Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

I have a virus and can't run antivirus etc :( [Solved]


  • This topic is locked This topic is locked

#16
Damon(V)

Damon(V)

    Member

  • Topic Starter
  • Member
  • PipPip
  • 87 posts
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C61BFCDF-2E0F-4AAD-A8D7-E06BAFEBCDFE}]
@DACL=(02 0000)
"ContainerFormat"="{A3A860C4-338F-4C17-919A-FBA4B5628F21}"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"ColorManagementVersion"="1.0.0.0"
"MimeTypes"="image/ico,image/x-icon"
"FileExtensions"=".ico,.icon"
"SupportAnimation"=dword:00000000
"SupportChromakey"=dword:00000001
"SupportLossless"=dword:00000001
"SupportMultiframe"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="ICO Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C65055FA-6F66-41B4-8BEC-3929901F8275}]
@DACL=(02 0000)
@="SoundBox Control"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C6606CA5-2108-4CAF-8E52-1953F2DBF716}]
@DACL=(02 0000)
@="PropSet Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C6CF6703-29E5-4E29-B0FB-ABDF8D04A00C}]
@DACL=(02 0000)
@="Arcsoft Mpeg2Audio Encoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C6F6CFC2-870A-4B26-94B7-3539820B0256}]
@DACL=(02 0000)
@="Smoke"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c6f7158b-a330-474c-b76e-ecf14355aaba}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c7011688-e0cb-4e31-9098-d0b58c609eea}]
@DACL=(02 0000)
@="NMEPGEventDataSet Class"
"AppID"="{E731128E-C2D4-4A25-94B9-FEF94F6997B9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c736d415-dc5f-459e-9985-024661738b68}]
@DACL=(02 0000)
@="NMBAppPluginSettings Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C740F918-D49B-46F6-BF79-B237B24F4181}]
@DACL=(02 0000)
@="3D - Flying Quads"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c742dd90-a95a-4874-888a-d1fcb00deb16}]
@DACL=(02 0000)
@="NMBAppPluginAdvancedSearch Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C79C3183-D7F7-439A-98CC-33906A691708}]
@DACL=(02 0000)
@="Gamma correction"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7C1034B-7F25-4BE4-BCDA-4EC86D22AA9D}]
@DACL=(02 0000)
@="AudioEffectLibrary.PitchBenderPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7D29C02-0584-40E8-82A2-61E9D2CB0589}]
@DACL=(02 0000)
@="Dance Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7E786B3-38E7-45E5-9478-76DCE73FF5DA}]
@DACL=(02 0000)
@="Text fly upwards"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7FA08F8-567F-421D-B001-7C4177929597}]
@DACL=(02 0000)
@="Nero QuickTime™ Audio Decoder Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C8059EB6-D2FC-4ecf-A15F-AF427F5E4DB6}]
@DACL=(02 0000)
@="Feeds Background Sync"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c8a0f376-c4d0-496d-9be2-86a8f4c4159c}]
@DACL=(02 0000)
@="NMBActionPluginPlayXRTTVFactory Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C8B1CBD0-6386-4292-B10D-69A389D8EA2E}]
@DACL=(02 0000)
@="NOSWebCommunityExportDialog Class"
"AppID"="{2360A21B-6EDC-4524-A570-AAF72EDAF233}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c8e108ef-90b4-49ea-8bc0-dbcc07e4e286}]
@DACL=(02 0000)
@="NMBAppGlobalSettingsBurnVideo Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C8F48908-55A1-4719-81D7-4F03275F3F0B}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9460283-3EED-11D0-A647-00A0C91EF7B9}]
@DACL=(02 0000)
@="ImageViewerCP 2.5"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9460284-3EED-11D0-A647-00A0C91EF7B9}]
@DACL=(02 0000)
@="ImageViewerCP 2.5 Property Page"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9614C1F-85CC-4BF2-97DA-E0B8DEF4A49C}]
@DACL=(02 0000)
@="Dance Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C96FAF0D-38FA-4E40-AD29-9BFC1ACFBB02}]
@DACL=(02 0000)
@="Color Filter: Blue"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C99422F2-7157-4563-ACA1-16B9F9BA95A4}]
@DACL=(02 0000)
@="Ulead MP3 Encoder Property Page"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9A14CDA-C339-460B-9078-D4DEBCFABE91}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{1C3C4F9D-B84A-467D-9493-36CFBD59EA57}"
"RequiresFullStream"=dword:00000001
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="Exif Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9CD1A93-D7B4-11D2-80C5-00104B1F6CEA}]
@DACL=(02 0000)
@="InstallShield setup user interafce"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9FBE3DE-662A-4ED1-81B8-04D5AEB4335F}]
@DACL=(02 0000)
@="AudioEffectLibrary.VolumePage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA0F26EA-FC00-437F-9841-5B529DDCD615}]
@DACL=(02 0000)
@="NFDSessionBrowser Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA362417-D620-4A52-B767-B9357FBBF1C4}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA5B7520-9B16-4952-BC02-80B0082D2030}]
@DACL=(02 0000)
@="Reverse Rotate Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA602B8D-D77D-4e93-8D6A-87B9F1264BA7}]
@DACL=(02 0000)
@="NMVideoContentHandlerVMR9 Class"
"AppID"="{5BB9749E-DD3F-459F-8865-64A208D020EA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ca615804-dbeb-4d42-bd9e-7d0ca4b3c24b}]
@DACL=(02 0000)
@="Cube Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA682A65-16E0-4692-946D-2DC00EF1DF0F}]
@DACL=(02 0000)
@="NMiTunesIntegrationService Class"
"AppID"="{67FE5B0C-E921-4A9B-9612-4D8C1188F28C}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA6B2E64-9FBF-48AF-BCAC-21A795CFCA9C}]
@DACL=(02 0000)
@="AudioEffectLibrary.ConvolutionReverbPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ca965a82-a63e-4b1f-848c-495e450ac6d1}]
@DACL=(02 0000)
@="NMBAppPluginMediaBrowserPlaylists Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CAA52C33-E721-449A-AC7B-FE2DFFA658D1}]
@DACL=(02 0000)
@="Nero Subtitle Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CACAF262-9370-4615-A13B-9F5539DA4C0A}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cb069c2c-53fc-4aeb-9805-43857e2059e3}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CB376549-DD5A-461D-8C73-D4BB386DC813}]
@DACL=(02 0000)
@="NCAudioDevice Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CB676F53-F526-461B-8A56-7D354A3C9AAB}]
@DACL=(02 0000)
@="Distortion - Twirl"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CB8C13E4-62B5-4C96-A48B-6BA6ACE39C76}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{7134AB8A-9351-44AD-AF62-448DB6B502EC}"
"RequiresFullStream"=dword:00000001
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="Gps Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cbbd10c7-f6eb-4c73-a894-5499e2c55b46}]
@DACL=(02 0000)
@="NMDSVolumeIdPathMapper Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC0CA09A-5B84-43F2-BE5C-9169C192565F}]
@DACL=(02 0000)
@="RTLCSSAPI Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC0CA09A-5B84-43F2-BE5C-9169C192565F}\Programmable]
@DACL=(02 0000)
@=""
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC350820-EB63-4308-BC92-F6795B499128}]
@DACL=(02 0000)
@="NOSHttpCookie Class"
"AppID"="{2E82C0B4-3147-4A6E-AF24-A1992108C420}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC7BFB46-F175-11D1-A392-00E0291F3959}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC956901-F2FF-492E-AFA8-214AFC267C15}]
@DACL=(02 0000)
@="NeroInFDiscCopyServer Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC98AEC5-E5DE-4b12-ABC2-059C481B2211}]
@DACL=(02 0000)
@="NOSMyNeroAccount Class"
"AppID"="{2A385E8B-5598-4227-A850-5FDD9697E2BA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cccf8f47-9400-49be-bc1d-141580118d47}]
@DACL=(02 0000)
@="NMBAppPluginMediaBrowserAutoStart Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CD737E2E-FB63-4041-B47B-5A0246F3DA73}]
@DACL=(02 0000)
@="NCGraphManagerAnalog Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CD7C317C-51D9-4115-964F-D3F8375763CC}]
@DACL=(02 0000)
@="GCAsyncSrc"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cdf2dc2a-6ef6-4806-a4a8-c1878db3ae1a}]
@DACL=(02 0000)
@="NMCFStringVariantDictionary Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CE5DDB65-7BB6-496E-8735-79076C7CFAF4}]
@DACL=(02 0000)
@="NFDSessionBrowser Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cf43bc7b-9664-4e1e-a3a2-ae56adff6159}]
@DACL=(02 0000)
@="NMBActionPluginShowImages Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cf728626-846f-41e6-a8fd-6d27a439bc72}]
@DACL=(02 0000)
@="NMCFSettings Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CF957FA0-77FE-4192-A59F-95CA43BD04BA}]
@DACL=(02 0000)
@="ULead File Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CFADDED4-2A35-4A0F-B8C9-4973F94A573E}]
@DACL=(02 0000)
@="VobuIdx Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CFD9633F-C4D4-49EB-A8F6-976C16D782C4}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D049B20C-5DD0-44FE-B0B3-8F92C8E6D080}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{243DCEE9-8703-40EE-8EF0-22A600B8058C}"
"RequiresFullStream"=dword:00000001
"FixedSize"=dword:00000001
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="Thumbnail Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D050D736-2D21-4723-AD58-5B541FFB6C11}]
@DACL=(02 0000)
@="DivXContentUploadPlugin Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D05F9FC4-7E34-45AE-947A-2576B8DAD5CE}]
@DACL=(02 0000)
@="NeroSearchFilterFolder Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D12C8A94-E72F-4224-BFBA-2DEB97EA3360}]
@DACL=(02 0000)
@="Nero Audio Transcoder Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D19355DC-9045-4B3A-B321-1710330B5AB8}]
@DACL=(02 0000)
@="ULXSVCDDiscCompiler Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D1AF3A1D-EE0A-4C81-BB5B-B515CEE463E7}]
@DACL=(02 0000)
@="Color Filter: Green"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d1b2ebcf-62ea-4e04-a5fd-31e7d62db98d}]
@DACL=(02 0000)
@="NMBApplicationDispatc0 Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d1cb2121-8923-4000-81b8-3d6606e14c01}]
@DACL=(02 0000)
@="NMBActionPluginBurn Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d1f939f1-7f06-4c85-bd92-fc1c3212671e}]
@DACL=(02 0000)
@="RedoButton Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d222981d-3e71-4d7b-9dfc-e1dc6f0941f8}]
@DACL=(02 0000)
@="NMCFSTAServices Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d23b90d0-144f-46bd-841d-59e4eb19dc59}]
@DACL=(02 0000)
@="WMVideo Advanced Encoder DMO"
"WMSDKMerit"=dword:00000100
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d29a1deb-95eb-490c-bdc6-2efe1bfe896d}]
@DACL=(02 0000)
@="NMHDSPluginDevicesDrives Class"
"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d304199a-4ee9-456a-b3bf-4dc62ace4a96}]
@DACL=(02 0000)
@="NMUIScripting Class"
"AppID"="{BF9365C8-57A5-4365-BDC1-AA7763CD494C}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D320EDB6-6545-412F-9514-C6765BD0B1C4}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D335C1B3-FA6A-4014-B256-CC745CB8C2C2}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D39F8A6E-F96F-11D2-9AEC-00A0C95AC349}]
@DACL=(02 0000)
@="Logitech MouseWare - Browser Collection"
"AppID"="{D39F8A62-F96F-11D2-9AEC-00A0C95AC349}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D3D6BB70-C79B-42B7-8C7B-630743D38DB9}]
@DACL=(02 0000)
@="Horizontal Spin Slice"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d3eaa2fe-d4c0-4e72-aee4-6b2a7c4aa978}]
@DACL=(02 0000)
@="NMB0ollectionFactory Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4082021-53DE-4F13-8334-7D5D70D50EC1}]
@DACL=(02 0000)
@="BCGPOleAcc.BCGPPopupMenuAcc2"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4202D1F-8377-4F7D-BDBB-7D77FE4E34C5}]
@DACL=(02 0000)
@="Nero InteractiveGraphics Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D436AA54-CDDA-47D7-8AB8-C18302B3B6E7}]
@DACL=(02 0000)
@="NCPmtPidInfo Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4AD8206-C45B-4240-A090-E063A222B66C}]
@DACL=(02 0000)
@="NeroVideoItems Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4C09F9E-F464-4e80-9F70-63E306799C8B}]
@DACL=(02 0000)
@="NMINetSubscribeInfo Class"
"AppID"="{1287EB79-BA58-4385-A65E-0CA8F82C47B0}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4CAFD1F-8AE4-4270-87C6-E27C7AE13721}]
@DACL=(02 0000)
@="Space Scroller"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4DCD3D7-B4C2-47D9-A6BF-B89BA396A4A3}]
@DACL=(02 0000)
"SpecVersion"="1.0.0.0"
"Version"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{16100D66-8570-4BB9-B92D-FDA4B23ECE67}"
"RequiresFullStream"=dword:00000000
"SupportsPadding"=dword:00000000
"Author"="Microsoft"
"FriendlyName"="IRB Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4FA3D4E-BE69-11D4-AA30-00902704C6BF}]
@DACL=(02 0000)
@="DataObject Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5028632-9B7D-4198-95B7-D92DA3234904}]
@DACL=(02 0000)
@="AudioEffectLibrary.NoiseGatePlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5073D4E-FF32-4AF9-ADAC-3D358C9D2F5D}]
@DACL=(02 0000)
@="Closed Caption"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D570F8AA-FBB9-4CD3-AE27-CFE80140F27A}]
@DACL=(02 0000)
@="Transform"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D57917F3-1001-43BB-B479-CE1CA2F78B49}]
@DACL=(02 0000)
@="AudioEffectLibrary.SurroundReverbPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D588370C-E215-486F-CE29-A875D12480AF}]
@DACL=(02 0000)
@="ArcSoft MPEG4 Decoder Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D588370C-E232-464F-CE29-A875D12480AF}]
@DACL=(02 0000)
@="ArcSoft H.263 Decoder Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d5b0bbd3-3ae6-4366-8c83-a7e0ce4162b6}]
@DACL=(02 0000)
@="NMBAppPluginSearchPanel Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5C3C622-391A-49FB-B58F-D72B7A8FC7C1}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5CBFE52-930B-47B5-99E5-CB6D67834B3D}]
@DACL=(02 0000)
@="GCOSD"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370B-E232-464F-BE29-A885B1248093}]
@DACL=(02 0000)
@="ArcSoft MPEG Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370B-E232-464F-BE29-A885B1249191}]
@DACL=(02 0000)
@="ArcSoft TS Stream"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370C-E232-464F-BE29-A885B1248098}]
@DACL=(02 0000)
@="Arcsoft AMREncoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370C-E232-464F-BE29-A885B1248099}]
@DACL=(02 0000)
@="Arcsoft AMRDecoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370C-E232-464F-BE29-A885B124809F}]
@DACL=(02 0000)
@="ArcSoft MPEG4 Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370E-E232-464F-BE29-A885B1248098}]
@DACL=(02 0000)
@="AMREncoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d6712690-639f-4491-a88a-86b2346c5761}]
@DACL=(02 0000)
@="NMBAppPluginExportSlideshow Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}]
@DACL=(02 0000)
@="Portable Devices Menu"
"LocalizedString"=expand:"@%SystemRoot%\\System32\\WPDShextRes.dll,-511"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d68ef766-a220-46ba-9aaa-5e37ddd51328}]
@DACL=(02 0000)
@="NMSearc0PluginMediaLibrarySource Class"
"AppID"="{163F5B1A-3689-445F-8A0F-E6246DF74F19}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D7384E88-60EF-40E8-BF46-B4849D9A4736}]
@DACL=(02 0000)
@="AudioEffectLibrary.ConvolutionReverbPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d74049dd-2208-4b7a-9b33-60476f2ce8c6}]
@DACL=(02 0000)
@="NMPCContentHandlerFactoryExample Class"
"AppID"="{8E1EAC0D-E841-4FA9-8696-9C4894F4D307}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D764FB17-666B-499A-99CD-809CB3C976EB}]
@DACL=(02 0000)
@="Nero Photo Source"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d7b847e1-3e20-4f63-92ba-4f8f734ac8bb}]
@DACL=(02 0000)
@="VirtualSurroundPage Class"
"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D7BCD582-12D9-41DE-A0DD-1140A140D8C3}]
@DACL=(02 0000)
@="ULXOnDiscFileBasedCaptureDVDDiscCompiler Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D7E9CB06-FD18-490F-BB58-B99C2353E97D}]
@DACL=(02 0000)
@="ArcSoft AC3 Audio Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d80699af-3c19-4ff6-8354-6b3cc095b622}]
@DACL=(02 0000)
@="NeFSGenericEvent Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8168F07-F09B-444B-AFF4-11A138CB3751}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d83d395f-2900-4da2-ad4b-a3a657e43860}]
@DACL=(02 0000)
@="NMBActionPluginBurnCDAHandle Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8705FEA-3AAC-4A82-BE72-C41AB9EDA76C}]
@DACL=(02 0000)
@="ScratchBox Control"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D897A894-0E8B-4AD3-A422-182399E88AB7}]
@DACL=(02 0000)
@="MoveInTransition"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8B4B4EB-58A7-483A-8CA4-3DCB66FC48D7}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d8b60741-b1c3-4b80-bda3-a6b5b5cb72b1}]
@DACL=(02 0000)
@="NMBDirectoryPluginScheduledTVRecordings Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8C6F225-8CC8-428A-8519-6FA175DDF52E}]
@DACL=(02 0000)
@="Teletext"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D9044CE1-CC5F-4AC2-BF94-EAB77098AE86}]
@DACL=(02 0000)
@="Pixelate"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D90B2379-6FE7-4319-9E78-0BBDE763747B}]
@DACL=(02 0000)
@="Multiply"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D9403860-297F-4A49-BF9B-77898150A442}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{1C3C4F9D-B84A-467D-9493-36CFBD59EA57}"
"RequiresFullStream"=dword:00000001
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="Exif Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D95F404D-82C1-44FC-A0E4-0E080975B283}]
@DACL=(02 0000)
@="Nero Thumbnail Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D960A3E9-FF13-46B3-8A8A-2F6F6F9D1FFD}]
@DACL=(02 0000)
@="DiscSysInfo Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d99e1d4a-42b7-4c95-9c28-367bbed05c27}]
@DACL=(02 0000)
@="NMDSDirAccProviderGetFindFileEnumerator Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D9B80BE3-DCBA-4856-A097-0731B2FCB0AB}]
@DACL=(02 0000)
@="Nero Resize Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d9f2bcc3-8b9f-4848-a82f-b7490ae5717e}]
@DACL=(02 0000)
@="NMBAppGlobalSettingsSetupWizard Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d9ff985d-8575-418c-8350-01a39f4e12bc}]
@DACL=(02 0000)
@="NMDSPlaylistManager Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA1923A5-2F78-4f8a-9530-6DFDD6D922ED}]
@DACL=(02 0000)
@="NMTProfileHelperFactory Class"
"AppID"="{29EB903B-19F4-4F20-959A-87AD70EFD39B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA365E3B-0E2E-40FF-B38E-A59A709F1F04}]
@DACL=(02 0000)
@="ulCache Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4D7D80-70BE-4D53-B1FB-D53C907391D3}]
@DACL=(02 0000)
@="Text Fly downwards"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{00000001-E965-440D-9C3E-E04704629F99}]
@DACL=(02 0000)
"FriendlyName"="Nero Digital"
"CLSID"="{00000001-E965-440D-9C3E-E04704629F99}"
"Merit"=dword:00600000
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{0A4252A0-7E70-11D0-A5D6-28DB04C10000}]
@DACL=(02 0000)
"CLSID"="{0A4252A0-7E70-11D0-A5D6-28DB04C10000}"
"FriendlyName"="WDM Streaming Tee/Splitter Devices"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{2721AE20-7E70-11D0-A5D6-28DB04C10000}]
@DACL=(02 0000)
"CLSID"="{2721AE20-7E70-11D0-A5D6-28DB04C10000}"
"FriendlyName"="WDM Stream Decompression Devices"
"Merit"=hex:00,00,64,00
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{2EB07EA0-7E70-11D0-A5D6-28DB04C10000}]
@DACL=(02 0000)
"CLSID"="{2EB07EA0-7E70-11D0-A5D6-28DB04C10000}"
"FriendlyName"="WDM Streaming Data Transforms"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{65E8773D-8F56-11D0-A3B9-00A0C9223196}]
@DACL=(02 0000)
"CLSID"="{65E8773D-8F56-11D0-A3B9-00A0C9223196}"
"FriendlyName"="WDM Streaming Capture Devices"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{65e8773e-8f56-11d0-a3b9-00a0c9223196}]
@DACL=(02 0000)
"CLSID"="{65e8773e-8f56-11d0-a3b9-00a0c9223196}"
"FriendlyName"="WDM Streaming Rendering Devices"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{AD809C00-7B88-11D0-A5D6-28DB04C10000}]
@DACL=(02 0000)
"CLSID"="{AD809C00-7B88-11D0-A5D6-28DB04C10000}"
"FriendlyName"="WDM Streaming Mixer Devices"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{CF1DDA2C-9743-11D0-A3EE-00A0C9223196}]
@DACL=(02 0000)
"CLSID"="{CF1DDA2C-9743-11D0-A3EE-00A0C9223196}"
"FriendlyName"="WDM Streaming Communication Transforms"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{CF1DDA2D-9743-11D0-A3EE-00A0C9223196}]
@DACL=(02 0000)
"CLSID"="{CF1DDA2D-9743-11D0-A3EE-00A0C9223196}"
"FriendlyName"="WDM Streaming Interface Transforms"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{FBF6F530-07B9-11D2-A71E-0000F8004788}]
@DACL=(02 0000)
"CLSID"="{FBF6F530-07B9-11D2-A71E-0000F8004788}"
"FriendlyName"="WDM Streaming System Devices"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dad8fbc7-c658-44ec-b97d-52a7a56470f6}]
@DACL=(02 0000)
@="NMPCSVCDContentHandlerFactory Class"
"AppID"="{41FA2214-273A-46D7-8B96-CA64C554296F}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{daef7299-1527-4e92-ac9c-2272f9fb74a9}]
@DACL=(02 0000)
@="NMBActionPluginPlayTVFactory Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DB179E3B-408D-4EAD-A6FD-DF51D3FA2398}]
@DACL=(02 0000)
@="Nero Search Tray Icon"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{db5d4c3b-02e3-4cbb-9f96-c5dcaf2b6a03}]
@DACL=(02 0000)
@="NMHDSPluginDVDs Class"
"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{db6ce926-eaf7-45e6-883f-70b7553ae922}]
@DACL=(02 0000)
@="NMBAppGlobalSettingsSlideShow Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{db76d02e-50bb-4ec3-be1a-89b35cbe273a}]
@DACL=(02 0000)
@="NMBDirectoryPluginCreateSnapshot Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DB85C504-C730-49DD-BEC1-7B39C6103B7A}]
@DACL=(02 0000)
@="MShellExtMenu Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DBBCE449-2EF5-4A11-B1A9-5FD3F72F3C98}]
@DACL=(02 0000)
@="ILXShareLog Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DBFD2065-9874-4D07-A46C-A1E11F7204C6}]
@DACL=(02 0000)
@="ArcSoft H.264 Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DBFD2065-9874-4D07-A46C-A1E11F7207C7}]
@DACL=(02 0000)
@="ArcSoft H.264 Decoder Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC377543-0DAB-4737-87DF-A7BB78769370}]
@DACL=(02 0000)
@="LdvdRecorder Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC4DF788-5659-4981-A785-2A0ED2F22D40}]
@DACL=(02 0000)
@="AACEncoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC651A43-0720-4a2b-9971-BD2EF1329A3D}]
@DACL=(02 0000)
@="IE Component Categories conditional cache daemon"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC70C4A5-2044-4c59-B806-DEFB9AE0DF7C}]
@DACL=(02 0000)
@="KbLogiExt Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DCB2D492-5F4F-4378-8FF4-DA87062D42E3}]
@DACL=(02 0000)
@="OpenGL Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DCBF3D8D-4BF2-4BCE-9540-F0E6F5BFEE13}]
@DACL=(02 0000)
@="Wipe Right"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dcc7c435-c7c2-460d-a3b0-5aa18c0efc6f}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dcdbc3ae-f8d6-43e5-9775-8a0c7eab9626}]
@DACL=(02 0000)
@="NMBAppPluginMain Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dd14ca6e-392e-45f7-8a91-9ba7609d5575}]
@DACL=(02 0000)
@="NMOEMCustomisatio0 Class"
"AppID"="{AB6AA495-ECA6-4036-8F5B-99B641DF2CC3}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DD7F2ECE-30BE-4E1B-A7A7-305B97625792}]
@DACL=(02 0000)
@="Text Fly downwards"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DD859D70-6E45-4064-914F-3FACBFA7BFB9}]
@DACL=(02 0000)
@="NCCaptureApiSetup Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDA11344-AB20-4AEC-94C4-6AA091574CD0}]
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDBE68A3-F53E-4E2D-B5AF-578F4302C032}]
@DACL=(02 0000)
@="Add pixel"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ddc43479-0f91-420a-a0aa-ca01a6665656}]
@DACL=(02 0000)
@="PauseButton Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDC5917C-D736-49F8-9F81-6D49FEFDDBB0}]
@DACL=(02 0000)
@="NeroSearchEnumUnknown Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDE33513-774E-4BCD-AE79-02F4ADFE62FC}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{8FD3DFC3-F951-492B-817F-69C2E6D9A5B0}"
"RequiresFullStream"=dword:00000000
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="App1 Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE030813-DB68-4605-898B-6B96E999DE31}]
@DACL=(02 0000)
@="Wobble"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE05ACD8-E76E-4BE2-A522-7D734FAFD072}]
@DACL=(02 0000)
@="NeroFileSystemTrackOptions Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{de88bc2f-09c2-4ac0-aead-748c823b719f}]
@DACL=(02 0000)
@="NMFullTextMSHtmlExtractor Class"
"AppID"="{2394E7B8-EA93-4731-B99D-F747EDC8DCFA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DEC52F0B-696A-47F6-8966-EB98B3769897}]
@DACL=(02 0000)
@="Posterize"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF03AA96-1265-441E-BA8A-2A4F482AA672}]
@DACL=(02 0000)
@="ArcSoft MP4Muxer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF03AA97-1265-441E-BA8A-2A4F482AA672}]
@DACL=(02 0000)
@="ArcSoft MP4Muxer Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF2FCE13-25EC-45bb-9D4C-CECD47C2430C}]
@DACL=(02 0000)
@="CUri"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF5F4E46-D041-416C-B77E-6F8E662E2734}]
@DACL=(02 0000)
@="ULXOnDiscDVDDiscCompiler Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E00238C7-396B-4718-9781-B804A41D6072}]
@DACL=(02 0000)
@="NCGraphManagerDv Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e03d7b52-205a-40ba-9d46-ea307ee88916}]
@DACL=(02 0000)
@="NMBMinimizedTask Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E05592E4-C0B5-11D0-A439-00A0C9223196}]
@DACL=(02 0000)
@="Plug In Distributor: IKsQualityForwarder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E061ECC4-E2B1-4672-A2BE-C23C01F8326F}]
@DACL=(02 0000)
@="Wave Scroller"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e0d31ca1-f598-49ac-8123-f27eeae28984}]
@DACL=(02 0000)
@="NMBActionPluginBurnDataDiscHandle Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E0D84E7C-1997-4F77-97C4-74D79FCF6B50}]
@DACL=(02 0000)
@="LMpgVparser Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1272C93-9F34-40CF-BD78-8103F891CB14}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E138D778-FAC2-4BC5-B0B2-01CBFB0288BE}]
@DACL=(02 0000)
@="Vertical Spin Slice"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E13908FB-2996-46F9-BCD2-11FD4563B238}]
@DACL=(02 0000)
@="AudioEffectLibrary.CameraDenoisePage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1A1C814-FD09-4c9d-BB4A-0394B836A1F0}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1A46626-9FD3-11D4-824D-B0D52C000000}]
@DACL=(02 0000)
@="NeroFolder Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e1d24ab8-53df-49ac-bae6-63a06d55a112}]
