The SystemLook log is realllllly long. Here's the first part:
SystemLook 30.07.11 by jpshortstuff
Log created at 10:25 on 30/03/2012 by Shannon
Administrator - Elevation successful
========== reg ==========
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveTypeAutoRun"= 0x0000000091 (145)
"NoFolderOptions"= 0x0000000000 (0)
"NoDesktop"= 0x0000000000 (0)
"NoChangingWallPaper"= 0x0000000000 (0)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop]
"HidNoChangingWallPaperden"= 0x0000000001 (1)
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"NoUpdateCheck"= 0x0000000001 (1)
"NoJITSetup"= 0x0000000001 (1)
"Disable Script Debugger"="yes"
"Show_ChannelBand"="No"
"Anchor Underline"="yes"
"Cache_Update_Frequency"="Once_Per_Session"
"Display Inline Images"="yes"
"Do404Search"=01 00 00 00 (REG_BINARY)
"Local Page"="C:\WINDOWS\system32\blank.htm"
"Save_Session_History_On_Exit"="no"
"Show_FullURL"="no"
"Show_StatusBar"="yes"
"Show_ToolBar"="yes"
"Show_URLinStatusBar"="yes"
"Show_URLToolBar"="yes"
"Start Page"="http://www.msn.com/"
"Use_DlgBox_Colors"="yes"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"XMLHTTP"= 0x0000000001 (1)
"UseClearType"="yes"
"AlwaysShowMenus"= 0x0000000001 (1)
"Enable Browser Extensions"="yes"
"Play_Background_Sounds"="yes"
"Play_Animations"="yes"
"StatusBarWeb"= 0x0000000001 (1)
"CompatibilityFlags"= 0x0000000000 (0)
"FullScreen"="no"
"SearchMigrated"= 0x0000000001 (1)
"Window_Placement"=2c 00 00 00 02 00 00 00 03 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 2e 00 00 00 00 00 00 00 4e 03 00 00 2c 02 00 00 (REG_BINARY)
"Use Search Asst"="on"
"Use FormSuggest"="Yes"
"FormSuggest Passwords"="no"
"FormSuggest PW Ask"="yes"
"Expand Alt Text"="no"
"Move System Caret"="no"
"NscSingleExpand"= 0x0000000000 (0)
"DisableScriptDebuggerIE"="yes"
"Error Dlg Displayed On Every Error"="no"
"Page_Transitions"= 0x0000000001 (1)
"UseThemes"= 0x0000000001 (1)
"EnableSearchPane"= 0x0000000000 (0)
"Force Offscreen Composition"= 0x0000000000 (0)
"NotifyDownloadComplete"="no"
"AllowWindowReuse"= 0x0000000000 (0)
"Friendly http errors"="yes"
"SmoothScroll"= 0x0000000001 (1)
"Enable AutoImageResize"="yes"
"Show image placeholders"= 0x0000000000 (0)
"Print_Background"="yes"
"AutoSearch"= 0x0000000004 (4)
"AutoHide"="yes"
"HistoryViewType"=00 00 (REG_BINARY)
"Error Dlg Details Pane Open"="yes"
"IE8RunOnceLastShown"= 0x0000000001 (1)
"IE8RunOnceLastShown_TIMESTAMP"=42 3e f4 8f f4 00 cd 01 (REG_BINARY)
"IE8TourShown"= 0x0000000001 (1)
"IE8TourShownTime"=fa a2 5c bd e6 08 cb 01 (REG_BINARY)
"IE8RunOncePerInstallCompleted"= 0x0000000001 (1)
"IE8RunOnceCompletionTime"=1c 1a bc ee f4 00 cd 01 (REG_BINARY)
"ControlTooltipCount"= 0x0000000005 (5)
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default Feeds]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\WindowsSearch]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 8.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"= 0x0000000000 (0)
"MigrateProxy"= 0x0000000001 (1)
"EmailName"="IEUser@"
"AutoConfigProxy"="wininet.dll"
"MimeExclusionListForCache"="multipart/mixed multipart/x-mixed-replace multipart/x-byteranges "
"WarnOnPost"=01 00 00 00 (REG_BINARY)
"UseSchannelDirectly"=01 00 00 00 (REG_BINARY)
"EnableHttp1_1"= 0x0000000001 (1)
"PrivacyAdvanced"= 0x0000000000 (0)
"EnableNegotiate"= 0x0000000001 (1)
"UrlEncoding"= 0x0000000001 (1)
"SecureProtocols"= 0x00000000a0 (160)
"PrivDiscUiShown"= 0x0000000001 (1)
"DisableCachingOfSSLPages"= 0x0000000001 (1)
"WarnonZoneCrossing"= 0x0000000000 (0)
"CertificateRevocation"= 0x0000000000 (0)
"ProxyEnable"= 0x0000000000 (0)
"SyncMode5"= 0x0000000000 (0)
"EnableAutodial"= 0x0000000000 (0)
"ProxyHttp1.1"= 0x0000000001 (1)
"ShowPunycode"= 0x0000000000 (0)
"EnablePunycode"= 0x0000000000 (0)
"DisableIDNPrompt"= 0x0000000001 (1)
"WarnonBadCertRecving"= 0x0000000000 (0)
"WarnOnPostRedirect"= 0x0000000001 (1)
"GlobalUserOffline"= 0x0000000000 (0)
"ZonesSecurityUpgrade"=74 0e 4f 65 f4 00 cd 01 (REG_BINARY)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Passport]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Url History]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop]
"HidNoChangingWallPaperden"= 0x0000000001 (1)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations]
"LowRiskFileTypess"=".zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg
;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;.scr;"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments]
"SaveZoneInformation"= 0x0000000001 (1)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveTypeAutoRun"= 0x0000000091 (145)
"NoFolderOptions"= 0x0000000000 (0)
"NoDesktop"= 0x0000000000 (0)
"NoChangingWallPaper"= 0x0000000000 (0)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"disableregistrytools"= 0x0000000000 (0)
