2009/05/19 22:43:04 | 000,024,576 | R— | C] () – C:\WINDOWS\System32\AsIO.dll
[2009/05/19 22:43:04 | 000,012,400 | R— | C] () – C:\WINDOWS\System32\drivers\AsIO.sys
[2009/05/19 22:39:04 | 000,001,746 | —- | C] () – C:\WINDOWS\Language_trs.ini
[2009/05/19 22:36:47 | 000,005,810 | R— | C] () – C:\WINDOWS\System32\drivers\ASACPI.sys
[2009/05/19 22:36:26 | 000,040,216 | —- | C] () – C:\WINDOWS\Ascd_tmp.ini
[2009/05/19 22:36:25 | 000,010,296 | —- | C] () – C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2008/11/26 01:08:23 | 000,000,120 | —- | C] () – C:\WINDOWS\NVPerformance.INI
[2008/10/08 02:36:58 | 000,090,668 | —- | C] () – C:\WINDOWS\System32\vobis32.dll
[2008/10/08 01:48:54 | 000,000,036 | —- | C] () – C:\WINDOWS\Progs_.ini
[2008/10/08 01:48:49 | 000,000,601 | —- | C] () – C:\WINDOWS\1Way.ini
[2008/07/04 03:07:00 | 000,532,480 | —- | C] () – C:\WINDOWS\System32\libxml2.dll
[2007/11/08 18:52:07 | 000,013,396 | —- | C] () – C:\WINDOWS\System32\drivers\MTictwl.sys
[2007/06/25 16:30:17 | 000,000,057 | —- | C] () – C:\WINDOWS\TUTORI~1.INI
[2007/04/28 13:49:17 | 000,000,477 | —- | C] () – C:\WINDOWS\System32\ntmsqapi.dll
[2007/04/28 13:41:24 | 000,002,208 | —- | C] () – C:\WINDOWS\System32\drivers\nxsIO32.sys
[2007/02/13 12:32:28 | 000,006,592 | —- | C] () – C:\WINDOWS\System32\drivers\ds1410d.sys
[2006/12/14 15:32:52 | 000,000,009 | —- | C] () – C:\Documents and Settings\All Users\Application Data\DragToDiscUserNameD.txt
[2006/11/16 21:43:33 | 000,667,648 | —- | C] () – C:\WINDOWS\System32\FreeImage.dll
[2006/11/16 18:44:53 | 000,003,840 | —- | C] () – C:\WINDOWS\System32\drivers\BANTExt.sys
[2006/11/16 18:43:07 | 000,176,235 | —- | C] () – C:\WINDOWS\System32\Primomonnt.dll
[2006/08/31 11:46:13 | 000,000,310 | —- | C] () – C:\WINDOWS\primopdf.ini
[2006/08/22 11:57:37 | 000,077,824 | R— | C] () – C:\WINDOWS\System32\hpzids01.dll
[2006/07/30 17:05:23 | 000,000,049 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2006/05/12 04:09:38 | 000,579,602 | —- | C] () – C:\WINDOWS\System32\x264vfw.dll
[2006/05/07 20:55:05 | 000,001,755 | —- | C] () – C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2006/05/07 13:26:58 | 000,154,112 | —- | C] () – C:\WINDOWS\System32\dxr.dll
[2006/05/07 13:24:54 | 000,099,840 | —- | C] () – C:\WINDOWS\System32\mkx.dll
[2006/05/07 13:24:42 | 000,051,200 | —- | C] () – C:\WINDOWS\System32\avi.dll
[2006/05/07 13:24:30 | 000,061,440 | —- | C] () – C:\WINDOWS\System32\mmfinfo.dll
[2006/05/07 13:24:16 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\mp4.dll
[2006/05/07 13:24:04 | 000,057,856 | —- | C] () – C:\WINDOWS\System32\ogm.dll
[2006/05/07 13:23:46 | 000,045,568 | —- | C] () – C:\WINDOWS\System32\mkzlib.dll
[2006/05/07 13:23:42 | 000,023,552 | —- | C] () – C:\WINDOWS\System32\mkunicode.dll
[2006/04/18 17:30:56 | 003,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2006/04/17 16:19:39 | 000,000,285 | —- | C] () – C:\WINDOWS\MusicEditor.INI
[2006/04/16 19:32:39 | 000,069,632 | —- | C] () – C:\WINDOWS\System32\xmltok.dll
[2006/04/16 19:32:39 | 000,036,864 | —- | C] () – C:\WINDOWS\System32\xmlparse.dll
[2006/03/21 14:13:33 | 000,012,288 | —- | C] () – C:\WINDOWS\System32\DivXWMPExtType.dll
[2006/02/22 11:21:25 | 000,053,248 | —- | C] () – C:\WINDOWS\System32\unrar.dll
[2006/02/22 11:21:25 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\unace.dll
[2005/12/30 15:18:26 | 000,139,264 | —- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2005/12/30 15:10:30 | 000,524,288 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2005/11/29 15:17:16 | 000,005,632 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll
[2005/11/29 15:14:42 | 002,675,712 | —- | C] () – C:\WINDOWS\System32\libavcodec.dll
[2005/11/29 15:11:30 | 000,371,200 | —- | C] () – C:\WINDOWS\System32\libmplayer.dll
[2005/11/29 15:10:46 | 000,217,088 | —- | C] () – C:\WINDOWS\System32\ff_kernelDeint.dll
[2005/11/29 15:10:10 | 000,118,784 | —- | C] () – C:\WINDOWS\System32\libmpeg2_ff.dll
[2005/11/29 15:10:06 | 000,512,000 | —- | C] () – C:\WINDOWS\System32\ff_x264.dll
[2005/11/29 15:09:54 | 000,143,360 | —- | C] () – C:\WINDOWS\System32\ff_realaac.dll
[2005/11/29 15:09:50 | 000,200,704 | —- | C] () – C:\WINDOWS\System32\TomsMoComp_ff.dll
[2005/11/29 15:09:30 | 000,036,864 | —- | C] () – C:\WINDOWS\System32\ff_wmv9.dll
[2005/11/29 15:09:24 | 000,056,320 | —- | C] () – C:\WINDOWS\System32\ff_unrar.dll
[2005/11/29 15:09:14 | 000,200,704 | —- | C] () – C:\WINDOWS\System32\ff_theora.dll
[2005/11/29 15:09:06 | 000,131,072 | —- | C] () – C:\WINDOWS\System32\ff_samplerate.dll
[2005/11/29 15:09:04 | 000,155,648 | —- | C] () – C:\WINDOWS\System32\ff_libmad.dll
[2005/11/29 15:09:00 | 000,167,936 | —- | C] () – C:\WINDOWS\System32\ff_libdts.dll
[2005/11/29 15:09:00 | 000,053,248 | —- | C] () – C:\WINDOWS\System32\ff_liba52.dll
[2005/11/05 08:31:14 | 000,000,547 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll.manifest
[2005/09/26 04:24:38 | 000,024,064 | —- | C] () – C:\WINDOWS\System32\drivers\ATITool.sys
[2005/07/23 20:43:24 | 000,000,063 | —- | C] () – C:\WINDOWS\WININIT.INI
[2005/07/23 19:22:32 | 000,000,374 | —- | C] () – C:\WINDOWS\dreamsp.ini
[2005/07/13 10:36:48 | 000,000,100 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2005/06/12 17:55:30 | 000,000,535 | —- | C] () – C:\WINDOWS\CleaningLab.INI
[2005/06/12 17:48:59 | 000,019,968 | —- | C] () – C:\WINDOWS\System32\cpuinf32.dll
[2005/06/12 17:46:13 | 000,000,919 | —- | C] () – C:\WINDOWS\mgxoschk.ini
[2005/06/12 17:46:13 | 000,000,024 | —- | C] () – C:\WINDOWS\magix.ini
[2005/06/12 16:53:50 | 000,000,063 | —- | C] () – C:\WINDOWS\mdm.ini
[2005/05/16 04:55:24 | 000,003,972 | —- | C] () – C:\WINDOWS\System32\drivers\PciBus.sys
[2005/05/16 02:23:16 | 000,156,672 | —- | C] () – C:\WINDOWS\System32\RTLCPAPI.dll
[2005/05/16 02:03:27 | 000,000,590 | —- | C] () – C:\WINDOWS\ODBC.INI
[2005/05/06 13:57:18 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\psisdecd.dll
[2004/10/15 12:10:04 | 000,217,088 | —- | C] () – C:\WINDOWS\NVGfxOgl.dll
[2003/02/10 03:13:10 | 000,000,416 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\systmsp2pb6
[2002/05/17 17:18:30 | 000,124,928 | —- | C] () – C:\WINDOWS\System32\mp4fil32.dll
[1999/01/22 05:46:58 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\MSRTEDIT.DLL

========== LOP Check ==========

[2010/03/23 18:38:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator\Application Data\IObit
[2010/03/07 16:32:48 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator\Application Data\Opera
[2010/03/20 19:30:08 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator\Application Data\uTorrent
[2009/05/22 00:17:04 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\1Click DVD Copy
[2008/12/04 20:48:01 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Age of Empires 3
[2010/03/12 11:23:48 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Alwil Software
[2009/05/21 15:17:38 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Applications
[2009/05/21 19:38:13 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ASUS OC Profiles
[2009/08/16 09:19:54 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Broderbund
[2006/12/14 11:45:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\CA
[2006/11/16 18:30:54 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\CanonBJ
[2009/08/26 17:31:13 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Chexp
[2010/02/23 16:55:55 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Dimdim
[2008/09/18 03:38:31 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\fsribcre
[2010/03/23 18:38:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\IObit
[2009/08/26 17:30:26 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ITRI mTTS
[2009/10/19 15:51:00 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MyDefrag
[2007/06/25 15:45:08 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Nuance
[2010/03/07 18:41:00 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\OnlineArmor
[2008/09/20 15:29:25 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2009/10/03 13:17:05 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PMB Files
[2007/06/25 15:45:27 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ScanSoft
[2009/10/10 23:19:41 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SpeedBit
[2009/05/21 20:43:35 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Spiralfrog
[2010/02/25 12:14:24 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2009/09/30 22:25:15 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Transparent
[2009/06/05 22:47:38 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2009/09/16 10:25:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/05/29 20:47:49 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2010/02/23 16:55:58 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{BF03BF7A-B118-4C26-B9F7-08C12D3D06E3}
[2010/02/09 12:09:02 | 000,000,306 | —- | M] () – C:\WINDOWS\Tasks\expressburnSevenDays.job
[2010/02/09 12:09:02 | 000,000,312 | —- | M] () – C:\WINDOWS\Tasks\expressburnSevenDaysInit.job
[2010/03/23 01:48:00 | 000,000,330 | -H– | M] () – C:\WINDOWS\Tasks\MP Scheduled Scan.job
[2010/03/24 18:00:00 | 000,000,454 | —- | M] () – C:\WINDOWS\Tasks\next.job
[2010/02/09 12:08:46 | 000,000,288 | —- | M] () – C:\WINDOWS\Tasks\videopadSevenDays.job
[2010/02/09 12:08:45 | 000,000,288 | —- | M] () – C:\WINDOWS\Tasks\videopadShakeIcon.job

========== Purity Check ==========



========== Custom Scans ==========


< C:\nicnpjnp /s >

< C:\Documents and Settings\All Users\Application Data\fsribcre /s >

< C:\Documents and Settings\All Users\Application Data\ITRI mTTS /s >

========== Files - Unicode (All) ==========
[2009/11/03 12:15:34 | 000,000,000 | —D | M](C:\Documents and Settings\All Users\Desktop\Adobe 9 Reader ????) – C:\Documents and Settings\All Users\Desktop\Adobe 9 Reader 安装程序
[2009/11/03 12:15:25 | 000,000,000 | —D | C](C:\Documents and Settings\All Users\Desktop\Adobe 9 Reader ????) – C:\Documents and Settings\All Users\Desktop\Adobe 9 Reader 安装程序
< End of report >

ERUNT - Emergency Recovery Utility NT
Modifying the Registry can create unforeseen problems, so it's always wise to create a backup before doing so.
This is a free program that allows you to keep a complete backup of your registry and restore it when needed.
ERUNT utility program
Download:

• Please download ERUNT…by Lars Hederer. Save it to your desktop.
• Double-click erunt-setup-exe to start the install process. Follow the install prompts.
• Use the default install settings…
  say "NO" to the section that asks you to add ERUNT to the Start-Up folder. Enable this option later if desired.
• Start ERUNT by opting to start the program at the end of setup -or- double click the desktop icon.
• Choose a location for the backup. Note: the default location is C:\WINDOWS\ERDNT which is acceptable.
• Make sure that at least the first two check boxes are selected.
• Click on OK … Then click on "YES" to create the folder.