@DACL=(02 0000)
@="NMBAppGlobalSettingsTV_Folder Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1D4987F-C260-4875-A120-727EF116D46C}]
@DACL=(02 0000)
@="NMTVServerInProc Class"
"AppID"="{93D78BF0-45EF-44F4-AE80-A2C26D246B2B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1F1E7F6-1789-4F59-BE29-ED2C151C527F}]
@DACL=(02 0000)
@="AudioEffectLibrary.DeHumPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E2037A58-3425-4581-A9AE-64A043B05353}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E2CE4A0B-1E6A-426E-A90F-172F42528C90}]
@DACL=(02 0000)
@="Shift edges"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E3263B35-59B5-403D-A5A4-6BCC8FAE840D}]
@DACL=(02 0000)
@="TwistSpin"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E33D5162-3BAE-4CFF-8D72-916221E27BE1}]
@DACL=(02 0000)
@="Pixelize"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E36F5435-7BA3-4255-9062-D275F0BAAA7A}]
@DACL=(02 0000)
@="ILXShareLog Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E386F85E-3C25-474D-B303-45E987251872}]
@DACL=(02 0000)
@="Ulead DV SubTitle Filter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E386F85F-3C25-474D-B303-45E987251872}]
@DACL=(02 0000)
@="Ulead DV SubTitle Filter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E3B54E5D-579C-4FF2-853B-E21DD05EA690}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E3ED0D6D-93FF-4F63-9E6B-436E50B42B9E}]
@DACL=(02 0000)
@="AudioEffectLibrary.ReverbPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E41C6AFE-738D-4A56-957C-C352F41B3275}]
@DACL=(02 0000)
@="QTSrc"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4452E4B-3C68-4A8F-899D-002B4719B397}]
@DACL=(02 0000)
@="Kaleidoscope"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E45B8202-C4A7-4FF0-A394-49F3B443BCBB}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e45d7473-5d97-48b0-953e-1a433986f0df}]
@DACL=(02 0000)
@="NMISItemScannerSimilarImages Class"
"AppID"="{5760A24C-D938-4555-AF27-5ADFA9037C5C}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4771AC6-9154-4952-A3E4-C9C9FF9FE622}]
@DACL=(02 0000)
@="ArcWmdmDev Class"
"AppID"="{A4A41C25-5C78-46C9-ADD0-F9D540AFE25B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E48B2549-D510-4A76-8A5F-FC126A6215F0}]
@DACL=(02 0000)
@="CLSID_AntiPhishingBrowserSolution"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4903434-67CC-4448-9717-7A06103B0290}]
@DACL=(02 0000)
@="Rotate Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4A72332-DC45-4AA1-8164-1CCA8614AC75}]
@DACL=(02 0000)
@="NeroFileDlg Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5090C07-DE24-48C3-A690-3483577B7E26}]
@DACL=(02 0000)
@="3D - Vertical Spinning Strokes"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e50fceed-2660-4b46-a464-66795c3f708e}]
@DACL=(02 0000)
@="NMPCSlideShowContentHandler Class"
"AppID"="{360A9422-64AF-4F12-A5D0-16D3EDB000D1}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5209008-B49E-4A0A-932F-B5E7B0B46A03}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E53E2D39-A94F-4cef-BD64-AF3FEF525ECC}]
@DACL=(02 0000)
@="NMDSMdbMediaDatabase Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E569BDE7-A8DC-47F3-893F-FD2B31B3EEFD}]
@DACL=(02 0000)
@="Browser Application State"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e5b2709a-0e6b-45d3-83c8-ef90c2ed5340}]
@DACL=(02 0000)
@="ChooseSessionDlg Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5C438A0-3224-4019-A442-A68D6838E792}]
@DACL=(02 0000)
@="Nero Ogg Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5DCBA6A-6C50-4BFC-B550-D53DFE5FA025}]
@DACL=(02 0000)
@="NOSHttpPostPart Class"
"AppID"="{2E82C0B4-3147-4A6E-AF24-A1992108C420}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5DE60A7-8C6A-4D84-8F6E-DDA41935161E}]
@DACL=(02 0000)
@="Nero MP4 Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5ECC2B2-1ED9-43C7-BC75-F73E85E28684}]
@DACL=(02 0000)
@="ULXBuildUdfImage Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5F5B5A2-F9C2-49CE-BE5A-7893C92BBD39}]
@DACL=(02 0000)
@="AudioEffectLibrary.VolumePlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e6028af3-ee0a-4e49-a043-c44437680ad8}]
@DACL=(02 0000)
@="BurnSettingsDlg Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E60648A1-A2F1-4b00-A2D9-79B2EDB8F592}]
@DACL=(02 0000)
@="NMPCSVCDContentHandlerVMR9 Class"
"AppID"="{41FA2214-273A-46D7-8B96-CA64C554296F}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E61D368C-E0D1-4EAE-8B90-C151C60C743D}]
@DACL=(02 0000)
@="NCChannel Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E62509DF-ECBE-4D35-B195-7149886B4B73}]
@DACL=(02 0000)
@="Blinds"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E69C308A-0582-4BFF-B3DA-697BB2BB5CDA}]
@DACL=(02 0000)
@="LXContentCenter Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E6EE9AAC-F76B-4947-8260-A9F136138E11}]
@DACL=(02 0000)
@="IE Shell Band Site Menu"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E72F05CD-D565-41F1-92FC-69482B5EC060}]
@DACL=(02 0000)
@="NMPCTVStreamContentHandlerVMR9 Class"
"AppID"="{36C66FF0-507F-44B5-9E74-FA02CCB215CD}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e77b3b79-1a82-43b7-ad65-f526c53e062b}]
@DACL=(02 0000)
@="NMBActionPluginPlayAudio Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E7D06080-238B-11D3-80D7-00104B1F6CEA}]
@DACL=(02 0000)
@="InstallShield Script Engine"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E7E79A30-4F2C-4FAB-8D00-394F2D6BBEBE}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{833CCA5F-DCB7-4516-806F-6596AB26DCE4}"
"RequiresFullStream"=dword:00000000
"SupportsPadding"=dword:00000000
"Author"="Microsoft"
"FriendlyName"="XMP Bag Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E7F33474-CC23-4B5E-A7FA-75BFF421B206}]
@DACL=(02 0000)
@="AudioEffectLibrary.PitchCorrectionPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E80A2814-3A36-4897-8BFF-924D39C26FF8}]
@DACL=(02 0000)
@="NeroFileProducer Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E843040D-3DC3-4592-9F88-54AAEA980244}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e84e182d-b68e-4cab-866f-f35c99dd8315}]
@DACL=(02 0000)
@="NMCFMicroEventManager Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E8658416-7CCB-4c1d-A021-AFF0A2EB8004}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E8933C4B-2C90-4a04-A677-E958D9509F1A}]
@DACL=(02 0000)
@="NMISCIndexingService Class"
"AppID"="{D55E16BA-BBC9-4F7E-A147-E5DFBCC71480}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E8AC0652-173D-4AA4-AA85-F82F0B6B9E94}]
@DACL=(02 0000)
@="AudioEffectLibrary.PseudoReversePlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E98E4C68-3F25-4762-B713-DEC5933E6A40}]
@DACL=(02 0000)
@="3D - Tunnelize"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e9d1594e-3c45-40de-a6d3-75a7ec14c2f9}]
@DACL=(02 0000)
@="NMDSFoundVolumeInfo Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E9F1F599-7B14-4213-BF46-F992758CAB81}]
@DACL=(02 0000)
@="RtlCP Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EAAEAEB6-C59B-4F79-B0B7-8C4B0A60BF46}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EABAAD79-1A74-4672-B7C3-0182B03D55D2}]
@DACL=(02 0000)
@="NeroSink"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EAD55AD3-060A-434A-9383-5BEBCDB2CA07}]
@DACL=(02 0000)
@="ULXBDRTCompiler Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EB18B220-F101-4EF6-B1A5-5360802CF130}]
@DACL=(02 0000)
@="ArcSoft Mpeg Splitter property"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{eb498078-b3a7-4867-aca5-b038d521ed12}]
@DACL=(02 0000)
@="NMBAppGlobalSettingsBurnMix Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EBF92551-A396-40FE-8242-A2B724F2A3AB}]
@DACL=(02 0000)
@="iHDRuntime.IHDRuntime"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EBF9A65D-571C-4746-A9B6-1B83A1033EC8}]
@DACL=(02 0000)
@="AudioRipping Class"
"AppID"="{5EC2B756-5110-4A94-A66D-BFBA2AF993F9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC342F89-D3DE-4D82-A96E-49D70541E3D2}]
@DACL=(02 0000)
@="Fade in/out Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ec39bf14-ca12-46cd-8ea2-b48d5a44350a}]
@DACL=(02 0000)
@="BurnSettings Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC529B00-1A1F-11D1-BAD9-00609744111A}]
@DACL=(02 0000)
@="WDM Streaming VPE VBI Property Set Interface Handler"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC61CE9E-D980-408B-9B90-BDC7EF6CE9EF}]
@DACL=(02 0000)
@="AudioEffectLibrary.PhaserPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC7D1B61-ABED-4022-9991-8A8CCEFD04C6}]
@DACL=(02 0000)
@="Split"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC811B32-852A-4f37-B9DD-A8709DA22B7B}]
@DACL=(02 0000)
@="NMAudioContentHandlerVMR9 Class"
"AppID"="{5BB9749E-DD3F-459F-8865-64A208D020EA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ecac5d28-d6a5-4d47-9fe5-8586db270f2f}]
@DACL=(02 0000)
@="NMSlideSho0Builder Class"
"AppID"="{E95BB462-E6C6-4383-BB6E-2CF3F3CB0502}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED19E3BD-7DB6-44A3-ADAD-B9B98101E0B9}]
@DACL=(02 0000)
@="NCEpgEvents Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED70EF71-8DF3-4C36-826D-E8D29FBB655F}]
@DACL=(02 0000)
@="Nero Search"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ed72f0d2-b701-4c53-adc3-f2fb59946dd8}]
@DACL=(02 0000)
@="ProtectedModeAPI"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED822C8C-D6BE-4301-A631-0E1416BAD28F}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{833CCA5F-DCB7-4516-806F-6596AB26DCE4}"
"RequiresFullStream"=dword:00000000
"SupportsPadding"=dword:00000000
"Author"="Microsoft"
"FriendlyName"="XMP Bag Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED87534F-A666-426B-8D9E-019B21122206}]
@DACL=(02 0000)
@="NCTunerDvbt Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{edbdd4f6-a501-40f2-bc26-9b167b1535e8}]
@DACL=(02 0000)
@="NMBDirectoryPluginTVConfiguration Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{edc8b699-7f88-41f8-aa97-39747a977be0}]
@DACL=(02 0000)
@="NMSSRGBImageBuffer Class"
"AppID"="{E95BB462-E6C6-4383-BB6E-2CF3F3CB0502}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EDF7AC62-3DF4-4A87-AFAF-1AFCD81C9836}]
@DACL=(02 0000)
@="NeAudioRender Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EE2D6561-D63C-11D2-B561-00A0C92E6848}]
@DACL=(02 0000)
@="ShellExt Class"
"AppID"="{3D62E9A1-D243-11D2-B561-00A0C92E6848}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EE366069-1832-420F-B381-0479AD066F19}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{8FD3DFC3-F951-492B-817F-69C2E6D9A5B0}"
"RequiresFullStream"=dword:00000000
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="App1 Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EE58DCFB-90E1-4C39-85B9-6489734AB835}]
@DACL=(02 0000)
@="Bouncing Characters"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EEBAF82E-54DD-4692-9A61-C14369DB03D7}]
@DACL=(02 0000)
@="NMISMediaDatabase Class"
"AppID"="{7AD010A8-C4D6-4CA0-B550-B4EA5F64F8CB}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{eef2bc59-7811-4e77-b3ad-7acb98cd38aa}]
@DACL=(02 0000)
@="NMBActionPluginBurnVCD Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EF134C3B-23E0-457B-A8C1-3B6987DCBD8D}]
@DACL=(02 0000)
@="NeVideoHD Main Property Page"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ef3ef5ef-8f4f-46bc-ba3f-3ace369c8612}]
@DACL=(02 0000)
@="NMDSUriAccessProviderGenericStream Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EF701812-6CC5-466F-9BF5-18825C434971}]
@DACL=(02 0000)
@="NeroSearchFilterSampleSize Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EFAF41AA-04C9-47E4-9226-2D40FFA27DD0}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EFC98D24-8686-4084-B28C-7507FA863BCD}]
@DACL=(02 0000)
@="CHpqLog Object"
"AppID"=""
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EFEDF1EE-AD78-4DE4-9878-8E110683E49F}]
@DACL=(02 0000)
@="NeroFSSecNo Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{effe6d19-b274-4501-afdc-390e46d6fe9b}]
@DACL=(02 0000)
@="ZippedStream Class"
"AppID"="{AB6AA495-ECA6-4036-8F5B-99B641DF2CC3}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F0672315-67B5-4B0F-8ED4-7FFCF7BF09A9}]
@DACL=(02 0000)
@="LVR_MANGR Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f0874e44-8581-46ed-881c-46783c183f6f}]
@DACL=(02 0000)
@="NMBAppPluginPanel Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F0CB4200-B513-43F8-9D05-24D9CE8DEF04}]
@DACL=(02 0000)
@="Ulead DVB Parser"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F0CB4201-B513-43F8-9D05-24D9CE8DEF04}]
@DACL=(02 0000)
@="Ulead DVB Parser Filter Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F13D5DCA-9FE6-4DCA-A3EC-2E161EC5ED33}]
@DACL=(02 0000)
@="Heat Trails"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F162AD9F-87DC-49AE-B697-F688E51D4E9D}]
@DACL=(02 0000)
@="Nero Sound Processor"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F1CCAB47-C8D4-4912-BA82-1D0380A32B3C}]
@DACL=(02 0000)
@="NeroSearchFilterTitle Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f1f2ece6-0289-4992-a536-f82dfc6f6d6e}]
@DACL=(02 0000)
@="DiscInfoDlg Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F1F60FDD-97EA-43F1-920F-6EE61F32F435}]
@DACL=(02 0000)
@="VSTBridge.VSTEffects"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F20D8ADA-A955-435D-8A49-707DAB401787}]
@DACL=(02 0000)
@="Unload Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F2324C9E-B4A5-41CA-BABA-0D12FF4F83AB}]
@DACL=(02 0000)
@="Separate Slide"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F263A5CC-9B97-46AD-8CD1-A2A34BE79049}]
@DACL=(02 0000)
@="ArcHWEventHandler Class"
"AppID"="{A4A41C25-5C78-46C9-ADD0-F9D540AFE25B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F29F4F9A-6914-4046-B8F8-139AA70E1487}]
@DACL=(02 0000)
@="Nero Scout Menu"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F2CF5485-4E02-4f68-819C-B92DE9277049}]
@DACL=(02 0000)
@="&Links"
"MenuTextPUI"="@c:\\WINDOWS\\system32\\ieframe.dll.mui,-13138"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f2deefee-8e64-45d7-83be-c244cff37267}]
@DACL=(02 0000)
@="NMDSFilteredDirectoryFactory Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f311c4e9-5e80-4c9e-a6bf-1beb3de5ad80}]
@DACL=(02 0000)
@="NMDSMetaDataFactoryRegistry Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F38FCD8D-6921-4147-890C-801E5F4F8275}]
@DACL=(02 0000)
@="Mirror: Vertical"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F3C633A2-46C8-498E-8FBB-CC6F721BBCDE}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{79007028-268D-45D6-A3C2-354E6A504BC9}"
"RequiresFullStream"=dword:00000000
"FixedSize"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="App0 Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F3FBC8E5-93A3-11D4-8217-A85459000000}]
@DACL=(02 0000)
@="Nero Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4453C84-C133-43F2-9E12-A9AB4B1422FE}]
@DACL=(02 0000)
@="Ulead OggVorbis Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4670DEF-0302-4F5E-BA74-843F2EC2B7C7}]
@DACL=(02 0000)
@="ArcSoft MP4 Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f472ed2b-87a0-4481-89af-2a60f862305a}]
@DACL=(02 0000)
@="Effect Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F47C211E-70D5-4BC6-B0E7-B045EC466146}]
@DACL=(02 0000)
@="Credits Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4817E4B-04B6-11D3-8862-00C04F72F303}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f495ebbe-a068-41fb-89b6-c605d20a2df3}]
@DACL=(02 0000)
@="RecorderCombobox Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4D36777-EAED-4cc5-9FE7-827BE5190B20}]
@DACL=(02 0000)
@="Microsoft Feeds Scheduler"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4E6633D-3404-4F4E-90EE-4B1A336F14CD}]
@DACL=(02 0000)
@="AudioDocFilter Class"
"AppID"=""
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F50B3F10-19C4-11CF-AA9A-02608C9BABA2}]
@DACL=(02 0000)
@="ArcSoft MPEG Video Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F50B3F11-19C4-11CF-AA9A-02608C9BABA2}]
@DACL=(02 0000)
@="ArcSoft Mpeg Decoder Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F50B3F12-19C4-11CF-AA9A-02608C9BABA2}]
@DACL=(02 0000)
@="ArcSoft Deinterlace Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F5549B02-B736-4D32-BD8C-15D4E260E9B9}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F556280E-71DD-4324-BB45-09F2E3DD2767}]
@DACL=(02 0000)
@="Gaussian Blur"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F578E21A-DB55-4C70-B04E-46D4F9BBD434}]
@DACL=(02 0000)
@="ULXMpegEncoder Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f57d6ba3-d37b-4ef7-9c2b-e05027603f5a}]
@DACL=(02 0000)
@="NMCFPropertyContainerFactory Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F5838CC6-EBBF-46D3-AE67-ED2F8D7218EC}]
@DACL=(02 0000)
@="ULXAudioCDManager Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f5af851c-c93b-416b-a6a9-851e4b2794e3}]
@DACL=(02 0000)
@="NMBActionPluginPlayRadio Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F6032A69-F002-49AB-B24B-757060B11C09}]
@DACL=(02 0000)
@="Nero Mpeg2 Encoder Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F6348C42-7114-468D-A302-EFBBBCA59ADE}]
@DACL=(02 0000)
@="COMTool Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F706F28F-C2C3-4B2B-A1C5-9782FDB677C9}]
@DACL=(02 0000)
@="Nero QuickTime™ Video Decoder Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F710DD5E-3ED7-442F-BA31-4BD2DF7F4366}]
@DACL=(02 0000)
@="ArcSoft 3GP Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F74D77D2-44CE-4315-90CB-DCC30CCFA0C8}]
@DACL=(02 0000)
@="Wipe Down"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F7A8E80E-2430-48CB-953D-23D6D34A623F}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F81D4B21-8E41-4283-B854-C2343756A157}]
@DACL=(02 0000)
@="LudfReader Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F81E7B20-3E76-4194-8171-FFDB0F6CBE49}]
@DACL=(02 0000)
@="CoverEdCtrl Control"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}]
@DACL=(02 0000)
@="IE Registry Tree Options Utility"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8512E22-9DB5-4297-A531-6313D9B64102}]
@DACL=(02 0000)
@="Blur Fade"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f866c0dd-1efb-477a-9dee-20e9bd38c892}]
@DACL=(02 0000)
@="NMDSUriAccessProviderLocalFS Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8777E65-5755-4E49-9237-8D98F0C2499F}]
@DACL=(02 0000)
@="Nero Video Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f87d21b9-5aac-4d8e-af4d-1f6943889382}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f8b558b4-3647-4e31-8157-9e4053de815e}]
@DACL=(02 0000)
@="NMBDirectoryPluginTVPrograms Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f8c26e45-f38b-4392-abdc-ed1caed86104}]
@DACL=(02 0000)
@="NMPCAudioSampleSequenceFactory Class"
"AppID"="{8E1EAC0D-E841-4FA9-8696-9C4894F4D307}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F9136BAA-1AA3-4F7A-B8B0-4F6399BC1B37}]
@DACL=(02 0000)
@="AudioEffectLibrary.ModulationPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F94687E8-1A40-42D2-9028-39DC65793988}]
@DACL=(02 0000)
@="Slime"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F95C8BFF-658C-4DF2-B496-280DBE5E6D20}]
@DACL=(02 0000)
@="AudioEffectLibrary.LoudnessPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F97125CC-1ED0-4E48-B995-E052B45CBDC5}]
@DACL=(02 0000)
@="NCTunerAtsc Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f99c08d6-0eff-4254-93c7-ceb4e890d805}]
@DACL=(02 0000)
@="NMHDSPluginTVScheduledRecordings Class"
"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f9b622f8-f676-4bed-8609-6916953c6bc6}]
@DACL=(02 0000)
@="FreeCurveEdit Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F9DB3544-CCCB-40C2-B24A-91E8BB87D661}]
@DACL=(02 0000)
@="ArcSoft AC3 Decoder Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FA4D6C69-CB72-4656-B570-462EEE447B64}]
@DACL=(02 0000)
@="Circles"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FAB5A83D-1CA1-49DB-8678-9898F4127DB4}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FADE020C-B6CB-400b-B794-5A51C9A5F6D0}]
@DACL=(02 0000)
@="IE Microsoft CommBand"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{faeb54c4-f66f-4806-83a0-805299f5e3ad}]
@DACL=(02 0000)
@="Microsoft Feeds Manager (scripting)"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FB012959-F4F6-44D7-9D09-DAA087A9DB57}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{243DCEE9-8703-40EE-8EF0-22A600B8058C}"
"RequiresFullStream"=dword:00000001
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="Thumbnail Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FB309DE8-723C-4D5B-AC22-DD8F4F28269F}]
@DACL=(02 0000)
@="NOSHttpConnection Class"
"AppID"="{2E82C0B4-3147-4A6E-AF24-A1992108C420}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FB8DC1C1-ED90-42EF-A115-A0494CC138A9}]
@DACL=(02 0000)
@="Voxelize"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FBC519A7-5FA7-45CF-8301-6FDF95164365}]
@DACL=(02 0000)
@="Glow"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FBF23B40-E3F0-101B-8488-00AA003E56F8}\Elevation]
@DACL=(02 0000)
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC1A861A-0782-4321-8FDD-A29C9DD27C5E}]
@DACL=(02 0000)
@="Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC1CF921-CCE5-11D2-8CE6-0000E84979EE}]
@DACL=(02 0000)
@="Audio Buffer Render"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC2B5A8C-EC3F-45bb-BDDC-60F492318D21}]
@DACL=(02 0000)
@="NBClientListener Class"
"AppID"="{A0829BAB-FD70-4f2b-8C0B-8484B6BBCD31}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC2FFAA3-0177-4B95-BEA3-CC42CE5BB41A}]
@DACL=(02 0000)
@="Text fly to right"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{fc63f70a-caae-4f81-be0b-527a1c65c476}]
@DACL=(02 0000)
@="NMSearc0ParserSpirit Class"
"AppID"="{A82BBCBD-CB95-43E6-BF3A-8A6EA9C5B795}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{fc9e87fc-39b0-4bba-a9cc-2ce0207fa6cd}]
@DACL=(02 0000)
@="NMDSFoundVolumeInfoList Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD000F57-10FA-4358-8512-8A6B7A3146A2}]
@DACL=(02 0000)
@="Nero DV Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}]
@DACL=(02 0000)
@="System Restore Wrapper"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD5995B0-0903-4177-9E00-F55BC80BAE7B}]
@DACL=(02 0000)
@="AvSource"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD5CD8B1-6FE0-44F3-BBFB-65E3655B096E}\ProgId]
@DACL=(02 0000)
@="Microsoft.Aspnet.Snapin.AspNetManagementUtility.2"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD83DDBE-2039-48EF-AC24-5C166D10ECB8}]
@DACL=(02 0000)
@="NeroSearchFilterBitrate Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FDBC502E-5417-4DC9-B1B2-811DB529959D}]
@DACL=(02 0000)
@="Spherical Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FDE7673D-2E19-4145-8376-BBD58C4BC7BA}]
@DACL=(02 0000)
@="IE Custom MRU AutoCompleted List"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FDEC7B7F-1209-40BC-AA36-9CAC8CD1A35A}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE1F4910-E20B-4047-BEB4-2798D98E9BA1}]
@DACL=(02 0000)
@="Nero HD Audio Mixer Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE4A53E9-F056-49BF-9841-4E9416B85FC2}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE520461-1A47-4D2F-8F0A-D741B1739022}]
@DACL=(02 0000)
@="ILXShareLog Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE6B11C3-C72E-4061-86C6-9D163121F229}]
@DACL=(02 0000)
@="Microsoft Feeds Manager"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE9617F6-E606-42AA-BECC-0E9CDA246D63}]
@DACL=(02 0000)
@="Color Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEC5F6B2-A15A-11D4-8250-9C9E8B000000}]
@DACL=(02 0000)
@="NeroIsoTrack Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ff0be41b-4a12-4ac1-9b25-1a4f14aa753f}]
@DACL=(02 0000)
@="NMBActionPluginPlay Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ff4d6e08-5f27-44b7-9147-ac7c5864794e}]
@DACL=(02 0000)
@="SourcePlacementPage Class"
"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FF8802ED-84A7-4b5f-8198-AD7151BD33D5}]
@DACL=(02 0000)
@="NMPCSlideShowContentHandlerVMR9 Class"
"AppID"="{360A9422-64AF-4F12-A5D0-16D3EDB000D1}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FFBB820D-964F-4141-A717-418A530EF57B}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ffd90217-f7c2-4434-9ee1-6f1b530db20f}]
@DACL=(02 0000)
@="XML Feed Moniker"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FFF2D28F-E4EE-44D9-8104-8E71556757F6}]
@DACL=(02 0000)
@="DWUpdateService"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="8D40FBF355B23727A5A3D995C56052ADDDBF5945B9B947D7A11A0408CD8296481A133006FAED3DC256E7DE7D4A18D14900FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933FEBC9E127BECC74C8EDD5E5BE2F6E667C038D530D6EB345287CB5A477225A30AF2DEF2890289784F75FD449C8183A5CE5201E4DBF35884876A359DE7936C1C4348B8D0DB4B6AB44F7F64C181F7EFC7C1D446A2A880D630D2BF2FF4013404BABE30C7B80C07C87541B3BFF0970F57DF96D905F04EDDC4E218758F7D57249A14DDA7BC3C02A1FD53773CB97807F0592F32D67CAC5597A8A06E6FCE6AF2E74393871DE905E5BEC4BDC9B41F943A7DFB46FAB414C80BE4F0C06B020D8221B87274A372C5CCA7B13C75132C5D9661C5278CDD5053487D3870EDAE770A9F750283C69F00EAE2F885E61130270B62ED90A6BBC8FA674602345A29570FADAFC1E4B570EE1099AB4FF62EF8051FDE6F19D8AB65B1F8216E30AFC9C68979803522B62AA986E2B31C65785C6DF77DB34B5D4DC9E90E0475836537BA6D6F5C3046F0FE687FDF2A40C2392E227DF3248B15F8CFF981DA487DD9410A109935D28F8D5279DA52780D6A3C0D729090E6660902EFF798B41868755BA61B8D990BEA15C92919CDD7D12602BC6652A060440DF3D8888FE6E448F73F85BF125E132627D8CC9E80F5977286770C90902DF80353B8784F9407447381DEE876CB0FFC3E7B1A7B210869EEE32F63059821763F9C69E64E123A0358257F7D2BFCD611A311D33AD161BD220FB2188096512E1EE511F2B2616467C77DED656905C5F5B9A65F8D3FDE54DFFD7BF02C2EC3D1162DF8610973C79E362461DF1811C38A22C2786CF953C13366400FB44AED25F1690FD495B6A62E5A74CD06146E8BC94606C8E201E0C434FA760F74984568E4D16D132C37FCE9D57626DBC426B78F0C3A81CD806BFA837E6D6E74ADB765E643529C6A83564E021298804CC6B4B47C93E9273741FB7727FE105EDE8F36E359139A24AFB60494584C24EEFE0A6319D17C1DBF4E6885F5E9A82A8AA2C23970D2BA14E4DC71582B767F488EB7E2DA0FB379E047410FE20F2881C9EBF2C2E82F89366DF551B66DE00EBC70341E7746B2EC4F84EA2020EF4CE524412FEB6273B55715981E4FDBE17BF12753E541C2551769D79C10615C0D2A47BEA3B38CC48B8FBDFACB5E010A58B19A7965DB8F92BBBE3A8080CE5DD51E1C9592CC10B5E3663BDD1E01656F41F631247D6207DD8AB1A314C94E70D2740D084176568A2F0B3DAC7FC9769A0C5069984D944B09E5A2F133CF48E47661F5C6C75AD5252122DCCE4A8CDDAE16285F5E7B7BB2DFB74124BB4E6AA6E71490683A2997ADDB849ECCDA7094CD6E26FBE687E3B5E02A9FF1ACD4C984A13FAFC831"
.
Completion time: 2015-03-15  08:35:57
ComboFix-quarantined-files.txt  2015-03-14 22:35
.
Pre-Run: 7,161,360,384 bytes free
Post-Run: 7,085,305,856 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
[spybotsd]
timeout.old=30
.
- - End Of File - - 31306C3E08301C41BAD2ABE1A40ECD67
8F558EB6672622401DA993E1E865C861