Here is part 2:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer]
"WebFindBandHook"="{68F2D3FC-8366-4a46-8224-58EFA2749425}"
"FileFindBandHook"="{FFAC7A18-EDF9-40de-BA3F-49FC2269855E}"
"Logon User Name"="Shannon"
"ShellState"=24 00 00 00 38 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 0d 00 00 00 00 00 00 00 03 00 00 00 (REG_BINARY)
"CleanShutdown"= 0x0000000000 (0)
"FaultCount"= 0x0000000000 (0)
"FaultTime"= 0x0000000000 (0)
"link"=16 00 00 00 (REG_BINARY)
"SearchSystemDirs"= 0x0000000001 (1)
"SearchHidden"= 0x0000000001 (1)
"IncludeSubFolders"= 0x0000000001 (1)
"CaseSensitive"= 0x0000000000 (0)
"SearchSlowFiles"= 0x0000000000 (0)
"IconUnderline"=03 00 00 00 (REG_NONE)
"NoFileFolderConnection"= 0x0000000000 (0)
"Browse For Folder Width"= 0x000000013e (318)
"Browse For Folder Height"= 0x0000000120 (288)
"EnableAutoTray"= 0x0000000000 (0)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ServerAdminUI"= 0x0000000000 (0)
"Hidden"= 0x0000000002 (2)
"ShowCompColor"= 0x0000000001 (1)
"HideFileExt"= 0x0000000001 (1)
"DontPrettyPath"= 0x0000000000 (0)
"ShowInfoTip"= 0x0000000001 (1)
"HideIcons"= 0x0000000000 (0)
"MapNetDrvBtn"= 0x0000000000 (0)
"WebView"= 0x0000000000 (0)
"Filter"= 0x0000000000 (0)
"SuperHidden"= 0x0000000000 (0)
"SeparateProcess"= 0x0000000001 (1)
"ListviewAlphaSelect"= 0x0000000000 (0)
"ListviewShadow"= 0x0000000000 (0)
"ListviewWatermark"= 0x0000000000 (0)
"TaskbarAnimations"= 0x0000000000 (0)
"Start_ShowNetConn_ShouldShow"= 0x0000000042 (66)
"StartMenuInit"= 0x0000000002 (2)
"StartButtonBalloonTip"= 0x0000000002 (2)
"TaskbarSizeMove"= 0x0000000001 (1)
"TaskbarGlomming"= 0x0000000000 (0)
"Start_ShowNetPlaces_ShouldShow"= 0x0000000041 (65)
"NoNetCrawling"= 0x0000000000 (0)
"FolderContentsInfoTip"= 0x0000000001 (1)
"FriendlyTree"= 0x0000000001 (1)
"WebViewBarricade"= 0x0000000001 (1)
"DisableThumbnailCache"= 0x0000000000 (0)
"ShowSuperHidden"= 0x0000000000 (0)
"ClassicViewState"= 0x0000000000 (0)
"PersistBrowsers"= 0x0000000000 (0)
"StartMenuAdminTools"= 0x0000000001 (1)
"StartMenuFavorites"= 0x0000000000 (0)
"StartMenuRun"= 0x0000000001 (1)
"StartMenuChange"= 0x0000000001 (1)
"CascadeControlPanel"="NO"
"CascadeMyDocuments"="NO"
"CascadeMyPictures"="NO"
"CascadeNetworkConnections"="NO"
"CascadePrinters"="NO"
"StartMenuScrollPrograms"="NO"
"IntelliMenus"= 0x0000000001 (1)
"TaskbarGlomLevel"= 0x0000000002 (2)
"Start_ShowUser"= 0x0000000000 (0)
"Start_ShowControlPanel"= 0x0000000002 (2)
"Start_ShowHelp"= 0x0000000000 (0)
"Start_ShowMyComputer"= 0x0000000001 (1)
"Start_ShowMyDocs"= 0x0000000001 (1)
"Start_ShowMyMusic"= 0x0000000001 (1)
"Start_ShowMyGames"= 0x0000000000 (0)
"Start_ShowMyPics"= 0x0000000001 (1)
"Start_ShowPrinters"= 0x0000000000 (0)
"Start_ShowRecentDocs"= 0x0000000000 (0)
"Start_ShowRun"= 0x0000000000 (0)
"Start_ShowSearch"= 0x0000000001 (1)
"Start_ShowSetProgramAccessAndDefaults"= 0x0000000000 (0)
"Start_ShowNetConn"= 0x0000000000 (0)
"Start_ShowNetPlaces"= 0x0000000000 (0)
"Start_LargeMFUIcons"= 0x0000000001 (1)
"Start_MinMFU"= 0x0000000006 (6)
"Start_EnableDragDrop"= 0x0000000001 (1)
"Start_ScrollPrograms"= 0x0000000000 (0)
"Start_AutoCascade"= 0x0000000001 (1)
"Start_NotifyNewApps"= 0x0000000000 (0)
"Start_AdminToolsRoot"= 0x0000000000 (0)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete]
"AutoSuggest"="no"
"Append Completion"="no"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlersDefaultSelection]
"PlayDVDMovieOnArrival"="MSPlayDVDMovieOnArrival"
"ShowPicturesOnArrival"="MSOpenFolder"
"PlayVideoFilesOnArrival"="MSOpenFolder"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess]
"BrowseNewProcess"="yes"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState]
"Settings"=0c 00 02 00 0a 01 80 7c 60 00 00 00 (REG_BINARY)
"FullPath"= 0x0000000000 (0)
"FullPathAddress"= 0x0000000001 (1)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CD Burning]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CD Burning\Drives]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\DefaultIcon]
@="%SystemRoot%\SYSTEM32\mydocs.dll,0"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon]
@="%SystemRoot%\System32\shell32.dll,31"
"Full"="%SystemRoot%\System32\shell32.dll,32"
"Empty"="%SystemRoot%\System32\shell32.dll,31"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\ShellFolder]
"Attributes"= 0x0000000000 (0)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU]
"a"=6e 00 6f 00 74 00 65 00 70 00 61 00 64 00 2e 00 65 00 78 00 65 00 00 00 43 00 3a 00 5c 00 44 00 6f 00 63 00 75 00 6d 00 65 00 6e 00 74 00 73 00 20 00 61 00 6e 00 64 00 20 00 53 00 65 00 74 00 74 00 69 00 6e 00 67 00 73 00 5c 00 53 00 68 00 61 00 6e 00 6e 00 6f 00 6e 00 5c 00 44 00 65 00 73 00 6b 00 74 00 6f 00 70 00 00 00 (REG_BINARY)
"MRUList"="abedc"