Run:

• Please navigate to Start >> All Programs >> ERUNT. Click on OK within the pop-up menu.
• In the next menu under C:\WINDOWS\ERDNT\DD-MM-YYYY under Backup options make sure both the following are selected:
  
  • System registry.
  • Current user registry.
• Next click on "OK"… at the prompt… reply "Yes".
  After a short duration the Registry backup is complete! pop-up message will appear.
• Now click on "OK". A registry backup has now been created.

< STOP > If you did not successfully complete this step. < STOP > Do not continue with any other steps, post back and let me know!

Open Notepad

Click Start > Run type notepad into the run box click OK
Click Format and make certain that Word Wrap is NOT checked.

Copy the text inside of the code box, Press Ctrl+C (or right click on the highlighted section and choose 'copy')

Now paste the copied text into the open notepad. Press CTRL+V (or right click and choose 'paste')

Note: There must be NO blank lines in front of the pasted text, but ensure that there is a blank line at the end of the text, otherwise the registry merge will not work.

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\gasfkyaawndvbg]

Now go to File > and click Save As,
From the drop down menu at the top of the box choose Desktop as the location to save this file.
Go down to the File Name box and type in fixme.reg as the file name, then choose All Files as the save as file type.
Then click the save button.
Once you have clicked the save button, close Notepad.

You should now see a file on your desktop that looks like this:

[external image: Posted Image]

Locate the fixme.reg icon on your desktop and double click it, an information box will pop up asking if you want to merge the information in the file into the registry, click YES.

Once the file has run, the information will have merged with your registry so you can delete fixme.reg from your desktop as you won't be needing it anymore.



NEXT:



Launch Notepad, and copy/paste everything in the codebox below into the new document. Go up to "File Save As" and click the drop-down box to change the "Save As Type" to "All Files" and save it to your desktop as runme.bat.

@echo off
if exist results.txt del results.txt
FOR %%H IN (
"E:\My Documents E\Immediate Edge\csstemplates.zip"
"E:\My Documents E\Immediate Edge\Software\csstemplates.zip"
) DO (
attrib -r -h -s %%H
del /q /f %%H >> results.txt 2>>&1
)
del %0

Locate runme.bat on your desktop, and double click it to run the fix. Post results.txt that it should create.



NEXT:



Java Outdated
Your Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system. Please follow these steps to remove older version Java components and update:Your version of Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system. Please follow these steps to remove older version Java components and update:

• Download the latest version of Java Runtime Environment (JRE) Version 6 and save it to your desktop.
• Look for "JDK 6 Update 18 (JDK or JRE)".
• Click the "Download JRE" button to the right.
• Select your Platform: "Windows".
• Select your Language: "Multi-language".
• Read the License Agreement, and then check the box that says: "Accept License Agreement".
• Click Continue and the page will refresh.
• Under Required Files, check the box for Windows Offline Installation, click the link below it and save the file to your desktop.
• Close any programs you may have running - especially your web browser.

Go to Start > Settings > Control Panel, double-click on Add/Remove Programs and remove all older versions of Java.

• Check (highlight) any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button and follow the onscreen instructions for the Java uninstaller.
• Repeat as many times as necessary to remove each Java versions.
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on jre-6u18-windows-i586.exe to install the newest version.
• If using Windows Vista and the installer refuses to launch due to insufficient user permissions, then Run As Administrator.
• When the Java Setup - Welcome window opens, click the Install > button.
• If offered to install a Toolbar, just uncheck the box before continuing unless you want it.

– Starting with Java 6u10, the uninstaller incorporated in each new release uses Enhanced Auto update to automatically remove the previous version when updating to a later update release. It will not remove older versions, so they will need to be removed manually.
– Java is updated frequently. If you want to be automatically notified of future updates, just turn on the Java Automatic Update feature and you will not have to remember to update when Java releases a new version.

Note: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications. To disable the JQS service if you don't want to use it, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter. Click Ok and reboot your computer.


NEXT



Clean Java Cache & Temporary Files

• After the install is complete, go into the Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)
  • On the General tab, under Temporary Internet Files, click the Settings button.
  • Next, click on the Delete Files button
  • There are two options in the window to clear the cache - Leave BOTH CheckedApplications and AppletsTrace and Log Files
• Click OK on Delete Temporary Files Window
  
  Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
• Click OK to leave the Temporary Files Window
• Click OK to leave the Java Control Panel.

NEXT:



Remove Program
We need to remove a program. To do this please do the following:

• Click Start
  
• Go to Control Panel
  
• Go to Add/Remove Programs
  
• Find and click Remove for the following (if present):
  
• avast

NEXT



avast! Uninstall Utility

Sometimes it's not possible to uninstall avast! the standard way - using the ADD/REMOVE PROGRAMS in control panel. In this case, you can use our uninstallation utility aswClear.

• Download aswClear.exe on to your desktop
• Start Windows in Safe Mode
• Open (execute) the uninstall utility = aswClear.exe
• If you installed avast! in a different folder than the default, browse for it. Note: Be careful! The content of any folder you choose will be deleted!
• Click REMOVE
• Restart your computer

NEXT



Visit this link here to download the latest version of avast! 4 Home Edition



NEXT



Update FireFox
While in Firefox go to the Help menu.
Locate Check for Updates.
Allow Firefox to install the latest update. Which is 3.6.2



NEXT

Please provide me with the results.txt log that should have been produced after running the batch file, a new GMER log, and an update on how your computer is currently running.

Latest GMER in 4 parts
Part 1
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-03-26 19:45:00
Windows 5.1.2600 Service Pack 3
Running: ymzybyk7.exe; Driver: C:\DOCUME~1\ADMINI~1\LOCALS~1

\Temp\fxtdypog.sys


—- Kernel IAT/EAT - GMER 1.0.15 —-

IAT \SystemRoot\System32\DRIVERS\tcpip.sys[NDIS.SYS!

NdisCloseAdapter]

[F753A300] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper

Driver/Tall Emu Pty Ltd)
IAT \SystemRoot\System32\DRIVERS\tcpip.sys[NDIS.SYS!

NdisOpenAdapter]

[F753A360] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper

Driver/Tall Emu Pty Ltd)
IAT \SystemRoot\System32\DRIVERS\tcpip.sys[NDIS.SYS!

NdisRegisterProtocol]

[F753A610] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper

Driver/Tall Emu Pty Ltd)
IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!

NdisRegisterProtocol]

[F753A610] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper

Driver/Tall Emu Pty Ltd)
IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!

NdisDeregisterProtocol]

[F753A650] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper

Driver/Tall Emu Pty Ltd)
IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!

NdisCloseAdapter]

[F753A300] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper

Driver/Tall Emu Pty Ltd)
IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!

NdisOpenAdapter]

[F753A360] \??\C:\WINDOWS\system32\drivers\OAnet.sys (OA Helper

Driver/Tall Emu Pty Ltd)

—- Devices - GMER 1.0.15 —-

Device \Driver\Tcpip \Device\Ip

OAmon.sys (TDI

Helper Driver/Tall Emu)
Device \Driver\Tcpip \Device\Tcp

OAmon.sys (TDI

Helper Driver/Tall Emu)
Device \Driver\Tcpip \Device\Udp

OAmon.sys (TDI

Helper Driver/Tall Emu)
Device \Driver\Tcpip \Device\RawIp

OAmon.sys (TDI

Helper Driver/Tall Emu)
Device \Driver\Tcpip \Device\IPMULTICAST

OAmon.sys (TDI

Helper Driver/Tall Emu)

—- Registry - GMER 1.0.15 —-

Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\DS@ParameterMessageFile

%SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\DS\ObjectNames (not active ControlSet)


Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\DS\ObjectNames@Directory Service Object

7680
Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\LSA@ParameterMessageFile

%SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\LSA\ObjectNames (not active ControlSet)


Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\LSA\ObjectNames@PolicyObject

5632
Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\LSA\ObjectNames@SecretObject

5648
Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\LSA\ObjectNames@TrustedDomainObject

5664
Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\LSA\ObjectNames@UserAccountObject

5680
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\NetDDE

Object@ParameterMessageFile %

SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\NetDDE

Object\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\NetDDE

Object\ObjectNames@DDE Share 7424
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\SC

Manager@ParameterMessageFile %

SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\SC

Manager\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\SC

Manager\ObjectNames@SC_MANAGER Object 7168
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\SC

Manager\ObjectNames@SERVICE Object 7184
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security

Account Manager@ParameterMessageFile %SystemRoot%

\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security

Account Manager\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_ALIAS 5424
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_DOMAIN 5392
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_GROUP 5408
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_SERVER 5376
Reg HKLM\SYSTEM\ControlSet001\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_USER 5440
Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\Spooler@ParameterMessageFile

%SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\Spooler\ObjectNames (not active ControlSet)


Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\Spooler\ObjectNames@Document

6944
Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\Spooler\ObjectNames@Printer

6928
Reg HKLM\SYSTEM\ControlSet001

\Services\Eventlog\Security\Spooler\ObjectNames@Server

6912
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg@start

1
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg@type

1
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg@group

file system
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg@imagepath



\systemroot\system32\drivers\gasfkylkbtcsbo.sys
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main (not

active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main@aid

10063
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main@sid

0
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main@cmddelay

14400
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main\delete

(not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001

\Services\gasfkyaawndvbg\main\delete@C:\DOCUME~1\JEAN-P~1\LOCALS~1

\Temp\gasfkyximcrvgvxo.tmp
Reg HKLM\SYSTEM\ControlSet001

\Services\gasfkyaawndvbg\main\delete@C:\DOCUME~1\JEAN-P~1\LOCALS~1

\Temp\gasfkyjcxwtlqppg.tmp
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main\injector

(not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001

\Services\gasfkyaawndvbg\main\injector@*

gasfkywsp8.dll
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\main\tasks

(not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\gasfkyaawndvbg\modules (not

active ControlSet)
Reg HKLM\SYSTEM\ControlSet001

\Services\gasfkyaawndvbg\[removed]

\systemroot\system32\drivers\gasfkylkbtcsbo.sys
Reg HKLM\SYSTEM\ControlSet001

\Services\gasfkyaawndvbg\[removed]

\systemroot\system32\gasfkydqmutslp.dll
Reg HKLM\SYSTEM\ControlSet001

\Services\gasfkyaawndvbg\[removed]

\systemroot\system32\gasfkyoaemycxh.dat
Reg HKLM\SYSTEM\ControlSet001

\Services\gasfkyaawndvbg\[removed]

\systemroot\system32\gasfkyrinbmrxb.dll
Reg HKLM\SYSTEM\ControlSet001

\Services\gasfkyaawndvbg\[removed]

\systemroot\system32\gasfkydbfcnxyw.dat
Reg HKLM\SYSTEM\ControlSet001

\Services\gasfkyaawndvbg\[removed]

\systemroot\system32\gasfkyckfhmais.dll
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS@ParameterMe

ssageFile %SystemRoot%\System32

\MsObjs.dll
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS\ObjectNames


Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS\ObjectNames

@Directory Service Object 7680
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA@ParameterM

essageFile %SystemRoot%\System32

\MsObjs.dll
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectName

s
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectName

s@PolicyObject 5632
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectName

s@SecretObject 5648
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectName

s@TrustedDomainObject 5664
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectName

s@UserAccountObject 5680
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE

Object@ParameterMessageFile %SystemRoot%

\System32\MsObjs.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE

Object\ObjectNames
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE

Object\ObjectNames@DDE Share 7424
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC

Manager@ParameterMessageFile %

SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC

Manager\ObjectNames
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC

Manager\ObjectNames@SC_MANAGER Object 7168
Reg HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC

Manager\ObjectNames@SERVICE Object 7184
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security

Account Manager@ParameterMessageFile %SystemRoot%

\System32\MsObjs.dll
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security

Account Manager\ObjectNames
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_ALIAS 5424
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_DOMAIN 5392
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_GROUP 5408
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_SERVER 5376
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_USER 5440
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler@Parame

terMessageFile %SystemRoot%\System32

\MsObjs.dll
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\Object

Names
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\Object

Names@Document 6944
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\Object

Names@Printer 6928
Reg

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\Object

Names@Server 6912
Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\DS@ParameterMessageFile

%SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\DS\ObjectNames (not active ControlSet)


Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\DS\ObjectNames@Directory Service Object

7680
Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\LSA@ParameterMessageFile

%SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\LSA\ObjectNames (not active ControlSet)


Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\LSA\ObjectNames@PolicyObject

5632
Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\LSA\ObjectNames@SecretObject

5648
Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\LSA\ObjectNames@TrustedDomainObject

5664
Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\LSA\ObjectNames@UserAccountObject

5680
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\NetDDE

Object@ParameterMessageFile %

SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\NetDDE

Object\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\NetDDE

Object\ObjectNames@DDE Share 7424
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\SC

Manager@ParameterMessageFile %

SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\SC

Manager\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\SC

Manager\ObjectNames@SC_MANAGER Object 7168
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\SC

Manager\ObjectNames@SERVICE Object 7184
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security

Account Manager@ParameterMessageFile %SystemRoot%

\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security

Account Manager\ObjectNames (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_ALIAS 5424
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_DOMAIN 5392
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_GROUP 5408
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_SERVER 5376
Reg HKLM\SYSTEM\ControlSet006\Services\Eventlog\Security\Security

Account Manager\ObjectNames@SAM_USER 5440
Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\Spooler@ParameterMessageFile

%SystemRoot%\System32\MsObjs.dll
Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\Spooler\ObjectNames (not active ControlSet)


Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\Spooler\ObjectNames@Document

6944
Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\Spooler\ObjectNames@Printer

6928
Reg HKLM\SYSTEM\ControlSet006

\Services\Eventlog\Security\Spooler\ObjectNames@Server

6912
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System


Reg

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System@OODEFRAG10.00.00.