  • 0

Advertisements


#17
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 20,017 posts

Hello again Damon,
 

 

ComboFix came up saying that both AVG and Nod32 were active.


The Nod32 one is an old remnant I have included it in the fix below. AVG is showing everywhere in your logs. Are you sure you didn't know about it? Tell me when you return. :)

Now

You have the TeamViewer program on your machine. That is a legitimate program but is sometimes used for malicious purposes. If you know about it and installed it yourself then that is fine. If you don't know about it then uninstall it.

Next

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quote box below into it:
 

KillAll::

SecCenter::
AV: Eset NOD32 antivirus system 2.51 *Enabled/Outdated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

Driver::
vToolbarUpdater18.3.0

Folder::
c:\program files\Common Files\AVG Secure Search

Reboot::

Save this as CFScript.txt, in the same location as ComboFix.exe

CFScriptB-4.gif

Referring to the picture above, drag CFScript into ComboFix.exe

When finished, it will produce a log for you at C:\ComboFix.txt. Please post that here for further review.


  • 0

#18
Damon(V)

Damon(V)

    Member

  • Topic Starter
  • Member
  • PipPip
  • 87 posts

AVG - yes sorry! AVG I couldn't remove using add/remove programs and the folder wouldn't delete but the program is still there, not working as far as I'm aware. 

Teamviewer I installed but I no longer use it so will uninstall.