"b"=69 00 65 00 78 00 70 00 6c 00 6f 00 72 00 65 00 2e 00 65 00 78 00 65 00 00 00 43 00 3a 00 5c 00 44 00 6f 00 63 00 75 00 6d 00 65 00 6e 00 74 00 73 00 20 00 61 00 6e 00 64 00 20 00 53 00 65 00 74 00 74 00 69 00 6e 00 67 00 73 00 5c 00 53 00 68 00 61 00 6e 00 6e 00 6f 00 6e 00 5c 00 44 00 65 00 73 00 6b 00 74 00 6f 00 70 00 00 00 (REG_BINARY)
"c"=63 00 68 00 72 00 6f 00 6d 00 65 00 2e 00 65 00 78 00 65 00 00 00 43 00 3a 00 5c 00 44 00 6f 00 63 00 75 00 6d 00 65 00 6e 00 74 00 73 00 20 00 61 00 6e 00 64 00 20 00 53 00 65 00 74 00 74 00 69 00 6e 00 67 00 73 00 5c 00 53 00 68 00 61 00 6e 00 6e 00 6f 00 6e 00 5c 00 4d 00 79 00 20 00 44 00 6f 00 63 00 75 00 6d 00 65 00 6e 00 74 00 73 00 5c 00 4d 00 79 00 20 00 50 00 69 00 63 00 74 00 75 00 72 00 65 00 73 00 00 00 (REG_BINARY)
"d"=69 00 54 00 75 00 6e 00 65 00 73 00 2e 00 65 00 78 00 65 00 00 00 43 00 3a 00 5c 00 44 00 6f 00 63 00 75 00 6d 00 65 00 6e 00 74 00 73 00 20 00 61 00 6e 00 64 00 20 00 53 00 65 00 74 00 74 00 69 00 6e 00 67 00 73 00 5c 00 53 00 68 00 61 00 6e 00 6e 00 6f 00 6e 00 5c 00 4d 00 79 00 20 00 44 00 6f 00 63 00 75 00 6d 00 65 00 6e 00 74 00 73 00 00 00 (REG_BINARY)
"e"=48 00 69 00 6a 00 61 00 63 00 6b 00 54 00 68 00 69 00 73 00 2e 00 65 00 78 00 65 00 00 00 43 00 3a 00 5c 00 44 00 6f 00 63 00 75 00 6d 00 65 00 6e 00 74 00 73 00 20 00 61 00 6e 00 64 00 20 00 53 00 65 00 74 00 74 00 69 00 6e 00 67 00 73 00 5c 00 53 00 68 00 61 00 6e 00 6e 00 6f 00 6e 00 5c 00 44 00 65 00 73 00 6b 00 74 00 6f 00 70 00 00 00 (REG_BINARY)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU]
"a"="C:\Documents and Settings\Shannon\Local Settings\Temporary Internet Files\Content.IE5\N53HEQH7\images[1]"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
"a"="C:\Documents and Settings\Shannon\Desktop\03212012_205753.log"
"MRUList"="gcfebdajih"
"b"="C:\Documents and Settings\Shannon\Desktop\exeHelper.com"
"c"="C:\Documents and Settings\Shannon\Desktop\SystemLook.exe"
"d"="C:\Documents and Settings\Shannon\Desktop\unhide.exe"
"e"="C:\Documents and Settings\Shannon\Desktop\ComboFix.exe"
"f"="C:\Program Files\ComboFix.exe"
"g"="C:\Documents and Settings\Shannon\Desktop\fixme.reg"
"h"="C:\Documents and Settings\Shannon\My Documents\My Pictures\april may 2011\IMG_0535.JPG"
"i"="C:\Documents and Settings\Shannon\My Documents\My Pictures\april may 2011\IMG_0561.JPG"
"j"="C:\Documents and Settings\Shannon\Desktop\hijackthis mar 6 2012.log"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\com]
"a"="C:\Documents and Settings\Shannon\Desktop\exeHelper.com"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\exe]
"a"="C:\Documents and Settings\Shannon\Desktop\unhide.exe"
"MRUList"="dcba"
"b"="C:\Documents and Settings\Shannon\Desktop\ComboFix.exe"
"c"="C:\Program Files\ComboFix.exe"
"d"="C:\Documents and Settings\Shannon\Desktop\SystemLook.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\gif]
"a"="C:\Documents and Settings\Shannon\Local Settings\Temporary Internet Files\Content.IE5\N53HEQH7\0000000001_000000000000000017246[1].gif"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\jpg]
"a"="C:\Documents and Settings\Shannon\My Documents\My Pictures\dan deegan bay of killer whales 1997.jpg"
"MRUList"="dcba"
"b"="C:\Documents and Settings\Shannon\My Documents\My Pictures\desmond.jpg"
"c"="C:\Documents and Settings\Shannon\My Documents\My Pictures\april may 2011\IMG_0535.JPG"
"d"="C:\Documents and Settings\Shannon\My Documents\My Pictures\april may 2011\IMG_0561.JPG"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\log]
"a"="C:\Documents and Settings\Shannon\Desktop\hijackthis mar 6 2012.log"
"MRUList"="ba"
"b"="C:\Documents and Settings\Shannon\Desktop\03212012_205753.log"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\reg]
"a"="C:\Documents and Settings\Shannon\Desktop\fixme.reg"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\rtf]
"a"="C:\Documents and Settings\Shannon\My Documents\iPod Software License.rtf"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\txt]
"a"="C:\Documents and Settings\Shannon\Desktop\hijackthis.log. june 21 2011.txt"
"MRUList"="ba"
"b"="C:\Documents and Settings\Shannon\Desktop\mbam-log-2011-11-15 (22-38-43).txt"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CopyMoveTo]
"LastFolder"=d4 00 14 00 1f 48 ba 8f 0d 45 25 ad d0 11 98 a8 08 00 36 1b 11 03 60 00 31 00 00 00 00 00 ae 3e 6b a7 11 00 4d 59 50 49 43 54 7e 31 00 00 2e 00 03 00 04 00 ef be 9a 3b 8e 2c b1 3e 59 1e 14 00 00 00 4d 00 79 00 20 00 50 00 69 00 63 00 74 00 75 00 72 00 65 00 73 00 00 00 18 00 1a 00 27 00 06 00 ef be 53 00 68 00 61 00 6e 00 6e 00 6f 00 6e 00 00 00 18 00 5e 00 31 00 00 00 00 00 b1 3e f8 3d 10 00 4a 55 4e 45 4a 55 7e 31 00 00 46 00 03 00 04 00 ef be b1 3e f8 3d b1 3e f8 3d 14 00 00 00 6a 00 75 00 6e 00 65 00 20 00 6a 00 75 00 6c 00 79 00 20 00 61 00 75 00 67 00 20 00 73 00 65 00 70 00 74 00 20 00 32 00 30 00 31 00 30 00 00 00 18 00 00 00 (REG_BINARY)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\CleanupWiz]