01WORKSTATION

D98EFB25476BFE2C01EA2D0BE48CF6D8B52E8896AABC362E08A63B1349314E4D0E1266F

B30EB497DC3A1AADDF295FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFE

BC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC79338EDD5E5BE

2F6E667A2D97226D213B555A6A0AC4980AC7933D8672C9BB043E433B3B421ED62743119

E59607255100CEBB5E0D9120ED5DE5686809E4FBC84047FE712BEF8818F04D4FD9C94CA

0D600CA58D746BCB96A45874069BDAB5BE2B451B3D7F84956BFF91980CBBB2A4F506AA0

136A55052019483B378C9474014FCC992901F1D008E411AB7FDCA6937024388A5F6079C

F3E5771FB7AE5EE37A383CA7D6C683D3143B4CC635715968438577388606AC20975A462

0A6D6E056E7218821D3A71D6962480D7E043DC6D7ACC94BAD9F19A181E99A44FE8A5826

11A8C4A5EDB09608D3135BE700A3384DE76C9AC42879F69B282F21F805EEEE1E23E07FA

5B617EDD06B5FC09E887CCBD74FD3D8F515A2C339F2D3D80D0F6C632BB636B2E0B1CF6F

8B85C6D1DA646E71F8B1AAAD542DF8CB44218A7583300607A7313B70F12B902A2F0E273

DD25F6122252D9093A06EA6A924F4157DA298EA2A8645F5B672BB0E2AFCD89EACFF1110

B26D0CEC39C9E922455D0ADE35FCC79A60B3D5A3C2AA13611D94314289DAF4AC6ECDC8D

397DA3AFC96625E1D9E1C95A3CD70
Reg HKLM\SOFTWARE\Classes\.3ivx@

Miro.1
Reg HKLM\SOFTWARE\Classes\.a52@

VLC.a52
Reg HKLM\SOFTWARE\Classes\.acp\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.acp\[removed].1


Reg HKLM\SOFTWARE\Classes\.anx@

Miro.1
Reg HKLM\SOFTWARE\Classes\.AudioCD\PersistentHandler


Reg HKLM\SOFTWARE\Classes\.AudioCD\PersistentHandler@

{098f2470-bae0-

11cd-b579-08002b30bfeb}
Reg HKLM\SOFTWARE\Classes\.AUP@

Audacity.Project
Reg HKLM\SOFTWARE\Classes\.awb\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.awb\OpenWithProgIds@RealPlayer.AMR_WB.10


Reg HKLM\SOFTWARE\Classes\.B5@



Chinese.Big5.File
Reg HKLM\SOFTWARE\Classes\.B5\ShellNew


Reg HKLM\SOFTWARE\Classes\.B5\ShellNew@NullFile


Reg HKLM\SOFTWARE\Classes\.bms@

bmsfile
Reg HKLM\SOFTWARE\Classes\.BUP@

BUP_auto_file
Reg HKLM\SOFTWARE\Classes\.CTT@



MessengerContactList
Reg HKLM\SOFTWARE\Classes\.cue@

VLC.cue
Reg HKLM\SOFTWARE\Classes\.democracy@

Miro.1
Reg HKLM\SOFTWARE\Classes\.disabled@



SpybotSD.DisabledFile
Reg HKLM\SOFTWARE\Classes\.dss@

dssfile
Reg HKLM\SOFTWARE\Classes\.dts@

VLC.dts
Reg HKLM\SOFTWARE\Classes\.dvd\PersistentHandler


Reg HKLM\SOFTWARE\Classes\.dvd\PersistentHandler@

{098f2470-bae0-

11cd-b579-08002b30bfeb}
Reg HKLM\SOFTWARE\Classes\.EVR\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.EVR\[removed].10


Reg HKLM\SOFTWARE\Classes\.EVRC\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.EVRC\[removed].10


Reg HKLM\SOFTWARE\Classes\.flac@

VLC.flac
Reg HKLM\SOFTWARE\Classes\.flv\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.flv\[removed].6


Reg HKLM\SOFTWARE\Classes\.Folder\PersistentHandler


Reg HKLM\SOFTWARE\Classes\.Folder\PersistentHandler@

{098f2470-bae0-

11cd-b579-08002b30bfeb}
Reg HKLM\SOFTWARE\Classes\.GB@

Chinese.GB.File
Reg HKLM\SOFTWARE\Classes\.GB\ShellNew


Reg HKLM\SOFTWARE\Classes\.GB\ShellNew@NullFile


Reg HKLM\SOFTWARE\Classes\.icb@PerceivedType

Image
Reg HKLM\SOFTWARE\Classes\.icb@



Photoshop.TGAFile.9
Reg HKLM\SOFTWARE\Classes\.ivr\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.ivr\[removed].6


Reg HKLM\SOFTWARE\Classes\.kml@Content Type



application/vnd.google-earth.kml+xml
Reg HKLM\SOFTWARE\Classes\.kml@

Google

Earth.kmlfile
Reg HKLM\SOFTWARE\Classes\.kml\Google Earth.kmlfile


Reg HKLM\SOFTWARE\Classes\.kml\Google Earth.kmlfile\ShellNew


Reg HKLM\SOFTWARE\Classes\.kmz@Content Type



application/vnd.google-earth.kmz
Reg HKLM\SOFTWARE\Classes\.kmz@

Google

Earth.kmzfile
Reg HKLM\SOFTWARE\Classes\.kmz\Google Earth.kmzfile


Reg HKLM\SOFTWARE\Classes\.kmz\Google Earth.kmzfile\ShellNew


Reg HKLM\SOFTWARE\Classes\.mbam@

mbam.script
Reg HKLM\SOFTWARE\Classes\.meo@

meofile
Reg HKLM\SOFTWARE\Classes\.mhtm@Content Type

message/rfc822
Reg HKLM\SOFTWARE\Classes\.miro@

Miro.1
Reg HKLM\SOFTWARE\Classes\.mka@

VLC.mka
Reg HKLM\SOFTWARE\Classes\.mkv@

VLC.mkv
Reg HKLM\SOFTWARE\Classes\.moh@

mohfile
Reg HKLM\SOFTWARE\Classes\.mp1@

VLC.mp1
Reg HKLM\SOFTWARE\Classes\.mp1\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.mp1\OpenWithProgIds@RealPlayer.MP1.6


Reg HKLM\SOFTWARE\Classes\.mpdp@

mpdpfile
Reg HKLM\SOFTWARE\Classes\.mpeg1@

VLC.mpeg1
Reg HKLM\SOFTWARE\Classes\.mpeg2@

VLC.mpeg2
Reg HKLM\SOFTWARE\Classes\.mpeg4@

VLC.mpeg4
Reg HKLM\SOFTWARE\Classes\.mpga\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.mpga\[removed].6


Reg HKLM\SOFTWARE\Classes\.msam@



marketsamurai.Project
Reg HKLM\SOFTWARE\Classes\.msam@Content Type



application/marketsamurai.project-file
Reg HKLM\SOFTWARE\Classes\.msam\OpenWithProgIds


Reg

HKLM\SOFTWARE\Classes\.msam\[removed]


Reg HKLM\SOFTWARE\Classes\.NJX@

NJStar.Document
Reg HKLM\SOFTWARE\Classes\.NJX\ShellNew


Reg HKLM\SOFTWARE\Classes\.NJX\ShellNew@NullFile


Reg HKLM\SOFTWARE\Classes\.nsv@

Miro.1
Reg HKLM\SOFTWARE\Classes\.ogg@

VLC.ogg
Reg HKLM\SOFTWARE\Classes\.ogm@

VLC.ogm
Reg HKLM\SOFTWARE\Classes\.[removed]

Ogg media file
Reg HKLM\SOFTWARE\Classes\.ogm\ShellEx


Reg HKLM\SOFTWARE\Classes\.ogm\ShellEx\{BB2E617C-0920-11D1-9A0B-

00C04FC2D6C1}
Reg HKLM\SOFTWARE\Classes\.ogm\ShellEx\{BB2E617C-0920-11D1-9A0B-

00C04FC2D6C1}@ {c5a40261-

cd64-4ccf-84cb-c394da41d590}
Reg HKLM\SOFTWARE\Classes\.pcd@



Photoshop.PCDFile.9
Reg HKLM\SOFTWARE\Classes\.pce@

PCEFILE
Reg HKLM\SOFTWARE\Classes\.pcx@



Photoshop.PCXFile.9
Reg HKLM\SOFTWARE\Classes\.pdd@



Photoshop.PDDFile.9
Reg HKLM\SOFTWARE\Classes\.pdp@PerceivedType

Image
Reg HKLM\SOFTWARE\Classes\.pdp@



Photoshop.PDPFile.9
Reg HKLM\SOFTWARE\Classes\.pva@

Miro.1
Reg HKLM\SOFTWARE\Classes\.pxr@PerceivedType

Image
Reg HKLM\SOFTWARE\Classes\.pxr@



Photoshop.PXRFile.9
Reg HKLM\SOFTWARE\Classes\.ra\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.ra\[removed].6


Reg HKLM\SOFTWARE\Classes\.ram\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.ram\[removed].6


Reg HKLM\SOFTWARE\Classes\.raw@PerceivedType

Image
Reg HKLM\SOFTWARE\Classes\.raw@



Photoshop.RAWFile.9
Reg HKLM\SOFTWARE\Classes\.rax\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rax\[removed].6


Reg HKLM\SOFTWARE\Classes\.rjt\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rjt\[removed].1


Reg HKLM\SOFTWARE\Classes\.rm\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rm\[removed].6


Reg HKLM\SOFTWARE\Classes\.rmj\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rmj\[removed].1


Reg HKLM\SOFTWARE\Classes\.rmm\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rmm\[removed].6


Reg HKLM\SOFTWARE\Classes\.rms\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rms\[removed].6


Reg HKLM\SOFTWARE\Classes\.rmvb\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rmvb\[removed].6


Reg HKLM\SOFTWARE\Classes\.rmx\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rmx\[removed].1


Reg HKLM\SOFTWARE\Classes\.rnx\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rnx\[removed].6


Reg HKLM\SOFTWARE\Classes\.rp\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rp\[removed].6


Reg HKLM\SOFTWARE\Classes\.rsml\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rsml\[removed].6


Reg HKLM\SOFTWARE\Classes\.rt\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rt\[removed].6


Reg HKLM\SOFTWARE\Classes\.rv\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rv\[removed].6


Reg HKLM\SOFTWARE\Classes\.rvx\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.rvx\[removed].6


Reg HKLM\SOFTWARE\Classes\.sbe@

SpybotSD.SBEFile
Reg HKLM\SOFTWARE\Classes\.sbi@

SpybotSD.SBIFile
Reg HKLM\SOFTWARE\Classes\.sbs@

SpybotSD.SBSFile
Reg HKLM\SOFTWARE\Classes\.sis@

Sandra.Script
Reg HKLM\SOFTWARE\Classes\.sis@Content Type

text/plain
Reg HKLM\SOFTWARE\Classes\.sis@PerceivedType

text
Reg HKLM\SOFTWARE\Classes\.sis@shellex\{8895b1c6-b41f-4c1c-a562-

0d564250836f} {1531d583-

8375-4d3f-b5fb-d23bbd169f22}
Reg HKLM\SOFTWARE\Classes\.spx@

VLC.spx
Reg HKLM\SOFTWARE\Classes\.ssm\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.ssm\OpenWithProgIds@SSM