 

ComboFix 15-03-14.03 - Work 2 15/03/2015   9:22.2.2 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.2039.1164 [GMT 10:00]
Running from: c:\documents and settings\Work 2\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Work 2\Desktop\CFScript.txt
AV: AVG AntiVirus Free Edition 2015 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
(((((((((((((((((((((((((((((((((((((((   Drivers/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_VTOOLBARUPDATER18.3.0
-------\Service_vToolbarUpdater18.3.0
.
.
(((((((((((((((((((((((((   Files Created from 2015-02-14 to 2015-03-14  )))))))))))))))))))))))))))))))
.
.
2015-03-14 04:00 . 2015-03-14 05:55 -------- d-----w- C:\AdwCleaner
2015-03-10 21:18 . 2015-03-14 09:25 -------- d-----w- C:\FRST
2015-03-09 10:57 . 2015-03-09 10:57 -------- d-----w- c:\documents and settings\User2
2015-03-09 10:27 . 2015-03-09 10:27 4579240 ----a-w- C:\avg_isct_stb_all_2015_5315_cm5.exe
2015-03-08 03:10 . 2015-03-08 03:12 5475064 ----a-w- C:\avast_free_antivirus_setup_online.exe
2015-03-08 01:15 . 2015-03-14 07:56 -------- d-----w- c:\program files\Spybot - Search & Destroy 2
2015-03-08 00:24 . 2015-03-08 00:25 -------- d-----w- c:\documents and settings\Administrator
2015-03-06 23:36 . 2015-03-06 23:36 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Identities
2015-03-06 23:34 . 2015-03-06 23:34 -------- d-----w- c:\program files\Common Files\Microsoft
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-02-06 20:34 . 2012-04-02 07:41 701616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-02-06 20:34 . 2011-06-12 04:21 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-02-06 20:34 . 2015-02-06 20:34 5059760 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37 130736 ----a-w- c:\documents and settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37 130736 ----a-w- c:\documents and settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37 130736 ----a-w- c:\documents and settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-04-10 05:37 130736 ----a-w- c:\documents and settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PeerBlock"="c:\program files\PeerBlock\peerblock.exe" [2014-01-14 2122824]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2015-01-23 31090792]
"GoogleChromeAutoLaunch_3DFCF6B2AEB445B8DC09B36EA9332B3A"="c:\documents and settings\Work 2\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2015-03-07 809288]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner.exe" [2015-02-19 5503768]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ANIWZCS2Service"="c:\program files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2007-01-19 49152]
"D-Link D-Link Wireless G DWA-110"="c:\program files\D-Link\D-Link Wireless G DWA-110\AirGCFG.exe" [2008-04-15 1675264]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2006-03-22 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-03-22 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2006-03-22 118784]
"RTHDCPL"="RTHDCPL.EXE" [2007-10-25 16855552]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-01 254336]
"TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" [2011-07-13 273544]
"AVG_UI"="c:\program files\AVG\AVG2015\avgui.exe" [2014-12-17 3667472]
"CheckNDISPort_df"="c:\program files\Hostless Modem\Telstra USB+Wi-Fi\CheckNDISPort_df.exe" [2012-09-20 442696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Acrobat Assistant.lnk - c:\program files\Adobe\Acrobat 6.0\Distillr\acrotray.exe [2003-5-15 217193]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ    autocheck autochk *\0OODBS\0c:\progra~1\AVG\AVG2015\avgrsx.exe /sync /restart\0sdnclean.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Photosmart Premier Fast Start.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Photosmart Premier Fast Start.lnk
backup=c:\windows\pss\HP Photosmart Premier Fast Start.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ImageMixer for HDD Camcorder.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\ImageMixer for HDD Camcorder.lnk
backup=c:\windows\pss\ImageMixer for HDD Camcorder.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^Work 2^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
path=c:\documents and settings\Work 2\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-11-10 02:49 932288 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-11-10 02:49 35736 ----a-w- c:\program files\Adobe\Reader 10.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2010-03-05 17:44 500208 ------w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
2010-02-21 18:57 406992 ----a-w- c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]
2011-04-20 02:48 58656 ----a-w- c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2011-09-26 21:22 59240 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrStsMon00]
2010-06-10 03:42 2621440 ------r- c:\program files\Browny02\Brother\BrStMonW.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
2011-03-14 17:09 2565520 ----a-w- c:\program files\Canon\MyPrinter\BJMYPRT.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenuEx]
2011-08-04 07:06 1612920 ----a-w- c:\program files\Canon\Solution Menu EX\CNSEMAIN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2011-07-28 23:08 1259376 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Easy-PrintToolBox]
2006-10-17 01:20 398944 ----a-w- c:\program files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2014-10-22 06:05 107912 ----atw- c:\documents and settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 14:47 31016 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-10-14 11:17 49152 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
2007-08-22 06:31 80896 ----a-w- c:\program files\HP\Digital Imaging\bin\HpqSRmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-10-09 08:06 421736 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer]
2006-05-09 23:48 94208 ----a-w- c:\program files\Common Files\Logitech\KhalShared\KHALMNPR.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-13 19:42 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
2007-12-03 04:21 2213160 ----a-w- c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 04:57 153136 ----a-w- c:\program files\Common Files\Nero\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OnlineTextBuddy]
2005-04-07 04:13 839680 ----a-w- c:\program files\Telstra\OnlineTextBuddy\OnlineTextBuddy.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
2007-05-10 16:08 2512392 ----a-w- c:\windows\system32\oodtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2011-07-05 08:36 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
2007-10-11 03:04 1826816 ----a-r- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-07-01 23:16 254336 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
2010-02-19 03:37 517096 ----a-w- c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2011-07-13 23:45 273544 ----a-w- c:\program files\Real\realplayer\Update\realsched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS11 Preload]
2007-03-03 04:12 341488 ----a-w- c:\program files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Java\\jre7\\bin\\javaw.exe"=
"c:\\Documents and Settings\\Work 2\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.exe"=
"c:\\Documents and Settings\\Work 2\\Application Data\\Dropbox\\bin\\Dropbox.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
"c:\\Program Files\\SkypeCallRecorder\\SkypeCallRecorder.exe"=
"c:\\Documents and Settings\\Work 2\\Local Settings\\Application Data\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Program Files\\AVG\\AVG2015\\avgmfapx.exe"=
"c:\\Program Files\\AVG\\AVG2015\\avgnsx.exe"=
"c:\\Program Files\\AVG\\AVG2015\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG2015\\avgemcx.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\TeamViewer\\Version9\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version9\\TeamViewer_Service.exe"=
.
R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [9/17/2012 6:58 PM 154904]
R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [8/9/2012 1:56 PM 230680]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [8/10/2012 4:52 AM 27416]
R1 Avgdiskx;AVG Disk Driver;c:\windows\system32\drivers\avgdiskx.sys [9/25/2013 8:57 PM 121624]
R1 AVGIDSDriverl;AVGIDSDriverl;c:\windows\system32\drivers\avgidsdriverlx.sys [6/17/2014 4:17 PM 192792]
R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [8/10/2012 4:52 AM 21272]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [9/12/2012 11:47 AM 192792]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [9/12/2012 11:47 AM 200984]
R2 LBeepKE;LBeepKE;c:\windows\system32\drivers\LBeepKE.sys [8/20/2007 12:14 PM 3712]
R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2/12/2011 7:23 AM 35088]
R2 PS3 Media Server;PS3 Media Server;c:\program files\PS3 Media Server\win32\service\wrapper.exe [5/17/2011 5:25 PM 366872]
R2 TeamViewer9;TeamViewer 9;c:\program files\TeamViewer\Version9\TeamViewer_Service.exe [3/7/2015 9:21 PM 5249808]
R3 pbfilter;pbfilter;c:\program files\PeerBlock\pbfilter.sys [1/2/2011 10:20 AM 19016]
R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\drivers\teamviewervpn.sys [3/11/2010 7:17 PM 25088]
S2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2015\avgidsagent.exe [12/18/2014 9:54 AM 3432976]
S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2015\avgwdsvc.exe [12/18/2014 9:45 AM 298080]
S2 Ca1528av;SPCA1528 Video Camera Service;c:\windows\system32\Drivers\Ca1528av.sys --> c:\windows\system32\Drivers\Ca1528av.sys [?]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [1/2/2015 7:45 PM 315488]
S3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Adapter;c:\windows\system32\drivers\atl01_xp.sys [8/8/2007 7:09 AM 35712]
S3 AVEO;USB2.0 PC Camera;c:\windows\system32\drivers\AVEOdcnt.sys [1/26/2011 2:48 PM 224256]
S3 BrYNSvc;BrYNSvc;c:\program files\Browny02\BrYNSvc.exe [7/30/2013 4:27 PM 245760]
S3 Bulk1528;SPCA1528 Still Camera Service;c:\windows\system32\Drivers\Bulk1528.sys --> c:\windows\system32\Drivers\Bulk1528.sys [?]
S3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [1/12/2011 5:20 PM 113280]
S3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys --> c:\windows\system32\Drivers\ANDROIDUSB.sys [?]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [1/23/2014 5:12 PM 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [1/23/2014 5:12 PM 8576]
S3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys [8/16/2011 11:09 AM 16472]
S3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys [8/16/2011 11:09 AM 11104]
S3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2/19/2010 1:37 PM 517096]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ    Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ    hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder
.
2015-03-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-02 20:34]
.
2015-03-12 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 02:34]
.
2015-03-14 c:\windows\Tasks\Casper XP Scheduled Copy of Disk 1 to Disk 2.job
- c:\program files\Future Systems Solutions\Casper XP\CasperXP.EXE [2007-08-08 04:34]
.
2015-03-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-02-01 23:08]
.
2015-03-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-02-01 23:08]
.
2015-03-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-1326574676-725345543-1006Core.job
- c:\documents and settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-07-16 06:05]
.
2015-03-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-1326574676-725345543-1006UA.job
- c:\documents and settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-07-16 06:05]
.
2015-03-14 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1343024091-1326574676-725345543-1006.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 00:47]
.
2015-03-12 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1343024091-1326574676-725345543-1006.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 00:47]
.
2015-03-14 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2009-03-25 12:18]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uInternet Connection Wizard,ShellNext = "c:\program files\Outlook Express\msimn.exe"
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
TCP: DhcpNameServer = 192.168.0.1
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2015-03-15 09:34
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...  
.
scanning hidden autostart entries ... 
.
scanning hidden files ...  
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC90C}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC90D}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC90E}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC90F}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC912}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC913}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC914}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC915}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC916}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC918}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC919}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC91B}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC91C}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC91D}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC91E}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC91F}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC920}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC921}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC922}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC923}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC924}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC925}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC926}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC927}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC928}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC929}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC92A}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC92B}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC92C}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC92D}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC92E}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC92F}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC930}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC931}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC932}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC933}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC934}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC935}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC936}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC937}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC938}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC939}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC93A}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC93B}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC93D}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC93E}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC93F}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC940}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC941}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC942}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\InProcServer32]
@DACL=(02 0000)
@="wmphoto.dll"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Patterns]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A2735BEC-46BC-4082-99B9-F459F2E783FF}]
@DACL=(02 0000)
@="Nero MP3 Encoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a2822eff-6489-4459-861b-8806ac465a01}]
@DACL=(02 0000)
@="NMHDSPluginDevicesMyComputer Class"
"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a2b9f980-e9b1-473a-af7e-0a864b060710}]
@DACL=(02 0000)
@="NMDSUriAccessProviderGetObjectThumbnail Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A2C59623-BA04-42DF-AB69-3853430C7DD4}]
@DACL=(02 0000)
@="VST EIO"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A354BD60-4C0A-11d3-B561-00A0C92E6848}]
@DACL=(02 0000)
@="DataObject Class"
"AppID"="{3D62E9A1-D243-11D2-B561-00A0C92E6848}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A38B883C-1682-497E-97B0-0A3A9E801682}]
@DACL=(02 0000)
"ManualSafeSave"="1"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A3DD4F92-658A-410F-84FD-6FBBBEF2FFFE}]
@DACL=(02 0000)
@="Internet Options"
"InfoTip"="@c:\\WINDOWS\\system32\\inetcpl.cpl,-4313"
"LocalizedString"="@c:\\WINDOWS\\system32\\inetcpl.cpl,-4312"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A438687F-0BA2-4B04-9760-CB2FDB19E32E}]
@DACL=(02 0000)
@="NCTeletextPidInfo Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A4741943-6C4B-4cf7-BF44-A0F4207D1330}]
@DACL=(02 0000)
@="IE Property Set Storage In Memory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A524E396-3310-400c-A346-8B835B6E44E2}]
@DACL=(02 0000)
@="NOSMarketingRegistration Class"
"AppID"="{FCCD4F86-3FED-4968-BC86-2159D3E1018D}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A55803CC-4D53-404c-8557-FD63DBA95D24}]
@DACL=(02 0000)
@="WPDShextAutoplay"
"AppID"="{A55803CC-4D53-404c-8557-FD63DBA95D24}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A55974C4-FBA1-4BD0-A93E-9EA842DAB865}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A60E4D06-B66D-4AB3-9F06-380239F09F43}]
@DACL=(02 0000)
@="AudioEffectLibrary.DistortionPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A6247D2A-C8F9-423B-A3D9-88D3BE59D6B5}]
@DACL=(02 0000)
@="Nero Video Controls Property Page"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a65786fa-926f-4ef3-9aa6-0aa28074f26d}]
@DACL=(02 0000)
@="NMBAppGlobals Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A67E7FC3-833A-4D1F-B959-5D17C8098779}]
@DACL=(02 0000)
@="ILXShareLog Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A6B222AB-A5EA-4899-B230-084657EDDC7D}]
@DACL=(02 0000)
@="Browser Thread State"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a709a741-be5b-4770-b56f-e0fa82a20a3f}]
@DACL=(02 0000)
@="NMHDSPluginMovies Class"
"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A76E25F7-3D1C-42E7-B6FA-0DD11C884740}]
@DACL=(02 0000)
@="General"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a861a366-0c7a-484b-9116-f366bf0fa23f}]
@DACL=(02 0000)
@="BurnProgressWindow Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A8792A31-F385-493C-A893-40F64EB45F6E}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a8a7eb46-fa1c-449a-9bb0-d6bdcddab9cb}]
@DACL=(02 0000)
@="NMSearc0DataFeedFactory Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A8F6550E-EEF4-4A19-B1F4-052404F217AC}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A92C2CFB-37ED-425D-9179-472A0D85E551}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a9a286c2-3cf5-4b20-95df-3099f642863c}]
@DACL=(02 0000)
@="SurroundLED Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a9b0528c-e8f1-4bb1-926d-a2bf7d87c411}]
@DACL=(02 0000)
@="NMBAppGlobalSettingsParentalControl Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A9C2CEBF-36DC-40A3-92E6-ED59FDD9D20D}]
@DACL=(02 0000)
@="SONY Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a9e32835-244e-4159-8bc6-c7f7e2759d28}]
@DACL=(02 0000)
@="NMCFPropertyValueCompoundValidator Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A9F5348E-6581-4D82-A23B-86C649544BF0}]
@DACL=(02 0000)
@="ArcSoft AAC Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA0AF823-B0D0-40c7-AE77-F13B14D9FFAE}]
@DACL=(02 0000)
@="Toolbar Extension for Bands"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA274BF6-E29B-4BD0-881F-217333F0215F}]
@DACL=(02 0000)
@="CAudioClipServer Object"
"AppID"=""
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA2E3476-56ED-473C-85A2-27C1B04D724D}]
@DACL=(02 0000)
@="Nero Audible Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA49CC5B-F871-4E04-AA59-72120508145B}]
@DACL=(02 0000)
@="AudioEffectLibrary.DistortionPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA4B69AD-D5E4-4BDD-8795-DA7EB3CFCE82}]
@DACL=(02 0000)
@="Additive Blend"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA5A7816-727A-471A-88EC-8D41B74199D2}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA7E2086-CB55-11D2-8094-00104B1F9838}]
@DACL=(02 0000)
@="InstallShield setup object wrapper"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA7E2087-CB55-11D2-8094-00104B1F9838}]
@DACL=(02 0000)
@="InstallShield setup object wrapper"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA7E3C50-864C-4604-BC04-8B0B76E637F6}]
@DACL=(02 0000)
"SpecVersion"="1.0.0.0"
"Version"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{326556A2-F502-4354-9CC0-8E3F48EAF6B5}"
"RequiresFullStream"=dword:00000000
"SupportsPadding"=dword:00000000
"Author"="Microsoft"
"FriendlyName"="App13 Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA8A3797-9E53-4C06-9891-875430FD3219}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA94DCC2-B8B0-4898-B835-000AABD74393}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{7B08A675-91AA-481B-A798-4DA94908613B}"
"RequiresFullStream"=dword:00000000
"SupportsPadding"=dword:00000000
"Author"="Microsoft"
"FriendlyName"="XMP Alt Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AAC2B978-266D-48ae-AA28-60A3EBB872D0}]
@DACL=(02 0000)
@="IE RSS FeedFolder Tasks"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AADE03FE-7BB6-4312-981D-E9F6DAAA3D75}]
@DACL=(02 0000)
@="ULXDiscScriptWriter Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AAF4F5A6-00ED-4766-B0D0-0F12451D944C}]
@DACL=(02 0000)
@="AudioEffectLibrary.PitchBenderPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ab1858a0-2591-44c6-b978-7617773ab464}]
@DACL=(02 0000)
@="NMBCFactory Class"
"AppID"="{3E0C78AE-A3A5-49A6-8D3F-63AD6C80EBA0}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AB31E903-FFE4-4091-ABE6-E69CA1D629EE}]
@DACL=(02 0000)
@="MeltDown"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AB9DB457-1171-4D1F-99C1-63F6811ED440}]
@DACL=(02 0000)
@="Audio Mixer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ABA1523B-38A2-40AE-B3EC-C467FE1608E1}]
@DACL=(02 0000)
@="Supertwirl"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ABE3B9A4-257D-4B97-BD1A-294AF496222E}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC092426-DA6F-4A3D-A440-6E770ABBB000}]
@DACL=(02 0000)
@="NCSystemConfiguration Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC1682C6-78B4-4C0A-9D8C-D131F3068D2A}]
@DACL=(02 0000)
@="AudioEffectLibrary.StereoProcessorPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC4CE3CB-E1C1-44CD-8215-5A1665509EC2}]
@DACL=(02 0000)
"Author"="Microsoft"
"ColorManagementVersion"="1.0.0.0"
"ContainerFormat"="{57A37CAA-367A-4540-916B-F183C5093A4B}"
"FileExtensions"=".wdp"
"FriendlyName"="WMPhoto Encoder"
"MimeTypes"="image/vnd.ms-photo"
"SpecVersion"="1.0.0.0"
"SupportAnimation"=dword:00000000
"SupportChromakey"=dword:00000000
"SupportLossless"=dword:00000001
"SupportMultiframe"=dword:00000001
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"Version"="1.0.0.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC757296-3522-4E11-9862-C17BE5A1767E}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC8BF71E-E41F-4FE7-B58C-E4AC3555C0BF}]
@DACL=(02 0000)
@="DirectBurnSource Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ACE52D03-E5CD-4b20-82FF-E71B11BEAE1D}]
@DACL=(02 0000)
@="Shell Name Space ListView"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AD47916A-A2EB-48F7-9ACA-221790DA98CC}]
@DACL=(02 0000)
@="BackWeb Client Files Access"
"AppID"="{AD47916A-A2EB-48F7-9ACA-221790DA98CC}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{adc8513c-d58e-4d29-a6ab-7d5ea44562c4}]
@DACL=(02 0000)
@="UpConversionTransform Class"
"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{addea488-e976-492e-a67e-7354821794d2}]
@DACL=(02 0000)
@="NMDSOpenAsDirectoryHandlerZip Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{adfab5ce-4211-44b5-b96e-1c6d98dca47f}]
@DACL=(02 0000)
@="NMDSDirAccProviderGetObjectMetaData Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AE9D09AC-6BDA-424F-837E-C2DA8B3FE49B}]
@DACL=(02 0000)
@="NeSoundSwitch About"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AEC62F69-4A9A-4FFC-8528-7B57E3DFB1A0}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AED51F91-EBE9-4344-84A6-D116C4EC40D8}]
@DACL=(02 0000)
@="ULXDVDAudioCompiler Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AEF4E74F-7767-4FED-B4A8-2F9A0A713D26}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AF0996A6-75B5-457D-B417-49B5FBF97E73}]
@DACL=(02 0000)
@="InstallShield InstallDriver String Table"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AF24EC63-B3F1-41FE-8A22-84DAB1A2E3FF}]
@DACL=(02 0000)
@="Horizontal Fade"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AF56508B-F0FF-49D7-A94C-33C0D13CD25E}]
@DACL=(02 0000)
@="Nero Scout Language"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AF68A860-C2F9-4E8C-8312-4A85B09DCBDD}]
@DACL=(02 0000)
@="Zooming Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{af6fcf1c-07a3-44bf-9b4b-641a73efc7ba}]
@DACL=(02 0000)
@="NMBAppGlobalEventManager Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AF822D48-6DA7-4688-85F9-9BD73EDE0CFC}]
@DACL=(02 0000)
@="Vertical Blur"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AFA59C71-0C58-462B-A906-005CD8CAB090}]
@DACL=(02 0000)
@="AudioEffectLibrary.NoiseReductionPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AFAB506E-0531-4B35-B24C-ABD2D8B725A1}]
@DACL=(02 0000)
@="VideoCrossfade"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AFD62485-400B-42BC-9672-568012C88ACB}]
@DACL=(02 0000)
@="Rotate"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B06E521D-B3C9-4FD1-9018-B24D60589F34}]
@DACL=(02 0000)
@="NeroCoverEdFilter Class"
"AppID"="{7975C0BF-88A1-44AD-A292-4C20D698550C}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B0A800B3-AE28-4251-820A-54C47EA8533C}]
@DACL=(02 0000)
@="ULXDiscScriptWriter_XML Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B0A9727A-0896-4985-AE46-0F4891FC027F}]
@DACL=(02 0000)
@="Fuzzy Smooth"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b110f611-91fd-4e5a-8ea0-31f12fbc2254}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B11212BD-A797-4459-B8A7-5C9E7F49E1D0}]
@DACL=(02 0000)
@="IE OLE Document Property Handler"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B14D4AA1-A59B-4FEC-B6DE-15CD9FF6C801}]
@DACL=(02 0000)
@="ULXISO9660Parser Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b1568afb-068a-4992-8968-b3b941561faf}]
@DACL=(02 0000)
@="NMUI Streaming Drawing Engine Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B1D31C8E-FAC0-4E08-B350-279BFAF3F0CB}]
@DACL=(02 0000)
@="AudioEffectLibrary.ModulationPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B1EBFC28-C9BD-47A2-8D33-B948769777A7}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{537396C6-2D8A-4BB6-9BF8-2F0A8E2A3ADF}"
"RequiresFullStream"=dword:00000001
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="Ifd Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B21A20C8-B807-4795-996A-EB86DC7F56CF}]
@DACL=(02 0000)
@="ULXBDParser Class"
"AppID"="{8E781F9A-A63D-4F08-8A41-0E0C5C0B00BA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B232B7E5-94A4-44E3-8759-CD4490619FAB}]
@DACL=(02 0000)
@="ILXShareLog Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B2BF1F99-6825-4D09-BE10-AB205E299B2E}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B31C5FAE-961F-415b-BAF0-E697A5178B94}]
@DACL=(02 0000)
@="IE Microsoft Multiple AutoComplete List Container"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B32BC53D-0CD9-4D68-8BD8-C4D4050C6654}]
@DACL=(02 0000)
@="Typewriter Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B32F4002-BB27-45FF-AF4F-06631C1E8DAD}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B34093CE-D636-437D-BC03-B53ECA20DDF5}]
@DACL=(02 0000)
@="NMCdRipDiscAccessFactory Class"
"AppID"="{95B8D609-BC19-4221-A047-F94757910455}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b35354ff-7e4a-46a4-bf69-4d92c3d7787b}]
@DACL=(02 0000)
@="NMUIResourceLoaderHarddisk Class"
"AppID"="{3A5C0833-DCDC-4475-A9C0-FA742C18D9D5}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B415BA29-CDC8-4202-89F8-A9046145DC70}]
@DACL=(02 0000)
@="Config Class"
"AppID"="{E3E65E5B-5E91-49DE-9A79-770889AEECA2}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}]
@DACL=(02 0000)
@="WinRAR"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B4282392-EB00-4326-92E3-8CC0A02B9C8D}]
@DACL=(02 0000)
@="udfVolumeInfo Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B4346D2E-E989-49B1-B3AB-4506028194C6}]
@DACL=(02 0000)
@="DiscSource Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B43E6609-D589-4F81-A300-9EC6A272039C}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B4DE1A0A-7110-4D8F-9ECC-587B047AE6F0}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b512f94e-18af-4a79-b775-8945fcf1fedb}]
@DACL=(02 0000)
@="NMBAppPluginMediaBrowserVideo Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B54E85D9-FE23-499F-8B88-6ACEA713752B}]
@DACL=(02 0000)
"ContainerFormat"="{163BCC30-E2E9-4F0B-961D-A3E9FDB788A3}"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"ColorManagementVersion"="1.0.0.0"
"MimeTypes"="image/tiff,image/tif"
"FileExtensions"=".tiff,.tif"
"SupportAnimation"=dword:00000000
"SupportChromakey"=dword:00000001
"SupportLossless"=dword:00000001
"SupportMultiframe"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="TIFF Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B5926F16-C9F1-4821-915D-064C1BC3F558}]
@DACL=(02 0000)
@="LBD_MANGR Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b59512ac-8211-4472-a55b-f4e462ab6722}]
@DACL=(02 0000)
@="Slider Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B5B38D71-EE16-4F1F-BCDB-B5229AA34755}]
@DACL=(02 0000)
@="NCAudioPidInfo Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B5C8B898-0074-459F-B700-860D4651EA14}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{ED686F8E-681F-4C8B-BD41-A8ADDBF6B3FC}"
"RequiresFullStream"=dword:00000001
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="Interop Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B5EBAFB9-253E-4A72-A744-0762D2685683}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{568D8936-C0A9-4923-905D-DF2B38238FBC}"
"FixedSize"=dword:00000001
"SupportsPadding"=dword:00000000
"RequiresFullStream"=dword:00000000
"Author"="Microsoft"
"FriendlyName"="Chunk tEXt Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B6327404-9294-4C38-AD35-E074641CE7E6}]
@DACL=(02 0000)
@="NOSMyNeroRegistration Class"
"AppID"="{2A385E8B-5598-4227-A850-5FDD9697E2BA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B66834C6-2E60-11CE-8748-524153480004}]
@DACL=(02 0000)
@="Tab Property Page Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B6913798-10BF-430C-A26F-E6DEE22EB9BA}]
@DACL=(02 0000)
@="WMEncoderAgent Class"
"AppID"="{75EF9314-0B57-4A58-A255-4DD5F41520D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B6AF959B-17D1-449A-AA86-447F7AE3E2EC}]
@DACL=(02 0000)
@="Grayscale"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B6C70017-D66B-435A-B534-56971D9DC17B}]
@DACL=(02 0000)
@="Light edges"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b6cd4a6f-7555-4e3a-b7ed-e50a9b4c14ab}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b6e03708-c84b-452f-ab80-07d1218641a0}]
@DACL=(02 0000)
@="NMBActionPluginPlayXRTVideo Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B6E1ED43-EF40-469f-9273-076A1B33A5F8}]
@DACL=(02 0000)
@="NOSWeb Class"
"AppID"="{D32D6B65-38E6-4756-81ED-68AC9994D7B1}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b6e385e4-89fb-4274-992d-a8edddd05030}]
@DACL=(02 0000)
@="NMBAppPluginMediaBrowserHandle Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B70B4695-CC3C-4B76-B20C-AB991E00B771}]
@DACL=(02 0000)
@="NCLnb Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B71FB6D6-F646-48E9-87EC-1CB81066B359}]
@DACL=(02 0000)
@="AudioEffectLibrary.EqualizerPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B7509D6F-85EE-11d0-AF7D-00C04FD8DC02}]
@DACL=(02 0000)
@="PDF File Persistent Handler"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B8887594-5107-460E-9336-15DB7B340524}]
@DACL=(02 0000)
@="ILdvdSubPicStreamEffect Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B94384BE-1434-42C8-A7C5-7DADD5CF4D2E}]
@DACL=(02 0000)
@="Sparkle"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B97537A4-8308-484C-AAE0-823C6BE17840}]
@DACL=(02 0000)
@="3D - Horizontal Spinning Strokes"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B992D196-B642-4B27-86CA-B87EE66FDF96}]
@DACL=(02 0000)
@="Burn In"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B9B9F083-2B04-452A-8691-83694AC1037B}]
@DACL=(02 0000)
@="LogiExt Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B9E594F3-1362-43D3-9328-9014F52DF7E4}]
@DACL=(02 0000)
@="AudioEffectLibrary.DeesserPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b9f8ac3e-0f71-11d2-b72c-00c04fb6bd3d}]
@DACL=(02 0000)
@="%PlugIn_IBasicAudio%"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ba012a6a-e58d-48aa-8c6e-6338561e1539}]
@DACL=(02 0000)
@="InvokeTest Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BA11F969-397A-4146-AC96-236C3D76711D}]
@DACL=(02 0000)
@="DivX Subtitle Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ba1709eb-6de5-48ff-8443-1b51629cf8aa}]
@DACL=(02 0000)
@="NMBAppGlobalSettingsTV_Card Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ba4d8a48-57dd-467a-9d99-503908714996}]
@DACL=(02 0000)
@="ControlUpdate Class"
"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BA8FA0D6-C5F1-4492-A25F-078FB704DE99}]
@DACL=(02 0000)
@="AudioEffectLibrary.StereoProcessorPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BB0EDC32-1939-4004-AE58-B310B14D0946}]
@DACL=(02 0000)
@="Splash"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{bb107ba8-c685-48a7-bc43-1ed8f6c1677a}]
@DACL=(02 0000)
@="PlayLoopedButton Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BB32FBED-A8CC-41A8-8A15-3F6D5E3D25C7}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BB37EFA1-7BA6-437D-99AA-16E023451DE2}]
@DACL=(02 0000)
@="ULXDiscCompiler Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{bb58849b-79e4-4607-9f20-8e41626db623}]
@DACL=(02 0000)
@="NMBAction Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC07DA8B-262D-42DD-BE69-1090E3D61479}]
@DACL=(02 0000)
@="NeroSearchFilterModificationTime Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC08386A-9952-40CD-BA50-9541D64A4B4E}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC0FDBFF-1075-4E6B-ABB6-70DF437EDB25}]
@DACL=(02 0000)
@="Mirror: Horizontal"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC198A31-AD6F-4475-AE87-537A050EA53F}]
@DACL=(02 0000)
@="ArcSoft Realtime Capture Encoder Filter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC198A32-AD6F-4475-AE87-537A050EA53F}]
@DACL=(02 0000)
@="ArcSoft Realtime Capture Encoder Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC29A660-30E3-11d0-9E69-00C04FD7C15B}]
@DACL=(02 0000)
@="WDM Streaming VPE Property Set Interface Handler"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC5C2E00-D852-47EF-B170-60B095D16586}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC91CA41-D7BA-4EAB-A416-0469496CBA3C}]
@DACL=(02 0000)
@="DXBridge.DXPropSheet"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{bc91ed21-e702-44e5-aa88-9f2f70e986c6}]
@DACL=(02 0000)
@="UserDlgHandler Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC939A5D-2009-4A06-A97B-2FF7CF7D9D0D}]
@DACL=(02 0000)
@="AudioEffectLibrary.SurroundReverbPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD198FBE-F48F-4B2F-98A2-49E30BA3BB3E}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD20C278-FA54-4F7D-8930-1ED3CEF2C1E5}]
@DACL=(02 0000)
@="SubPicTimerStream Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD25C9E9-DD7C-4ECC-8DF8-C526BB751C45}]
@DACL=(02 0000)
@="NBCalendar Control 3"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD351036-74A1-4904-AB72-5625C8E9CB18}]
@DACL=(02 0000)
@="DCdBuilder Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD51FC13-DF3E-4DF5-93F7-0B2CA9D86B0C}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD606F29-5B18-4FAF-9853-7F02CCE1E853}]
@DACL=(02 0000)
@="EIO Manager"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{bd87748e-31c3-4224-9f2e-3374671e85f7}]
@DACL=(02 0000)
@="NMVideoContentHandler Class"
"AppID"="{5BB9749E-DD3F-459F-8865-64A208D020EA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD8C6EB6-9190-4A6E-AD56-9FB41F9491BA}]
@DACL=(02 0000)
@="ArcSoft MP4Muxer Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BDB77E7A-D94E-4ccc-9B73-F7DBB4FFED97}]
@DACL=(02 0000)
@="NMTTranscode0DirectShowDefaultSessionFactoryInProc Class"
"AppID"="{29EB903B-19F4-4F20-959A-87AD70EFD39B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}]
@DACL=(02 0000)
@="Microsoft Tabbed Dialog Control 6.0 (SP5)"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BDC9B245-12B2-44C6-A884-5C0B5075F53E}]
@DACL=(02 0000)
@="BackWeb Client Files Access Via Directory"
"AppID"="{BDC9B245-12B2-44C6-A884-5C0B5075F53E}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BE27DE18-F318-41B2-AFCC-F28702278684}]
@DACL=(02 0000)
@="AudioEffectLibrary.VoiceTweakerPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{be63d0b5-b390-491f-9b21-8dd9a8fa4bba}]
@DACL=(02 0000)
@="NMBAppGlobalSettingsFavouriteTransitions Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{be948da6-a8e7-4c66-ab0c-3015fce93e00}]
@DACL=(02 0000)
@="TransformGUIConnect Class"
"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BEE5207B-14CC-4435-A763-E389A1405E66}]
@DACL=(02 0000)
@="ULXDVDStream Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF27441E-CDCD-4659-AEBE-06F6E069714E}]
@DACL=(02 0000)
@="Screen Capture Filter Task Page"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF3128DD-55B8-11D4-8ED4-00E07D815373}]
@DACL=(02 0000)
@="MBProgressBar.ProgressBar"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF3128E6-55B8-11D4-8ED4-00E07D815373}]
@DACL=(02 0000)
@="MBProgressBar.pagGeneral"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF36E503-6CF5-4B18-9B59-A91868AA2237}]
@DACL=(02 0000)
@="Nero FilterInfo Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{bf404da2-7d3b-11d3-b9e5-00c04f79e399}]
@DACL=(02 0000)
@="RstrProgress Class"
"AppID"="{4E5C175A-7DB9-11D3-B9E5-00C04F79E399}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF53F2AF-4E62-4986-BA1B-ECC1816BFDB7}]
@DACL=(02 0000)
@="LdsStmRead Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF61440A-CE30-44EB-A854-44426449D21D}]
@DACL=(02 0000)
@="Straight Scroller"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF8C5A0F-C6DA-44A5-915E-B07D47295EB3}]
@DACL=(02 0000)
@="AudioEffectLibrary.MultiTapDelayPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF90FB01-D663-4421-8F5F-9B83C3606B9A}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A}]
@DACL=(02 0000)
@="IE Shell Rebar BandSite"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BFCB490B-B2A4-401D-AEE1-C0CDB1474DD1}]
@DACL=(02 0000)
@="Nero Scout Control"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BFCB965B-580B-45F3-B13D-A2329DEDFC03}]
@DACL=(02 0000)
@="Popping Characters"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c0275218-f46e-4597-9a6b-9c3bd0755628}]
@DACL=(02 0000)
@="NMCFStringStringDictionary Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c04936b1-c7ca-4bb9-9d60-74841fbb3893}]
@DACL=(02 0000)
@="NMDSUriAccessProviderGetObjectMetaData Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c04f1516-2630-48c5-986d-7a84f4ead92f}]
@DACL=(02 0000)
@="BrowseButton Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C071C982-2EB2-4D3A-9821-E4B31B0142C8}]
@DACL=(02 0000)
@="Scheme Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c17bc5f7-ba71-46be-88e2-6b7b04e1740b}]
@DACL=(02 0000)
@="NMHDSPluginRadioChannels Class"
"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C17CABB2-D4A3-47D7-A557-339B2EFBD4F1}]
@DACL=(02 0000)
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"FriendlyName"="N-Channel Format Converter"
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c18d5e87-12b4-46a3-ae40-67cf39bc6758}]
@DACL=(02 0000)
@="WinFX Bootstrapper for .xps"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C21B45B8-5D76-4575-BA27-54823098C491}]
@DACL=(02 0000)
@="IE Microsoft Docking Bar Property Bag"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2316705-49F3-46a6-B178-FD617FA235D8}]
@DACL=(02 0000)
@="LmpgInfo Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C27BB47A-8823-4613-8C32-ADEBB5959985}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2A17604-1C2D-4096-BC73-7A2FD9B2FFAB}]
@DACL=(02 0000)
@="Mirror: Vertical"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2A723EC-9C68-42C6-9BEA-52D103661409}]
@DACL=(02 0000)
@="NMBGMonitorControl Class"
"AppID"="{9485CA40-B927-4F13-8D97-D36ACBFE6B9E}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c2bfc7d6-fb81-478d-a590-d428533751d5}]
@DACL=(02 0000)
@="NMSSEffect0AnimationFactory Class"
"AppID"="{0A399995-8A84-484A-8A58-1492BF805F91}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2BFE331-6739-4270-86C9-493D9A04CD38}]
@DACL=(02 0000)
@="DisplayConfig Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c2c4f00a-720e-4389-aeb9-e9c4b0d93c6f}]
@DACL=(02 0000)
@="InformationCardElementBehaviorFactory Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2C99FA5-CA27-4ee2-804D-04E0054414C0}]
@DACL=(02 0000)
@="BackWeb ClientExt Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2D44141-7563-11D5-8C11-0050BA17CEE2}]
@DACL=(02 0000)
@="CyberLink Load Image Property"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2F1EEE2-9120-459C-8089-F54C9E15B886}]
@DACL=(02 0000)
@="ULXDirectCD Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C332C124-340D-4430-AA0D-C75602876FCC}]
@DACL=(02 0000)
@="CUIPower Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c3bd2e3f-45c6-45f6-94ab-2706b0f185a1}]
@DACL=(02 0000)
@="NMHDSPluginDevicesDV Class"
"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C447080C-D0C3-48AE-B31E-BB3E93591C69}]
@DACL=(02 0000)
@="WMEnc DV Timecode Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C4534263-0195-4053-9294-E913443A5F8D}]
@DACL=(02 0000)
@="NeroRCManager Class"
"AppID"="{CB0CCC20-210B-454E-88F8-0BDAD40A4060}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C47B04A8-266F-4977-9EA7-C1F9580E38F7}]
@DACL=(02 0000)
@="NMDSUriAccessProviderSetObjectThumbnail Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C482F15A-1498-4AE8-94A9-4DE5E58DFEBF}]
@DACL=(02 0000)
@="Nero Scout Cleanup"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C48DEE99-A419-47B9-878D-586DB7A42775}]
@DACL=(02 0000)
@="AudioEffectLibrary.ReanaloguePage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c49a347e-3469-4c86-9811-5b98106178fa}]
@DACL=(02 0000)
@="NMFullTextRtfExtractor Class"
"AppID"="{2394E7B8-EA93-4731-B99D-F747EDC8DCFA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C4B8CA0E-4270-4C7A-B0E3-0B9F0F0A336F}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C4EB6B0E-D072-4FA1-915A-3F60A18D1A3A}]
@DACL=(02 0000)
@="Vertical Flipping Characters"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C50CD0A8-3818-4942-8480-E5D988BA65AC}]
@DACL=(02 0000)
@="NOSWebDirectory Class"
"AppID"="{D32D6B65-38E6-4756-81ED-68AC9994D7B1}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5799BF6-11A3-484A-9897-0B3CD4828F6D}]
@DACL=(02 0000)
@="Acid"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5C4B2C9-D6A0-4865-B947-F718BD8070B6}]
@DACL=(02 0000)
@="Arcsoft WMV/ASF Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5C99024-3A99-4097-AD4E-79C25FFF1C46}]
@DACL=(02 0000)
@="ControlDeviceMapper.ControlMapper"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5E265B5-7573-4CC8-A316-ED0522CD6C60}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5F9370B-E232-464F-BE29-A885B1248193}]
@DACL=(02 0000)
@="ArcSoft H.264 Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5FACC37-F8C4-4849-8AAB-1553CDAEB59B}]
@DACL=(02 0000)
@="Duotone"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5FEF23A-14D1-431A-93FF-BD45376FF6AB}]
@DACL=(02 0000)
@="AudioEffectLibrary.DummyEffect"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C61BFCDF-2E0F-4AAD-A8D7-E06BAFEBCDFE}]
@DACL=(02 0000)
"ContainerFormat"="{A3A860C4-338F-4C17-919A-FBA4B5628F21}"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"ColorManagementVersion"="1.0.0.0"
"MimeTypes"="image/ico,image/x-icon"
"FileExtensions"=".ico,.icon"
"SupportAnimation"=dword:00000000
"SupportChromakey"=dword:00000001
"SupportLossless"=dword:00000001
"SupportMultiframe"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="ICO Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C65055FA-6F66-41B4-8BEC-3929901F8275}]
@DACL=(02 0000)
@="SoundBox Control"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C6606CA5-2108-4CAF-8E52-1953F2DBF716}]
@DACL=(02 0000)
@="PropSet Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C6CF6703-29E5-4E29-B0FB-ABDF8D04A00C}]
@DACL=(02 0000)
@="Arcsoft Mpeg2Audio Encoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C6F6CFC2-870A-4B26-94B7-3539820B0256}]
@DACL=(02 0000)
@="Smoke"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c6f7158b-a330-474c-b76e-ecf14355aaba}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c7011688-e0cb-4e31-9098-d0b58c609eea}]
@DACL=(02 0000)
@="NMEPGEventDataSet Class"
"AppID"="{E731128E-C2D4-4A25-94B9-FEF94F6997B9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c736d415-dc5f-459e-9985-024661738b68}]
@DACL=(02 0000)
@="NMBAppPluginSettings Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C740F918-D49B-46F6-BF79-B237B24F4181}]
@DACL=(02 0000)
@="3D - Flying Quads"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c742dd90-a95a-4874-888a-d1fcb00deb16}]
@DACL=(02 0000)
@="NMBAppPluginAdvancedSearch Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C79C3183-D7F7-439A-98CC-33906A691708}]
@DACL=(02 0000)
@="Gamma correction"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7C1034B-7F25-4BE4-BCDA-4EC86D22AA9D}]
@DACL=(02 0000)
@="AudioEffectLibrary.PitchBenderPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7D29C02-0584-40E8-82A2-61E9D2CB0589}]
@DACL=(02 0000)
@="Dance Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7E786B3-38E7-45E5-9478-76DCE73FF5DA}]
@DACL=(02 0000)
@="Text fly upwards"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7FA08F8-567F-421D-B001-7C4177929597}]
@DACL=(02 0000)
@="Nero QuickTime™ Audio Decoder Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C8059EB6-D2FC-4ecf-A15F-AF427F5E4DB6}]
@DACL=(02 0000)
@="Feeds Background Sync"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c8a0f376-c4d0-496d-9be2-86a8f4c4159c}]
@DACL=(02 0000)
@="NMBActionPluginPlayXRTTVFactory Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C8B1CBD0-6386-4292-B10D-69A389D8EA2E}]
@DACL=(02 0000)
@="NOSWebCommunityExportDialog Class"
"AppID"="{2360A21B-6EDC-4524-A570-AAF72EDAF233}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c8e108ef-90b4-49ea-8bc0-dbcc07e4e286}]
@DACL=(02 0000)
@="NMBAppGlobalSettingsBurnVideo Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C8F48908-55A1-4719-81D7-4F03275F3F0B}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9460283-3EED-11D0-A647-00A0C91EF7B9}]
@DACL=(02 0000)
@="ImageViewerCP 2.5"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9460284-3EED-11D0-A647-00A0C91EF7B9}]
@DACL=(02 0000)
@="ImageViewerCP 2.5 Property Page"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9614C1F-85CC-4BF2-97DA-E0B8DEF4A49C}]
@DACL=(02 0000)
@="Dance Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C96FAF0D-38FA-4E40-AD29-9BFC1ACFBB02}]
@DACL=(02 0000)
@="Color Filter: Blue"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C99422F2-7157-4563-ACA1-16B9F9BA95A4}]
@DACL=(02 0000)
@="Ulead MP3 Encoder Property Page"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9A14CDA-C339-460B-9078-D4DEBCFABE91}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{1C3C4F9D-B84A-467D-9493-36CFBD59EA57}"
"RequiresFullStream"=dword:00000001
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="Exif Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9CD1A93-D7B4-11D2-80C5-00104B1F6CEA}]
@DACL=(02 0000)
@="InstallShield setup user interafce"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9FBE3DE-662A-4ED1-81B8-04D5AEB4335F}]
@DACL=(02 0000)
@="AudioEffectLibrary.VolumePage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA0F26EA-FC00-437F-9841-5B529DDCD615}]
@DACL=(02 0000)
@="NFDSessionBrowser Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA362417-D620-4A52-B767-B9357FBBF1C4}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA5B7520-9B16-4952-BC02-80B0082D2030}]
@DACL=(02 0000)
@="Reverse Rotate Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA602B8D-D77D-4e93-8D6A-87B9F1264BA7}]
@DACL=(02 0000)
@="NMVideoContentHandlerVMR9 Class"
"AppID"="{5BB9749E-DD3F-459F-8865-64A208D020EA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ca615804-dbeb-4d42-bd9e-7d0ca4b3c24b}]
@DACL=(02 0000)
@="Cube Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA682A65-16E0-4692-946D-2DC00EF1DF0F}]
@DACL=(02 0000)
@="NMiTunesIntegrationService Class"
"AppID"="{67FE5B0C-E921-4A9B-9612-4D8C1188F28C}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA6B2E64-9FBF-48AF-BCAC-21A795CFCA9C}]
@DACL=(02 0000)
@="AudioEffectLibrary.ConvolutionReverbPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ca965a82-a63e-4b1f-848c-495e450ac6d1}]
@DACL=(02 0000)
@="NMBAppPluginMediaBrowserPlaylists Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CAA52C33-E721-449A-AC7B-FE2DFFA658D1}]
@DACL=(02 0000)
@="Nero Subtitle Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CACAF262-9370-4615-A13B-9F5539DA4C0A}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cb069c2c-53fc-4aeb-9805-43857e2059e3}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CB376549-DD5A-461D-8C73-D4BB386DC813}]
@DACL=(02 0000)
@="NCAudioDevice Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CB676F53-F526-461B-8A56-7D354A3C9AAB}]
@DACL=(02 0000)
@="Distortion - Twirl"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CB8C13E4-62B5-4C96-A48B-6BA6ACE39C76}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{7134AB8A-9351-44AD-AF62-448DB6B502EC}"
"RequiresFullStream"=dword:00000001
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="Gps Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cbbd10c7-f6eb-4c73-a894-5499e2c55b46}]
@DACL=(02 0000)
@="NMDSVolumeIdPathMapper Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC0CA09A-5B84-43F2-BE5C-9169C192565F}]
@DACL=(02 0000)
@="RTLCSSAPI Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC0CA09A-5B84-43F2-BE5C-9169C192565F}\Programmable]
@DACL=(02 0000)
@=""
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC350820-EB63-4308-BC92-F6795B499128}]
@DACL=(02 0000)
@="NOSHttpCookie Class"
"AppID"="{2E82C0B4-3147-4A6E-AF24-A1992108C420}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC7BFB46-F175-11D1-A392-00E0291F3959}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC956901-F2FF-492E-AFA8-214AFC267C15}]
@DACL=(02 0000)
@="NeroInFDiscCopyServer Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC98AEC5-E5DE-4b12-ABC2-059C481B2211}]
@DACL=(02 0000)
@="NOSMyNeroAccount Class"
"AppID"="{2A385E8B-5598-4227-A850-5FDD9697E2BA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cccf8f47-9400-49be-bc1d-141580118d47}]
@DACL=(02 0000)
@="NMBAppPluginMediaBrowserAutoStart Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CD737E2E-FB63-4041-B47B-5A0246F3DA73}]
@DACL=(02 0000)
@="NCGraphManagerAnalog Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CD7C317C-51D9-4115-964F-D3F8375763CC}]
@DACL=(02 0000)
@="GCAsyncSrc"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cdf2dc2a-6ef6-4806-a4a8-c1878db3ae1a}]
@DACL=(02 0000)
@="NMCFStringVariantDictionary Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CE5DDB65-7BB6-496E-8735-79076C7CFAF4}]
@DACL=(02 0000)
@="NFDSessionBrowser Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cf43bc7b-9664-4e1e-a3a2-ae56adff6159}]
@DACL=(02 0000)
@="NMBActionPluginShowImages Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cf728626-846f-41e6-a8fd-6d27a439bc72}]
@DACL=(02 0000)
@="NMCFSettings Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CF957FA0-77FE-4192-A59F-95CA43BD04BA}]
@DACL=(02 0000)
@="ULead File Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CFADDED4-2A35-4A0F-B8C9-4973F94A573E}]
@DACL=(02 0000)
@="VobuIdx Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CFD9633F-C4D4-49EB-A8F6-976C16D782C4}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.