"Last used time"=40 fa 07 db fa 8a c9 01 (REG_NONE)
"NoRun"= 0x0000000001 (1)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{00021492-0000-0000-C000-000000000046}]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{00021492-0000-0000-C000-000000000046}\Enum]
"Implementing"=1c 00 00 00 01 00 00 00 dc 07 03 00 05 00 1e 00 04 00 11 00 2f 00 94 03 05 00 00 00 81 45 e0 01 ee 4e d0 11 bf e9 00 aa 00 5b 43 83 ea 86 42 0a 55 e3 fb 44 80 86 af 3d f7 64 5b d9 21 bf 5c 0e 5f d1 d0 11 83 01 00 aa 00 5b 43 83 8b 8a 0d 54 3f 1c 32 4e 81 32 53 0f 6a 50 20 90 cb d2 e1 b9 ff cc a6 4a 95 79 d7 a4 75 40 30 ef (REG_BINARY)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{00021493-0000-0000-C000-000000000046}]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{00021493-0000-0000-C000-000000000046}\Enum]
"Implementing"=1c 00 00 00 01 00 00 00 dc 07 03 00 05 00 1e 00 11 00 16 00 24 00 8c 00 07 00 00 00 14 96 56 21 95 b7 b1 46 85 f4 e7 37 a8 dc 09 ad 01 24 d0 30 81 6a d0 11 82 74 00 c0 4f d5 ae 38 f3 31 ee c4 68 47 d2 11 be 5c 00 a0 c9 a8 3d a1 61 4e a2 ef 78 b0 d0 11 89 e4 00 c0 4f c9 e2 6e 62 4e a2 ef 78 b0 d0 11 89 e4 00 c0 4f c9 e2 6e 64 4e a2 ef 78 b0 d0 11 89 e4 00 c0 4f c9 e2 6e 31 9e 05 ff 5a cc 2e 4e bf 3b 96 e9 29 d6 55 03 (REG_BINARY)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{00021494-0000-0000-C000-000000000046}]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories\{00021494-0000-0000-C000-000000000046}\Enum]
"Implementing"=1c 00 00 00 01 00 00 00 dc 07 03 00 05 00 1e 00 11 00 16 00 27 00 80 02 02 00 00 00 25 8c 5c 4d 75 d0 d0 11 b4 16 00 c0 4f b9 03 76 7f de ea bd 65 c2 d0 11 bc ed 00 a0 c9 0a b5 0f (REG_BINARY)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2\OpenWithProgids]
"RealPlayer.3GPP2.10"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\OpenWithProgids]
"RealPlayer.3GPP_AMR.10"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif\OpenWithProgids]
"AIFFFile"= (REG_NONE)
"iTunes.aif"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\OpenWithProgids]
"AIFFFile"= (REG_NONE)
"iTunes.aifc"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aiff]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aiff\OpenWithProgids]
"AIFFFile"= (REG_NONE)
"iTunes.aiff"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\OpenWithProgids]
"RealPlayer.AMR.10"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.application]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.application\OpenWithProgids]
"Application.Manifest"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\OpenWithList]
"a"="wmplayer.exe"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\OpenWithProgids]
"ASFFile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asx]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asx\OpenWithProgids]
"ASXFile"= (REG_NONE)
Here is part 3:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au\OpenWithProgids]
"AUFile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\OpenWithList]
"a"="wmplayer.exe"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\OpenWithProgids]
"avifile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.awb]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.awb\OpenWithProgids]
"RealPlayer.AMR_WB.10"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\OpenWithList]
"a"="mspaint.exe"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\OpenWithProgids]
"Paint.Picture"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cda]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cda\OpenWithProgids]
"iTunes.cda"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cpl]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cpl\OpenWithList]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cpl\OpenWithProgids]
"cplfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.css]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.css\OpenWithProgids]
"CSSfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.csv]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.csv\OpenWithProgids]
"Excel.CSV"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CTG]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CTG\OpenWithList]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dbx]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dbx\OpenWithList]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\OpenWithProgids]
"Paint.Picture"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.divx]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.divx\OpenWithProgids]
"RealPlayer.DIVX.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\OpenWithList]
"a"="WINWORD.EXE"
"MRUList"="ab"
"b"="IEXPLORE.EXE"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\OpenWithProgids]