Reg HKLM\SOFTWARE\Classes\.stcp@

STGuru Code

Conversion Pack
Reg HKLM\SOFTWARE\Classes\.stcp@Content Type

application/stcp
Reg HKLM\SOFTWARE\Classes\.stcp\ShellNew


Reg HKLM\SOFTWARE\Classes\.stcp\ShellNew@NullFile


Reg HKLM\SOFTWARE\Classes\.tnfo@



SpybotSD.TInfoFile
Reg HKLM\SOFTWARE\Classes\.ts@

VLC.ts
Reg HKLM\SOFTWARE\Classes\.uti@

SpybotSD.UTIFile
Reg HKLM\SOFTWARE\Classes\.uts@

SpybotSD.UTSFile
Reg HKLM\SOFTWARE\Classes\.vda@PerceivedType

Image
Reg HKLM\SOFTWARE\Classes\.vda@



Photoshop.TGAFile.9
Reg HKLM\SOFTWARE\Classes\.vlc@

VLC.vlc
Reg HKLM\SOFTWARE\Classes\.VOB@

VLC.vob
Reg HKLM\SOFTWARE\Classes\.[removed]

VOB_auto_file
Reg HKLM\SOFTWARE\Classes\.vst@



Photoshop.TGAFile.9
Reg HKLM\SOFTWARE\Classes\.vst@PerceivedType

Image
Reg HKLM\SOFTWARE\Classes\.x2@

wipe.Document
Reg HKLM\SOFTWARE\Classes\.xpl\OpenWithProgIds


Reg HKLM\SOFTWARE\Classes\.xpl\[removed].6


Reg HKLM\SOFTWARE\Classes\.xvid@

Miro.1
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2@

ActiveSkin 4.3

Control
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2\CLSID


Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2\CLSID@

{BA8C584B-209C-

4d54-8BB1-8AB5F1DCA18E}
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2\CurVer


Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2\CurVer@



ActiveSkin4.Skin.1
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2.1@

ActiveSkin 4.3

Control
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2.1\CLSID


Reg HKLM\SOFTWARE\Classes\ActiveSkin4.Skin2.1\CLSID@

{BA8C584B-209C-

4d54-8BB1-8AB5F1DCA18E}
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2@

SkinLabel 4.3

Control
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2\CLSID


Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2\CLSID@

{D1698320-77BD-

4776-96FD-C3C8D71E57E2}
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2\CurVer


Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2\CurVer@



ActiveSkin4.SkinLabel2.1
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2.1@

SkinLabel 4.3

Control
Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2.1\CLSID


Reg HKLM\SOFTWARE\Classes\ActiveSkin4.SkinLabel2.1\CLSID@

{D1698320-77BD-

4776-96FD-C3C8D71E57E2}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash@

Splash Control
Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash\CLSID


Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash\CLSID@

{6241AF3F-2B41-

41AD-A268-68CD710D34C2}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash\CurVer


Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash\CurVer@



ActiveSplash.Splash.1
Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash.1@

Splash Control
Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash.1\CLSID


Reg HKLM\SOFTWARE\Classes\ActiveSplash.Splash.1\CLSID@

{6241AF3F-2B41-

41AD-A268-68CD710D34C2}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects@

SplashObjects

Class
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects\CLSID


Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects\CLSID@

{D4D72717-D96A-

4BA1-A136-EADB379BE963}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects\CurVer


Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects\CurVer@



ActiveSplash.SplashObjects.1
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects.1@

SplashObjects

Class
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects.1\CLSID


Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashObjects.1\CLSID@

{D4D72717-D96A-

4BA1-A136-EADB379BE963}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture@

SplashPicture

Class
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture\CLSID


Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture\CLSID@

{D1B5603A-54B5-

4C23-BA4B-DEAA204AF07C}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture\CurVer


Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture\CurVer@



ActiveSplash.SplashPicture.1
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture.1@

SplashPicture

Class
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture.1\CLSID


Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashPicture.1\CLSID@

{D1B5603A-54B5-

4C23-BA4B-DEAA204AF07C}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText@

SplashText

Object
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText\CLSID


Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText\CLSID@

{D88797FA-4784-

4B40-8C5A-C4626297EC0E}
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText\CurVer


Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText\CurVer@



ActiveSplash.SplashText.1
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText.1@

SplashText

Object
Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText.1\CLSID


Reg HKLM\SOFTWARE\Classes\ActiveSplash.SplashText.1\CLSID@

{D88797FA-4784-

4B40-8C5A-C4626297EC0E}
Reg HKLM\SOFTWARE\Classes\Amaya@

Amaya Files
Reg HKLM\SOFTWARE\Classes\Amaya\DefaultIcon


Reg HKLM\SOFTWARE\Classes\Amaya\DefaultIcon@

C:\Program

Files\Amaya\WindowsWX\bin\amaya.exe
Reg HKLM\SOFTWARE\Classes\Amaya\shell


Reg HKLM\SOFTWARE\Classes\Amaya\shell@

open
Reg HKLM\SOFTWARE\Classes\Amaya\shell\open


Reg HKLM\SOFTWARE\Classes\Amaya\shell\open\command


Reg HKLM\SOFTWARE\Classes\Amaya\shell\open\command@

"C:\Program

Files\Amaya\WindowsWX\bin\amaya.exe" "%1"
Reg HKLM\SOFTWARE\Classes\ASP.HostEncode\CLSID


Reg HKLM\SOFTWARE\Classes\ASP.HostEncode\CLSID@

{0CF774D1-F077-

11D1-B1BC-00C04F86C324}
Reg HKLM\SOFTWARE\Classes\Audacity.Project@

Audacity Project

File
Reg HKLM\SOFTWARE\Classes\Audacity.Project\shell


Reg HKLM\SOFTWARE\Classes\Audacity.Project\shell@


Reg HKLM\SOFTWARE\Classes\Audacity.Project\shell\open


Reg HKLM\SOFTWARE\Classes\Audacity.Project\shell\open\command


Reg HKLM\SOFTWARE\Classes\Audacity.Project\shell\open\command@

"C:\Program

Files\Audacity\audacity.exe" "%1"
Reg HKLM\SOFTWARE\Classes\AvantURL\shell


Reg HKLM\SOFTWARE\Classes\AvantURL\shell\open


Reg HKLM\SOFTWARE\Classes\AvantURL\shell\open\command


Reg HKLM\SOFTWARE\Classes\AvantURL\shell\open\command@

"C:\Program

Files\Avant Browser\avant.exe" "%1"
Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector@

BabConnector

Class
Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector\CLSID


Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector\CLSID@

{C430996F-4AA8-

4AA8-81DE-F54432CD5786}
Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector\CurVer


Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector\CurVer@



BDesktopAgent.BabConnector.1
Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector.1@

BabConnector

Class
Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector.1\CLSID


Reg HKLM\SOFTWARE\Classes\BDesktopAgent.BabConnector.1\CLSID@

{C430996F-4AA8-

4AA8-81DE-F54432CD5786}
Reg HKLM\SOFTWARE\Classes\bmsfile\shell


Reg HKLM\SOFTWARE\Classes\bmsfile\shell@

Open
Reg HKLM\SOFTWARE\Classes\bmsfile\shell\open


Reg HKLM\SOFTWARE\Classes\bmsfile\shell\open\command


Reg HKLM\SOFTWARE\Classes\bmsfile\shell\open\command@

"C:\Program

Files\NCH Software\Debut\debut.exe" -extfind BMS "%L"
Reg HKLM\SOFTWARE\Classes\BrowserExeHTML@

HTML Document
Reg HKLM\SOFTWARE\Classes\BrowserExeHTML@FriendlyTypeName

HTML Document
Reg HKLM\SOFTWARE\Classes\BrowserExeHTML\DefaultIcon


Reg HKLM\SOFTWARE\Classes\BrowserExeHTML\DefaultIcon@

C:\Program

Files\Avant Browser\avant.exe,0
Reg HKLM\SOFTWARE\Classes\BrowserExeHTML\shell


Reg HKLM\SOFTWARE\Classes\BrowserExeHTML\shell\open


Reg HKLM\SOFTWARE\Classes\BrowserExeHTML\shell\open\command


Reg HKLM\SOFTWARE\Classes\BrowserExeHTML\shell\open\command@

"C:\Program

Files\Avant Browser\avant.exe" "%1"
Reg HKLM\SOFTWARE\Classes\BrowserExeURL@

URL Link
Reg HKLM\SOFTWARE\Classes\BrowserExeURL@FriendlyTypeName

URL Link
Reg HKLM\SOFTWARE\Classes\BrowserExeURL\DefaultIcon


Reg HKLM\SOFTWARE\Classes\BrowserExeURL\DefaultIcon@

C:\Program

Files\Avant Browser\avant.exe,0
Reg HKLM\SOFTWARE\Classes\BUP_auto_file@


Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell


Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell@

play
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\open


Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\open@

&Open
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\open\command


Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\open\command@

"C:\Program

Files\iTunes\iTunes.exe" /open "%L"
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\play


Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\play@

&Play
Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\play\command


Reg HKLM\SOFTWARE\Classes\BUP_auto_file\shell\play\command@

"C:\Program

Files\iTunes\iTunes.exe" /play "%L"
Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file@


Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell


Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\edit


Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\edit@

&Edit
Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\edit\command


Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\edit\command@



C:\WINDOWS\notepad.exe %1
Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\open


Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\open\command


Reg HKLM\SOFTWARE\Classes\cfxxe_auto_file\shell\open\command@

%SystemRoot%

\system32\NOTEPAD.EXE %1
Reg HKLM\SOFTWARE\Classes\ChromeHTML@URL Protocol


Reg HKLM\SOFTWARE\Classes\ChromeHTML@

Chrome HTML

Document
Reg HKLM\SOFTWARE\Classes\ChromeHTML\DefaultIcon


Reg HKLM\SOFTWARE\Classes\ChromeHTML\DefaultIcon@

C:\Documents and

Settings\Jean-Paul\Local Settings\Application

Data\Google\Chrome\Application\chrome.exe,0
Reg HKLM\SOFTWARE\Classes\ChromeHTML\shell


Reg HKLM\SOFTWARE\Classes\ChromeHTML\shell\open


Reg HKLM\SOFTWARE\Classes\ChromeHTML\shell\open\command


Reg HKLM\SOFTWARE\Classes\ChromeHTML\shell\open\command@

"C:\Documents

and Settings\Jean-Paul\Local Settings\Application

Data\Google\Chrome\Application\chrome.exe" – "%1"
Reg HKLM\SOFTWARE\Classes\CLSID\{410D4C51-CDEC-B5DA-B6A1-

1B18DBCAF673}\InProcServer32@ %

SystemRoot%\system32\SHELL32.dll
Reg HKLM\SOFTWARE\Classes\CLSID\{410D4C51-CDEC-B5DA-B6A1-

1B18DBCAF673}\InProcServer32@ThreadingModel

Apartment
Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl@

Microsoft

ImageList Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl\CLSID@

{58DA8D8F-9D6A-

101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl\CurVer


Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl\CurVer@



COMCTL.ImageListCtrl.1
Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl.1@

Microsoft

ImageList Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl.1\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.ImageListCtrl.1\CLSID@

{58DA8D8F-9D6A-

101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl@

Microsoft

ListView Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl\CLSID@

{58DA8D8A-9D6A-

101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl\CurVer


Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl\CurVer@



COMCTL.ListViewCtrl.1
Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl.1@

Microsoft

ListView Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl.1\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.ListViewCtrl.1\CLSID@

{58DA8D8A-9D6A-

101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl@

Microsoft

ProgressBar Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl\CLSID@

{0713E8D2-850A-

101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl\CurVer


Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl\CurVer@



COMCTL.ProgCtrl.1
Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl.1@

Microsoft

ProgressBar Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl.1\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.ProgCtrl.1\CLSID@

{0713E8D2-850A-

101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl@

Microsoft

StatusBar Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl\CLSID@

{6B7E638F-850A-

101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl\CurVer


Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl\CurVer@



COMCTL.SBarCtrl.1
Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl.1@

Microsoft

StatusBar Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl.1\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.SBarCtrl.1\CLSID@

{6B7E638F-850A-

101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.Slider@

Microsoft Slider

Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.Slider\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.Slider\CLSID@