  • 0

#19
Damon(V)

Damon(V)

    Member

  • Topic Starter
  • Member
  • PipPip
  • 87 posts
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D049B20C-5DD0-44FE-B0B3-8F92C8E6D080}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{243DCEE9-8703-40EE-8EF0-22A600B8058C}"
"RequiresFullStream"=dword:00000001
"FixedSize"=dword:00000001
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="Thumbnail Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D050D736-2D21-4723-AD58-5B541FFB6C11}]
@DACL=(02 0000)
@="DivXContentUploadPlugin Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D05F9FC4-7E34-45AE-947A-2576B8DAD5CE}]
@DACL=(02 0000)
@="NeroSearchFilterFolder Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D12C8A94-E72F-4224-BFBA-2DEB97EA3360}]
@DACL=(02 0000)
@="Nero Audio Transcoder Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D19355DC-9045-4B3A-B321-1710330B5AB8}]
@DACL=(02 0000)
@="ULXSVCDDiscCompiler Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D1AF3A1D-EE0A-4C81-BB5B-B515CEE463E7}]
@DACL=(02 0000)
@="Color Filter: Green"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d1b2ebcf-62ea-4e04-a5fd-31e7d62db98d}]
@DACL=(02 0000)
@="NMBApplicationDispatc0 Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d1cb2121-8923-4000-81b8-3d6606e14c01}]
@DACL=(02 0000)
@="NMBActionPluginBurn Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d1f939f1-7f06-4c85-bd92-fc1c3212671e}]
@DACL=(02 0000)
@="RedoButton Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d222981d-3e71-4d7b-9dfc-e1dc6f0941f8}]
@DACL=(02 0000)
@="NMCFSTAServices Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d23b90d0-144f-46bd-841d-59e4eb19dc59}]
@DACL=(02 0000)
@="WMVideo Advanced Encoder DMO"
"WMSDKMerit"=dword:00000100
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d29a1deb-95eb-490c-bdc6-2efe1bfe896d}]
@DACL=(02 0000)
@="NMHDSPluginDevicesDrives Class"
"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d304199a-4ee9-456a-b3bf-4dc62ace4a96}]
@DACL=(02 0000)
@="NMUIScripting Class"
"AppID"="{BF9365C8-57A5-4365-BDC1-AA7763CD494C}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D320EDB6-6545-412F-9514-C6765BD0B1C4}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D335C1B3-FA6A-4014-B256-CC745CB8C2C2}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D39F8A6E-F96F-11D2-9AEC-00A0C95AC349}]
@DACL=(02 0000)
@="Logitech MouseWare - Browser Collection"
"AppID"="{D39F8A62-F96F-11D2-9AEC-00A0C95AC349}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D3D6BB70-C79B-42B7-8C7B-630743D38DB9}]
@DACL=(02 0000)
@="Horizontal Spin Slice"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d3eaa2fe-d4c0-4e72-aee4-6b2a7c4aa978}]
@DACL=(02 0000)
@="NMB0ollectionFactory Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4082021-53DE-4F13-8334-7D5D70D50EC1}]
@DACL=(02 0000)
@="BCGPOleAcc.BCGPPopupMenuAcc2"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4202D1F-8377-4F7D-BDBB-7D77FE4E34C5}]
@DACL=(02 0000)
@="Nero InteractiveGraphics Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D436AA54-CDDA-47D7-8AB8-C18302B3B6E7}]
@DACL=(02 0000)
@="NCPmtPidInfo Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4AD8206-C45B-4240-A090-E063A222B66C}]
@DACL=(02 0000)
@="NeroVideoItems Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4C09F9E-F464-4e80-9F70-63E306799C8B}]
@DACL=(02 0000)
@="NMINetSubscribeInfo Class"
"AppID"="{1287EB79-BA58-4385-A65E-0CA8F82C47B0}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4CAFD1F-8AE4-4270-87C6-E27C7AE13721}]
@DACL=(02 0000)
@="Space Scroller"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4DCD3D7-B4C2-47D9-A6BF-B89BA396A4A3}]
@DACL=(02 0000)
"SpecVersion"="1.0.0.0"
"Version"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{16100D66-8570-4BB9-B92D-FDA4B23ECE67}"
"RequiresFullStream"=dword:00000000
"SupportsPadding"=dword:00000000
"Author"="Microsoft"
"FriendlyName"="IRB Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4FA3D4E-BE69-11D4-AA30-00902704C6BF}]
@DACL=(02 0000)
@="DataObject Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5028632-9B7D-4198-95B7-D92DA3234904}]
@DACL=(02 0000)
@="AudioEffectLibrary.NoiseGatePlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5073D4E-FF32-4AF9-ADAC-3D358C9D2F5D}]
@DACL=(02 0000)
@="Closed Caption"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D570F8AA-FBB9-4CD3-AE27-CFE80140F27A}]
@DACL=(02 0000)
@="Transform"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D57917F3-1001-43BB-B479-CE1CA2F78B49}]
@DACL=(02 0000)
@="AudioEffectLibrary.SurroundReverbPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D588370C-E215-486F-CE29-A875D12480AF}]
@DACL=(02 0000)
@="ArcSoft MPEG4 Decoder Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D588370C-E232-464F-CE29-A875D12480AF}]
@DACL=(02 0000)
@="ArcSoft H.263 Decoder Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d5b0bbd3-3ae6-4366-8c83-a7e0ce4162b6}]
@DACL=(02 0000)
@="NMBAppPluginSearchPanel Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5C3C622-391A-49FB-B58F-D72B7A8FC7C1}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5CBFE52-930B-47B5-99E5-CB6D67834B3D}]
@DACL=(02 0000)
@="GCOSD"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370B-E232-464F-BE29-A885B1248093}]
@DACL=(02 0000)
@="ArcSoft MPEG Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370B-E232-464F-BE29-A885B1249191}]
@DACL=(02 0000)
@="ArcSoft TS Stream"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370C-E232-464F-BE29-A885B1248098}]
@DACL=(02 0000)
@="Arcsoft AMREncoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370C-E232-464F-BE29-A885B1248099}]
@DACL=(02 0000)
@="Arcsoft AMRDecoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370C-E232-464F-BE29-A885B124809F}]
@DACL=(02 0000)
@="ArcSoft MPEG4 Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370E-E232-464F-BE29-A885B1248098}]
@DACL=(02 0000)
@="AMREncoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d6712690-639f-4491-a88a-86b2346c5761}]
@DACL=(02 0000)
@="NMBAppPluginExportSlideshow Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}]
@DACL=(02 0000)
@="Portable Devices Menu"
"LocalizedString"=expand:"@%SystemRoot%\\System32\\WPDShextRes.dll,-511"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d68ef766-a220-46ba-9aaa-5e37ddd51328}]
@DACL=(02 0000)
@="NMSearc0PluginMediaLibrarySource Class"
"AppID"="{163F5B1A-3689-445F-8A0F-E6246DF74F19}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D7384E88-60EF-40E8-BF46-B4849D9A4736}]
@DACL=(02 0000)
@="AudioEffectLibrary.ConvolutionReverbPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d74049dd-2208-4b7a-9b33-60476f2ce8c6}]
@DACL=(02 0000)
@="NMPCContentHandlerFactoryExample Class"
"AppID"="{8E1EAC0D-E841-4FA9-8696-9C4894F4D307}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D764FB17-666B-499A-99CD-809CB3C976EB}]
@DACL=(02 0000)
@="Nero Photo Source"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d7b847e1-3e20-4f63-92ba-4f8f734ac8bb}]
@DACL=(02 0000)
@="VirtualSurroundPage Class"
"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D7BCD582-12D9-41DE-A0DD-1140A140D8C3}]
@DACL=(02 0000)
@="ULXOnDiscFileBasedCaptureDVDDiscCompiler Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D7E9CB06-FD18-490F-BB58-B99C2353E97D}]
@DACL=(02 0000)
@="ArcSoft AC3 Audio Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d80699af-3c19-4ff6-8354-6b3cc095b622}]
@DACL=(02 0000)
@="NeFSGenericEvent Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8168F07-F09B-444B-AFF4-11A138CB3751}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d83d395f-2900-4da2-ad4b-a3a657e43860}]
@DACL=(02 0000)
@="NMBActionPluginBurnCDAHandle Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8705FEA-3AAC-4A82-BE72-C41AB9EDA76C}]
@DACL=(02 0000)
@="ScratchBox Control"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D897A894-0E8B-4AD3-A422-182399E88AB7}]
@DACL=(02 0000)
@="MoveInTransition"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8B4B4EB-58A7-483A-8CA4-3DCB66FC48D7}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d8b60741-b1c3-4b80-bda3-a6b5b5cb72b1}]
@DACL=(02 0000)
@="NMBDirectoryPluginScheduledTVRecordings Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8C6F225-8CC8-428A-8519-6FA175DDF52E}]
@DACL=(02 0000)
@="Teletext"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D9044CE1-CC5F-4AC2-BF94-EAB77098AE86}]
@DACL=(02 0000)
@="Pixelate"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D90B2379-6FE7-4319-9E78-0BBDE763747B}]
@DACL=(02 0000)
@="Multiply"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D9403860-297F-4A49-BF9B-77898150A442}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{1C3C4F9D-B84A-467D-9493-36CFBD59EA57}"
"RequiresFullStream"=dword:00000001
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="Exif Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D95F404D-82C1-44FC-A0E4-0E080975B283}]
@DACL=(02 0000)
@="Nero Thumbnail Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D960A3E9-FF13-46B3-8A8A-2F6F6F9D1FFD}]
@DACL=(02 0000)
@="DiscSysInfo Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d99e1d4a-42b7-4c95-9c28-367bbed05c27}]
@DACL=(02 0000)
@="NMDSDirAccProviderGetFindFileEnumerator Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D9B80BE3-DCBA-4856-A097-0731B2FCB0AB}]
@DACL=(02 0000)
@="Nero Resize Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d9f2bcc3-8b9f-4848-a82f-b7490ae5717e}]
@DACL=(02 0000)
@="NMBAppGlobalSettingsSetupWizard Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d9ff985d-8575-418c-8350-01a39f4e12bc}]
@DACL=(02 0000)
@="NMDSPlaylistManager Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA1923A5-2F78-4f8a-9530-6DFDD6D922ED}]
@DACL=(02 0000)
@="NMTProfileHelperFactory Class"
"AppID"="{29EB903B-19F4-4F20-959A-87AD70EFD39B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA365E3B-0E2E-40FF-B38E-A59A709F1F04}]
@DACL=(02 0000)
@="ulCache Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4D7D80-70BE-4D53-B1FB-D53C907391D3}]
@DACL=(02 0000)
@="Text Fly downwards"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{00000001-E965-440D-9C3E-E04704629F99}]
@DACL=(02 0000)
"FriendlyName"="Nero Digital"
"CLSID"="{00000001-E965-440D-9C3E-E04704629F99}"
"Merit"=dword:00600000
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{0A4252A0-7E70-11D0-A5D6-28DB04C10000}]
@DACL=(02 0000)
"CLSID"="{0A4252A0-7E70-11D0-A5D6-28DB04C10000}"
"FriendlyName"="WDM Streaming Tee/Splitter Devices"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{2721AE20-7E70-11D0-A5D6-28DB04C10000}]
@DACL=(02 0000)
"CLSID"="{2721AE20-7E70-11D0-A5D6-28DB04C10000}"
"FriendlyName"="WDM Stream Decompression Devices"
"Merit"=hex:00,00,64,00
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{2EB07EA0-7E70-11D0-A5D6-28DB04C10000}]
@DACL=(02 0000)
"CLSID"="{2EB07EA0-7E70-11D0-A5D6-28DB04C10000}"
"FriendlyName"="WDM Streaming Data Transforms"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{65E8773D-8F56-11D0-A3B9-00A0C9223196}]
@DACL=(02 0000)
"CLSID"="{65E8773D-8F56-11D0-A3B9-00A0C9223196}"
"FriendlyName"="WDM Streaming Capture Devices"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{65e8773e-8f56-11d0-a3b9-00a0c9223196}]
@DACL=(02 0000)
"CLSID"="{65e8773e-8f56-11d0-a3b9-00a0c9223196}"
"FriendlyName"="WDM Streaming Rendering Devices"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{AD809C00-7B88-11D0-A5D6-28DB04C10000}]
@DACL=(02 0000)
"CLSID"="{AD809C00-7B88-11D0-A5D6-28DB04C10000}"
"FriendlyName"="WDM Streaming Mixer Devices"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{CF1DDA2C-9743-11D0-A3EE-00A0C9223196}]
@DACL=(02 0000)
"CLSID"="{CF1DDA2C-9743-11D0-A3EE-00A0C9223196}"
"FriendlyName"="WDM Streaming Communication Transforms"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{CF1DDA2D-9743-11D0-A3EE-00A0C9223196}]
@DACL=(02 0000)
"CLSID"="{CF1DDA2D-9743-11D0-A3EE-00A0C9223196}"
"FriendlyName"="WDM Streaming Interface Transforms"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{FBF6F530-07B9-11D2-A71E-0000F8004788}]
@DACL=(02 0000)
"CLSID"="{FBF6F530-07B9-11D2-A71E-0000F8004788}"
"FriendlyName"="WDM Streaming System Devices"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dad8fbc7-c658-44ec-b97d-52a7a56470f6}]
@DACL=(02 0000)
@="NMPCSVCDContentHandlerFactory Class"
"AppID"="{41FA2214-273A-46D7-8B96-CA64C554296F}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{daef7299-1527-4e92-ac9c-2272f9fb74a9}]
@DACL=(02 0000)
@="NMBActionPluginPlayTVFactory Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DB179E3B-408D-4EAD-A6FD-DF51D3FA2398}]
@DACL=(02 0000)
@="Nero Search Tray Icon"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{db5d4c3b-02e3-4cbb-9f96-c5dcaf2b6a03}]
@DACL=(02 0000)
@="NMHDSPluginDVDs Class"
"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{db6ce926-eaf7-45e6-883f-70b7553ae922}]
@DACL=(02 0000)
@="NMBAppGlobalSettingsSlideShow Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{db76d02e-50bb-4ec3-be1a-89b35cbe273a}]
@DACL=(02 0000)
@="NMBDirectoryPluginCreateSnapshot Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DB85C504-C730-49DD-BEC1-7B39C6103B7A}]
@DACL=(02 0000)
@="MShellExtMenu Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DBBCE449-2EF5-4A11-B1A9-5FD3F72F3C98}]
@DACL=(02 0000)
@="ILXShareLog Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DBFD2065-9874-4D07-A46C-A1E11F7204C6}]
@DACL=(02 0000)
@="ArcSoft H.264 Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DBFD2065-9874-4D07-A46C-A1E11F7207C7}]
@DACL=(02 0000)
@="ArcSoft H.264 Decoder Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC377543-0DAB-4737-87DF-A7BB78769370}]
@DACL=(02 0000)
@="LdvdRecorder Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC4DF788-5659-4981-A785-2A0ED2F22D40}]
@DACL=(02 0000)
@="AACEncoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC651A43-0720-4a2b-9971-BD2EF1329A3D}]
@DACL=(02 0000)
@="IE Component Categories conditional cache daemon"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC70C4A5-2044-4c59-B806-DEFB9AE0DF7C}]
@DACL=(02 0000)
@="KbLogiExt Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DCB2D492-5F4F-4378-8FF4-DA87062D42E3}]
@DACL=(02 0000)
@="OpenGL Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DCBF3D8D-4BF2-4BCE-9540-F0E6F5BFEE13}]
@DACL=(02 0000)
@="Wipe Right"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dcc7c435-c7c2-460d-a3b0-5aa18c0efc6f}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dcdbc3ae-f8d6-43e5-9775-8a0c7eab9626}]
@DACL=(02 0000)
@="NMBAppPluginMain Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dd14ca6e-392e-45f7-8a91-9ba7609d5575}]
@DACL=(02 0000)
@="NMOEMCustomisatio0 Class"
"AppID"="{AB6AA495-ECA6-4036-8F5B-99B641DF2CC3}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DD7F2ECE-30BE-4E1B-A7A7-305B97625792}]
@DACL=(02 0000)
@="Text Fly downwards"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DD859D70-6E45-4064-914F-3FACBFA7BFB9}]
@DACL=(02 0000)
@="NCCaptureApiSetup Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDA11344-AB20-4AEC-94C4-6AA091574CD0}]
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDBE68A3-F53E-4E2D-B5AF-578F4302C032}]
@DACL=(02 0000)
@="Add pixel"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ddc43479-0f91-420a-a0aa-ca01a6665656}]
@DACL=(02 0000)
@="PauseButton Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDC5917C-D736-49F8-9F81-6D49FEFDDBB0}]
@DACL=(02 0000)
@="NeroSearchEnumUnknown Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDE33513-774E-4BCD-AE79-02F4ADFE62FC}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{8FD3DFC3-F951-492B-817F-69C2E6D9A5B0}"
"RequiresFullStream"=dword:00000000
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="App1 Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE030813-DB68-4605-898B-6B96E999DE31}]
@DACL=(02 0000)
@="Wobble"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE05ACD8-E76E-4BE2-A522-7D734FAFD072}]
@DACL=(02 0000)
@="NeroFileSystemTrackOptions Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{de88bc2f-09c2-4ac0-aead-748c823b719f}]
@DACL=(02 0000)
@="NMFullTextMSHtmlExtractor Class"
"AppID"="{2394E7B8-EA93-4731-B99D-F747EDC8DCFA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DEC52F0B-696A-47F6-8966-EB98B3769897}]
@DACL=(02 0000)
@="Posterize"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF03AA96-1265-441E-BA8A-2A4F482AA672}]
@DACL=(02 0000)
@="ArcSoft MP4Muxer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF03AA97-1265-441E-BA8A-2A4F482AA672}]
@DACL=(02 0000)
@="ArcSoft MP4Muxer Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF2FCE13-25EC-45bb-9D4C-CECD47C2430C}]
@DACL=(02 0000)
@="CUri"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF5F4E46-D041-416C-B77E-6F8E662E2734}]
@DACL=(02 0000)
@="ULXOnDiscDVDDiscCompiler Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E00238C7-396B-4718-9781-B804A41D6072}]
@DACL=(02 0000)
@="NCGraphManagerDv Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e03d7b52-205a-40ba-9d46-ea307ee88916}]
@DACL=(02 0000)
@="NMBMinimizedTask Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E05592E4-C0B5-11D0-A439-00A0C9223196}]
@DACL=(02 0000)
@="Plug In Distributor: IKsQualityForwarder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E061ECC4-E2B1-4672-A2BE-C23C01F8326F}]
@DACL=(02 0000)
@="Wave Scroller"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e0d31ca1-f598-49ac-8123-f27eeae28984}]
@DACL=(02 0000)
@="NMBActionPluginBurnDataDiscHandle Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E0D84E7C-1997-4F77-97C4-74D79FCF6B50}]
@DACL=(02 0000)
@="LMpgVparser Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1272C93-9F34-40CF-BD78-8103F891CB14}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E138D778-FAC2-4BC5-B0B2-01CBFB0288BE}]
@DACL=(02 0000)
@="Vertical Spin Slice"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E13908FB-2996-46F9-BCD2-11FD4563B238}]
@DACL=(02 0000)
@="AudioEffectLibrary.CameraDenoisePage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1A1C814-FD09-4c9d-BB4A-0394B836A1F0}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1A46626-9FD3-11D4-824D-B0D52C000000}]
@DACL=(02 0000)
@="NeroFolder Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e1d24ab8-53df-49ac-bae6-63a06d55a112}]
@DACL=(02 0000)
@="NMBAppGlobalSettingsTV_Folder Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1D4987F-C260-4875-A120-727EF116D46C}]
@DACL=(02 0000)
@="NMTVServerInProc Class"
"AppID"="{93D78BF0-45EF-44F4-AE80-A2C26D246B2B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1F1E7F6-1789-4F59-BE29-ED2C151C527F}]
@DACL=(02 0000)
@="AudioEffectLibrary.DeHumPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E2037A58-3425-4581-A9AE-64A043B05353}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E2CE4A0B-1E6A-426E-A90F-172F42528C90}]
@DACL=(02 0000)
@="Shift edges"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E3263B35-59B5-403D-A5A4-6BCC8FAE840D}]
@DACL=(02 0000)
@="TwistSpin"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E33D5162-3BAE-4CFF-8D72-916221E27BE1}]
@DACL=(02 0000)
@="Pixelize"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E36F5435-7BA3-4255-9062-D275F0BAAA7A}]
@DACL=(02 0000)
@="ILXShareLog Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E386F85E-3C25-474D-B303-45E987251872}]
@DACL=(02 0000)
@="Ulead DV SubTitle Filter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E386F85F-3C25-474D-B303-45E987251872}]
@DACL=(02 0000)
@="Ulead DV SubTitle Filter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E3B54E5D-579C-4FF2-853B-E21DD05EA690}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E3ED0D6D-93FF-4F63-9E6B-436E50B42B9E}]
@DACL=(02 0000)
@="AudioEffectLibrary.ReverbPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E41C6AFE-738D-4A56-957C-C352F41B3275}]
@DACL=(02 0000)
@="QTSrc"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4452E4B-3C68-4A8F-899D-002B4719B397}]
@DACL=(02 0000)
@="Kaleidoscope"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E45B8202-C4A7-4FF0-A394-49F3B443BCBB}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e45d7473-5d97-48b0-953e-1a433986f0df}]
@DACL=(02 0000)
@="NMISItemScannerSimilarImages Class"
"AppID"="{5760A24C-D938-4555-AF27-5ADFA9037C5C}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4771AC6-9154-4952-A3E4-C9C9FF9FE622}]
@DACL=(02 0000)
@="ArcWmdmDev Class"
"AppID"="{A4A41C25-5C78-46C9-ADD0-F9D540AFE25B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E48B2549-D510-4A76-8A5F-FC126A6215F0}]
@DACL=(02 0000)
@="CLSID_AntiPhishingBrowserSolution"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4903434-67CC-4448-9717-7A06103B0290}]
@DACL=(02 0000)
@="Rotate Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4A72332-DC45-4AA1-8164-1CCA8614AC75}]
@DACL=(02 0000)
@="NeroFileDlg Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5090C07-DE24-48C3-A690-3483577B7E26}]
@DACL=(02 0000)
@="3D - Vertical Spinning Strokes"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e50fceed-2660-4b46-a464-66795c3f708e}]
@DACL=(02 0000)
@="NMPCSlideShowContentHandler Class"
"AppID"="{360A9422-64AF-4F12-A5D0-16D3EDB000D1}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5209008-B49E-4A0A-932F-B5E7B0B46A03}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E53E2D39-A94F-4cef-BD64-AF3FEF525ECC}]
@DACL=(02 0000)
@="NMDSMdbMediaDatabase Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E569BDE7-A8DC-47F3-893F-FD2B31B3EEFD}]
@DACL=(02 0000)
@="Browser Application State"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e5b2709a-0e6b-45d3-83c8-ef90c2ed5340}]
@DACL=(02 0000)
@="ChooseSessionDlg Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5C438A0-3224-4019-A442-A68D6838E792}]
@DACL=(02 0000)
@="Nero Ogg Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5DCBA6A-6C50-4BFC-B550-D53DFE5FA025}]
@DACL=(02 0000)
@="NOSHttpPostPart Class"
"AppID"="{2E82C0B4-3147-4A6E-AF24-A1992108C420}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5DE60A7-8C6A-4D84-8F6E-DDA41935161E}]
@DACL=(02 0000)
@="Nero MP4 Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5ECC2B2-1ED9-43C7-BC75-F73E85E28684}]
@DACL=(02 0000)
@="ULXBuildUdfImage Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5F5B5A2-F9C2-49CE-BE5A-7893C92BBD39}]
@DACL=(02 0000)
@="AudioEffectLibrary.VolumePlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e6028af3-ee0a-4e49-a043-c44437680ad8}]
@DACL=(02 0000)
@="BurnSettingsDlg Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E60648A1-A2F1-4b00-A2D9-79B2EDB8F592}]
@DACL=(02 0000)
@="NMPCSVCDContentHandlerVMR9 Class"
"AppID"="{41FA2214-273A-46D7-8B96-CA64C554296F}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E61D368C-E0D1-4EAE-8B90-C151C60C743D}]
@DACL=(02 0000)
@="NCChannel Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E62509DF-ECBE-4D35-B195-7149886B4B73}]
@DACL=(02 0000)
@="Blinds"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E69C308A-0582-4BFF-B3DA-697BB2BB5CDA}]
@DACL=(02 0000)
@="LXContentCenter Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E6EE9AAC-F76B-4947-8260-A9F136138E11}]
@DACL=(02 0000)
@="IE Shell Band Site Menu"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E72F05CD-D565-41F1-92FC-69482B5EC060}]
@DACL=(02 0000)
@="NMPCTVStreamContentHandlerVMR9 Class"
"AppID"="{36C66FF0-507F-44B5-9E74-FA02CCB215CD}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e77b3b79-1a82-43b7-ad65-f526c53e062b}]
@DACL=(02 0000)
@="NMBActionPluginPlayAudio Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E7D06080-238B-11D3-80D7-00104B1F6CEA}]
@DACL=(02 0000)
@="InstallShield Script Engine"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E7E79A30-4F2C-4FAB-8D00-394F2D6BBEBE}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{833CCA5F-DCB7-4516-806F-6596AB26DCE4}"
"RequiresFullStream"=dword:00000000
"SupportsPadding"=dword:00000000
"Author"="Microsoft"
"FriendlyName"="XMP Bag Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E7F33474-CC23-4B5E-A7FA-75BFF421B206}]
@DACL=(02 0000)
@="AudioEffectLibrary.PitchCorrectionPage"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E80A2814-3A36-4897-8BFF-924D39C26FF8}]
@DACL=(02 0000)
@="NeroFileProducer Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E843040D-3DC3-4592-9F88-54AAEA980244}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e84e182d-b68e-4cab-866f-f35c99dd8315}]
@DACL=(02 0000)
@="NMCFMicroEventManager Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E8658416-7CCB-4c1d-A021-AFF0A2EB8004}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E8933C4B-2C90-4a04-A677-E958D9509F1A}]
@DACL=(02 0000)
@="NMISCIndexingService Class"
"AppID"="{D55E16BA-BBC9-4F7E-A147-E5DFBCC71480}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E8AC0652-173D-4AA4-AA85-F82F0B6B9E94}]
@DACL=(02 0000)
@="AudioEffectLibrary.PseudoReversePlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E98E4C68-3F25-4762-B713-DEC5933E6A40}]
@DACL=(02 0000)
@="3D - Tunnelize"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e9d1594e-3c45-40de-a6d3-75a7ec14c2f9}]
@DACL=(02 0000)
@="NMDSFoundVolumeInfo Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E9F1F599-7B14-4213-BF46-F992758CAB81}]
@DACL=(02 0000)
@="RtlCP Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EAAEAEB6-C59B-4F79-B0B7-8C4B0A60BF46}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EABAAD79-1A74-4672-B7C3-0182B03D55D2}]
@DACL=(02 0000)
@="NeroSink"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EAD55AD3-060A-434A-9383-5BEBCDB2CA07}]
@DACL=(02 0000)
@="ULXBDRTCompiler Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EB18B220-F101-4EF6-B1A5-5360802CF130}]
@DACL=(02 0000)
@="ArcSoft Mpeg Splitter property"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{eb498078-b3a7-4867-aca5-b038d521ed12}]
@DACL=(02 0000)
@="NMBAppGlobalSettingsBurnMix Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EBF92551-A396-40FE-8242-A2B724F2A3AB}]
@DACL=(02 0000)
@="iHDRuntime.IHDRuntime"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EBF9A65D-571C-4746-A9B6-1B83A1033EC8}]
@DACL=(02 0000)
@="AudioRipping Class"
"AppID"="{5EC2B756-5110-4A94-A66D-BFBA2AF993F9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC342F89-D3DE-4D82-A96E-49D70541E3D2}]
@DACL=(02 0000)
@="Fade in/out Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ec39bf14-ca12-46cd-8ea2-b48d5a44350a}]
@DACL=(02 0000)
@="BurnSettings Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC529B00-1A1F-11D1-BAD9-00609744111A}]
@DACL=(02 0000)
@="WDM Streaming VPE VBI Property Set Interface Handler"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC61CE9E-D980-408B-9B90-BDC7EF6CE9EF}]
@DACL=(02 0000)
@="AudioEffectLibrary.PhaserPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC7D1B61-ABED-4022-9991-8A8CCEFD04C6}]
@DACL=(02 0000)
@="Split"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC811B32-852A-4f37-B9DD-A8709DA22B7B}]
@DACL=(02 0000)
@="NMAudioContentHandlerVMR9 Class"
"AppID"="{5BB9749E-DD3F-459F-8865-64A208D020EA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ecac5d28-d6a5-4d47-9fe5-8586db270f2f}]
@DACL=(02 0000)
@="NMSlideSho0Builder Class"
"AppID"="{E95BB462-E6C6-4383-BB6E-2CF3F3CB0502}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED19E3BD-7DB6-44A3-ADAD-B9B98101E0B9}]
@DACL=(02 0000)
@="NCEpgEvents Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED70EF71-8DF3-4C36-826D-E8D29FBB655F}]
@DACL=(02 0000)
@="Nero Search"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ed72f0d2-b701-4c53-adc3-f2fb59946dd8}]
@DACL=(02 0000)
@="ProtectedModeAPI"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED822C8C-D6BE-4301-A631-0E1416BAD28F}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{833CCA5F-DCB7-4516-806F-6596AB26DCE4}"
"RequiresFullStream"=dword:00000000
"SupportsPadding"=dword:00000000
"Author"="Microsoft"
"FriendlyName"="XMP Bag Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED87534F-A666-426B-8D9E-019B21122206}]
@DACL=(02 0000)
@="NCTunerDvbt Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{edbdd4f6-a501-40f2-bc26-9b167b1535e8}]
@DACL=(02 0000)
@="NMBDirectoryPluginTVConfiguration Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{edc8b699-7f88-41f8-aa97-39747a977be0}]
@DACL=(02 0000)
@="NMSSRGBImageBuffer Class"
"AppID"="{E95BB462-E6C6-4383-BB6E-2CF3F3CB0502}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EDF7AC62-3DF4-4A87-AFAF-1AFCD81C9836}]
@DACL=(02 0000)
@="NeAudioRender Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EE2D6561-D63C-11D2-B561-00A0C92E6848}]
@DACL=(02 0000)
@="ShellExt Class"
"AppID"="{3D62E9A1-D243-11D2-B561-00A0C92E6848}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EE366069-1832-420F-B381-0479AD066F19}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{8FD3DFC3-F951-492B-817F-69C2E6D9A5B0}"
"RequiresFullStream"=dword:00000000
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="App1 Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EE58DCFB-90E1-4C39-85B9-6489734AB835}]
@DACL=(02 0000)
@="Bouncing Characters"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EEBAF82E-54DD-4692-9A61-C14369DB03D7}]
@DACL=(02 0000)
@="NMISMediaDatabase Class"
"AppID"="{7AD010A8-C4D6-4CA0-B550-B4EA5F64F8CB}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{eef2bc59-7811-4e77-b3ad-7acb98cd38aa}]
@DACL=(02 0000)
@="NMBActionPluginBurnVCD Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EF134C3B-23E0-457B-A8C1-3B6987DCBD8D}]
@DACL=(02 0000)
@="NeVideoHD Main Property Page"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ef3ef5ef-8f4f-46bc-ba3f-3ace369c8612}]
@DACL=(02 0000)
@="NMDSUriAccessProviderGenericStream Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EF701812-6CC5-466F-9BF5-18825C434971}]
@DACL=(02 0000)
@="NeroSearchFilterSampleSize Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EFAF41AA-04C9-47E4-9226-2D40FFA27DD0}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EFC98D24-8686-4084-B28C-7507FA863BCD}]
@DACL=(02 0000)
@="CHpqLog Object"
"AppID"=""
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EFEDF1EE-AD78-4DE4-9878-8E110683E49F}]
@DACL=(02 0000)
@="NeroFSSecNo Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{effe6d19-b274-4501-afdc-390e46d6fe9b}]
@DACL=(02 0000)
@="ZippedStream Class"
"AppID"="{AB6AA495-ECA6-4036-8F5B-99B641DF2CC3}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F0672315-67B5-4B0F-8ED4-7FFCF7BF09A9}]
@DACL=(02 0000)
@="LVR_MANGR Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f0874e44-8581-46ed-881c-46783c183f6f}]
@DACL=(02 0000)
@="NMBAppPluginPanel Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F0CB4200-B513-43F8-9D05-24D9CE8DEF04}]
@DACL=(02 0000)
@="Ulead DVB Parser"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F0CB4201-B513-43F8-9D05-24D9CE8DEF04}]
@DACL=(02 0000)
@="Ulead DVB Parser Filter Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F13D5DCA-9FE6-4DCA-A3EC-2E161EC5ED33}]
@DACL=(02 0000)
@="Heat Trails"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F162AD9F-87DC-49AE-B697-F688E51D4E9D}]
@DACL=(02 0000)
@="Nero Sound Processor"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F1CCAB47-C8D4-4912-BA82-1D0380A32B3C}]
@DACL=(02 0000)
@="NeroSearchFilterTitle Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f1f2ece6-0289-4992-a536-f82dfc6f6d6e}]
@DACL=(02 0000)
@="DiscInfoDlg Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F1F60FDD-97EA-43F1-920F-6EE61F32F435}]
@DACL=(02 0000)
@="VSTBridge.VSTEffects"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F20D8ADA-A955-435D-8A49-707DAB401787}]
@DACL=(02 0000)
@="Unload Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F2324C9E-B4A5-41CA-BABA-0D12FF4F83AB}]
@DACL=(02 0000)
@="Separate Slide"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F263A5CC-9B97-46AD-8CD1-A2A34BE79049}]
@DACL=(02 0000)
@="ArcHWEventHandler Class"
"AppID"="{A4A41C25-5C78-46C9-ADD0-F9D540AFE25B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F29F4F9A-6914-4046-B8F8-139AA70E1487}]
@DACL=(02 0000)
@="Nero Scout Menu"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F2CF5485-4E02-4f68-819C-B92DE9277049}]
@DACL=(02 0000)
@="&Links"
"MenuTextPUI"="@c:\\WINDOWS\\system32\\ieframe.dll.mui,-13138"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f2deefee-8e64-45d7-83be-c244cff37267}]
@DACL=(02 0000)
@="NMDSFilteredDirectoryFactory Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f311c4e9-5e80-4c9e-a6bf-1beb3de5ad80}]
@DACL=(02 0000)
@="NMDSMetaDataFactoryRegistry Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F38FCD8D-6921-4147-890C-801E5F4F8275}]
@DACL=(02 0000)
@="Mirror: Vertical"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F3C633A2-46C8-498E-8FBB-CC6F721BBCDE}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{79007028-268D-45D6-A3C2-354E6A504BC9}"
"RequiresFullStream"=dword:00000000
"FixedSize"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="App0 Writer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F3FBC8E5-93A3-11D4-8217-A85459000000}]
@DACL=(02 0000)
@="Nero Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4453C84-C133-43F2-9E12-A9AB4B1422FE}]
@DACL=(02 0000)
@="Ulead OggVorbis Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4670DEF-0302-4F5E-BA74-843F2EC2B7C7}]
@DACL=(02 0000)
@="ArcSoft MP4 Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f472ed2b-87a0-4481-89af-2a60f862305a}]
@DACL=(02 0000)
@="Effect Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F47C211E-70D5-4BC6-B0E7-B045EC466146}]
@DACL=(02 0000)
@="Credits Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4817E4B-04B6-11D3-8862-00C04F72F303}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f495ebbe-a068-41fb-89b6-c605d20a2df3}]
@DACL=(02 0000)
@="RecorderCombobox Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4D36777-EAED-4cc5-9FE7-827BE5190B20}]
@DACL=(02 0000)
@="Microsoft Feeds Scheduler"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4E6633D-3404-4F4E-90EE-4B1A336F14CD}]
@DACL=(02 0000)
@="AudioDocFilter Class"
"AppID"=""
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F50B3F10-19C4-11CF-AA9A-02608C9BABA2}]
@DACL=(02 0000)
@="ArcSoft MPEG Video Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F50B3F11-19C4-11CF-AA9A-02608C9BABA2}]
@DACL=(02 0000)
@="ArcSoft Mpeg Decoder Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F50B3F12-19C4-11CF-AA9A-02608C9BABA2}]
@DACL=(02 0000)
@="ArcSoft Deinterlace Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F5549B02-B736-4D32-BD8C-15D4E260E9B9}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F556280E-71DD-4324-BB45-09F2E3DD2767}]
@DACL=(02 0000)
@="Gaussian Blur"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F578E21A-DB55-4C70-B04E-46D4F9BBD434}]
@DACL=(02 0000)
@="ULXMpegEncoder Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f57d6ba3-d37b-4ef7-9c2b-e05027603f5a}]
@DACL=(02 0000)
@="NMCFPropertyContainerFactory Class"
"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F5838CC6-EBBF-46D3-AE67-ED2F8D7218EC}]
@DACL=(02 0000)
@="ULXAudioCDManager Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f5af851c-c93b-416b-a6a9-851e4b2794e3}]
@DACL=(02 0000)
@="NMBActionPluginPlayRadio Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F6032A69-F002-49AB-B24B-757060B11C09}]
@DACL=(02 0000)
@="Nero Mpeg2 Encoder Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F6348C42-7114-468D-A302-EFBBBCA59ADE}]
@DACL=(02 0000)
@="COMTool Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F706F28F-C2C3-4B2B-A1C5-9782FDB677C9}]
@DACL=(02 0000)
@="Nero QuickTime™ Video Decoder Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F710DD5E-3ED7-442F-BA31-4BD2DF7F4366}]
@DACL=(02 0000)
@="ArcSoft 3GP Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F74D77D2-44CE-4315-90CB-DCC30CCFA0C8}]
@DACL=(02 0000)
@="Wipe Down"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F7A8E80E-2430-48CB-953D-23D6D34A623F}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F81D4B21-8E41-4283-B854-C2343756A157}]
@DACL=(02 0000)
@="LudfReader Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F81E7B20-3E76-4194-8171-FFDB0F6CBE49}]
@DACL=(02 0000)
@="CoverEdCtrl Control"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}]
@DACL=(02 0000)
@="IE Registry Tree Options Utility"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8512E22-9DB5-4297-A531-6313D9B64102}]
@DACL=(02 0000)
@="Blur Fade"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f866c0dd-1efb-477a-9dee-20e9bd38c892}]
@DACL=(02 0000)
@="NMDSUriAccessProviderLocalFS Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8777E65-5755-4E49-9237-8D98F0C2499F}]
@DACL=(02 0000)
@="Nero Video Decoder"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f87d21b9-5aac-4d8e-af4d-1f6943889382}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f8b558b4-3647-4e31-8157-9e4053de815e}]
@DACL=(02 0000)
@="NMBDirectoryPluginTVPrograms Class"
"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f8c26e45-f38b-4392-abdc-ed1caed86104}]
@DACL=(02 0000)
@="NMPCAudioSampleSequenceFactory Class"
"AppID"="{8E1EAC0D-E841-4FA9-8696-9C4894F4D307}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F9136BAA-1AA3-4F7A-B8B0-4F6399BC1B37}]
@DACL=(02 0000)
@="AudioEffectLibrary.ModulationPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F94687E8-1A40-42D2-9028-39DC65793988}]
@DACL=(02 0000)
@="Slime"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F95C8BFF-658C-4DF2-B496-280DBE5E6D20}]
@DACL=(02 0000)
@="AudioEffectLibrary.LoudnessPlugIn"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F97125CC-1ED0-4E48-B995-E052B45CBDC5}]
@DACL=(02 0000)
@="NCTunerAtsc Class"
"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f99c08d6-0eff-4254-93c7-ceb4e890d805}]
@DACL=(02 0000)
@="NMHDSPluginTVScheduledRecordings Class"
"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f9b622f8-f676-4bed-8609-6916953c6bc6}]
@DACL=(02 0000)
@="FreeCurveEdit Class"
"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F9DB3544-CCCB-40C2-B24A-91E8BB87D661}]
@DACL=(02 0000)
@="ArcSoft AC3 Decoder Setting"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FA4D6C69-CB72-4656-B570-462EEE447B64}]
@DACL=(02 0000)
@="Circles"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FAB5A83D-1CA1-49DB-8678-9898F4127DB4}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FADE020C-B6CB-400b-B794-5A51C9A5F6D0}]
@DACL=(02 0000)
@="IE Microsoft CommBand"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{faeb54c4-f66f-4806-83a0-805299f5e3ad}]
@DACL=(02 0000)
@="Microsoft Feeds Manager (scripting)"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FB012959-F4F6-44D7-9D09-DAA087A9DB57}]
@DACL=(02 0000)
"Version"="1.0.0.0"
"SpecVersion"="1.0.0.0"
"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
"MetadataFormat"="{243DCEE9-8703-40EE-8EF0-22A600B8058C}"
"RequiresFullStream"=dword:00000001
"SupportsPadding"=dword:00000001
"Author"="Microsoft"
"FriendlyName"="Thumbnail Reader"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FB309DE8-723C-4D5B-AC22-DD8F4F28269F}]
@DACL=(02 0000)
@="NOSHttpConnection Class"
"AppID"="{2E82C0B4-3147-4A6E-AF24-A1992108C420}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FB8DC1C1-ED90-42EF-A115-A0494CC138A9}]
@DACL=(02 0000)
@="Voxelize"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FBC519A7-5FA7-45CF-8301-6FDF95164365}]
@DACL=(02 0000)
@="Glow"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FBF23B40-E3F0-101B-8488-00AA003E56F8}\Elevation]
@DACL=(02 0000)
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC1A861A-0782-4321-8FDD-A29C9DD27C5E}]
@DACL=(02 0000)
@="Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC1CF921-CCE5-11D2-8CE6-0000E84979EE}]
@DACL=(02 0000)
@="Audio Buffer Render"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC2B5A8C-EC3F-45bb-BDDC-60F492318D21}]
@DACL=(02 0000)
@="NBClientListener Class"
"AppID"="{A0829BAB-FD70-4f2b-8C0B-8484B6BBCD31}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC2FFAA3-0177-4B95-BEA3-CC42CE5BB41A}]
@DACL=(02 0000)
@="Text fly to right"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{fc63f70a-caae-4f81-be0b-527a1c65c476}]
@DACL=(02 0000)
@="NMSearc0ParserSpirit Class"
"AppID"="{A82BBCBD-CB95-43E6-BF3A-8A6EA9C5B795}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{fc9e87fc-39b0-4bba-a9cc-2ce0207fa6cd}]
@DACL=(02 0000)
@="NMDSFoundVolumeInfoList Class"
"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD000F57-10FA-4358-8512-8A6B7A3146A2}]
@DACL=(02 0000)
@="Nero DV Splitter"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}]
@DACL=(02 0000)
@="System Restore Wrapper"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD5995B0-0903-4177-9E00-F55BC80BAE7B}]
@DACL=(02 0000)
@="AvSource"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD5CD8B1-6FE0-44F3-BBFB-65E3655B096E}\ProgId]
@DACL=(02 0000)
@="Microsoft.Aspnet.Snapin.AspNetManagementUtility.2"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD83DDBE-2039-48EF-AC24-5C166D10ECB8}]
@DACL=(02 0000)
@="NeroSearchFilterBitrate Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FDBC502E-5417-4DC9-B1B2-811DB529959D}]
@DACL=(02 0000)
@="Spherical Text"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FDE7673D-2E19-4145-8376-BBD58C4BC7BA}]
@DACL=(02 0000)
@="IE Custom MRU AutoCompleted List"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FDEC7B7F-1209-40BC-AA36-9CAC8CD1A35A}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE1F4910-E20B-4047-BEB4-2798D98E9BA1}]
@DACL=(02 0000)
@="Nero HD Audio Mixer Properties"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE4A53E9-F056-49BF-9841-4E9416B85FC2}]
@Class="REG_SZ"
@DACL=(02 0000)
@="PSFactoryBuffer"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE520461-1A47-4D2F-8F0A-D741B1739022}]
@DACL=(02 0000)
@="ILXShareLog Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE6B11C3-C72E-4061-86C6-9D163121F229}]
@DACL=(02 0000)
@="Microsoft Feeds Manager"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE9617F6-E606-42AA-BECC-0E9CDA246D63}]
@DACL=(02 0000)
@="Color Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEC5F6B2-A15A-11D4-8250-9C9E8B000000}]
@DACL=(02 0000)
@="NeroIsoTrack Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ff0be41b-4a12-4ac1-9b25-1a4f14aa753f}]
@DACL=(02 0000)
@="NMBActionPluginPlay Class"
"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ff4d6e08-5f27-44b7-9147-ac7c5864794e}]
@DACL=(02 0000)
@="SourcePlacementPage Class"
"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FF8802ED-84A7-4b5f-8198-AD7151BD33D5}]
@DACL=(02 0000)
@="NMPCSlideShowContentHandlerVMR9 Class"
"AppID"="{360A9422-64AF-4F12-A5D0-16D3EDB000D1}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FFBB820D-964F-4141-A717-418A530EF57B}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ffd90217-f7c2-4434-9ee1-6f1b530db20f}]
@DACL=(02 0000)
@="XML Feed Moniker"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FFF2D28F-E4EE-44D9-8104-8E71556757F6}]
@DACL=(02 0000)
@="DWUpdateService"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="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"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(196)
c:\documents and settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\OneX.DLL
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\hnetcfg.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\InterVideo\DeviceService\DevSvc.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\system32\oodag.exe
c:\program files\Google\Update\1.3.26.9\GoogleCrashHandler.exe
c:\program files\Cyberlink\Shared files\RichVideo.exe
c:\program files\TVersity\Media Server\MediaServer.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\windows\system32\wdfmgr.exe
c:\windows\system32\java.exe
c:\program files\TeamViewer\Version9\TeamViewer.exe
c:\program files\TeamViewer\Version9\tv_w32.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\wscntfy.exe
c:\windows\system32\dwwin.exe
.
**************************************************************************
.
Completion time: 2015-03-15  09:39:09 - machine was rebooted
ComboFix-quarantined-files.txt  2015-03-14 23:39
ComboFix2.txt  2015-03-14 22:35
.
Pre-Run: 7,224,127,488 bytes free
Post-Run: 7,007,539,200 bytes free
.
- - End Of File - - CBF137568E752970C035ACB203ACDD60
8F558EB6672622401DA993E1E865C861

  • 0

#20
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 20,017 posts

AVG - yes sorry! AVG I couldn't remove using add/remove programs and the folder wouldn't delete but the program is still there, not working as far as I'm aware.