"WordPad.Document.1"= (REG_NONE)
"Word.Document.8"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docm]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docm\OpenWithProgids]
"Word.DocumentMacroEnabled.12"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docx]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docx\OpenWithList]
"a"="WINWORD.EXE"
"MRUList"="ab"
"b"="iexplore.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docx\OpenWithProgids]
"Word.Document.12"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dot]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dot\OpenWithProgids]
"Word.Template.8"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dotm]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dotm\OpenWithProgids]
"Word.TemplateMacroEnabled.12"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dotx]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dotx\OpenWithProgids]
"Word.Template.12"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dvr-ms]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dvr-ms\OpenWithProgids]
"WMP.DVR-MSFile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\OpenWithProgids]
"emffile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.EVR]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.EVR\OpenWithProgids]
"RealPlayer.EVRC.10"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.EVRC]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.EVRC\OpenWithProgids]
"RealPlayer.EVRC.10"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flv]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flv\OpenWithProgids]
"RealPlayer.FLV.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\OpenWithList]
"a"="chrome.exe"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\OpenWithProgids]
"giffile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\OpenWithList]
"a"="IEXPLORE.EXE"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\OpenWithProgids]
"htmlfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\OpenWithList]
"a"="IEXPLORE.EXE"
"MRUList"="ba"
"b"="zt.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\OpenWithProgids]
"htmlfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\OpenWithProgids]
"icofile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.INF]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.INF\OpenWithList]
"a"="NOTEPAD.EXE"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.INF\OpenWithProgids]
"inffile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iss]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iss\OpenWithList]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.itls]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.itls\OpenWithProgids]
"iTunes.itls"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.itms]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.itms\OpenWithProgids]
"iTunes.itms"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.itpc]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.itpc\OpenWithProgids]
"iTunes.itpc"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ivf]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ivf\OpenWithProgids]
"IVFfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ivr]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ivr\OpenWithProgids]
"RealPlayer.IVR.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\OpenWithProgids]
"pjpegfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\OpenWithProgids]
"jpegfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\OpenWithProgids]
"jpegfile"= (REG_NONE)
Here is part 4:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithList]
"a"="WLXPGSS.SCR"
"MRUList"="dcbea"
"b"="shimgvw.dll"
"c"="mspaint.exe"
"d"="iexplore.exe"
"e"="chrome.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithProgids]
"jpegfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.log]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.log\OpenWithList]
"a"="NOTEPAD.EXE"
"MRUList"="ab"
"b"="HijackThis.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.log\OpenWithProgids]
"txtfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lxf]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lxf\OpenWithList]
"a"="LDD.exe"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v\OpenWithProgids]
"mpegfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u\OpenWithProgids]
"m3ufile"= (REG_NONE)
"iTunes.m3u"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u8]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u8\OpenWithProgids]
"iTunes.m3u8"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4a]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4a\OpenWithProgids]
"iTunes.m4a"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4b]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4b\OpenWithProgids]