{373FF7F0-EB8B-

11CD-8820-08002B2F4F5A}
Reg HKLM\SOFTWARE\Classes\COMCTL.Slider\CurVer


Reg HKLM\SOFTWARE\Classes\COMCTL.Slider\CurVer@

COMCTL.Slider.1
Reg HKLM\SOFTWARE\Classes\COMCTL.Slider.1@

Microsoft Slider

Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.Slider.1\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.Slider.1\CLSID@

{373FF7F0-EB8B-

11CD-8820-08002B2F4F5A}
Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip@

Microsoft

TabStrip Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip\CLSID@

{9ED94440-E5E8-

101B-B9B5-444553540000}
Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip\CurVer


Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip\CurVer@



COMCTL.TabStrip.1
Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip.1@

Microsoft

TabStrip Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip.1\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.TabStrip.1\CLSID@

{9ED94440-E5E8-

101B-B9B5-444553540000}
Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar@

Microsoft

Toolbar Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar\CLSID@

{612A8624-0FB3-

11CE-8747-524153480004}
Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar\CurVer


Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar\CurVer@

COMCTL.Toolbar.1
Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar.1@

Microsoft

Toolbar Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar.1\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.Toolbar.1\CLSID@

{612A8624-0FB3-

11CE-8747-524153480004}
Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl@

Microsoft

TreeView Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl\CLSID@

{0713E8A2-850A-

101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl\CurVer


Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl\CurVer@



COMCTL.TreeCtrl.1
Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl.1@

Microsoft

TreeView Control, version 5.0 (SP2)
Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl.1\CLSID


Reg HKLM\SOFTWARE\Classes\COMCTL.TreeCtrl.1\CLSID@

{0713E8A2-850A-

101B-AFC0-4210102A8DA7}
Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler@

DeskbarEnabler

Class
Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler\CLSID


Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler\CLSID@

{57CADC46-58FF-

4105-B733-5A9F3FC9783C}
Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler\CurVer


Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler\CurVer@



ComObject.DeskbarEnabler.1
Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1@

DeskbarEnabler

Class
Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1\CLSID


Reg HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1\CLSID@

{57CADC46-58FF-

4105-B733-5A9F3FC9783C}
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2@

Stitcher2 Class
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\//CLSID


Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\//CLSID@

{8B0A08EF-0997-

11D5-9322-0050BA834ACB}
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\//PixMaker


Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\CLSID


Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\CLSID@

{26CF8BB7-3E70-

40d2-8FFF-756EEB62A504}
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\CurVer


Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\CurVer@



ComStitch2.Stitcher2.1
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2\Pro


Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1@

Stitcher2 Class
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1\//CLSID


Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1\//CLSID@

{8B0A08EF-0997-

11D5-9322-0050BA834ACB}
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1\//PixMaker


Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1\CLSID


Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1\CLSID@

{26CF8BB7-3E70-

40d2-8FFF-756EEB62A504}
Reg HKLM\SOFTWARE\Classes\ComStitch2.Stitcher2.1\Pro


Reg HKLM\SOFTWARE\Classes\CTAPPDET.CTAppDetCtrl.1@

CTAppDet Control
Reg HKLM\SOFTWARE\Classes\CTAPPDET.CTAppDetCtrl.1\CLSID


Reg HKLM\SOFTWARE\Classes\CTAPPDET.CTAppDetCtrl.1\CLSID@

{4514001F-D1D8-

4CCE-BAD6-AF0B7A705663}
Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs@

WebAPIs Class
Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs\CLSID


Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs\CLSID@

{0E57AA98-F169-

4A68-BA8F-9E3BDAFFF9FD}
Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs\CurVer


Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs\CurVer@



CtORWebClient.WebAPIs.1
Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs.1@

WebAPIs Class
Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs.1\CLSID


Reg HKLM\SOFTWARE\Classes\CtORWebClient.WebAPIs.1\CLSID@

{0E57AA98-F169-

4A68-BA8F-9E3BDAFFF9FD}
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1@

MPEG Video
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\shell


Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\shell\open


Reg HKLM\SOFTWARE\Classes\dctfile\shell


Reg HKLM\SOFTWARE\Classes\dctfile\shell@

Open
Reg HKLM\SOFTWARE\Classes\dctfile\shell\open


Reg HKLM\SOFTWARE\Classes\dctfile\shell\open\command


Reg HKLM\SOFTWARE\Classes\dctfile\shell\open\command@

"C:\Program

Files\NCH Software\Debut\debut.exe" -extfind Scribe "%L"
Reg HKLM\SOFTWARE\Classes\dhSQLite.cColumn@

dhSQLite.cColumn
Reg HKLM\SOFTWARE\Classes\dhSQLite.cColumn\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cColumn\Clsid@

{D8D813A4-2F7E-

415C-A92E-D7360DDAA7C0}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cColumns@



dhSQLite.cColumns
Reg HKLM\SOFTWARE\Classes\dhSQLite.cColumns\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cColumns\Clsid@

{E4139F89-0B72-

498D-A4BB-5CB08E9B2EBD}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cCommand@



dhSQLite.cCommand
Reg HKLM\SOFTWARE\Classes\dhSQLite.cCommand\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cCommand\Clsid@

{FA1E015F-3766-

458A-A7E5-72F0CE9EDE72}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cConnection@



dhSQLite.cConnection
Reg HKLM\SOFTWARE\Classes\dhSQLite.cConnection\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cConnection\Clsid@

{C1323921-ADC1-

427F-B753-4D5769BE734E}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cDataBase@



dhSQLite.cDataBase
Reg HKLM\SOFTWARE\Classes\dhSQLite.cDataBase\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cDataBase\Clsid@

{AFD6D1A3-253A-

4147-9FEC-0AC1CB2FEFB9}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cDataBases@



dhSQLite.cDataBases
Reg HKLM\SOFTWARE\Classes\dhSQLite.cDataBases\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cDataBases\Clsid@

{E35C32C4-B643-

478D-BAE4-C14CA289854E}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cField@

dhSQLite.cField
Reg HKLM\SOFTWARE\Classes\dhSQLite.cField\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cField\Clsid@

{7803619D-EDB8-

4E1E-B8D6-A4DCC2C6C159}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cFields@

dhSQLite.cFields
Reg HKLM\SOFTWARE\Classes\dhSQLite.cFields\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cFields\Clsid@

{FD3E6BA1-2D4F-

4C47-973D-2D056142686C}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cIndex@

dhSQLite.cIndex
Reg HKLM\SOFTWARE\Classes\dhSQLite.cIndex\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cIndex\Clsid@

{218444F6-4CE0-

4E11-AC58-C3819CB58FBE}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cIndexes@



dhSQLite.cIndexes
Reg HKLM\SOFTWARE\Classes\dhSQLite.cIndexes\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cIndexes\Clsid@

{776DACEC-3FF4-

45A1-8B41-780C235F831E}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cRecordset@



dhSQLite.cRecordset
Reg HKLM\SOFTWARE\Classes\dhSQLite.cRecordset\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cRecordset\Clsid@

{0603D1C2-F3AC-

4FC0-AF53-DE223ECF04D4}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cStringCompare@



dhSQLite.cStringCompare
Reg HKLM\SOFTWARE\Classes\dhSQLite.cStringCompare\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cStringCompare\Clsid@

{0A74CCF7-DBE8-

4809-B880-8E8AA1E1A589}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTable@

dhSQLite.cTable
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTable\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cTable\Clsid@

{27D1D3A3-E531-

4861-B27F-864BD55D4FFD}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTables@

dhSQLite.cTables
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTables\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cTables\Clsid@

{E85D3D3E-505E-

45BC-9C50-DCEF0ED60DAE}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTrigger@



dhSQLite.cTrigger
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTrigger\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cTrigger\Clsid@

{DBA2C12B-2F12-

47A9-97ED-E615F1C37713}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTriggers@



dhSQLite.cTriggers
Reg HKLM\SOFTWARE\Classes\dhSQLite.cTriggers\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cTriggers\Clsid@

{26D04CDD-E236-

467F-9070-8BB164708632}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cUDFMethods@



dhSQLite.cUDFMethods
Reg HKLM\SOFTWARE\Classes\dhSQLite.cUDFMethods\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cUDFMethods\Clsid@

{B7EC75A4-3146-

49E1-AF92-372E5EAA3189}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cView@

dhSQLite.cView
Reg HKLM\SOFTWARE\Classes\dhSQLite.cView\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cView\Clsid@

{9978C6CF-1567-

45EB-8BE7-A50CE42D3E69}
Reg HKLM\SOFTWARE\Classes\dhSQLite.cViews@

dhSQLite.cViews
Reg HKLM\SOFTWARE\Classes\dhSQLite.cViews\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.cViews\Clsid@

{F4733C47-3E7E-

4555-A900-6FFDAE27864D}
Reg HKLM\SOFTWARE\Classes\dhSQLite.IAggregateFunction@



dhSQLite.IAggregateFunction
Reg HKLM\SOFTWARE\Classes\dhSQLite.IAggregateFunction\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.IAggregateFunction\Clsid@

{6AA321B0-C03F-

45A5-9B1F-079CFB130084}
Reg HKLM\SOFTWARE\Classes\dhSQLite.ICollation@



dhSQLite.ICollation
Reg HKLM\SOFTWARE\Classes\dhSQLite.ICollation\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.ICollation\Clsid@

{A88015DA-6127-

49C1-B2A5-96663D017877}
Reg HKLM\SOFTWARE\Classes\dhSQLite.IFunction@



dhSQLite.IFunction
Reg HKLM\SOFTWARE\Classes\dhSQLite.IFunction\Clsid


Reg HKLM\SOFTWARE\Classes\dhSQLite.IFunction\Clsid@

{D2E6592A-AFED-

4BD9-AB84-544E3BFB3770}
Reg HKLM\SOFTWARE\Classes\dssfile\shell


Reg HKLM\SOFTWARE\Classes\dssfile\shell@

Open
Reg HKLM\SOFTWARE\Classes\dssfile\shell\open


Reg HKLM\SOFTWARE\Classes\dssfile\shell\open\command


Reg HKLM\SOFTWARE\Classes\dssfile\shell\open\command@

"C:\Program

Files\NCH Software\Debut\debut.exe" -extfind Scribe "%L"
Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper@

Evernote Web

Clipper
Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper\CLSID


Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper\CLSID@

{BC0E0A5D-AB5A-

4fa4-A5FA-280E1D58EEEE}
Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper\CurVer


Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper\CurVer@



Evernote35.Webclipper.1
Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper.1@

Evernote Web

Clipper
Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper.1\CLSID


Reg HKLM\SOFTWARE\Classes\Evernote35.Webclipper.1\CLSID@

{BC0E0A5D-AB5A-

4fa4-A5FA-280E1D58EEEE}
Reg HKLM\SOFTWARE\Classes\ExpressBurn.AutoPlay\Shell


Reg HKLM\SOFTWARE\Classes\ExpressBurn.AutoPlay\Shell\open


Reg HKLM\SOFTWARE\Classes\ExpressBurn.AutoPlay\Shell\open\command


Reg HKLM\SOFTWARE\Classes\ExpressBurn.AutoPlay\Shell\open\command@

C:\Program

Files\NCH Swift Sound\ExpressBurn\expressburn.exe
Reg HKLM\SOFTWARE\Classes\FlashFactory.FlashFactory@

Macromedia Flash

The GMER file reappeared. I cut it and this is last installment. I just saw your last post. I can rerun it with only registry checked if you want. GMER had corrupted and I downloaded a fresh version.

Cheers.