Often malware will prevent anti-virus programs working. Let's see what happens as we go along. Maybe it will begin working and if you want to you can uninstall it. I see you have the Avast installer on your machine, perhaps that is the one you want?

Moving on

Let's see if things have freed up enough for us to run these ones:

Please download Junkware Removal Tool to your desktop.
 

  • Shut down your protection software to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right click JRT.exe and "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

After that

Please download : ADWCleaner to your desktop  (use the Download Now @ BleepingComputer button)..

NOTE: If using Internet Explorer and get an alert that stops the program downloading, click on the warning and allow the download to complete.

Close all programs and click on the AdwCleaner icon. AdwCleaner will update itself and then open.

AdwCleaner.jpg

Click on Scan  and follow the prompts. It may appear not to be doing anything, please be patient and let it run unhindered. When the "Please uncheck elements you don't want to remove" appears just go ahead and click on the Clean button, and follow the prompts. Allow the system to reboot. You will then be presented with the report. Copy and paste back here. If a report doesn't appear, press the report button and Copy & Paste the contents on your next reply.

A copy of the report is also saved in the C:\AdwCleaner folder.

So when you return please post

  • JRT.txt
  • AdwCleaner log

  • 0

#21
Damon(V)

Damon(V)

    Member

  • Topic Starter
  • Member
  • PipPip
  • 87 posts

 

AVG - yes sorry! AVG I couldn't remove using add/remove programs and the folder wouldn't delete but the program is still there, not working as far as I'm aware.

Often malware will prevent anti-virus programs working. Let's see what happens as we go along. Maybe it will begin working and if you want to you can uninstall it. I see you have the Avast installer on your machine, perhaps that is the one you want?

I got Avast because I was trying to see if any antivirus would work, I'm not sure which is best to use moving forward, I was think about paying for AVG internet security? I was using AVG free. 


JRT appears to run and then comes up with a dos box saying "The system cannot find the file specified" a few times then "press any key to continue" after which nothing happens.


  • 0

#22
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 20,017 posts

 

I got Avast because I was trying to see if any antivirus would work, I'm not sure which is best to use moving forward, I was think about paying for AVG internet security? I was using AVG free.

We can revisit that a little later. Both AVG and Avast have free versions. It is likely your AVG one wasn't working with the infection. I think there may be residual corruption on your machine too. We will address that as we go along.
 

JRT appears to run and then comes up with a dos box saying "The system cannot find the file specified" a few times then "press any key to continue" after which nothing happens

 
Leave that then and move on to AdwCleaner. :)

 

Edit

 

I hadn't mentioned it yet but FRST reported that you have less that 1% free on your hard drive. It is so low that I was reluctant to report it in case FRST had somehow got it wrong. We will run FRST again soon to check but I should perhaps tell you, that with less then 5% of your drive free you are in danger of messing up the Master File Table of your computer. It is risky running the tools we are using at this low level of free space.

Under 15% free is less than optimum.

I suggest that, as soon as you can, uninstall any old programs and backup and remove any data you don't need.


  • 0

#23
Damon(V)

Damon(V)

    Member

  • Topic Starter
  • Member
  • PipPip
  • 87 posts

"I suggest that, as soon as you can, uninstall any old programs and backup and remove any data you don't need."

Ok, will do, yes drive is pretty much full.

 

# AdwCleaner v4.112 - Logfile created 15/03/2015 at 10:49:35
# Updated 09/03/2015 by Xplode
# Database : 2015-03-05.1 [Server]
# Operating system : Microsoft Windows XP Service Pack 3 (x86)
# Username : Work 2 - COMPUTER
# Running from : C:\Documents and Settings\Work 2\Desktop\AdwCleaner.exe
# Option : Cleaning
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Web browsers ] *****
 
-\\ Internet Explorer v8.0.6001.18702
 
 
-\\ Mozilla Firefox v36.0.1 (x86 en-US)
 
 
-\\ Google Chrome v
 
 
*************************
 
AdwCleaner[R0].txt - [21463 bytes] - [14/03/2015 14:01:04]
AdwCleaner[R1].txt - [21463 bytes] - [14/03/2015 14:01:26]
AdwCleaner[R2].txt - [972 bytes] - [14/03/2015 15:09:15]
AdwCleaner[R3].txt - [1415 bytes] - [14/03/2015 15:48:05]
AdwCleaner[R4].txt - [1474 bytes] - [14/03/2015 15:52:16]
AdwCleaner[R5].txt - [1208 bytes] - [15/03/2015 10:45:14]
AdwCleaner[S0].txt - [22534 bytes] - [14/03/2015 14:05:56]
AdwCleaner[S1].txt - [1542 bytes] - [14/03/2015 15:55:06]
AdwCleaner[S2].txt - [1136 bytes] - [15/03/2015 10:49:35]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1195  bytes] ##########

  • 0

#24
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 20,017 posts

Hmm... wouldn't be surprised if JunkwareRemover didn't work after all. That's all to the good. :)

 

Now

 

Please run another FRST scan with the Addition.txt box ticked and post back the two logs generated - FRST.txt and Addition.txt.


  • 0

#25
Damon(V)

Damon(V)

    Member

  • Topic Starter
  • Member
  • PipPip
  • 87 posts

I have run Adwcleaner previously myself.

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015
Ran by Work 2 (administrator) on COMPUTER on 15-03-2015 11:29:36
Running from C:\Documents and Settings\Work 2\Desktop
Loaded Profiles: Work 2 (Available profiles: Work 2 & User2 & Administrator)
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: English (United States)
Internet Explorer Version 8 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(InterVideo Inc.) C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(O&O Software GmbH) C:\WINDOWS\system32\oodag.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Wireless Service) C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
(D-Link) C:\Program Files\D-Link\D-Link Wireless G DWA-110\AirGCFG.exe
(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Hostless Modem\Telstra USB+Wi-Fi\CheckNDISPort_df.exe
(PeerBlock, LLC) C:\Program Files\PeerBlock\peerblock.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
(Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [ANIWZCS2Service] => C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [49152 2007-01-19] (Wireless Service)
HKLM\...\Run: [D-Link D-Link Wireless G DWA-110] => C:\Program Files\D-Link\D-Link Wireless G DWA-110\AirGCFG.exe [1675264 2008-04-15] (D-Link)
HKLM\...\Run: [igfxhkcmd] => C:\WINDOWS\system32\hkcmd.exe [77824 2006-03-23] (Intel Corporation)
HKLM\...\Run: [igfxpers] => C:\WINDOWS\system32\igfxpers.exe [118784 2006-03-23] (Intel Corporation)
HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16855552 2007-10-25] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [TkBellExe] => C:\program files\real\realplayer\update\realsched.exe [273544 2011-07-14] (RealNetworks, Inc.)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3667472 2014-12-18] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [CheckNDISPort_df] => C:\Program Files\Hostless Modem\Telstra USB+Wi-Fi\CheckNDISPort_df.exe [442696 2012-09-21] ()
HKU\S-1-5-21-1343024091-1326574676-725345543-1006\...\Run: [PeerBlock] => C:\Program Files\PeerBlock\peerblock.exe [2122824 2014-01-14] (PeerBlock, LLC)
HKU\S-1-5-21-1343024091-1326574676-725345543-1006\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [31090792 2015-01-23] (Skype Technologies S.A.)
HKU\S-1-5-21-1343024091-1326574676-725345543-1006\...\Run: [GoogleChromeAutoLaunch_3DFCF6B2AEB445B8DC09B36EA9332B3A] => C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\Application\chrome.exe [809288 2015-03-07] (Google Inc.)
HKU\S-1-5-21-1343024091-1326574676-725345543-1006\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5503768 2015-02-20] (Piriform Ltd)
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk
ShortcutTarget: Acrobat Assistant.lnk -> C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe (Adobe Systems Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)
BootExecute: autocheck autochk * OODBSC:\PROGRA~1\AVG\AVG2015\avgrsx.exe /sync /restartsdnclean.exe
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1343024091-1326574676-725345543-1006\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft...d=ie&ar=msnhome
HKU\S-1-5-21-1343024091-1326574676-725345543-1006\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1343024091-1326574676-725345543-1006 -> {F02EF4DB-5280-4E91-B854-AA0795C93A5A} URL = http://au.search.yah...p={searchTerms}
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll No File
BHO: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll [2003-05-15] (Adobe Systems Incorporated)
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-10] (Adobe Systems Incorporated)
BHO: EWPBrowseObject Class -> {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} -> C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll [2006-06-09] ()
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-18] (Oracle Corporation)
BHO: AcroIEToolbarHelper Class -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15] ()
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-18] (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll No File
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15] ()
Toolbar: HKU\S-1-5-21-1343024091-1326574676-725345543-1006 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15] ()
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll [2007-08-27] (Logitech Inc.)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
 
FireFox:
========
FF ProfilePath: C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default
FF DefaultSearchEngine.US: Google
FF Keyword.URL: hxxp://flybuys.search.adlux.com/search/?utm_source=adlux&utm_medium=cpc&ourmark=3&q=
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*'))%20%7B%20return%20'PROXY%20us09.sq.proxmate.me%3A8000%3B%20PROXY%20us04.sq.proxmate.me%3A8000%3B%20PROXY%20us02.sq.proxmate.me%3A8000%3B%20PROXY%20us08.sq.proxmate.me%3A8000%3B%20PROXY%20us10.sq.proxmate.me%3A8000%3B%20PROXY%20us11.sq.proxmate.me%3A8000%3B%20PROXY%20us01.sq.proxmate.me%3A8000%3B%20PROXY%20us06.sq.proxmate.me%3A8000%3B%20PROXY%20us05.sq.proxmate.me%3A8000%3B%20PROXY%20us03.sq.proxmate.me%3A8000%3B%20PROXY%20us07.sq.proxmate.me%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @abr.gov.au/KeyMgmtPlugin -> C:\Program Files\ABR\Plug-In\bin\npAUSkeyPlugin.dll [2012-10-25] (Commonwealth Government of Australia)
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-07] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2011-06-10] ()
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-21] (CANON INC.)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-21] (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-08] (Google)
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-12-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-12-18] (Oracle Corporation)
FF Plugin: @nokia.com/EnablerPlugin -> C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2013-10-02] ( )
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-04-15] (VideoLAN)
FF Plugin HKU\S-1-5-21-1343024091-1326574676-725345543-1006: @talk.google.com/GoogleTalkPlugin -> C:\Documents and Settings\Work 2\Application Data\Mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-1343024091-1326574676-725345543-1006: @talk.google.com/O1DPlugin -> C:\Documents and Settings\Work 2\Application Data\Mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF Plugin HKU\S-1-5-21-1343024091-1326574676-725345543-1006: @tools.google.com/Google Update;version=3 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-08] (Google Inc.)
FF Plugin HKU\S-1-5-21-1343024091-1326574676-725345543-1006: @tools.google.com/Google Update;version=9 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-08] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\Work 2\Application Data\mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)
FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\Work 2\Application Data\mozilla\plugins\npo1d.dll [2015-01-27] (Google)
FF SearchPlugin: C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\searchplugins\search-to-earn-points.xml [2014-07-05]
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2015-03-07]
FF Extension: Blur (Formerly DoNotTrackMe) - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2014-11-22]
FF Extension: NetVideoHunter - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2015-03-04]
FF Extension: Youtube Downloader - 4K Download - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2015-03-07]
FF Extension: EPUBReader - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2015-02-13]
FF Extension: FireFTP - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f} [2015-01-16]
FF Extension: DownloadHelper - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-07]
FF Extension: Vuze Remote  - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} [2015-01-15]
FF Extension: Add to Amazon Wish List Button - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-10-31]
FF Extension: YouTube Video and Audio Downloader - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2014-03-06]
FF Extension: ProxMate - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2014-03-06]
FF Extension: QR Decoder - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-11-04]
FF Extension: Rainbow - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-03-18]
FF Extension: Tile Tabs - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2011-08-11]
FF Extension: RSS Ticker - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{1f91cde0-c040-11da-a94d-0800200c9a66}.xpi [2012-12-28]
FF Extension: Mobile Barcoder - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{A5C87640-F7CF-11DA-974D-0800200C9A66}.xpi [2012-11-04]
FF Extension: Modify Headers - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2012-03-27]
FF Extension: flybuys Toolbar - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{d8c4975b-9e4b-4574-b5ab-67fe58455a95}.xpi [2012-12-01]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
 
Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.nutritionforliving.com.au/wp-login.php?redirect_to=http%3A%2F%2Fwww.nutritionforliving.com.au%2Fwp-admin%2Fplugins.php&reauth=1", "hxxp://www.veganspeaks.com.au/wp-login.php?redirect_to=http%3A%2F%2Fwww.veganspeaks.com.au%2Fwp-admin%2Fnetwork%2Fplugins.php%3Ferror%3Dtrue%26main%3Dtrue%26plugin_status%3Dall%26paged%3D1%26s%3D&reauth=1"
CHR Profile: C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default
CHR Extension: (Dualless) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bgdpkilkheacbboffppjgceiplijhfpd [2014-05-15]
CHR Extension: (Tab Resize - split screen layouts) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bkpenclhmiealbebdopglffmfdiilejc [2014-05-15]
CHR Extension: (Tab Scissors) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\cdochbecpfdpjobpgnacnbepkgcfhoek [2014-05-15]
CHR Extension: (Share link via email) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ejdbkikfbnnhmachnnomjfgjbgkcnjkb [2014-05-16]
CHR Extension: (Readium) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\fepbnnnkkadjhjahcafoaglimekefifl [2015-03-14]
CHR Extension: (Dual View Split Screen) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gmdbkgponhaodlapckmpicgahloncdog [2014-05-15]
CHR Extension: (Chrome Hotword Shared Module) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13]
CHR Extension: (Chrome Reader) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lojpenhmoajbiciapkjkiekmobleogjc [2012-08-13]
CHR Extension: (Hangouts) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2014-08-02]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-13]
CHR Extension: (Simple EPUB Reader) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ojhbgcchcbdjdenibfmjofobklkkhofc [2015-03-14]
CHR Extension: (Google Reader) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjjhlfkghdhmijklfnahfkpgmhcmfgcm [2012-08-13]
CHR Extension: (Send Link by Email or Gmail) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\plcgkgghkdfgfhiidfjkhmainebgmklf [2014-05-16]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - No Path Or update_url value
StartMenuInternet: chrome.exe - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
 
