REGEDIT4

[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{29217EFD-8754-46D1-A3B1-B6E3C3DF0ED2}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\{29217EFD-8754-46D1-A3B1-B6E3C3DF0ED2}]

[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{36D9CB8D-B8CA-4A85-A879-06A71109F11E}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\{36D9CB8D-B8CA-4A85-A879-06A71109F11E}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{36D9CB8D-B8CA-4A85-A879-06A71109F11E}"=-

[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tuvWnoOG] 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"=hex(7):6d,73,76,31,5f,30,00,00