Part 4

C:\WINDOWS\system32\cmd.exe /Q /D /C "start

http://www.pando.com/link/pmb_pando"
Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl@

PandoWebInstCtrl

Class
Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl\CLSID


Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl\CLSID@

{68979310-D979-

4CCA-AB57-83BEFB03E0D3}
Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl\CurVer


Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl\CurVer@



PandoWebInst.PandoWebInstCtrl.1
Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl.1@

PandoWebInstCtrl

Class
Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl.1\CLSID


Reg HKLM\SOFTWARE\Classes\PandoWebInst.PandoWebInstCtrl.1\CLSID@

{68979310-D979-

4CCA-AB57-83BEFB03E0D3}
Reg HKLM\SOFTWARE\Classes\PCEFILE@

PCEFILE
Reg HKLM\SOFTWARE\Classes\PCEFILE\DefaultIcon


Reg HKLM\SOFTWARE\Classes\PCEFILE\DefaultIcon@

C:\Program

Files\PP Chinese Expert\CHNEXP\win32\ChExp.ico
Reg HKLM\SOFTWARE\Classes\PCEFILE\shell


Reg HKLM\SOFTWARE\Classes\PCEFILE\shell\open


Reg HKLM\SOFTWARE\Classes\PCEFILE\shell\open\command


Reg HKLM\SOFTWARE\Classes\PCEFILE\shell\open\command@

C:\Program

Files\PP Chinese Expert\CHNEXP\win32\ChExp.exe %l
Reg HKLM\SOFTWARE\Classes\picasa@

Picasa Command

protocol
Reg HKLM\SOFTWARE\Classes\picasa@URL Protocol


Reg HKLM\SOFTWARE\Classes\picasa\shell


Reg HKLM\SOFTWARE\Classes\picasa\shell\open


Reg HKLM\SOFTWARE\Classes\picasa\shell\open\command


Reg HKLM\SOFTWARE\Classes\picasa\shell\open\command@

"E:\Program

Files\Google\Picasa3\Picasa3.exe" "%1"
Reg HKLM\SOFTWARE\Classes\picasa2.autoplay@DefaultIcon

E:\Program

Files\Google\Picasa3\Picasa3.exe,1
Reg HKLM\SOFTWARE\Classes\picasa2.autoplay\shell


Reg HKLM\SOFTWARE\Classes\picasa2.autoplay\shell\import


Reg HKLM\SOFTWARE\Classes\picasa2.autoplay\shell\import\command


Reg HKLM\SOFTWARE\Classes\picasa2.autoplay\shell\import\command@

E:\Program

Files\Google\Picasa3\Picasa3.exe "%1"
Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot@

PixHotspot Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot\CLSID


Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot\CLSID@

{2E41758B-912C-

4ec5-BD6C-187A05C7FFEA}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot\CurVer


Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot\CurVer@



Piwe2.PixHotspot.1
Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot.1@

PixHotspot Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot.1\CLSID


Reg HKLM\SOFTWARE\Classes\Piwe2.PixHotspot.1\CLSID@

{2E41758B-912C-

4ec5-BD6C-187A05C7FFEA}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode@

PixNode Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode\CLSID


Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode\CLSID@

{98AFDFB6-72AE-

444b-9AE1-1F740BEF411E}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode\CurVer


Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode\CurVer@

Piwe2.PixNode.1
Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode.1@

PixNode Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode.1\CLSID


Reg HKLM\SOFTWARE\Classes\Piwe2.PixNode.1\CLSID@

{98AFDFB6-72AE-

444b-9AE1-1F740BEF411E}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs@

PixPixHs Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs\CLSID


Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs\CLSID@

{1D13DB21-CF59-

4549-911E-D6461D43702C}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs\CurVer


Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs\CurVer@

Piwe2.PixPixHs.1
Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs.1@

PixPixHs Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs.1\CLSID


Reg HKLM\SOFTWARE\Classes\Piwe2.PixPixHs.1\CLSID@

{1D13DB21-CF59-

4549-911E-D6461D43702C}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView@

PixScreenView

Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView\CLSID


Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView\CLSID@

{4118FE34-5C50-

4D44-8F76-D63D4D0F4225}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView\CurVer


Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView\CurVer@



Piwe2.PixScreenView.1
Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView.1@

PixScreenView

Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView.1\CLSID


Reg HKLM\SOFTWARE\Classes\Piwe2.PixScreenView.1\CLSID@

{4118FE34-5C50-

4D44-8F76-D63D4D0F4225}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs@

PixSndHs Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs\CLSID


Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs\CLSID@

{1E5F91E8-2B50-

4307-BC81-FE8C21A65AD3}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs\CurVer


Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs\CurVer@

Piwe2.PixSndHs.1
Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs.1@

PixSndHs Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs.1\CLSID


Reg HKLM\SOFTWARE\Classes\Piwe2.PixSndHs.1\CLSID@

{1E5F91E8-2B50-

4307-BC81-FE8C21A65AD3}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs@

PixUrlHs Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs\CLSID


Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs\CLSID@

{F205B775-4FDA-

45ad-9631-AD90F3F643FF}
Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs\CurVer


Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs\CurVer@

Piwe2.PixUrlHs.1
Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs.1@

PixUrlHs Class
Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs.1\CLSID


Reg HKLM\SOFTWARE\Classes\Piwe2.PixUrlHs.1\CLSID@

{F205B775-4FDA-

45ad-9631-AD90F3F643FF}
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2@

Codecs2 Class
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2\CurVer


Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2\CurVer@



PixAround.Codecs2.11
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11@

Codecs2 Class
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\//CLSID


Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\//CLSID@

{7C46C300-99F0-

11d4-8E22-009027A23A3F}
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\//PixMaker


Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\CLSID


Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\CLSID@

{68FB2ECB-4D53-

4c9c-81E4-D0F26513A612}
Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\Pro


Reg HKLM\SOFTWARE\Classes\PixAround.Codecs2.11\Value


Reg HKLM\SOFTWARE\Classes\PixAround.Image2@

MyImage2 Class
Reg HKLM\SOFTWARE\Classes\PixAround.Image2\CurVer


Reg HKLM\SOFTWARE\Classes\PixAround.Image2\CurVer@



PixAround.Image2.11
Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11@

MyImage2 Class
Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11\//CLSID


Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11\//CLSID@

{D5D52450-9917-

11D4-8E22-009027A23A3F}
Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11\//PixMaker


Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11\CLSID


Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11\CLSID@

{13C320CE-D30A-

4f6e-8A46-F5FFACD91A83}
Reg HKLM\SOFTWARE\Classes\PixAround.Image2.11\Pro


Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline@

CoFilterPipeline

Class
Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline\CLSID


Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline\CLSID@

{d54378cd-91d8-

4e10-a00b-819f9a9efcb1}
Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline\CurVer


Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline\CurVer@



PrintSys.CoFilterPipeline.1
Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline.1@

CoFilterPipeline

Class
Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline.1\CLSID


Reg HKLM\SOFTWARE\Classes\PrintSys.CoFilterPipeline.1\CLSID@

{d54378cd-91d8-

4e10-a00b-819f9a9efcb1}
Reg HKLM\SOFTWARE\Classes\Program ID@

MS PinYin 3.0

Dictionary Applet
Reg HKLM\SOFTWARE\Classes\Program ID\CLSID


Reg HKLM\SOFTWARE\Classes\Program ID\CLSID@

{6D0FD33B-0F59-

4861-858C-17FCC56C7E50}
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1@

AAC for SD
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\shell


Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\shell\open


Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1@

CD Audio
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\shell


Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\shell\open


Reg HKLM\SOFTWARE\Classes\RealJukebox.wma.1@

Windows Media

™ Audio Track
Reg HKLM\SOFTWARE\Classes\RealJukebox.wma.1\shell


Reg HKLM\SOFTWARE\Classes\RealJukebox.wma.1\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6@

AAC Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.AIFF.6@

AIFF Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.AIFF.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.AIFF.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.AU.6@

AU Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.AU.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.AU.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6@

AVI Video
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6@

RealPlayer

AutoPlay for Blank DVD
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6@URL Protocol


Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10@

Qualcomm

Enhanced Variable Rate
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6@

AAC Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.MP1.6@

MP1 Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP1.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.MP1.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6@

MP2 Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6@

MP3 Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6@

MP3 Audio

PlayList
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6@

MPA Media
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6@

MPEG Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6@

Audio PlayList
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10@

Qualcomm

PureVoice and Enhanced Variable Rate
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.WAV.6@

WAV Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.WAV.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.WAV.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6@

Windows Media

™ Audio Shortcut
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6@

Windows Media

™ Audio/Video File
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6@

Windows Media

™ Audio File
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6@

Windows Media

™ Video File
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.wmx.6@

Windows Media

™ Audio/Video Shortcut
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmx.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.wmx.6\shell\open


Reg HKLM\SOFTWARE\Classes\RealPlayer.wvx.6@

Windows Media

™ Video Shortcut
Reg HKLM\SOFTWARE\Classes\RealPlayer.wvx.6\shell


Reg HKLM\SOFTWARE\Classes\RealPlayer.wvx.6\shell\open


Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl@

Microsoft Rich

Textbox Control 6.0 (SP6)
Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl\CLSID


Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl\CLSID@

{3B7C8860-D78F-

101B-B9B5-04021C009402}
Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl\CurVer


Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl\CurVer@



RICHTEXT.RichtextCtrl.1
Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl.1@

Microsoft Rich

Textbox Control 6.0 (SP6)
Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl.1\CLSID


Reg HKLM\SOFTWARE\Classes\RICHTEXT.RichtextCtrl.1\CLSID@

{3B7C8860-D78F-

101B-B9B5-04021C009402}
Reg HKLM\SOFTWARE\Classes\Sandra.Script@

SiSoftware

Sandra Professional Home Script
Reg HKLM\SOFTWARE\Classes\Sandra.Script@Content Type

text/plain
Reg HKLM\SOFTWARE\Classes\Sandra.Script@PerceivedType

text
Reg HKLM\SOFTWARE\Classes\Sandra.Script\DefaultIcon


Reg HKLM\SOFTWARE\Classes\Sandra.Script\DefaultIcon@

E:\Program

Files\SiSoftware\SiSoftware Sandra Professional Home

2009.SP3c\sandra.exe,1
Reg HKLM\SOFTWARE\Classes\Sandra.Script\shell


Reg HKLM\SOFTWARE\Classes\Sandra.Script\shell\open


Reg HKLM\SOFTWARE\Classes\Sandra.Script\shell\open\command


Reg HKLM\SOFTWARE\Classes\Sandra.Script\shell\open\command@

"E:\Program

Files\SiSoftware\SiSoftware Sandra Professional Home

2009.SP3c\sandra.exe" /r "%1"
Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar@

IE Toolbar
Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar\CLSID


Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar\CLSID@

{0329E7D6-6F54-

462D-93F6-F5C3118BADF2}
Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar\CurVer


Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar\CurVer@



SBCONVERT.IEToolbar.1
Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar.1@

IE Toolbar
Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar.1\CLSID


Reg HKLM\SOFTWARE\Classes\SBCONVERT.IEToolbar.1\CLSID@

{0329E7D6-6F54-

462D-93F6-F5C3118BADF2}
Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT@

SpeedBit Video

Downloader
Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT\CLSID


Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT\CLSID@

{0329E7D6-6F54-

462D-93F6-F5C3118BADF2}
Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT\CurVer


Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT\CurVer@



SBCONVERT.SBCONVERT.3
Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT.3@

SpeedBit Video

Downloader
Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT.3\CLSID


Reg HKLM\SOFTWARE\Classes\SBCONVERT.SBCONVERT.3\CLSID@

{0329E7D6-6F54-

462D-93F6-F5C3118BADF2}
Reg HKLM\SOFTWARE\Classes\Scripting.Dictionary@



Scripting.Dictionary
Reg HKLM\SOFTWARE\Classes\Scripting.Dictionary\CLSID


Reg HKLM\SOFTWARE\Classes\Scripting.Dictionary\CLSID@

{EE09B103-97E0-

11CF-978F-00A02463E06F}
Reg HKLM\SOFTWARE\Classes\Scripting.Encoder@

Script Encoder

Object
Reg HKLM\SOFTWARE\Classes\Scripting.Encoder\CLSID


Reg HKLM\SOFTWARE\Classes\Scripting.Encoder\CLSID@

{32DA2B15-CFED-

11D1-B747-00C04FC2B085}
Reg HKLM\SOFTWARE\Classes\Scripting.FileSystemObject@

FileSystem

Object
Reg HKLM\SOFTWARE\Classes\Scripting.FileSystemObject\CLSID


Reg HKLM\SOFTWARE\Classes\Scripting.FileSystemObject\CLSID@

{0D43FE01-F093-

11CF-8940-00A0C9054228}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash@

Shockwave Flash

Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\CLSID


Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\CLSID@

{D27CDB6E-AE6D-

11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\CurVer


Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash\CurVer@



ShockwaveFlash.ShockwaveFlash.10
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.1@

Shockwave Flash

Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.1\CLSID


Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.1\CLSID@

{D27CDB6E-AE6D-

11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.10@

Shockwave Flash

Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.10\CLSID


Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.10\CLSID@

{D27CDB6E-AE6D-

11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.3@

Shockwave Flash

Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.3\CLSID


Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.3\CLSID@

{D27CDB6E-AE6D-

11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.4@

Shockwave Flash

Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.4\CLSID


Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.4\CLSID@

{D27CDB6E-AE6D-

11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.5@

Shockwave Flash

Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.5\CLSID


Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.5\CLSID@

{D27CDB6E-AE6D-

11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.6@

Shockwave Flash

Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.6\CLSID


Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.6\CLSID@

{D27CDB6E-AE6D-

11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.7@

Shockwave Flash

Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.7\CLSID


Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.7\CLSID@

{D27CDB6E-AE6D-

11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.8@

Shockwave Flash

Object
Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.8\CLSID


Reg HKLM\SOFTWARE\Classes\ShockwaveFlash.ShockwaveFlash.8\CLSID@

{D27CDB6E-AE6D-

11cf-96B8-444553540000}
Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl@



SightSpeedWebImpl Class
Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl\CLSID


Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl\CLSID@

{57B2CA01-6C40-

44BB-9FCC-BFA7FADAA6E3}
Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl\CurVer


Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl\CurVer@



sightspeedweb.SightSpeedWebImpl.1
Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl.1@



SightSpeedWebImpl Class
Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl.1\CLSID


Reg HKLM\SOFTWARE\Classes\sightspeedweb.SightSpeedWebImpl.1\CLSID@

{57B2CA01-6C40-

44BB-9FCC-BFA7FADAA6E3}
Reg HKLM\SOFTWARE\Classes\SmartMenuXPLibrary.LibSmartMenuXP@



SmartMenuXPLibrary.LibSmartMenuXP
Reg HKLM\SOFTWARE\Classes\SmartMenuXPLibrary.LibSmartMenuXP\Clsid


Reg HKLM\SOFTWARE\Classes\SmartMenuXPLibrary.LibSmartMenuXP\Clsid@

{69D7483A-D984-

4441-9A8F-42BF5C2970B0}
Reg HKLM\SOFTWARE\Classes\SmartNetButtonProject.SmartNetButton@



SmartNetButtonProject.SmartNetButton
Reg

HKLM\SOFTWARE\Classes\SmartNetButtonProject.SmartNetButton\Clsid


Reg

HKLM\SOFTWARE\Classes\SmartNetButtonProject.SmartNetButton\Clsid@

{1DAB2964-890E-424B-

99C7-1D0FFDD0D574}
Reg HKLM\SOFTWARE\Classes\SmartSubClassLib.SmartSubClass@



SmartSubClassLib.SmartSubClass
Reg HKLM\SOFTWARE\Classes\SmartSubClassLib.SmartSubClass\Clsid


Reg HKLM\SOFTWARE\Classes\SmartSubClassLib.SmartSubClass\Clsid@

{7EAD12E0-1130-

48ED-9EBE-48917F876C58}
Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile@

Disabled startup

file
Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile\DefaultIcon


Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile\DefaultIcon@

"E:\program

files\Spybot - Search & Destroy\blindman.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile\shell


Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile\shell\open


Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile\shell\open\command


Reg HKLM\SOFTWARE\Classes\SpybotSD.DisabledFile\shell\open\command@

"E:\program

files\Spybot - Search & Destroy\blindman.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile@

Spyware exclude

file
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile\DefaultIcon


Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile\DefaultIcon@

"E:\program

files\Spybot - Search & Destroy\SpybotSD.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile\shell


Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile\shell\open


Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile\shell\open\command


Reg HKLM\SOFTWARE\Classes\SpybotSD.SBEFile\shell\open\command@

"E:\program

files\Spybot - Search & Destroy\SpybotSD.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile@

Spyware include

file
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile\DefaultIcon


Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile\DefaultIcon@

"E:\program

files\Spybot - Search & Destroy\SpybotSD.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile\shell


Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile\shell\open


Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile\shell\open\command


Reg HKLM\SOFTWARE\Classes\SpybotSD.SBIFile\shell\open\command@

"E:\program

files\Spybot - Search & Destroy\SpybotSD.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile@

Spyware

supplemental file
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile\DefaultIcon


Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile\DefaultIcon@

"E:\program

files\Spybot - Search & Destroy\SpybotSD.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile\shell


Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile\shell\open


Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile\shell\open\command


Reg HKLM\SOFTWARE\Classes\SpybotSD.SBSFile\shell\open\command@

"E:\program

files\Spybot - Search & Destroy\SpybotSD.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile@

Internal

informations
Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile\DefaultIcon


Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile\DefaultIcon@

"E:\program

files\Spybot - Search & Destroy\SpybotSD.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile\shell


Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile\shell\open


Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile\shell\open\command


Reg HKLM\SOFTWARE\Classes\SpybotSD.TInfoFile\shell\open\command@

"E:\program

files\Spybot - Search & Destroy\SpybotSD.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile@

Usage tracks

include file
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile\DefaultIcon


Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile\DefaultIcon@

"E:\program

files\Spybot - Search & Destroy\SpybotSD.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile\shell


Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile\shell\open


Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile\shell\open\command


Reg HKLM\SOFTWARE\Classes\SpybotSD.UTIFile\shell\open\command@

"E:\program

files\Spybot - Search & Destroy\SpybotSD.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile@

Usage tracks

supplemental file
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile\DefaultIcon


Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile\DefaultIcon@

"E:\program

files\Spybot - Search & Destroy\SpybotSD.exe",0
Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile\shell


Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile\shell\open


Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile\shell\open\command


Reg HKLM\SOFTWARE\Classes\SpybotSD.UTSFile\shell\open\command@

"E:\program

files\Spybot - Search & Destroy\SpybotSD.exe" "%1"
Reg HKLM\SOFTWARE\Classes\SSM@

Streaming Media

Metafile
Reg HKLM\SOFTWARE\Classes\SSM\shell


Reg HKLM\SOFTWARE\Classes\SSM\shell\open


Reg HKLM\SOFTWARE\Classes\SSubTimer6.CTimer@



SSubTimer6.CTimer
Reg HKLM\SOFTWARE\Classes\SSubTimer6.CTimer\Clsid


Reg HKLM\SOFTWARE\Classes\SSubTimer6.CTimer\Clsid@

{71A27034-C7D8-

11D2-BEF8-525400DFB47A}
Reg HKLM\SOFTWARE\Classes\SSubTimer6.GSubclass@



SSubTimer6.GSubclass
Reg HKLM\SOFTWARE\Classes\SSubTimer6.GSubclass\Clsid


Reg HKLM\SOFTWARE\Classes\SSubTimer6.GSubclass\Clsid@

{71A27032-C7D8-

11D2-BEF8-525400DFB47A}
Reg HKLM\SOFTWARE\Classes\SSubTimer6.ISubclass@



SSubTimer6.ISubclass
Reg HKLM\SOFTWARE\Classes\SSubTimer6.ISubclass\Clsid


Reg HKLM\SOFTWARE\Classes\SSubTimer6.ISubclass\Clsid@

{71A2702F-C7D8-

11D2-BEF8-525400DFB47A}
Reg HKLM\SOFTWARE\Classes\Toolbar.CT1060933\CLSID


Reg HKLM\SOFTWARE\Classes\Toolbar.CT1060933\CLSID@

{d50f932f-a950-

44ef-9bac-ae203967504f}
Reg HKLM\SOFTWARE\Classes\Toolbar.CT1714219\CLSID


Reg HKLM\SOFTWARE\Classes\Toolbar.CT1714219\CLSID@

{041d868b-eac9-

4d0f-9125-85be9b61052b}
Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier@



ContextMenuNotifier Class
Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier\CLSID


Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier\CLSID@

{9F34B17E-FF0D-

4FAB-97C4-9713FEE79052}
Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier\CurVer


Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier\CurVer@



Toolbar3.ContextMenuNotifier.1
Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1@



ContextMenuNotifier Class
Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1\CLSID


Reg HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1\CLSID@

{9F34B17E-FF0D-

4FAB-97C4-9713FEE79052}
Reg HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl@



CustomInternetSecurityImpl Class
Reg HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl\CLSID


Reg

HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl\CLSID@

{D565B35E-B787-40FA-

95E3-E3562F8FC1A0}
Reg

HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl\CurVer


Reg

HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl\CurVer@



Toolbar3.CustomInternetSecurityImpl.1
Reg HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1@



CustomInternetSecurityImpl Class
Reg HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1

\CLSID
Reg HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1

\CLSID@ {D565B35E-

B787-40FA-95E3-E3562F8FC1A0}
Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT@

SBCONVERT Class
Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT\CLSID


Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT\CLSID@

{3017FB3E-9A77-

4396-88C5-0EC9548FB42F}
Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT\CurVer


Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT\CurVer@



Toolbar3.SBCONVERT.1
Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT.1@

SBCONVERT Class
Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT.1\CLSID


Reg HKLM\SOFTWARE\Classes\Toolbar3.SBCONVERT.1\CLSID@

{3017FB3E-9A77-

4396-88C5-0EC9548FB42F}
Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine@

AtcmTTSEngine

Class
Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine\CLSID


Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine\CLSID@

{22FEDDD4-F1F0-

4797-8CF9-0DD09F9E626C}
Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine\CurVer


Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine\CurVer@



TtsEng.AtcmTTSEngine.1
Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine.1@

AtcmTTSEngine

Class
Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine.1\CLSID


Reg HKLM\SOFTWARE\Classes\TtsEng.AtcmTTSEngine.1\CLSID@

{22FEDDD4-F1F0-

4797-8CF9-0DD09F9E626C}
Reg HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook@



ToolbarURLSearchHook Class
Reg HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook\CLSID


Reg HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook\CLSID@

{CA3EB689-8F09-

4026-AA10-B9534C691CE0}
Reg HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1@



ToolbarURLSearchHook Class
Reg HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1

\CLSID
Reg HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1

\CLSID@ {CA3EB689

-8F09-4026-AA10-B9534C691CE0}
Reg HKLM\SOFTWARE\Classes\Valve.SteamP2P\shell


Reg HKLM\SOFTWARE\Classes\Valve.SteamP2P\shell\open


Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridCell@



vbAcceleratorSGrid6.cGridCell
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridCell\Clsid


Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridCell\Clsid@

{9BD3A001-42A2-

491E-AACA-9512F6CF4CDB}
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridSortObject@



vbAcceleratorSGrid6.cGridSortObject
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridSortObject\Clsid


Reg

HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.cGridSortObject\Clsid@

{D2129738-6A78-4BCB-

915A-412982CAA23D}
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.IGridCellOwnerDraw@



vbAcceleratorSGrid6.IGridCellOwnerDraw
Reg

HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.IGridCellOwnerDraw\Clsid


Reg

HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.IGridCellOwnerDraw\Clsid@

{DC90EAA6-69B8-4DE4-

9A7B-5B2C5B3FEACD}
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.vbalGrid@

vbAccelerator

Grid Control
Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.vbalGrid\Clsid


Reg HKLM\SOFTWARE\Classes\vbAcceleratorSGrid6.vbalGrid\Clsid@

{C5DA1F2B-B2BF-

4DFC-BC9A-439133543A67}
Reg HKLM\SOFTWARE\Classes\VBSFile.HostEncode\CLSID


Reg HKLM\SOFTWARE\Classes\VBSFile.HostEncode\CLSID@

{85131631-480C-

11D2-B1F9-00C04F86C324}
Reg HKLM\SOFTWARE\Classes\VBSmartXPMenu.SmartMenuList@



VBSmartXPMenu.SmartMenuList
Reg HKLM\SOFTWARE\Classes\VBSmartXPMenu.SmartMenuList\Clsid


Reg HKLM\SOFTWARE\Classes\VBSmartXPMenu.SmartMenuList\Clsid@

{79D8BAC6-B95C-

45D8-BA59-2C000E663532}
Reg HKLM\SOFTWARE\Classes\VBSmartXPMenu.SmartMenuXP@



VBSmartXPMenu.SmartMenuXP
Reg HKLM\SOFTWARE\Classes\VBSmartXPMenu.SmartMenuXP\Clsid


Reg HKLM\SOFTWARE\Classes\VBSmartXPMenu.SmartMenuXP\Clsid@

{BEBE0B18-F5AA-

4F91-8E43-0309F73ED35A}
Reg HKLM\SOFTWARE\Classes\VerID@

MS PinYin 3.0

Dictionary Applet
Reg HKLM\SOFTWARE\Classes\VerID\CLSID


Reg HKLM\SOFTWARE\Classes\VerID\CLSID@

{6D0FD33B-0F59-

4861-858C-17FCC56C7E50}
Reg HKLM\SOFTWARE\Classes\VerID\CurVer


Reg HKLM\SOFTWARE\Classes\VerID\CurVer@

Program ID
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin@

VideoLAN VLC

ActiveX Plugin v2
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin\CLSID


Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin\CLSID@

{9BE31822-FDAD-

461B-AD51-BE1D1C159921}
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin\CurVer


Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin\CurVer@



VideoLAN.VLCPlugin.2
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin.1@

VideoLAN VLC

ActiveX Plugin v1
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin.1\CLSID


Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin.1\CLSID@

{E23FE9C6-778E-

49D4-B537-38FCDE4887D8}
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin.2@

VideoLAN VLC

ActiveX Plugin v2
Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin.2\CLSID