"iTunes.m4b"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4e]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4e\OpenWithProgids]
"RealPlayer.MP4.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4p]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4p\OpenWithProgids]
"iTunes.m4p"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4r]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4r\OpenWithProgids]
"iTunes.m4r"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4v]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4v\OpenWithProgids]
"RealPlayer.MP4.6"= (REG_NONE)
"iTunes.m4v"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mht]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mht\OpenWithList]
"a"="iexplore.exe"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mht\OpenWithProgids]
"mhtmlfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\OpenWithProgids]
"midfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.midi]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.midi\OpenWithProgids]
"midfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\OpenWithProgids]
"RealPlayer.qt.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2\OpenWithProgids]
"mpegfile"= (REG_NONE)
"iTunes.mp2"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v\OpenWithProgids]
"mpegfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\OpenWithList]
"a"="iexplore.exe"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\OpenWithProgids]
"mp3file"= (REG_NONE)
"iTunes.mp3"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4\OpenWithProgids]
"RealPlayer.MP4.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa\OpenWithProgids]
"mpegfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpe]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpe\OpenWithProgids]
"mpegfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg\OpenWithProgids]
"mpegfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpg]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpg\OpenWithProgids]
"mpegfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv2]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv2\OpenWithProgids]
"mpegfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.msc]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.msc\OpenWithList]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.msc\OpenWithProgids]
"MSCFile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcast]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcast\OpenWithProgids]
"iTunes.pcast"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\OpenWithList]
"a"="AcroRd32.exe"
"MRUList"="ab"
"b"="iexplore.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\OpenWithProgids]
"AcroExch.Document"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pls]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pls\OpenWithProgids]
"iTunes.pls"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\OpenWithProgids]
"pngfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pot]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pot\OpenWithProgids]
"PowerPoint.Template.8"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.potm]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.potm\OpenWithProgids]
"PowerPoint.TemplateMacroEnabled.12"= (REG_NONE)
"PowerPointViewer.TemplateMacroEnabled.12"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.potx]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.potx\OpenWithProgids]
"PowerPoint.Template.12"= (REG_NONE)
"PowerPointViewer.Template.12"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppam]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppam\OpenWithProgids]
"PowerPoint.Addin.12"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppsm]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppsm\OpenWithProgids]
"PowerPoint.SlideShowMacroEnabled.12"= (REG_NONE)
"PowerPointViewer.SlideShowMacroEnabled.12"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppsx]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppsx\OpenWithProgids]
"PowerPoint.SlideShow.12"= (REG_NONE)
"PowerPointViewer.SlideShow.12"= (REG_NONE)
Here is part 5 (and this is only half way done). Do you want the rest of it???
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppt]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppt\OpenWithList]
"a"="POWERPNT.EXE"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppt\OpenWithProgids]
"PowerPoint.Show.8"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pptm]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pptm\OpenWithProgids]
"PowerPoint.ShowMacroEnabled.12"= (REG_NONE)
"PowerPointViewer.ShowMacroEnabled.12"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pptx]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pptx\OpenWithProgids]
"PowerPoint.Show.12"= (REG_NONE)