========================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S2 ANIWZCSdService; C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe [49152 2007-01-19] (Wireless Service) [File not signed]
S2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3432976 2014-12-18] (AVG Technologies CZ, s.r.o.)
S2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [298080 2014-12-18] (AVG Technologies CZ, s.r.o.)
S3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]
R2 Capture Device Service; C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [198168 2007-03-06] (InterVideo Inc.)
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-11-06] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [139264 2007-11-06] (Hewlett-Packard Co.) [File not signed]
S3 idsvc; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [741376 2006-10-30] (Microsoft Corporation) [File not signed]
S3 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440 2006-10-19] (Hewlett-Packard Company) [File not signed]
S3 LiveUpdate; C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE [2918008 2007-01-05] (Symantec Corporation)
R2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [43520 2008-01-16] (Hewlett-Packard) [File not signed]
R2 O&O Defrag; C:\WINDOWS\system32\oodag.exe [1050120 2007-05-11] (O&O Software GmbH)
R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53760 2008-01-16] (Hewlett-Packard) [File not signed]
S2 PS3 Media Server; C:\Program Files\PS3 Media Server\win32\service\wrapper.exe [366872 2011-05-17] (Tanuki Software, Ltd.)
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [67056 2007-03-03] (Ulead Systems, Inc.)
S2 WMPNetworkSvc; C:\Program Files\Windows Media Player\WMPNetwk.exe [913408 2006-10-18] (Microsoft Corporation) [File not signed]
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 ANIO; C:\WINDOWS\system32\ANIO.SYS [28195 2007-05-12] (Alpha Networks Inc.) [File not signed]
R2 Aspi32; C:\WINDOWS\System32\drivers\aspi32.sys [16512 2007-11-16] (Adaptec) [File not signed]
S3 AtcL001; C:\WINDOWS\System32\DRIVERS\atl01_xp.sys [35712 2006-08-22] (Attansic Technology corporation.)
R3 AtcL002; C:\WINDOWS\System32\DRIVERS\l251x86.sys [30720 2007-10-17] (Atheros Communications, Inc.)
S3 AVEO; C:\WINDOWS\System32\DRIVERS\AVEOdcnt.sys [224256 2010-01-21] (AVEO Corp) [File not signed]
R1 Avgdiskx; C:\WINDOWS\System32\DRIVERS\avgdiskx.sys [121624 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriverl; C:\WINDOWS\System32\DRIVERS\avgidsdriverlx.sys [192792 2014-12-08] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\WINDOWS\System32\DRIVERS\avgidshx.sys [154904 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\WINDOWS\System32\DRIVERS\avgidsshimx.sys [21272 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\WINDOWS\System32\DRIVERS\avgldx86.sys [192792 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\WINDOWS\System32\DRIVERS\avglogx.sys [230680 2014-07-18] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\WINDOWS\System32\DRIVERS\avgmfx86.sys [98584 2014-10-05] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\WINDOWS\System32\DRIVERS\avgrkx86.sys [27416 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\WINDOWS\System32\DRIVERS\avgtdix.sys [200984 2014-10-10] (AVG Technologies CZ, s.r.o.)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2007-11-02] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2007-11-02] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2007-11-02] (HP)
R2 LBeepKE; C:\WINDOWS\System32\Drivers\LBeepKE.sys [3712 2006-05-25] (Logitech, Inc.) [File not signed]
R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35088 2011-02-12] (CACE Technologies, Inc.)
R3 pbfilter; C:\Program Files\PeerBlock\pbfilter.sys [19016 2014-01-14] ()
S3 pwdrvio; C:\WINDOWS\system32\pwdrvio.sys [16472 2011-05-06] ()
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [11104 2011-05-06] ()
R3 RT73; C:\WINDOWS\System32\DRIVERS\Dr71WU.sys [459520 2008-01-15] (Ralink Technology, Corp.)
R1 SCDEmu; C:\WINDOWS\system32\Drivers\SCDEmu.sys [26844 2006-03-18] (PowerISO Computing, Inc.) [File not signed]
S3 SONYPVU1; C:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS [7552 2001-08-17] (Sony Corporation)
R1 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed]
S3 teamviewervpn; C:\WINDOWS\System32\DRIVERS\teamviewervpn.sys [25088 2013-10-18] (TeamViewer GmbH)
S3 usbsermptxp; C:\WINDOWS\System32\DRIVERS\usbsermptxp.sys [25600 2007-10-19] (Microsoft Corporation)
S3 Bulk1528; System32\Drivers\Bulk1528.sys [X]
S2 Ca1528av; System32\Drivers\Ca1528av.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 HTCAND32; System32\Drivers\ANDROIDUSB.sys [X]
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-03-15 10:43 - 2015-03-15 10:43 - 02171392 _____ () C:\Documents and Settings\Work 2\Desktop\AdwCleaner.exe
2015-03-15 10:19 - 2015-03-15 10:19 - 01388333 _____ (Thisisu) C:\Documents and Settings\Work 2\Desktop\JRT.exe
2015-03-15 09:39 - 2015-03-15 10:52 - 00000000 ____D () C:\Documents and Settings\NetworkService\Local Settings\temp
2015-03-15 09:39 - 2015-03-15 09:39 - 00121271 _____ () C:\ComboFix.txt
2015-03-15 09:39 - 2015-03-15 09:39 - 00000000 ____D () C:\Documents and Settings\User2\Local Settings\temp
2015-03-15 09:39 - 2015-03-15 09:39 - 00000000 ____D () C:\Documents and Settings\LocalService\Local Settings\temp
2015-03-15 09:39 - 2015-03-15 09:39 - 00000000 ____D () C:\Documents and Settings\Default User\Local Settings\temp
2015-03-15 09:39 - 2015-03-15 09:39 - 00000000 ____D () C:\Documents and Settings\Administrator\Local Settings\temp
2015-03-15 09:31 - 2015-03-15 11:30 - 00000000 ____D () C:\Documents and Settings\Work 2\Local Settings\temp
2015-03-15 09:31 - 2015-03-15 09:31 - 00008192 ____H () C:\WINDOWS\system32\config\SECURITY.tmp.LOG
2015-03-15 09:31 - 2015-03-15 09:31 - 00000000 ____H () C:\WINDOWS\system32\config\SAM.tmp.LOG
2015-03-15 08:20 - 2015-03-15 08:20 - 00000000 _RSHD () C:\cmdcons
2015-03-15 08:20 - 2015-03-14 14:44 - 00000245 _____ () C:\Boot.bak
2015-03-15 08:20 - 2004-08-03 23:00 - 00260272 __RSH () C:\cmldr
2015-03-15 08:17 - 2011-06-26 16:45 - 00256000 _____ () C:\WINDOWS\PEV.exe
2015-03-15 08:17 - 2010-11-08 03:20 - 00208896 _____ () C:\WINDOWS\MBR.exe
2015-03-15 08:17 - 2009-04-20 14:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2015-03-15 08:17 - 2000-08-31 10:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2015-03-15 08:17 - 2000-08-31 10:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2015-03-15 08:17 - 2000-08-31 10:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2015-03-15 08:17 - 2000-08-31 10:00 - 00098816 _____ () C:\WINDOWS\sed.exe
2015-03-15 08:17 - 2000-08-31 10:00 - 00080412 _____ () C:\WINDOWS\grep.exe
2015-03-15 08:17 - 2000-08-31 10:00 - 00068096 _____ () C:\WINDOWS\zip.exe
2015-03-15 08:15 - 2015-03-15 09:39 - 00000000 ____D () C:\Qoobox
2015-03-15 08:15 - 2015-03-15 09:31 - 00000000 ____D () C:\WINDOWS\erdnt
2015-03-15 08:14 - 2015-03-15 08:14 - 05615380 ____R (Swearware) C:\Documents and Settings\Work 2\Desktop\ComboFix.exe
2015-03-15 07:16 - 2015-03-15 07:16 - 01943800 _____ (Bleeping Computer, LLC) C:\Documents and Settings\Work 2\Desktop\rkill.scr
2015-03-15 07:15 - 2015-03-15 07:15 - 01943800 _____ (Bleeping Computer, LLC) C:\Documents and Settings\Work 2\Desktop\rkill.exe
2015-03-15 07:15 - 2015-03-15 07:15 - 01943800 _____ (Bleeping Computer, LLC) C:\Documents and Settings\Work 2\Desktop\rkill.com
2015-03-15 06:01 - 2015-03-15 06:02 - 04197016 _____ (Kaspersky Lab ZAO) C:\Documents and Settings\Work 2\Desktop\tdsskiller.exe
2015-03-14 17:05 - 2015-03-14 17:05 - 00000723 _____ () C:\Documents and Settings\All Users\Desktop\calibre - E-book management.lnk
2015-03-14 16:58 - 2015-03-14 16:58 - 00002329 _____ () C:\Documents and Settings\Work 2\Desktop\Chrome App Launcher.lnk
2015-03-14 16:57 - 2015-03-14 16:57 - 01025278 _____ () C:\Documents and Settings\Work 2\Desktop\Mind If I Order the Cheeseburger And Other Questions People Ask Vegans.epub
2015-03-14 16:48 - 2015-03-14 17:03 - 56419840 _____ () C:\Documents and Settings\Work 2\Desktop\calibre-1.48.0.msi
2015-03-14 15:16 - 2015-03-14 15:16 - 00000686 _____ () C:\Documents and Settings\All Users\Desktop\CCleaner.lnk
2015-03-14 15:12 - 2015-03-14 15:14 - 05325696 _____ (Piriform Ltd) C:\Documents and Settings\Work 2\Desktop\ccsetup503.exe
2015-03-14 14:34 - 2015-03-14 14:33 - 00451175 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20150314-143411.backup
2015-03-14 14:33 - 2015-03-08 12:57 - 00451115 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20150314-143318.backup
2015-03-14 14:24 - 2015-03-14 14:24 - 04816784 _____ (AVG Technologies) C:\Documents and Settings\Work 2\Desktop\avg_isc_stb_all_2015_ltst_206.exe
2015-03-14 14:00 - 2015-03-15 10:49 - 00000000 ____D () C:\AdwCleaner
2015-03-14 09:17 - 2015-03-15 11:30 - 00028973 _____ () C:\Documents and Settings\Work 2\Desktop\FRST.txt
2015-03-14 09:16 - 2015-03-14 09:16 - 01135104 _____ (Farbar) C:\Documents and Settings\Work 2\Desktop\FRST.exe
2015-03-14 08:58 - 2015-03-14 09:00 - 20447072 _____ (Malwarebytes Corporation ) C:\Documents and Settings\Work 2\Desktop\mbam-setup-2.0.4.1028.exe
2015-03-14 08:35 - 2015-03-11 07:26 - 04197016 _____ (Kaspersky Lab ZAO) C:\Documents and Settings\Administrator\Desktop\tdsskiller.exe
2015-03-13 07:29 - 2015-03-13 07:29 - 00000000 ____D () C:\Documents and Settings\Work 2\Desktop\FRST-OlderVersion
2015-03-11 07:26 - 2015-03-11 07:26 - 00259584 _____ (OldTimer Tools) C:\Documents and Settings\Work 2\Desktop\OTH.scr
2015-03-11 07:18 - 2015-03-15 11:29 - 00000000 ____D () C:\FRST
2015-03-09 21:10 - 2015-03-09 21:10 - 00000027 _____ () C:\Documents and Settings\User2\Application Data\mbam.context.scan
2015-03-09 21:03 - 2015-03-09 21:03 - 00000000 ____D () C:\Documents and Settings\User2\Local Settings\Application Data\Sun
2015-03-09 21:03 - 2015-03-09 21:03 - 00000000 ____D () C:\Documents and Settings\User2\Application Data\Sun
2015-03-09 20:58 - 2015-03-09 20:58 - 00000000 ____D () C:\Documents and Settings\User2\Local Settings\Application Data\Avg2015
2015-03-09 20:58 - 2015-03-09 20:58 - 00000000 ____D () C:\Documents and Settings\User2\Application Data\Real
2015-03-09 20:57 - 2015-03-15 06:18 - 00000178 ___SH () C:\Documents and Settings\User2\ntuser.ini
2015-03-09 20:57 - 2015-03-09 20:57 - 00000796 _____ () C:\Documents and Settings\User2\Start Menu\Programs\Windows Media Player.lnk
2015-03-09 20:57 - 2015-03-09 20:57 - 00000771 _____ () C:\Documents and Settings\User2\Start Menu\Programs\Internet Explorer.lnk
2015-03-09 20:57 - 2015-03-09 20:57 - 00000742 _____ () C:\Documents and Settings\User2\Start Menu\Programs\Outlook Express.lnk
2015-03-09 20:57 - 2015-03-09 20:57 - 00000000 __SHD () C:\Documents and Settings\User2\IETldCache
2015-03-09 20:57 - 2015-03-09 20:57 - 00000000 ___RD () C:\Documents and Settings\User2\Start Menu\Programs\Accessories
2015-03-09 20:57 - 2015-03-09 20:57 - 00000000 ____D () C:\Documents and Settings\User2
2015-03-09 20:57 - 2012-10-13 09:59 - 00000000 ____D () C:\Documents and Settings\User2\Application Data\TuneUp Software
2015-03-09 20:57 - 2011-02-10 15:05 - 00001609 _____ () C:\Documents and Settings\User2\Start Menu\Programs\Remote Assistance.lnk
2015-03-09 20:57 - 2011-01-24 17:49 - 00000000 ____D () C:\Documents and Settings\User2\Application Data\Macromedia
2015-03-09 20:27 - 2015-03-09 20:27 - 04579240 _____ (AVG Technologies) C:\Documents and Settings\Work 2\Desktop\avg_isct_stb_all_2015_5315_cm5.exe
2015-03-09 20:27 - 2015-03-09 20:27 - 04579240 _____ (AVG Technologies) C:\avg_isct_stb_all_2015_5315_cm5.exe
2015-03-08 13:10 - 2015-03-08 13:12 - 05475064 _____ (Avast Software s.r.o.) C:\avast_free_antivirus_setup_online.exe
2015-03-08 12:57 - 2015-03-08 12:01 - 00451115 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20150308-125715.backup
2015-03-08 12:01 - 2015-03-08 11:54 - 00451115 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20150308-120131.backup
2015-03-08 11:54 - 2011-03-09 20:01 - 00001216 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.20150308-115437.backup
2015-03-08 11:45 - 2015-03-08 11:45 - 00000000 ____D () C:\Documents and Settings\Work 2\My Documents\ProcAlyzer Dumps
2015-03-08 11:16 - 2015-03-08 12:26 - 00065536 _____ () C:\WINDOWS\system32\config\SpybotSD.evt
2015-03-08 11:15 - 2015-03-14 17:56 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2015-03-08 10:42 - 2015-03-08 10:43 - 46525608 _____ (Safer-Networking Ltd. ) C:\Documents and Settings\Work 2\Desktop\spybot-2.4.exe
2015-03-08 10:26 - 2015-03-08 10:26 - 00000000 ____D () C:\Documents and Settings\Administrator\Local Settings\Application Data\Avg2015
2015-03-08 10:25 - 2015-03-08 10:25 - 00000000 __SHD () C:\Documents and Settings\Administrator\IETldCache
2015-03-08 10:24 - 2015-03-14 08:38 - 00000178 ___SH () C:\Documents and Settings\Administrator\ntuser.ini
2015-03-08 10:24 - 2015-03-08 10:25 - 00000000 ____D () C:\Documents and Settings\Administrator
2015-03-08 10:24 - 2012-10-13 09:59 - 00000000 ____D () C:\Documents and Settings\Administrator\Application Data\TuneUp Software
2015-03-08 10:24 - 2011-02-10 15:05 - 00001609 _____ () C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk
2015-03-08 10:24 - 2011-02-10 15:04 - 00000000 ___RD () C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories
2015-03-08 10:24 - 2011-01-24 17:49 - 00000000 ____D () C:\Documents and Settings\Administrator\Application Data\Macromedia
2015-03-08 10:14 - 2015-03-08 10:14 - 04800936 _____ (AVG Technologies) C:\Documents and Settings\Work 2\Desktop\avg_free_stb_all_5751p1_177.exe
2015-03-07 09:37 - 2015-03-13 03:59 - 01133868 _____ () C:\WINDOWS\system32\CFG2561008352
2015-03-01 17:46 - 2015-03-01 17:51 - 00828994 _____ () C:\Documents and Settings\Work 2\Desktop\glf.mp4
2015-02-22 12:29 - 2015-02-22 12:29 - 03037217 _____ () C:\Documents and Settings\Work 2\Desktop\Intro to veganism2 Narration.wma
2015-02-22 09:28 - 2015-02-22 09:28 - 00019456 _____ () C:\Documents and Settings\Work 2\Desktop\Intro to veganism.MSWMM
2015-02-22 09:14 - 2015-02-22 09:14 - 00001701 _____ () C:\Documents and Settings\Work 2\Desktop\v.utf
2015-02-22 08:50 - 2015-02-22 08:50 - 00003771 _____ () C:\Documents and Settings\Work 2\Desktop\Do you believe.utf.txt
2015-02-22 08:44 - 2015-02-22 09:06 - 00003771 _____ () C:\Documents and Settings\Work 2\Desktop\Do you believe.txt
2015-02-21 11:30 - 2015-02-21 11:30 - 04535732 _____ () C:\Documents and Settings\Work 2\Desktop\MyPost_Deliveries.mp4
2015-02-15 11:13 - 2015-02-15 11:13 - 00000016 ____H () C:\Documents and Settings\SyncToy_aa29d182-7c79-4e0d-ad30-a891204c8004.dat
2015-02-15 10:06 - 2015-02-15 10:06 - 00007758 _____ () C:\Documents and Settings\Work 2\Desktop\Mix 1.xspf
2015-02-14 12:59 - 2015-02-14 12:59 - 00012110 _____ () C:\Documents and Settings\Work 2\Desktop\Gwen.xspf
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2015-03-15 11:30 - 2013-02-02 09:08 - 00000886 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-15 11:28 - 2007-08-22 09:02 - 00000030 _____ () C:\WINDOWS\ALL2006.INI
2015-03-15 11:26 - 2007-09-18 10:10 - 00000000 ____D () C:\myob17
2015-03-15 11:24 - 2007-08-08 07:06 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-03-15 11:22 - 2011-07-16 20:24 - 00000982 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-1326574676-725345543-1006UA.job
2015-03-15 11:22 - 2007-08-09 13:11 - 00000000 ____D () C:\myob16
2015-03-15 11:16 - 2007-09-18 11:20 - 00000000 ____D () C:\Program Files\Cyberlink
2015-03-15 11:09 - 2011-01-07 18:36 - 00000000 ____D () C:\Program Files\TVersity
2015-03-15 11:08 - 2013-01-11 08:11 - 00516616 _____ () C:\WINDOWS\setupapi.log
2015-03-15 11:08 - 2007-08-08 11:15 - 00000000 ____D () C:\Documents and Settings\All Users\Start Menu\Programs\HP
2015-03-15 11:06 - 2009-03-26 03:00 - 00000260 _____ () C:\WINDOWS\Tasks\WGASetup.job
2015-03-15 11:03 - 2011-01-02 10:20 - 00000000 ____D () C:\Program Files\PeerBlock
2015-03-15 10:57 - 2013-01-04 08:24 - 00422149 _____ () C:\WINDOWS\WindowsUpdate.log
2015-03-15 10:56 - 2010-03-01 06:36 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\Skype
2015-03-15 10:53 - 2009-10-27 13:28 - 00003284 _____ () C:\WINDOWS\system32\ANIWZCS{ABC6C283-2BF8-45CA-8598-F5669FA7FF12}
2015-03-15 10:52 - 2013-02-02 09:08 - 00000882 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-15 10:52 - 2011-07-14 09:46 - 00000280 _____ () C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1343024091-1326574676-725345543-1006.job
2015-03-15 10:52 - 2009-10-27 13:27 - 00000007 _____ () C:\WINDOWS\system32\ANIWZCSUSERNAME{ABC6C283-2BF8-45CA-8598-F5669FA7FF12}
2015-03-15 10:52 - 2009-08-04 15:45 - 00000007 _____ () C:\WINDOWS\system32\ANIWZCSUSERNAME
2015-03-15 10:51 - 2011-08-15 15:40 - 00000000 ____D () C:\Program Files\PS3 Media Server
2015-03-15 10:51 - 2007-08-10 12:09 - 01171009 _____ () C:\WINDOWS\system32\oodbs.lor
2015-03-15 10:51 - 2007-08-08 06:59 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-03-15 10:51 - 2007-08-08 02:30 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-03-15 10:51 - 2007-08-08 02:30 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2015-03-15 10:49 - 2008-10-14 14:28 - 00000278 ___SH () C:\Documents and Settings\Work 2\ntuser.ini
2015-03-15 10:49 - 2007-08-08 06:59 - 00032590 _____ () C:\WINDOWS\SchedLgU.Txt
2015-03-15 10:34 - 2012-10-13 10:37 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-03-15 09:33 - 2004-08-04 22:00 - 00000227 _____ () C:\WINDOWS\system.ini
2015-03-15 09:32 - 2007-08-08 02:25 - 65011712 _____ () C:\WINDOWS\system32\config\software.bak
2015-03-15 09:32 - 2007-08-08 02:25 - 14942208 _____ () C:\WINDOWS\system32\config\system.bak
2015-03-15 09:32 - 2007-08-08 02:25 - 05505024 _____ () C:\WINDOWS\system32\config\default.bak
2015-03-15 09:32 - 2007-08-08 02:25 - 00262144 _____ () C:\WINDOWS\system32\config\SECURITY.bak
2015-03-15 09:32 - 2007-08-08 02:25 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.bak
2015-03-15 08:20 - 2007-08-08 02:25 - 00000355 __RSH () C:\boot.ini
2015-03-15 07:43 - 2010-12-06 20:55 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\vlc
2015-03-15 07:22 - 2011-07-16 20:24 - 00000930 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-1326574676-725345543-1006Core.job
2015-03-15 05:56 - 2014-10-24 06:43 - 00000556 _____ () C:\WINDOWS\Tasks\Casper XP Scheduled Copy of Disk 1 to Disk 2.job
2015-03-14 17:54 - 2011-01-02 10:22 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\uTorrent
2015-03-14 17:37 - 2012-09-21 07:54 - 00001242 _____ () C:\WINDOWS\wininit.ini
2015-03-14 17:36 - 2007-08-09 11:14 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2015-03-14 17:10 - 2012-01-26 14:24 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\calibre
2015-03-14 17:05 - 2012-01-26 14:22 - 00000000 ____D () C:\Program Files\Calibre2
2015-03-14 17:05 - 2012-01-26 14:22 - 00000000 ____D () C:\Documents and Settings\All Users\Start Menu\Programs\calibre - E-book Management
2015-03-14 16:58 - 2011-07-16 20:26 - 00000000 ____D () C:\Documents and Settings\Work 2\Start Menu\Programs\Google Chrome
2015-03-14 15:45 - 2012-10-07 21:53 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\Azureus
2015-03-14 15:45 - 2011-02-16 19:41 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\FileZilla
2015-03-14 15:45 - 2010-01-04 11:18 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\TeamViewer
2015-03-14 15:43 - 2009-09-15 12:51 - 00000000 ____D () C:\WINDOWS\Minidump
2015-03-14 15:41 - 2008-10-14 14:28 - 00000000 ____D () C:\Documents and Settings\Work 2
2015-03-14 15:16 - 2012-12-26 13:41 - 00000000 ____D () C:\Documents and Settings\All Users\Start Menu\Programs\CCleaner
2015-03-14 15:15 - 2012-12-26 13:41 - 00000000 ____D () C:\Program Files\CCleaner
2015-03-14 14:26 - 2007-08-09 11:10 - 00000000 ____D () C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2015-03-14 11:27 - 2008-10-14 14:34 - 00000000 ____D () C:\Documents and Settings\Work 2\My Documents\Damon
2015-03-14 07:36 - 2004-08-04 22:00 - 00012598 _____ () C:\WINDOWS\system32\wpa.dbl
2015-03-13 08:40 - 2011-10-15 09:13 - 00000284 _____ () C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2015-03-12 12:46 - 2011-07-14 09:46 - 00000288 _____ () C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1343024091-1326574676-725345543-1006.job
2015-03-11 18:00 - 2011-02-10 20:12 - 00000000 ____D () C:\Documents and Settings\Work 2\My Documents\Desktop Temp
2015-03-11 07:05 - 2010-01-13 15:44 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2015-03-11 07:05 - 2010-01-13 15:43 - 00000000 ____D () C:\Program Files\Symantec
2015-03-11 07:05 - 2010-01-13 15:43 - 00000000 ____D () C:\Documents and Settings\All Users\Application Data\Symantec
2015-03-10 17:54 - 2013-06-12 19:50 - 00006174 _____ () C:\WINDOWS\setupact.log
2015-03-10 12:41 - 2007-08-09 12:14 - 00000000 ____D () C:\Documents and Settings\Work 2\My Documents\Software
2015-03-10 12:31 - 2008-10-21 16:56 - 00000000 ____D () C:\Documents and Settings\Work 2\My Documents\Shaun Shared
2015-03-10 05:46 - 2014-07-23 19:51 - 00000007 _____ () C:\WINDOWS\system32\ANIWZCSUSERNAME{02F3C557-80E4-415C-A588-B850710C9CA3}
2015-03-09 20:57 - 2013-10-16 14:48 - 00002801 _____ () C:\WINDOWS\wmsetup.log
2015-03-08 12:32 - 2015-01-24 17:40 - 00000007 _____ () C:\WINDOWS\system32\ANIWZCSUSERNAME{E096EEF9-C664-46EA-AA51-3939B376610F}
2015-03-08 11:15 - 2007-08-09 11:10 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy
2015-03-08 07:23 - 2007-08-08 06:54 - 00000000 ____D () C:\WINDOWS\Registration
2015-03-07 21:24 - 2014-08-09 01:11 - 00000771 _____ () C:\WINDOWS\system32\TeamViewer9_Hooks.log
2015-03-07 18:43 - 2011-10-20 18:37 - 00000000 ____D () C:\WINDOWS\system32\oodag
2015-03-07 00:47 - 2012-09-25 22:43 - 00000000 ____D () C:\Documents and Settings\All Users\Application Data\MFAData
2015-03-01 17:52 - 2014-12-19 19:55 - 00000000 ____D () C:\Documents and Settings\Work 2\Desktop\GLF vids
2015-02-22 16:54 - 2011-03-17 21:16 - 00000000 ____D () C:\Documents and Settings\Work 2\Local Settings\Application Data\WMTools Downloaded Files
2015-02-22 16:23 - 2008-12-09 21:14 - 00066048 _____ () C:\Documents and Settings\Work 2\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-02-21 12:45 - 2010-03-01 06:35 - 00000000 ____D () C:\Documents and Settings\All Users\Application Data\Skype
2015-02-21 12:44 - 2010-03-01 06:35 - 00000000 ___RD () C:\Program Files\Skype
2015-02-21 11:23 - 2015-01-09 08:08 - 00014251 _____ () C:\Documents and Settings\Work 2\Desktop\Change of Address Jan 2015.xlsx
2015-02-20 17:58 - 2014-06-15 08:18 - 00133632 ___SH () C:\Documents and Settings\Work 2\Desktop\Thumbs.db
2015-02-15 12:48 - 2015-02-12 06:43 - 00000007 _____ () C:\WINDOWS\system32\ANIWZCSUSERNAME{7EF6EEBD-2E61-42CD-A876-2028A185E7DF}
2015-02-15 11:57 - 2015-02-11 06:43 - 00000007 _____ () C:\WINDOWS\system32\ANIWZCSUSERNAME{2E5E5122-B8B0-41BA-84DC-5B12E3F13377}
2015-02-15 11:57 - 2011-02-15 22:43 - 01789952 _____ () C:\Documents and Settings\Work 2\Local Settings\Application Data\filesync.metadata
2015-02-15 11:12 - 2011-02-15 22:43 - 00002259 _____ () C:\Documents and Settings\All Users\Start Menu\Programs\SyncToy 2.0.lnk
2015-02-14 10:08 - 2007-08-08 02:28 - 00605412 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
 
==================== Files in the root of some directories =======
 
2013-06-27 10:13 - 2014-06-28 08:28 - 0003728 _____ () C:\Program Files\Mozilla Firefoxavg-secure-search.xml
2011-03-30 20:28 - 2011-03-30 20:31 - 0000132 _____ () C:\Documents and Settings\Work 2\Application Data\Adobe BMP Format CS5 Prefs
2011-03-31 11:25 - 2014-02-26 14:35 - 0000132 _____ () C:\Documents and Settings\Work 2\Application Data\Adobe GIF Format CS5 Prefs
2011-07-12 13:40 - 2014-08-10 11:27 - 0000132 _____ () C:\Documents and Settings\Work 2\Application Data\Adobe PNG Format CS5 Prefs
2013-10-20 13:51 - 2014-03-09 11:59 - 0000096 _____ () C:\Documents and Settings\Work 2\Application Data\Camdata.ini
2013-10-20 13:51 - 2014-03-09 11:59 - 0000408 _____ () C:\Documents and Settings\Work 2\Application Data\CamLayout.ini
2013-10-20 13:51 - 2014-03-09 11:59 - 0000408 _____ () C:\Documents and Settings\Work 2\Application Data\CamShapes.ini
2013-10-20 13:51 - 2014-03-09 11:59 - 0004510 _____ () C:\Documents and Settings\Work 2\Application Data\CamStudio.cfg
2011-07-20 14:30 - 2013-11-15 11:49 - 0001456 _____ () C:\Documents and Settings\Work 2\Local Settings\Application Data\Adobe Save for Web 12.0 Prefs
2008-12-09 21:14 - 2015-02-22 16:23 - 0066048 _____ () C:\Documents and Settings\Work 2\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-02-15 22:43 - 2015-02-15 11:57 - 1789952 _____ () C:\Documents and Settings\Work 2\Local Settings\Application Data\filesync.metadata
2008-10-14 14:29 - 2008-10-14 14:29 - 0000129 _____ () C:\Documents and Settings\Work 2\Local Settings\Application Data\fusioncache.dat
 
Some content of TEMP:
====================
C:\Documents and Settings\Work 2\Local Settings\temp\hpzmsi01.exe
C:\Documents and Settings\Work 2\Local Settings\temp\hpzscr01.EXE
 