Reg HKLM\SOFTWARE\Classes\VideoLAN.VLCPlugin.2\CLSID@

{9BE31822-FDAD-

461B-AD51-BE1D1C159921}
Reg HKLM\SOFTWARE\Classes\VLC.a52@

VLC media file

(.a52)
Reg HKLM\SOFTWARE\Classes\VLC.a52\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.a52\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.a52\shell


Reg HKLM\SOFTWARE\Classes\VLC.a52\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.a52\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.a52\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.a52\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.aac@

VLC media file

(.aac)
Reg HKLM\SOFTWARE\Classes\VLC.aac\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.aac\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.aac\shell


Reg HKLM\SOFTWARE\Classes\VLC.aac\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.aac\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.aac\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.aac\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.ac3@

VLC media file

(.ac3)
Reg HKLM\SOFTWARE\Classes\VLC.ac3\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.ac3\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.ac3\shell


Reg HKLM\SOFTWARE\Classes\VLC.ac3\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.ac3\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.ac3\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.ac3\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.asf@

VLC media file

(.asf)
Reg HKLM\SOFTWARE\Classes\VLC.asf\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.asf\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.asf\shell


Reg HKLM\SOFTWARE\Classes\VLC.asf\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.asf\shell\Convert with Prism Video

Converter
Reg HKLM\SOFTWARE\Classes\VLC.asf\shell\Convert with Prism Video

Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.asf\shell\Convert with Prism Video

Converter\command@ "C:\Program

Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.asf\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.asf\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.asf\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.asx@

VLC media file

(.asx)
Reg HKLM\SOFTWARE\Classes\VLC.asx\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.asx\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.asx\shell


Reg HKLM\SOFTWARE\Classes\VLC.asx\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.asx\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.asx\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.asx\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.avi@

VLC media file

(.avi)
Reg HKLM\SOFTWARE\Classes\VLC.avi\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.avi\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.avi\shell


Reg HKLM\SOFTWARE\Classes\VLC.avi\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.avi\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.avi\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.avi\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.bin@

VLC media file

(.bin)
Reg HKLM\SOFTWARE\Classes\VLC.bin\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.bin\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.bin\shell


Reg HKLM\SOFTWARE\Classes\VLC.bin\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.bin\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.bin\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.bin\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.CDAudio@

VLC CD Audio
Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\shell


Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.CDAudio\shell\Play\command@

C:\Program

Files\VideoLAN\VLC\vlc.exe –started-from-file cdda:%1
Reg HKLM\SOFTWARE\Classes\VLC.cue@

VLC media file

(.cue)
Reg HKLM\SOFTWARE\Classes\VLC.cue\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.cue\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.cue\shell


Reg HKLM\SOFTWARE\Classes\VLC.cue\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.cue\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.cue\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.cue\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.divx@

VLC media file

(.divx)
Reg HKLM\SOFTWARE\Classes\VLC.divx\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.divx\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.divx\shell


Reg HKLM\SOFTWARE\Classes\VLC.divx\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.divx\shell\Convert with Prism Video

Converter
Reg HKLM\SOFTWARE\Classes\VLC.divx\shell\Convert with Prism Video

Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.divx\shell\Convert with Prism Video

Converter\command@ "C:\Program

Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.divx\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.divx\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.divx\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.dts@

VLC media file

(.dts)
Reg HKLM\SOFTWARE\Classes\VLC.dts\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.dts\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.dts\shell


Reg HKLM\SOFTWARE\Classes\VLC.dts\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.dts\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.dts\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.dts\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.dv@

VLC media file

(.dv)
Reg HKLM\SOFTWARE\Classes\VLC.dv\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.dv\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.dv\shell


Reg HKLM\SOFTWARE\Classes\VLC.dv\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.dv\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.dv\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.dv\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie@

VLC DVD Movie
Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\shell


Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.DVDMovie\shell\Play\command@

C:\Program

Files\VideoLAN\VLC\vlc.exe –started-from-file dvd:%1
Reg HKLM\SOFTWARE\Classes\VLC.flac@

VLC media file

(.flac)
Reg HKLM\SOFTWARE\Classes\VLC.flac\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.flac\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.flac\shell


Reg HKLM\SOFTWARE\Classes\VLC.flac\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.flac\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.flac\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.flac\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.m1v@

VLC media file

(.m1v)
Reg HKLM\SOFTWARE\Classes\VLC.m1v\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.m1v\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.m1v\shell


Reg HKLM\SOFTWARE\Classes\VLC.m1v\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.m1v\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.m1v\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.m1v\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.m2v@

VLC media file

(.m2v)
Reg HKLM\SOFTWARE\Classes\VLC.m2v\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.m2v\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.m2v\shell


Reg HKLM\SOFTWARE\Classes\VLC.m2v\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.m2v\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.m2v\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.m2v\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.m3u@

VLC media file

(.m3u)
Reg HKLM\SOFTWARE\Classes\VLC.m3u\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.m3u\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.m3u\shell


Reg HKLM\SOFTWARE\Classes\VLC.m3u\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.m3u\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.m3u\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.m3u\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mka@

VLC media file

(.mka)
Reg HKLM\SOFTWARE\Classes\VLC.mka\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.mka\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mka\shell


Reg HKLM\SOFTWARE\Classes\VLC.mka\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.mka\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.mka\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.mka\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mkv@

VLC media file

(.mkv)
Reg HKLM\SOFTWARE\Classes\VLC.mkv\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.mkv\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell


Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell\Convert with Prism Video

Converter
Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell\Convert with Prism Video

Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell\Convert with Prism Video

Converter\command@ "C:\Program

Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.mkv\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mov@

VLC media file

(.mov)
Reg HKLM\SOFTWARE\Classes\VLC.mov\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.mov\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mov\shell


Reg HKLM\SOFTWARE\Classes\VLC.mov\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.mov\shell\Convert with Prism Video

Converter
Reg HKLM\SOFTWARE\Classes\VLC.mov\shell\Convert with Prism Video

Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.mov\shell\Convert with Prism Video

Converter\command@ "C:\Program

Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.mov\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.mov\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.mov\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mov\shellex


Reg HKLM\SOFTWARE\Classes\VLC.mp1@

VLC media file

(.mp1)
Reg HKLM\SOFTWARE\Classes\VLC.mp1\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.mp1\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mp1\shell


Reg HKLM\SOFTWARE\Classes\VLC.mp1\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.mp1\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.mp1\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.mp1\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mp2@

VLC media file

(.mp2)
Reg HKLM\SOFTWARE\Classes\VLC.mp2\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.mp2\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mp2\shell


Reg HKLM\SOFTWARE\Classes\VLC.mp2\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.mp2\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.mp2\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.mp2\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mp3@

VLC media file

(.mp3)
Reg HKLM\SOFTWARE\Classes\VLC.mp3\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.mp3\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mp3\shell


Reg HKLM\SOFTWARE\Classes\VLC.mp3\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.mp3\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.mp3\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.mp3\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mp4@

VLC media file

(.mp4)
Reg HKLM\SOFTWARE\Classes\VLC.mp4\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.mp4\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell


Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell\Convert with Prism Video

Converter
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell\Convert with Prism Video

Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell\Convert with Prism Video

Converter\command@ "C:\Program

Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.mp4\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mp4\shellex


Reg HKLM\SOFTWARE\Classes\VLC.mpeg@

VLC media file

(.mpeg)
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.mpeg\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell


Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell\Convert with Prism Video

Converter
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell\Convert with Prism Video

Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell\Convert with Prism Video

Converter\command@ "C:\Program

Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.mpeg\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mpeg1@

VLC media file

(.mpeg1)
Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\shell


Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.mpeg1\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mpeg2@

VLC media file

(.mpeg2)
Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\shell


Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.mpeg2\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mpeg4@

VLC media file

(.mpeg4)
Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\shell


Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.mpeg4\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.mpg@

VLC media file

(.mpg)
Reg HKLM\SOFTWARE\Classes\VLC.mpg\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.mpg\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell


Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell\Convert with Prism Video

Converter
Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell\Convert with Prism Video

Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell\Convert with Prism Video

Converter\command@ "C:\Program

Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.mpg\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.ogg@

VLC media file

(.ogg)
Reg HKLM\SOFTWARE\Classes\VLC.ogg\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.ogg\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.ogg\shell


Reg HKLM\SOFTWARE\Classes\VLC.ogg\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.ogg\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.ogg\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.ogg\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.ogm@

VLC media file

(.ogm)
Reg HKLM\SOFTWARE\Classes\VLC.ogm\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.ogm\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.ogm\shell


Reg HKLM\SOFTWARE\Classes\VLC.ogm\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.ogm\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.ogm\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.ogm\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.pls@

VLC media file

(.pls)
Reg HKLM\SOFTWARE\Classes\VLC.pls\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.pls\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.pls\shell


Reg HKLM\SOFTWARE\Classes\VLC.pls\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.pls\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.pls\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.pls\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.ps@

VLC media file

(.ps)
Reg HKLM\SOFTWARE\Classes\VLC.ps\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.ps\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.ps\shell


Reg HKLM\SOFTWARE\Classes\VLC.ps\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.ps\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.ps\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.ps\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.spx@

VLC media file

(.spx)
Reg HKLM\SOFTWARE\Classes\VLC.spx\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.spx\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.spx\shell


Reg HKLM\SOFTWARE\Classes\VLC.spx\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.spx\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.spx\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.spx\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.ts@

VLC media file

(.ts)
Reg HKLM\SOFTWARE\Classes\VLC.ts\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.ts\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.ts\shell


Reg HKLM\SOFTWARE\Classes\VLC.ts\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.ts\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.ts\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.ts\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.vlc@

VLC media file

(.vlc)
Reg HKLM\SOFTWARE\Classes\VLC.vlc\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.vlc\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.vlc\shell


Reg HKLM\SOFTWARE\Classes\VLC.vlc\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.vlc\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.vlc\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.vlc\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.vob@

VLC media file

(.vob)
Reg HKLM\SOFTWARE\Classes\VLC.vob\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.vob\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.vob\shell


Reg HKLM\SOFTWARE\Classes\VLC.vob\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.vob\shell\Convert with Prism Video

Converter
Reg HKLM\SOFTWARE\Classes\VLC.vob\shell\Convert with Prism Video

Converter\command
Reg HKLM\SOFTWARE\Classes\VLC.vob\shell\Convert with Prism Video

Converter\command@ "C:\Program

Files\NCH Software\Prism\prism.exe" "%L"
Reg HKLM\SOFTWARE\Classes\VLC.vob\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.vob\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.vob\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.wav@

VLC media file

(.wav)
Reg HKLM\SOFTWARE\Classes\VLC.wav\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.wav\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.wav\shell


Reg HKLM\SOFTWARE\Classes\VLC.wav\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.wav\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.wav\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.wav\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.wma@

VLC media file

(.wma)
Reg HKLM\SOFTWARE\Classes\VLC.wma\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.wma\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.wma\shell


Reg HKLM\SOFTWARE\Classes\VLC.wma\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.wma\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.wma\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.wma\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VLC.wmv@

VLC media file

(.wmv)
Reg HKLM\SOFTWARE\Classes\VLC.wmv\DefaultIcon


Reg HKLM\SOFTWARE\Classes\VLC.wmv\DefaultIcon@

"C:\Program

Files\VideoLAN\VLC\vlc.exe",0
Reg HKLM\SOFTWARE\Classes\VLC.wmv\shell


Reg HKLM\SOFTWARE\Classes\VLC.wmv\shell@

Play
Reg HKLM\SOFTWARE\Classes\VLC.wmv\shell\Play


Reg HKLM\SOFTWARE\Classes\VLC.wmv\shell\Play\command


Reg HKLM\SOFTWARE\Classes\VLC.wmv\shell\Play\command@

"C:\Program

Files\VideoLAN\VLC\vlc.exe" –started-from-file "%1"
Reg HKLM\SOFTWARE\Classes\VOB_auto_file@


Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell


Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell@

play
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\open


Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\open@

&Open
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\open\command


Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\open\command@

"C:\Program

Files\iTunes\iTunes.exe" /open "%L"
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\play


Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\play@

&Play
Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\play\command


Reg HKLM\SOFTWARE\Classes\VOB_auto_file\shell\play\command@

"C:\Program

Files\iTunes\iTunes.exe" /play "%L"
Reg HKLM\SOFTWARE\Classes\vpjfile@

VideoPad Project
Reg HKLM\SOFTWARE\Classes\wipe.Document@

wipe Document
Reg HKLM\SOFTWARE\Classes\wipe.Document\shell


Reg HKLM\SOFTWARE\Classes\wipe.Document\shell\open


Reg HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar@

Yahoo! Toolbar
Reg HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1@

Yahoo! Toolbar

—- EOF - GMER 1.0.15 —-