"PowerPointViewer.Show.12"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ps1]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ps1\OpenWithProgids]
"Microsoft.PowerShellScript.1"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ps1xml]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ps1xml\OpenWithProgids]
"Microsoft.PowerShellXmlData.1"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qcp]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qcp\OpenWithProgids]
"RealPlayer.QCP.10"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qt]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qt\OpenWithProgids]
"RealPlayer.qt.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ra]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ra\OpenWithProgids]
"RealPlayer.RA.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ram]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ram\OpenWithProgids]
"RealPlayer.RAM.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rax]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rax\OpenWithProgids]
"RealPlayer.RAX.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.reg]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.reg\OpenWithList]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.reg\OpenWithProgids]
"regfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rjt]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rm]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rm\OpenWithProgids]
"RealPlayer.RM.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi\OpenWithProgids]
"midfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmj]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmj\OpenWithProgids]
"RealJukebox.RMJ.1"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmm]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmm\OpenWithProgids]
"RealPlayer.RAM.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmp]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmp\OpenWithProgids]
"RealJukebox.RMP.1"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rms]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rms\OpenWithProgids]
"RealPlayer.RMS.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmvb]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmvb\OpenWithProgids]
"RealPlayer.RMVB.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmx]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmx\OpenWithProgids]
"RealJukebox.RMX.1"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rnx]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rp]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsml]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsml\OpenWithProgids]
"RealPlayer.RSML.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rt]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithList]
"a"="WINWORD.EXE"
"MRUList"="ba"
"b"="iTunes.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithProgids]
"rtffile"= (REG_NONE)
"Word.RTF.8"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rv]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rv\OpenWithProgids]
"RealPlayer.RV.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rvx]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rvx\OpenWithProgids]
"RealPlayer.RVX.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sdp]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\OpenWithProgids]
"shtmlfile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sldm]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sldm\OpenWithProgids]
"PowerPoint.SlideMacroEnabled.12"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sldx]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sldx\OpenWithProgids]
"PowerPoint.Slide.12"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smi]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smi\OpenWithProgids]
"RealPlayer.SMIL.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil\OpenWithProgids]
"RealPlayer.SMIL.6"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.snd]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.snd\OpenWithProgids]
"AUFile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ssm]
"Application"=""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ssm\OpenWithProgids]
"SSM"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.theme]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.theme\OpenWithList]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.theme\OpenWithProgids]
"themefile"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif]
(No values found)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\OpenWithProgids]
"TIFImage.Document"= (REG_NONE)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff]
(No values found)
A bit more progress. Don't bother with more at the moment as I've seen enough for now.
Please update me on the current situation in normal, (Shannon), mode apart from the missing start entries..
Thanks
Satchfan
As far as I can tell, everything seems to be back to normal, except for the missing program files. The desktop icons are back, my favorites are back in Internet Explorer. The Start menu has My Documents, My Pictures and My Computer again.
ow about when you log in as Administrator?
When I log in as Administrator in Safe Networking mode, the desltop shows the icons of all of the programs and logs we've saved there, plus Internet Explorer, Bluetooth and a couple others. The start/programs menu does not have any programs after the shortcuts. Same as before. When I switch users (still in Safe Networking) to Shannon, the desktop shows the icons that are present in normal Shannon, and the start/programs has no programs in it.
When I reboot into normal mode, I don't get a choice of which user to log on to, it just logs me on to Shannon. When I try to log off/switch users, it doesn't offer any other users, including no "Administrator" user. I think my 12 year old son created a "Sean" user without knowing what he was doing a year or so ago, but when I try to log off/switch users, it doesn't offer switching to Sean, so I don't know where that user is stored. But I'm pretty sure Sean hadn't used this computer for quite some time when the virus appeared.
Does the fact that My Bluetooth Places has consistently been present throughout this ordeal?
One other thing: The "quick launch" part of the task bar doesn't show up in any mode, despite me going back into the control panel / task bar start menu and trying to fix it. The right-hand side of the task bar shows all of the normal icons, and the middle section is showing this window, but there's nothing on the left side.
I've found something out about the users and Admistrative mode:
I noticed that in normal mode logged in as Shannon, the start menu was back to older Windows mode. I went to Control Panel, Taxk Bar and Start Menu, and even though "classic mode" wasn't checked, it was clearly an older look to the start menu. Also, when I started Internet Explorer, it didn't ask me if I wanted a guide through IE8, as it has done almost every other time I've started it in normal mode.
I then went to Control Panel, User Accounts, and it only shows Shannon, as Administrator! and Guest, which is off.
I am in Safe Networking Mode now, logged on as Administrator, and when I go to Control Panel, User Accounts, it shows me Administrator, a Computer Administrator account, Shannon, a Computer Administrator account, and Guest, which is off. When I click on Change Account, Administrator, it says that account only shows up if there are no other accounts on the computer and when running in Safe Mode. When I click on the Shannon account, it offers options to change the name, change the password, change the picture or change the user type. When I click on "user type," it tells me that Shannon has all of the abilities and permissions of Administrator.
So when I boot up in normal mode as Shannon (since Shannon is considered an Administrator and Administrator only shows up in Safe mode), the user Shannon has system-wide permission.
I don't know if this information helps you. It confuses me more than ever.
The start menu option and the “Internet Explorer Guide” are not problems but I’m having difficulty understanding the rest so I have asked my colleagues for their thoughts on it.
when I started Internet Explorer, it didn't ask me if I wanted a guide through IE8, as it has done almost every other time I've started it in normal mode
That can be changed back if you want that restored.
To fix the Classic start menu problem:
Log in as Shannon.
Launch Notepad (Start>All Programs>Accessories), and copy/paste all the Quoted REGEDIT below to it. Don't forget to include
REGEDIT4 :
REGEDIT4
Save in: Desktop File Name: fixme.reg Save as Type: All files click: Save
On the desktop, double-click
fixme.reg and allow it to run. Let it merge
Reboot and log in
as Administrator .
====================================
Re-un SystemLook
Please run
SystemLook as Administrator.
double-click SystemLook.exe to run it. copy the content of the following codebox into the main textfield, (remeber to include the colon (: ) before the word reg )::reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell] click the Look button to start the scan. when finished, a notepad window will open with the results of the scan. Please copy and paste the contents in your next reply.
====================================
Can you also try creating a new user with admin permissions. Login as that new user and let me know what happens.
Satchfan
OK, I will do this tonight. Today got away from me at work.
No problem Shannon - I'm off for some well-needed beauty sleep.
I ended up going home and falling asleep as soon as I walked in the door.
When you say run SystemLook as Administrator, do you mean in Safe Networking mode?
Shannon
Don't worry about the reply time Shannon; reply when you are rested.
When you are ready, run it whichever works.
When you say run SystemLook as Administrator, do you mean in Safe Networking mode?
Shannon