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
 
==================== End Of Log ============================



Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015
Ran by Work 2 at 2015-03-15 11:30:36
Running from C:\Documents and Settings\Work 2\Desktop
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
µTorrent (HKLM\...\uTorrent) (Version: 3.2.2.28110 - BitTorrent Inc.)
32 Bit HP CIO Components Installer (Version: 2.1.0 - Hewlett-Packard) Hidden
Adobe Acrobat 6.0 Professional - English, Français, Deutsch (HKLM\...\{AC76BA86-1033-F400-7760-000000000001}) (Version: 006.000.000 - Adobe Systems)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.4.0.2540 - Adobe Systems Incorporated)
Adobe Community Help (HKLM\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Media Player (HKLM\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Reader X (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA0000000001}) (Version: 10.0.0 - Adobe Systems Incorporated)
Amazon Send to Kindle (HKLM\...\SendToKindle) (Version: 1.0.0.192 - Amazon)
ANIO Service (HKLM\...\{7B5CE976-C7A9-4E38-A7F3-6C8EF025DD8E}) (Version:  - )
ANIWZCS2 Service (HKLM\...\{4C590030-7469-453E-8589-D15DA9D03F52}) (Version:  - )
Any DVD Cloner Platinum 1.2.0 (HKLM\...\Any DVD Cloner Platinum_is1) (Version:  - dvdsmith.com)
Any Video Converter Professional 5.0.8 (HKLM\...\Any Video Converter Professional_is1) (Version:  - Any-Video-Converter.com)
AnyCAD Viewer 2011 (HKLM\...\{65147B19-6211-43E1-9897-EA6AC44D4E24}) (Version: 2.5.0 - AnyCAD Solution)
Apple Application Support (HKLM\...\{A83279FD-CA4B-4206-9535-90974DE76654}) (Version: 2.1.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}) (Version: 4.0.0.96 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft MediaConverter 2 (HKLM\...\{33295076-A0D0-49B8-9EA0-A9AB3631CDC8}) (Version:  - ArcSoft)
AsusUpdate (HKLM\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version:  - )
Attansic Giga Ethernet Utility (HKLM\...\{1F698102-5739-441E-96F0-74F4EA540F06}) (Version: 1.0 - )
Attansic L1 Gigabit Ethernet Driver (HKLM\...\AtcL1) (Version:  - )
AUSkey software 1.4.4 (HKLM\...\{24D37B30-83B4-46A7-A691-30F2FCEAE58E}) (Version: 1.4.4 - ABR)
Avanquest update (HKLM\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.12 - Avanquest Software)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5645 - AVG Technologies)
AVG 2015 (Version: 15.0.4299 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5645 - AVG Technologies) Hidden
Avidemux 2.5 (32-bit) (HKLM\...\Avidemux 2.5) (Version: 2.5.4.7200 - )
AxCrypt (Remove Only) (HKLM\...\AxCrypt) (Version:  - Axon Data)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Bullzip PDF Printer 4.0.0.463 (HKLM\...\Bullzip PDF Printer_is1) (Version:  - Bullzip)
calibre (HKLM\...\{DD649DA2-BBD9-4247-85DD-E04F7C1E8552}) (Version: 1.48.0 - Kovid Goyal)
CamStudio version 2.7 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7 - CamStudio Open Source)
Canon Easy-PhotoPrint EX (HKLM\...\Easy-PhotoPrint EX) (Version:  - )
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM\...\CANONIJPLM100) (Version:  - )
Canon iP4300 (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4300) (Version:  - )
Canon MG2100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2100_series) (Version:  - )
Canon MG2100 series On-screen Manual (HKLM\...\Canon MG2100 series On-screen Manual) (Version:  - )
Canon MP Navigator EX 4.0 (HKLM\...\MP Navigator EX 4.0) (Version:  - )
Canon MP Navigator EX 5.0 (HKLM\...\MP Navigator EX 5.0) (Version:  - )
Canon MP280 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP280_series) (Version:  - )
Canon My Printer (HKLM\...\CanonMyPrinter) (Version:  - )
Canon Setup Utility 2.3 (HKLM\...\Canon Setup Utility 2.3) (Version:  - )
Canon Solution Menu EX (HKLM\...\CanonSolutionMenuEX) (Version:  - )
Canon Utilities Easy-PhotoPrint (HKLM\...\Easy-PhotoPrint) (Version:  - )
Canon Utilities Easy-PrintToolBox (HKLM\...\Easy-PrintToolBox) (Version:  - )
Casper XP (HKLM\...\{243FA669-BEA1-4FD7-906F-DAF000D6B33A}) (Version: 3.0.224 - Future Systems Solutions, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
CD-LabelPrint (HKLM\...\MediaNavigation.CDLabelPrint) (Version:  - )
Centrebet.net (HKLM\...\Centrebet Poker.NET) (Version:  - )
CL-Eye Driver (HKLM\...\CL-Eye Driver) (Version: 5.3.0.0341 - Code Laboratories, Inc.)
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6021.5000 - Microsoft Corporation)
ConvertHelper 2.2 (HKLM\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
Core FTP LE (HKLM\...\CoreFTP) (Version:  - )
DaeViewer (HKLM\...\DaeViewer.76CE1EF822E2E36CA97855F1F5AE3A25B8F1B9B8.1) (Version: v1 - UNKNOWN)
DaeViewer (Version: 1 - UNKNOWN) Hidden
DeviceFunctionQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
DivX Codec (HKLM\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.8.0 - DivX, Inc.)
DivX Content Uploader (HKLM\...\{D050D7362D214723AD585B541FFB6C11}) (Version: 1.2.1 - DivX, Inc.)
DivX Converter (HKLM\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 6.5.1 - DivX, Inc.)
DivX Setup (HKLM\...\DivX Setup) (Version: 2.6.0.34 - DivX, LLC)
DivX Web Player (HKLM\...\{B7050CBDB2504B34BC2A9CA0A692CC29}) (Version: 1.4.0 - DivX,Inc.)
D-Link Wireless G DWA-110 (HKLM\...\{5F753314-628E-4C13-B8AE-BFA7FD514CBE}) (Version:  - D-Link)
DocProcQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
DocumentViewerQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-1343024091-1326574676-725345543-1006\...\Dropbox) (Version: 2.0.22 - Dropbox, Inc.)
DVD Shrink 3.2 (HKLM\...\DVD Shrink_is1) (Version:  - DVD Shrink)
DVD-CLONER V5.00 Build 959 (HKLM\...\DVD-CLONER V_is1) (Version:  - )
Easy-WebPrint (HKLM\...\Easy-WebPrint) (Version:  - )
e-tax 2011 (HKLM\...\{C078C299-C2C2-4110-A6EF-8D5E66C228DA}) (Version: 11.1.704 - ATO)
e-tax 2012 (HKLM\...\{B0F1B02F-47A6-411D-A38B-E44CC7F53CCC}) (Version: 6.0.577 - Australian Taxation Office)
e-tax 2013 (HKLM\...\{FFF14233-FE39-4671-A38E-76FD8F24A879}) (Version: 0.10.558 - Australian Taxation Office)
e-tax 2014 (HKLM\...\{42D5C0B2-A309-4F84-9BD7-5DDDFE6C09E1}) (Version: 2.10.788 - Australian Taxation Office)
ffdshow [rev 3154] [2009-12-09] (HKLM\...\ffdshow_is1) (Version: 1.0 - )
FileMind QuickFix (HKLM\...\{92789900-80D0-4B61-B742-7897964A69AB}_is1) (Version: Build 4184 - Metability Software)
FileZilla Client 3.5.0 (HKLM\...\FileZilla Client) (Version: 3.5.0 - )
Final Draft 7 (HKLM\...\{78D62D17-D970-42DA-B8CF-5E5576293B33}) (Version: 7.1.1.19 - Final Draft, Inc.)
Free CBR Reader (HKLM\...\{B9240DAE-EFA1-4A0E-824F-17B3F99194F8}) (Version: 1.0.0 - Free Picture Solutions)
Free Convert Audio to iPhone iPod Music Converter 5.8 (HKLM\...\Free Convert Audio to iPhone iPod Music Converter_is1) (Version:  - Xillvideo Software, Inc.)
Free M4a to MP3 Converter 8.0 (HKLM\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
Free MKV Video2Dvd 3.30 (HKLM\...\Free MKV Video2Dvd 3.30_is1) (Version:  - EffectMatrix, Inc.)
FullDPAppQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
Google Chrome (HKU\S-1-5-21-1343024091-1326574676-725345543-1006\...\Google Chrome) (Version: 41.0.2272.89 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM\...\{C77CC230-7417-3F01-B70D-52583DC9FEC9}) (Version: 5.40.2.0 - Google)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden
GPL Ghostscript Lite 8.70 (HKLM\...\GPL Ghostscript Lite_is1) (Version:  - )
HL-2130 (HKLM\...\{E2A97415-BD97-4867-B906-05E39E9EE51F}) (Version: 1.0.7.0 - Brother Industries, Ltd.)
HPProductAssistant (Version: 100.0.170.000 - Hewlett-Packard) Hidden
HTC BMP USB Driver (HKLM\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)
HyperSnap 6 (HKLM\...\HyperSnap 6) (Version: 5 - Hyperionics Technology LLC)
ImageMixer for HDD Camcorder (HKLM\...\{44E5B47F-870E-4E38-A458-8A5FC4DCFECF}) (Version: 3.01.001 - PIXELA)
Intel® Graphics Media Accelerator Driver (HKLM\...\{8A708DD8-A5E6-11D4-A706-000629E95E20}) (Version: 6.14.10.4543 - )
InterVideo DeviceService (HKLM\...\{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}) (Version: 1.0.0 - InterVideo)
IRAS (HKLM\...\Remote Administration System_is1) (Version:  - )
iTunes (HKLM\...\{29ED20C9-5E15-4969-9279-25BF3727A3DA}) (Version: 10.5.0.142 - Apple Inc.)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)
Java™ 6 Update 2 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160020}) (Version: 1.6.0.20 - Sun Microsystems, Inc.)
Java™ 6 Update 3 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160030}) (Version: 1.6.0.30 - Sun Microsystems, Inc.)
Java™ 6 Update 30 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216011FF}) (Version: 6.0.300 - Sun Microsystems, Inc.)
JavaFX 2.1.0 (HKLM\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)
Juice 2.2 (HKLM\...\Juice) (Version: 2.2 - Juice Team)
KhalSetup (Version: 3.0.101 - Logitech) Hidden
K-Lite Codec Pack 4.0.0 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 4.0.0 - )
LightScribe  1.4.124.1 (Version: 1.4.124.1 - http://www.lightscribe.com) Hidden
LiveReg (Symantec Corporation) (HKLM\...\LiveReg) (Version: 2.4.2.2295 - Symantec Corporation)
LiveUpdate 3.2 (Symantec Corporation) (HKLM\...\LiveUpdate) (Version: 3.2.0.41 - Symantec Corporation)
Logitech Desktop Messenger (HKLM\...\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}) (Version: 2.52.18 - Logitech, Inc.)
Logitech Harmony Remote Software 7 (HKLM\...\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.3.2.5 - Logitech)
Logitech SetPoint (HKLM\...\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}) (Version: 3.0 - Logitech)
Macromedia Dreamweaver 8 (HKLM\...\{0837A661-FEC3-48B3-876C-91E7D32048A9}) (Version: 8.0.0.2734 - Macromedia)
Macromedia Extension Manager (HKLM\...\{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}) (Version: 1.7.240 - Macromedia, Inc.)
Macromedia Fireworks 8 (HKLM\...\{4C24A8C1-7CFA-4650-AF15-732F5BD7B46D}) (Version: 8.0.0.777 - Macromedia)
Macromedia Flash 8 (HKLM\...\{2BD5C305-1B27-4D41-B690-7A61172D2FEB}) (Version: 8.00.0000 - Macromedia)
Macromedia Flash 8 Video Encoder (HKLM\...\{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}) (Version: 1.00.0000 - Macromedia)
Macromedia Flash Player 8 (HKLM\...\{885A63EA-382B-4DD4-A755-14809B8557D6}) (Version: 8.0.22.0 - Macromedia)
Magic ISO Maker v5.4 (build 0239) (HKLM\...\Magic ISO Maker v5.4 (build 0239)) (Version:  - )
Mavis Beacon Teaches Typing Platinum 20 (HKLM\...\{58F9D852-9443-4955-A1ED-12C9E0504DD0}) (Version: 20.00.0000 - Broderbund)
Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 Hotfix (KB928366) (HKLM\...\M928366) (Version:  - )
Microsoft .NET Framework 3.0 (HKLM\...\Microsoft .NET Framework 3.0) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Sync Framework Runtime v1.0 (x86) (HKLM\...\{A8BD5A60-E843-46DC-8271-ABF20756BE0F}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services v1.0 (x86) (HKLM\...\{03CAB33F-D1C2-48C6-8766-DAE84DFC25FE}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WinUsb 2.0 (HKLM\...\winusb0200) (Version:  - Microsoft Corporation)
MiniTool Partition Wizard Home Edition 6.0 (HKLM\...\{067B277E-F94B-4F04-B380-BA967C00377C}_is1) (Version:  - MiniTool Solution Ltd.)
MobileMe Control Panel (HKLM\...\{779DECD7-E072-4B56-9B6B-BEB5973EEEB5}) (Version: 3.1.6.0 - Apple Inc.)
Motorola Driver Installation (HKLM\...\{3324A5DC-C7F6-430A-ACC8-F251CD8F4FC7}) (Version: 2.7.2 - Motorola Inc.)
Motorola Phone Tools (HKLM\...\{BAD8CA9C-77C0-4663-B00B-A8D3B13C341B}) (Version: 4.3.5a 10-03-2006 - Avanquest Software)
Motorola Phone Tools (Version: 4.30 - BVRP Software) Hidden
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB927978) (HKLM\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 6 Service Pack 2 (KB954459) (HKLM\...\{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}) (Version: 6.20.1099.0 - Microsoft Corporation)
MYOB Accounting Plus v18.5 (HKLM\...\InstallShield_{60D06F5E-876E-4D0C-B6EE-C1820D61A5B2}) (Version: 18.5.0 - MYOB Technology Pty Ltd)
MYOB Accounting Plus v18.5 (Version: 18.5.0 - MYOB Technology Pty Ltd) Hidden
MYOB ODBC Direct v7 (HKLM\...\InstallShield_{C71F2873-3229-4A9E-A2A2-F14DCBF63F56}) (Version: 7.0.0 - MYOB Technology Pty Ltd)
MYOB ODBC Direct v7 (Version: 7.0.0 - MYOB Technology Pty Ltd) Hidden
MYOB ODBC Direct v9 AUS (HKLM\...\InstallShield_{92FF8F7F-F7AF-4643-AD5E-550E7E243C34}) (Version: 9.0.0 - MYOB Technology Pty Ltd)
MYOB ODBC Direct v9 AUS (Version: 9.0.0 - MYOB Technology Pty Ltd) Hidden
Nero 8 (HKLM\...\{5FCCD531-1B38-4A94-924C-127F722F1033}) (Version: 8.2.89 - Nero AG)
NirSoft VideoCacheView (HKLM\...\NirSoft VideoCacheView) (Version:  - )
Nokia Connectivity Cable Driver (HKLM\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia Suite (HKLM\...\Nokia Suite) (Version: 3.8.48.0 - Nokia)
Nokia Suite (Version: 3.8.48.0 - Nokia) Hidden
O&O Defrag Professional Edition (HKLM\...\{53480330-E1D1-41CA-B8F8-7F78644F7F50}) (Version: 10.0.1634 - O&O Software GmbH)
PC Connectivity Solution (HKLM\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
PDF Settings CS5 (Version: 10.0 - Adobe Systems Incorporated) Hidden
PeerBlock 1.2 (r693) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC)
PhotoNow! 1.0 (HKLM\...\{D36DD326-7280-11D8-97C8-000129760CBE}) (Version:  - )
PIXresizer 1.0.9 (HKLM\...\PIXresizer_is1) (Version:  - Bluefive software)
PowerISO (HKLM\...\PowerISO) (Version:  - )
PS3 Media Server (HKLM\...\PS3 Media Server) (Version: 1.54.0 - PS3 Media Server)
Qtrax 0.2beta (20080125) (HKLM\...\Qtrax 20080125) (Version:  - )
QuickTime (HKLM\...\{C9E14402-3631-4182-B377-6B0DFB1C0339}) (Version: 7.70.80.34 - Apple Inc.)
Real Alternative 2.0.2 (HKLM\...\RealAlt_is1) (Version: 2.0.2 - )
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 12.0) (Version:  - RealNetworks)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.5506 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Remote Control USB Driver (HKLM\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )
Rhapsody Player Engine (HKLM\...\{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}) (Version: 1.0.604 - RealNetworks)
RMVB Converter 1.8 (HKLM\...\{C3BDF1C8-66EF-4A0F-B427-A99E39706F45}_is1) (Version:  - RMVB Codec)
SAMSUNG Mobile Composite Device Software (HKLM\...\SAMSUNG Mobile Composite Device) (Version:  - )
SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version:  - )
Samsung Mobile phone USB driver Software (HKLM\...\Samsung Mobile phone USB driver) (Version:  - )
SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )
SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )
Samsung PC Studio 3 (HKLM\...\{C4A4722E-79F9-417C-BD72-8D359A090C97}) (Version: 3.2.2.80805 - Samsung Electronics Co., Ltd.)
Samsung PC Studio 3 (Version: 3.0.0.80805 - Samsung Electronics Co., Ltd.) Hidden
Samsung PC Studio 3 USB Driver Installer (HKLM\...\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}) (Version: 3.2.0.70701 - Samsung Electronics Co., Ltd.)
SketchUp 8 (HKLM\...\{8EB62C87-AAA6-4850-A5BC-64155884B973}) (Version: 3.0.16846 - Trimble Navigation Limited)
Skype Call Recorder (HKLM\...\{31FDDB24-D8FE-456A-8479-5E0526D5EAAF}) (Version: 0.7.2 - Alexander Nikiforov)
Skype™ 7.1 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
Sony Vegas Movie Studio Platinum 8.0 (HKLM\...\{987B8E44-5E06-48A5-9745-46EB2B8A3CB0}) (Version: 8.0.122 - Sony)
SPCA1528 PC Driver (HKLM\...\{570C2A84-A145-4DF0-AE9D-012584DF09DC}) (Version: 2.2.2.0 - sunplus)
Spell Checker For OE 2.1 (HKLM\...\Spell Checker For OE 2.1) (Version:  - )
StreamTransport version: 1.0.2.2171 (HKLM\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version:  - )
SyncToy 2.0 (x86) (HKLM\...\{AFDFC350-C142-4790-BE12-8357AECD028F}) (Version: 2.0.100.0 - Microsoft)
Telstra Online Text Buddy 1.0 (HKLM\...\{DC970EE0-4C92-4CDE-A323-0E2F1552C35E}) (Version: 1.0 - Telstra)
Telstra USB+Wi-Fi Hostless Modem (HKLM\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.2 - ZTE Corporation)
Toolbox (Version: 61.0.163.000 - Hewlett-Packard) Hidden
TubeHunter Ultra (HKLM\...\{366FCBA4-3AB9-4EF1-938E-E7054BEA2E22}) (Version: 1.7.2155 - Neoretix Laboratory)
Ulead DVD DiskRecorder 2.1.1 (HKLM\...\{31E1050B-F69F-4A16-8F5A-E44D31901250}) (Version:  - Ulead Systems, Inc.)
Ulead DVD MovieFactory 6 (HKLM\...\InstallShield_{CCC4E428-411E-4605-B515-317D50ABD477}) (Version: 6.0.0 - InterVideo Digital Technology Corporation)
Ulead DVD MovieFactory 6 (Version: 6.0.0 - InterVideo Digital Technology Corporation) Hidden
Ulead MediaStudio Pro 8.0 (HKLM\...\{A6E71574-2126-4E95-816E-32B2411C94BA}) (Version: 8.0 - Ulead Systems, Inc.)
Ulead VideoStudio 11 (HKLM\...\InstallShield_{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}) (Version: 11.0.0.0000 - InterVideo Digital Technology Corporation)
Unload (Version: 6.0.0 - Hewlett-Packard) Hidden
USB2.0 PC Camera (HKLM\...\{417D86A0-89FE-4308-B172-45B74DCE6F8F}) (Version: 1.0.0.7 - )
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
VideoStudio (Version: 11.0.0.0000 - InterVideo Digital Technology Corporation) Hidden
Virgin Mobile (HKLM\...\Virgin Mobile) (Version: 13.001.08.00.261 - Huawei Technologies Co.,Ltd)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 2.0.6 (HKLM\...\VLC media player) (Version: 2.0.6 - VideoLAN)
Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.2.0.0 - Azureus Software, Inc.)
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
Windows Driver Package - MobileTop (sshpmdm) Modem  (02/23/2007 2.5.0.0) (HKLM\...\6194C28A8F62DD817EA1B918E6E46E806A21B452) (Version: 02/23/2007 2.5.0.0 - MobileTop)
Windows Driver Package - MobileTop (sshpusb) USB  (02/23/2007 2.5.0.0) (HKLM\...\65B6FE5418CE28F4D72543FB2D964C3CEC83F161) (Version: 02/23/2007 2.5.0.0 - MobileTop)
Windows Driver Package - Nokia pccsmcfd “LegacyDriver”  (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version:  - Microsoft Corporation)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0036.0 - Microsoft Corporation)
Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation)
Windows Media Encoder 9 Series (HKLM\...\Windows Media Encoder 9) (Version:  - )
Windows Media Format Runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )
Windows Media Player 11 (HKLM\...\Windows Media Player) (Version:  - )
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows XP Service Pack 3 (HKLM\...\Windows XP Service Pack) (Version: 20080414.031525 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )
Xiph.Org Open Codecs 0.85.17777 (HKLM\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
XML Paper Specification Shared Components Pack 1.0 (Version:  - Microsoft Corporation) Hidden
YTD Toolbar v6.2 (HKLM\...\{BCC315E7-2E8F-4EFD-8A0B-F8F276FE73F2}) (Version: 6.2 - Spigot, Inc.) <==== ATTENTION
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.135\psuser.dll (the data entry has 8 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.99\psuser.dll  (the data entry has 7 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.57\psuser.dll  (the data entry has 7 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.25.5\psuser.dll N (the data entry has 6 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.69\psuser.dll  (the data entry has 7 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.79\psuser.dll  (the data entry has 7 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.23.9\psuser.dll N (the data entry has 6 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\Application\41.0.2272.89\delegate_execute.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.145\psuser.dll (the data entry has 8 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.123\psuser.dll (the data entry has 8 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{66E8DCC7-97D2-4A89-8E08-D0610FF0878C}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Conduit\Community Alerts\Alert.dll  (the data entry has 7 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.153\psuser.dll (the data entry has 8 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.24.15\psuser.dll  (the data entry has 7 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.149\psuser.dll (the data entry has 8 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.22.3\psuser.dll N (the data entry has 6 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.165\psuser.dll (the data entry has 8 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{ba14329e-9550-4989-b3f2-9732e92d17cc}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Vuze_Remote\prxtbVuz2.dll No File
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.115\psuser.dll (the data entry has 8 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.25.11\psuser.dll  (the data entry has 7 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.65\psuser.dll  (the data entry has 7 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{E30ED111-BD63-48C2-A6CB-AB3C9FFFB07C}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Vuze_Remote\prxtbVuz2.dll No File
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{E69341A3-E6D2-4175-B60C-C9D3D6FA40F6}\localserver32 -> C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.22.5\psuser.dll N (the data entry has 6 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.111\psuser.dll (the data entry has 8 more characters).
CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.24.7\psuser.dll N (the data entry has 6 more characters).
 
==================== Restore Points  =========================
 
09-03-2015 21:36:23 System Checkpoint
10-03-2015 21:56:40 System Checkpoint
11-03-2015 07:05:07 Removed Symantec pcAnywhere.
12-03-2015 07:51:27 System Checkpoint
13-03-2015 08:35:19 System Checkpoint
14-03-2015 17:04:15 Installed calibre
14-03-2015 17:05:50 Removed calibre
14-03-2015 17:36:17 Removed Ad-Aware 2007
14-03-2015 17:38:14 Removed RIA-Media Viewer
14-03-2015 17:38:56 Removed YTD Toolbar v6.2.
14-03-2015 17:39:14 Removed YTD Toolbar v6.2.
15-03-2015 11:10:12 Removed YTD Toolbar v6.2.
15-03-2015 11:10:30 Removed QuarkXPress 7.2.
15-03-2015 11:11:22 Configured PowerDirector
15-03-2015 11:19:27 Configured MYOB Accounting Plus v18.5
15-03-2015 11:20:32 Configured MYOB Accounting Plus v16
15-03-2015 11:24:28 Configured MYOB Accounting Plus v17
15-03-2015 11:28:48 Removed Australian City Streets Ver 3
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2004-08-04 22:00 - 2015-03-15 09:32 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: C:\WINDOWS\Tasks\Casper XP Scheduled Copy of Disk 1 to Disk 2.job => C:\Program Files\Future Systems Solutions\Casper XP\CasperXP.EXE
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-1326574676-725345543-1006Core.job => C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-1326574676-725345543-1006UA.job => C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1343024091-1326574676-725345543-1006.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
Task: C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1343024091-1326574676-725345543-1006.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
Task: C:\WINDOWS\Tasks\WGASetup.job => C:\WINDOWS\system32\KB905474\wgasetup.exe
 
==================== Loaded Modules (whitelisted) ==============
 
2012-12-16 12:01 - 2005-03-28 19:13 - 00077824 _____ () C:\WINDOWS\system32\csdlocalmon.dll
2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2007-07-27 22:00 - 2008-04-14 05:41 - 00059904 _____ () C:\WINDOWS\system32\devenum.dll
2007-07-27 22:00 - 2008-04-14 05:42 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll
2007-07-27 22:00 - 2008-04-14 05:42 - 00386048 _____ () C:\WINDOWS\system32\qdvd.dll
2007-07-27 22:00 - 2008-04-14 05:42 - 01288192 _____ () C:\WINDOWS\system32\quartz.dll
2007-07-27 22:00 - 2008-04-14 05:42 - 00192512 _____ () C:\WINDOWS\system32\qcap.dll
2009-10-27 13:27 - 2007-12-11 15:36 - 00245760 _____ () C:\WINDOWS\system32\WlanApp.dll
2015-01-25 10:35 - 2012-09-21 00:16 - 00442696 _____ () C:\Program Files\Hostless Modem\Telstra USB+Wi-Fi\CheckNDISPort_df.exe
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
 
==================== EXE Association (whitelisted) ===============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-1343024091-1326574676-725345543-1006\Control Panel\Desktop\\Wallpaper -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
DNS Servers: 192.168.0.1
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup
MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Photosmart Premier Fast Start.lnk => C:\WINDOWS\pss\HP Photosmart Premier Fast Start.lnkCommon Startup
MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ImageMixer for HDD Camcorder.lnk => C:\WINDOWS\pss\ImageMixer for HDD Camcorder.lnkCommon Startup
MSCONFIG\startupfolder: C:^Documents and Settings^Work 2^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk => C:\WINDOWS\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: AppleSyncNotifier => C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BrStsMon00 => C:\Program Files\Browny02\Brother\BrStMonW.exe /AUTORUN
MSCONFIG\startupreg: CanonMyPrinter => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
MSCONFIG\startupreg: CanonSolutionMenuEx => C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: Easy-PrintToolBox => C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
MSCONFIG\startupreg: Google Update => "C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: hpqSRMon => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Logitech Hardware Abstraction Layer => "C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE"
MSCONFIG\startupreg: MSMSGS => "C:\Program Files\Messenger\msmsgs.exe" /background
MSCONFIG\startupreg: NBKeyScan => "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
MSCONFIG\startupreg: NeroFilterCheck => C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
MSCONFIG\startupreg: OnlineTextBuddy => "C:\Program Files\Telstra\OnlineTextBuddy\OnlineTextBuddy.exe" /quiet
MSCONFIG\startupreg: OODefragTray => C:\WINDOWS\system32\oodtray.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: SkyTel => SkyTel.EXE
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SwitchBoard => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: TkBellExe => "C:\Program Files\real\realplayer\update\realsched.exe"  -osboot
MSCONFIG\startupreg: UVS11 Preload => C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-1343024091-1326574676-725345543-500 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Administrator
ASPNET (S-1-5-21-1343024091-1326574676-725345543-1005 - Limited - Enabled)
Guest (S-1-5-21-1343024091-1326574676-725345543-501 - Limited - Disabled)
HelpAssistant (S-1-5-21-1343024091-1326574676-725345543-1000 - Limited - Disabled)
SUPPORT_388945a0 (S-1-5-21-1343024091-1326574676-725345543-1002 - Limited - Disabled)
User2 (S-1-5-21-1343024091-1326574676-725345543-1008 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\User2
Work 2 (S-1-5-21-1343024091-1326574676-725345543-1006 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Work 2
 
==================== Faulty Device Manager Devices =============
 
Name: Logitech PS/2 Keyboard
Description: Logitech PS/2 Keyboard
Class Guid: {4D36E96B-E325-11CE-BFC1-08002BE10318}
Manufacturer: Logitech
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (03/15/2015 11:10:11 AM) (Source: MsiInstaller) (EventID: 11316) (User: COMPUTER)
Description: Product: YTD Toolbar v6.2 -- Error 1316.A network error occurred while attempting to read from the file C:\WINDOWS\Installer\ytdToolbar.msi
 
Error: (03/15/2015 10:56:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.
Processing media-specific event for [chrome.exe!ws!]
 
Error: (03/15/2015 10:53:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.
Processing media-specific event for [chrome.exe!ws!]
 
Error: (03/15/2015 10:52:44 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application ANIWZCSdS.exe, version 1.0.3.7034, faulting module user32.dll, version 5.1.2600.5512, fault address 0x00014acd.
Processing media-specific event for [ANIWZCSdS.exe!ws!]
 
Error: (03/15/2015 10:23:02 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.
Processing media-specific event for [chrome.exe!ws!]
 
Error: (03/15/2015 09:41:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.
Processing media-specific event for [chrome.exe!ws!]
 
Error: (03/15/2015 09:34:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.
Processing media-specific event for [chrome.exe!ws!]
 
Error: (03/15/2015 07:55:01 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.
Processing media-specific event for [chrome.exe!ws!]
 
Error: (03/15/2015 07:53:10 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.
Processing media-specific event for [chrome.exe!ws!]
 
Error: (03/15/2015 05:57:54 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.
Processing media-specific event for [chrome.exe!ws!]
 
 
System errors:
=============
Error: (03/15/2015 10:56:05 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The ANIWZCSd Service service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (03/15/2015 10:52:52 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The HP CUE DeviceDiscovery Service service hung on starting.
 
Error: (03/15/2015 10:51:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The SPCA1528 Video Camera Service service failed to start due to the following error: 
%%2
 
Error: (03/15/2015 10:51:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The AVG WatchDog service failed to start due to the following error: 
%%1053
 
Error: (03/15/2015 10:51:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Timeout (30000 milliseconds) waiting for the AVG WatchDog service to connect.
 
Error: (03/15/2015 10:51:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The AVGIDSAgent service failed to start due to the following error: 
%%1053
 
Error: (03/15/2015 10:51:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Timeout (30000 milliseconds) waiting for the AVGIDSAgent service to connect.
 
Error: (03/15/2015 10:51:26 AM) (Source: WMPNetworkSvc) (EventID: 14325) (User: )
Description: Service 'WMPNetworkSvc' did not start correctly because QueryService encountered error '0x80004002'. In Windows Media Player, turn off media sharing, and then turn it back on.
 
Error: (03/15/2015 09:34:15 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The HP CUE DeviceDiscovery Service service hung on starting.
 
Error: (03/15/2015 09:32:33 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The SPCA1528 Video Camera Service service failed to start due to the following error: 
%%2
 
 
Microsoft Office Sessions:
=========================
Error: (12/15/2014 05:45:07 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 805 seconds with 240 seconds of active time.  This session ended with a crash.
 
Error: (09/22/2014 06:46:04 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 2679 seconds with 300 seconds of active time.  This session ended with a crash.
 
Error: (08/11/2014 07:34:18 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 3750 seconds with 600 seconds of active time.  This session ended with a crash.
 
Error: (01/31/2014 03:20:05 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 6344 seconds with 1560 seconds of active time.  This session ended with a crash.
 
Error: (10/30/2013 07:36:01 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1401 seconds with 360 seconds of active time.  This session ended with a crash.
 
Error: (10/03/2013 08:42:54 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 711 seconds with 240 seconds of active time.  This session ended with a crash.
 
Error: (09/11/2013 02:18:14 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 5 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error: (06/22/2013 03:20:16 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 18698 seconds with 2400 seconds of active time.  This session ended with a crash.
 
Error: (06/19/2013 09:13:26 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 19942 seconds with 2100 seconds of active time.  This session ended with a crash.
 
Error: (05/21/2013 10:04:09 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1611 seconds with 780 seconds of active time.  This session ended with a crash.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™2 Duo CPU E6750 @ 2.66GHz
Percentage of memory in use: 37%
Total physical RAM: 2039.07 MB
Available physical RAM: 1268.17 MB
Total Pagefile: 4970.38 MB
Available Pagefile: 4277.51 MB
Total Virtual: 2047.88 MB
Available Virtual: 1927.88 MB
 
==================== Drives ================================
 
Drive c: (Main) (Fixed) (Total:931.51 GB) (Free:8.71 GB) NTFS ==>[Drive with boot components (Windows XP)]
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: C8188012)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)
 
==================== End Of Log ============================

  • 0

Advertisements


#26
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 20,017 posts

Question:

 

Are you aware of proxy configuration in Firefox has been edited?


  • 0

#27
Damon(V)

Damon(V)

    Member

  • Topic Starter
  • Member
  • PipPip
  • 87 posts

Question:

 

Are you aware of proxy configuration in Firefox has been edited?

Not recently, that sounds like something I may have done in the past possibly but sorry I don't remember, would have been a long time ago.

I have removed firefox after getting the virus.


  • 0

#28
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 20,017 posts

Hello Damon,

 

Open notepad.

Please copy the contents of the code box below.

To do this highlight (click in the box and press Ctrl + A) the contents of the box and right click on it. Paste this into the open notepad. Save it to the Desktop as fixlist.txt.

Alternatively type the contents of the box into notepad and save it to your desktop as fixlist.txt.

NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1343024091-1326574676-725345543-1006\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-1343024091-1326574676-725345543-1006 -> {F02EF4DB-5280-4E91-B854-AA0795C93A5A} URL = http://au.search.yah...p={searchTerms}
YTD Toolbar v6.2 (HKLM\...\{BCC315E7-2E8F-4EFD-8A0B-F8F276FE73F2}) (Version: 6.2 - Spigot, Inc.) <==== ATTENTION
FF Keyword.URL: hxxp://flybuys.search.adlux.com/search/?utm_source=adlux&utm_medium=cpc&ourmark=3&q=
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*'))%20%7B%20return%20'PROXY%20us09.sq.proxmate.me%3A8000%3B%20PROXY%20us04.sq.proxmate.me%3A8000%3B%20PROXY%20us02.sq.proxmate.me%3A8000%3B%20PROXY%20us08.sq.proxmate.me%3A8000%3B%20PROXY%20us10.sq.proxmate.me%3A8000%3B%20PROXY%20us11.sq.proxmate.me%3A8000%3B%20PROXY%20us01.sq.proxmate.me%3A8000%3B%20PROXY%20us06.sq.proxmate.me%3A8000%3B%20PROXY%20us05.sq.proxmate.me%3A8000%3B%20PROXY%20us03.sq.proxmate.me%3A8000%3B%20PROXY%20us07.sq.proxmate.me%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF SearchPlugin: C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\searchplugins\search-to-earn-points.xml [2014-07-05]
FF Extension: Vuze Remote  - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} [2015-01-15]
FF Extension: ProxMate - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2014-03-06]
FF Extension: QR Decoder - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-11-04]
FF Extension: Rainbow - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-03-18]
FF Extension: Tile Tabs - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2011-08-11]
FF Extension: RSS Ticker - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{1f91cde0-c040-11da-a94d-0800200c9a66}.xpi [2012-12-28]
FF Extension: Mobile Barcoder - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{A5C87640-F7CF-11DA-974D-0800200C9A66}.xpi [2012-11-04]
FF Extension: Modify Headers - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2012-03-27]
FF Extension: flybuys Toolbar - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{d8c4975b-9e4b-4574-b5ab-67fe58455a95}.xpi [2012-12-01]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - No Path Or update_url value
EmptyTemp:

This script is specifically written for the infection on this person's computer. It should NOT to be used on another machine. It may cause serious damage even to the point of rendering the computer unusable.

Run FRST/FRST64 and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

 


  • 0

#29
Damon(V)

Damon(V)

    Member

  • Topic Starter
  • Member
  • PipPip
  • 87 posts
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-03-2015
Ran by Work 2 at 2015-03-15 12:44:29 Run:3
Running from C:\Documents and Settings\Work 2\Desktop
Loaded Profiles: Work 2 (Available profiles: Work 2 & User2 & Administrator)
Boot Mode: Normal
 
==============================================
 
Content of fixlist:
*****************
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1343024091-1326574676-725345543-1006\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-1343024091-1326574676-725345543-1006 -> {F02EF4DB-5280-4E91-B854-AA0795C93A5A} URL = http://au.search.yah...p={searchTerms}
YTD Toolbar v6.2 (HKLM\...\{BCC315E7-2E8F-4EFD-8A0B-F8F276FE73F2}) (Version: 6.2 - Spigot, Inc.) <==== ATTENTION
FF Keyword.URL: hxxp://flybuys.search.adlux.com/search/?utm_source=adlux&utm_medium=cpc&ourmark=3&q=
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*'))%20%7B%20return%20'PROXY%20us09.sq.proxmate.me%3A8000%3B%20PROXY%20us04.sq.proxmate.me%3A8000%3B%20PROXY%20us02.sq.proxmate.me%3A8000%3B%20PROXY%20us08.sq.proxmate.me%3A8000%3B%20PROXY%20us10.sq.proxmate.me%3A8000%3B%20PROXY%20us11.sq.proxmate.me%3A8000%3B%20PROXY%20us01.sq.proxmate.me%3A8000%3B%20PROXY%20us06.sq.proxmate.me%3A8000%3B%20PROXY%20us05.sq.proxmate.me%3A8000%3B%20PROXY%20us03.sq.proxmate.me%3A8000%3B%20PROXY%20us07.sq.proxmate.me%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF SearchPlugin: C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\searchplugins\search-to-earn-points.xml [2014-07-05]
FF Extension: Vuze Remote  - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} [2015-01-15]
FF Extension: ProxMate - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2014-03-06]
FF Extension: QR Decoder - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-11-04]
FF Extension: Rainbow - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-03-18]
FF Extension: Tile Tabs - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2011-08-11]
FF Extension: RSS Ticker - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{1f91cde0-c040-11da-a94d-0800200c9a66}.xpi [2012-12-28]
FF Extension: Mobile Barcoder - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{A5C87640-F7CF-11DA-974D-0800200C9A66}.xpi [2012-11-04]
FF Extension: Modify Headers - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2012-03-27]
FF Extension: flybuys Toolbar - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{d8c4975b-9e4b-4574-b5ab-67fe58455a95}.xpi [2012-12-01]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - No Path Or update_url value
EmptyTemp:
*****************
 
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-1343024091-1326574676-725345543-1006\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-1343024091-1326574676-725345543-1006\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F02EF4DB-5280-4E91-B854-AA0795C93A5A}" => Key deleted successfully.
HKCR\CLSID\{F02EF4DB-5280-4E91-B854-AA0795C93A5A} => Key not found. 
YTD Toolbar v6.2 (HKLM\...\{BCC315E7-2E8F-4EFD-8A0B-F8F276FE73F2}) (Version: 6.2 - Spigot, Inc.) <==== ATTENTION => Error: No automatic fix found for this entry.
Firefox Keyword.URL deleted successfully.
Firefox Proxy settings were reset.
Firefox Proxy settings were reset.
C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\searchplugins\search-to-earn-points.xml => Moved successfully.
C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} => Moved successfully.
C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] => Moved successfully.
C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] => Moved successfully.
C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] => Moved successfully.
C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] => Moved successfully.
C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{1f91cde0-c040-11da-a94d-0800200c9a66}.xpi => Moved successfully.
C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{A5C87640-F7CF-11DA-974D-0800200C9A66}.xpi => Moved successfully.
C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi => Moved successfully.
C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{d8c4975b-9e4b-4574-b5ab-67fe58455a95}.xpi => Moved successfully.
C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} => not found.
"HKLM\SOFTWARE\Google\Chrome\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk" => Key deleted successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\nneajnkjbffgblleaoojgaacokifdkhm" => Key deleted successfully.
EmptyTemp: => Removed 112.8 MB temporary data.
 
 
The system needed a reboot. 
 
==== End of Fixlog 12:44:47 ====

  • 0

#30
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 20,017 posts

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quote box below into it:
 

KillAll::

Folder::
C:\Program Files\YTD Toolbar

Reboot::

Save this as CFScript.txt, in the same location as ComboFix.exe

CFScriptB-4.gif

Referring to the picture above, drag CFScript into ComboFix.exe

When finished, it will produce a log for you at C:\ComboFix.txt. Please post that here for further review.

 


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP