[Damon(V)]

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C61BFCDF-2E0F-4AAD-A8D7-E06BAFEBCDFE}]

@DACL=(02 0000)

"ContainerFormat"="{A3A860C4-338F-4C17-919A-FBA4B5628F21}"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"ColorManagementVersion"="1.0.0.0"

"MimeTypes"="image/ico,image/x-icon"

"FileExtensions"=".ico,.icon"

"SupportAnimation"=dword:00000000

"SupportChromakey"=dword:00000001

"SupportLossless"=dword:00000001

"SupportMultiframe"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="ICO Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C65055FA-6F66-41B4-8BEC-3929901F8275}]

@DACL=(02 0000)

@="SoundBox Control"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C6606CA5-2108-4CAF-8E52-1953F2DBF716}]

@DACL=(02 0000)

@="PropSet Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C6CF6703-29E5-4E29-B0FB-ABDF8D04A00C}]

@DACL=(02 0000)

@="Arcsoft Mpeg2Audio Encoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C6F6CFC2-870A-4B26-94B7-3539820B0256}]

@DACL=(02 0000)

@="Smoke"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c6f7158b-a330-474c-b76e-ecf14355aaba}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c7011688-e0cb-4e31-9098-d0b58c609eea}]

@DACL=(02 0000)

@="NMEPGEventDataSet Class"

"AppID"="{E731128E-C2D4-4A25-94B9-FEF94F6997B9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c736d415-dc5f-459e-9985-024661738b68}]

@DACL=(02 0000)

@="NMBAppPluginSettings Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C740F918-D49B-46F6-BF79-B237B24F4181}]

@DACL=(02 0000)

@="3D - Flying Quads"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c742dd90-a95a-4874-888a-d1fcb00deb16}]

@DACL=(02 0000)

@="NMBAppPluginAdvancedSearch Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C79C3183-D7F7-439A-98CC-33906A691708}]

@DACL=(02 0000)

@="Gamma correction"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7C1034B-7F25-4BE4-BCDA-4EC86D22AA9D}]

@DACL=(02 0000)

@="AudioEffectLibrary.PitchBenderPage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7D29C02-0584-40E8-82A2-61E9D2CB0589}]

@DACL=(02 0000)

@="Dance Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7E786B3-38E7-45E5-9478-76DCE73FF5DA}]

@DACL=(02 0000)

@="Text fly upwards"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7FA08F8-567F-421D-B001-7C4177929597}]

@DACL=(02 0000)

@="Nero QuickTime™ Audio Decoder Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C8059EB6-D2FC-4ecf-A15F-AF427F5E4DB6}]

@DACL=(02 0000)

@="Feeds Background Sync"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c8a0f376-c4d0-496d-9be2-86a8f4c4159c}]

@DACL=(02 0000)

@="NMBActionPluginPlayXRTTVFactory Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C8B1CBD0-6386-4292-B10D-69A389D8EA2E}]

@DACL=(02 0000)

@="NOSWebCommunityExportDialog Class"

"AppID"="{2360A21B-6EDC-4524-A570-AAF72EDAF233}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c8e108ef-90b4-49ea-8bc0-dbcc07e4e286}]

@DACL=(02 0000)

@="NMBAppGlobalSettingsBurnVideo Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C8F48908-55A1-4719-81D7-4F03275F3F0B}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9460283-3EED-11D0-A647-00A0C91EF7B9}]

@DACL=(02 0000)

@="ImageViewerCP 2.5"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9460284-3EED-11D0-A647-00A0C91EF7B9}]

@DACL=(02 0000)

@="ImageViewerCP 2.5 Property Page"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9614C1F-85CC-4BF2-97DA-E0B8DEF4A49C}]

@DACL=(02 0000)

@="Dance Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C96FAF0D-38FA-4E40-AD29-9BFC1ACFBB02}]

@DACL=(02 0000)

@="Color Filter: Blue"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C99422F2-7157-4563-ACA1-16B9F9BA95A4}]

@DACL=(02 0000)

@="Ulead MP3 Encoder Property Page"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9A14CDA-C339-460B-9078-D4DEBCFABE91}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{1C3C4F9D-B84A-467D-9493-36CFBD59EA57}"

"RequiresFullStream"=dword:00000001

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="Exif Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9CD1A93-D7B4-11D2-80C5-00104B1F6CEA}]

@DACL=(02 0000)

@="InstallShield setup user interafce"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9FBE3DE-662A-4ED1-81B8-04D5AEB4335F}]

@DACL=(02 0000)

@="AudioEffectLibrary.VolumePage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA0F26EA-FC00-437F-9841-5B529DDCD615}]

@DACL=(02 0000)

@="NFDSessionBrowser Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA362417-D620-4A52-B767-B9357FBBF1C4}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA5B7520-9B16-4952-BC02-80B0082D2030}]

@DACL=(02 0000)

@="Reverse Rotate Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA602B8D-D77D-4e93-8D6A-87B9F1264BA7}]

@DACL=(02 0000)

@="NMVideoContentHandlerVMR9 Class"

"AppID"="{5BB9749E-DD3F-459F-8865-64A208D020EA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ca615804-dbeb-4d42-bd9e-7d0ca4b3c24b}]

@DACL=(02 0000)

@="Cube Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA682A65-16E0-4692-946D-2DC00EF1DF0F}]

@DACL=(02 0000)

@="NMiTunesIntegrationService Class"

"AppID"="{67FE5B0C-E921-4A9B-9612-4D8C1188F28C}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA6B2E64-9FBF-48AF-BCAC-21A795CFCA9C}]

@DACL=(02 0000)

@="AudioEffectLibrary.ConvolutionReverbPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ca965a82-a63e-4b1f-848c-495e450ac6d1}]

@DACL=(02 0000)

@="NMBAppPluginMediaBrowserPlaylists Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CAA52C33-E721-449A-AC7B-FE2DFFA658D1}]

@DACL=(02 0000)

@="Nero Subtitle Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CACAF262-9370-4615-A13B-9F5539DA4C0A}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cb069c2c-53fc-4aeb-9805-43857e2059e3}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CB376549-DD5A-461D-8C73-D4BB386DC813}]

@DACL=(02 0000)

@="NCAudioDevice Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CB676F53-F526-461B-8A56-7D354A3C9AAB}]

@DACL=(02 0000)

@="Distortion - Twirl"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CB8C13E4-62B5-4C96-A48B-6BA6ACE39C76}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{7134AB8A-9351-44AD-AF62-448DB6B502EC}"

"RequiresFullStream"=dword:00000001

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="Gps Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cbbd10c7-f6eb-4c73-a894-5499e2c55b46}]

@DACL=(02 0000)

@="NMDSVolumeIdPathMapper Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC0CA09A-5B84-43F2-BE5C-9169C192565F}]

@DACL=(02 0000)

@="RTLCSSAPI Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC0CA09A-5B84-43F2-BE5C-9169C192565F}\Programmable]

@DACL=(02 0000)

@=""

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC350820-EB63-4308-BC92-F6795B499128}]

@DACL=(02 0000)

@="NOSHttpCookie Class"

"AppID"="{2E82C0B4-3147-4A6E-AF24-A1992108C420}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC7BFB46-F175-11D1-A392-00E0291F3959}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC956901-F2FF-492E-AFA8-214AFC267C15}]

@DACL=(02 0000)

@="NeroInFDiscCopyServer Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC98AEC5-E5DE-4b12-ABC2-059C481B2211}]

@DACL=(02 0000)

@="NOSMyNeroAccount Class"

"AppID"="{2A385E8B-5598-4227-A850-5FDD9697E2BA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cccf8f47-9400-49be-bc1d-141580118d47}]

@DACL=(02 0000)

@="NMBAppPluginMediaBrowserAutoStart Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CD737E2E-FB63-4041-B47B-5A0246F3DA73}]

@DACL=(02 0000)

@="NCGraphManagerAnalog Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CD7C317C-51D9-4115-964F-D3F8375763CC}]

@DACL=(02 0000)

@="GCAsyncSrc"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cdf2dc2a-6ef6-4806-a4a8-c1878db3ae1a}]

@DACL=(02 0000)

@="NMCFStringVariantDictionary Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CE5DDB65-7BB6-496E-8735-79076C7CFAF4}]

@DACL=(02 0000)

@="NFDSessionBrowser Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cf43bc7b-9664-4e1e-a3a2-ae56adff6159}]

@DACL=(02 0000)

@="NMBActionPluginShowImages Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cf728626-846f-41e6-a8fd-6d27a439bc72}]

@DACL=(02 0000)

@="NMCFSettings Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CF957FA0-77FE-4192-A59F-95CA43BD04BA}]

@DACL=(02 0000)

@="ULead File Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CFADDED4-2A35-4A0F-B8C9-4973F94A573E}]

@DACL=(02 0000)

@="VobuIdx Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CFD9633F-C4D4-49EB-A8F6-976C16D782C4}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D049B20C-5DD0-44FE-B0B3-8F92C8E6D080}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{243DCEE9-8703-40EE-8EF0-22A600B8058C}"

"RequiresFullStream"=dword:00000001

"FixedSize"=dword:00000001

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="Thumbnail Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D050D736-2D21-4723-AD58-5B541FFB6C11}]

@DACL=(02 0000)

@="DivXContentUploadPlugin Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D05F9FC4-7E34-45AE-947A-2576B8DAD5CE}]

@DACL=(02 0000)

@="NeroSearchFilterFolder Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D12C8A94-E72F-4224-BFBA-2DEB97EA3360}]

@DACL=(02 0000)

@="Nero Audio Transcoder Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D19355DC-9045-4B3A-B321-1710330B5AB8}]

@DACL=(02 0000)

@="ULXSVCDDiscCompiler Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D1AF3A1D-EE0A-4C81-BB5B-B515CEE463E7}]

@DACL=(02 0000)

@="Color Filter: Green"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d1b2ebcf-62ea-4e04-a5fd-31e7d62db98d}]

@DACL=(02 0000)

@="NMBApplicationDispatc0 Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d1cb2121-8923-4000-81b8-3d6606e14c01}]

@DACL=(02 0000)

@="NMBActionPluginBurn Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d1f939f1-7f06-4c85-bd92-fc1c3212671e}]

@DACL=(02 0000)

@="RedoButton Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d222981d-3e71-4d7b-9dfc-e1dc6f0941f8}]

@DACL=(02 0000)

@="NMCFSTAServices Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d23b90d0-144f-46bd-841d-59e4eb19dc59}]

@DACL=(02 0000)

@="WMVideo Advanced Encoder DMO"

"WMSDKMerit"=dword:00000100

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d29a1deb-95eb-490c-bdc6-2efe1bfe896d}]

@DACL=(02 0000)

@="NMHDSPluginDevicesDrives Class"

"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d304199a-4ee9-456a-b3bf-4dc62ace4a96}]

@DACL=(02 0000)

@="NMUIScripting Class"

"AppID"="{BF9365C8-57A5-4365-BDC1-AA7763CD494C}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D320EDB6-6545-412F-9514-C6765BD0B1C4}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D335C1B3-FA6A-4014-B256-CC745CB8C2C2}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D39F8A6E-F96F-11D2-9AEC-00A0C95AC349}]

@DACL=(02 0000)

@="Logitech MouseWare - Browser Collection"

"AppID"="{D39F8A62-F96F-11D2-9AEC-00A0C95AC349}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D3D6BB70-C79B-42B7-8C7B-630743D38DB9}]

@DACL=(02 0000)

@="Horizontal Spin Slice"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d3eaa2fe-d4c0-4e72-aee4-6b2a7c4aa978}]

@DACL=(02 0000)

@="NMB0ollectionFactory Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4082021-53DE-4F13-8334-7D5D70D50EC1}]

@DACL=(02 0000)

@="BCGPOleAcc.BCGPPopupMenuAcc2"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4202D1F-8377-4F7D-BDBB-7D77FE4E34C5}]

@DACL=(02 0000)

@="Nero InteractiveGraphics Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D436AA54-CDDA-47D7-8AB8-C18302B3B6E7}]

@DACL=(02 0000)

@="NCPmtPidInfo Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4AD8206-C45B-4240-A090-E063A222B66C}]

@DACL=(02 0000)

@="NeroVideoItems Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4C09F9E-F464-4e80-9F70-63E306799C8B}]

@DACL=(02 0000)

@="NMINetSubscribeInfo Class"

"AppID"="{1287EB79-BA58-4385-A65E-0CA8F82C47B0}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4CAFD1F-8AE4-4270-87C6-E27C7AE13721}]

@DACL=(02 0000)

@="Space Scroller"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4DCD3D7-B4C2-47D9-A6BF-B89BA396A4A3}]

@DACL=(02 0000)

"SpecVersion"="1.0.0.0"

"Version"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{16100D66-8570-4BB9-B92D-FDA4B23ECE67}"

"RequiresFullStream"=dword:00000000

"SupportsPadding"=dword:00000000

"Author"="Microsoft"

"FriendlyName"="IRB Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4FA3D4E-BE69-11D4-AA30-00902704C6BF}]

@DACL=(02 0000)

@="DataObject Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5028632-9B7D-4198-95B7-D92DA3234904}]

@DACL=(02 0000)

@="AudioEffectLibrary.NoiseGatePlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5073D4E-FF32-4AF9-ADAC-3D358C9D2F5D}]

@DACL=(02 0000)

@="Closed Caption"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D570F8AA-FBB9-4CD3-AE27-CFE80140F27A}]

@DACL=(02 0000)

@="Transform"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D57917F3-1001-43BB-B479-CE1CA2F78B49}]

@DACL=(02 0000)

@="AudioEffectLibrary.SurroundReverbPage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D588370C-E215-486F-CE29-A875D12480AF}]

@DACL=(02 0000)

@="ArcSoft MPEG4 Decoder Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D588370C-E232-464F-CE29-A875D12480AF}]

@DACL=(02 0000)

@="ArcSoft H.263 Decoder Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d5b0bbd3-3ae6-4366-8c83-a7e0ce4162b6}]

@DACL=(02 0000)

@="NMBAppPluginSearchPanel Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5C3C622-391A-49FB-B58F-D72B7A8FC7C1}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5CBFE52-930B-47B5-99E5-CB6D67834B3D}]

@DACL=(02 0000)

@="GCOSD"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370B-E232-464F-BE29-A885B1248093}]

@DACL=(02 0000)

@="ArcSoft MPEG Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370B-E232-464F-BE29-A885B1249191}]

@DACL=(02 0000)

@="ArcSoft TS Stream"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370C-E232-464F-BE29-A885B1248098}]

@DACL=(02 0000)

@="Arcsoft AMREncoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370C-E232-464F-BE29-A885B1248099}]

@DACL=(02 0000)

@="Arcsoft AMRDecoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370C-E232-464F-BE29-A885B124809F}]

@DACL=(02 0000)

@="ArcSoft MPEG4 Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370E-E232-464F-BE29-A885B1248098}]

@DACL=(02 0000)

@="AMREncoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d6712690-639f-4491-a88a-86b2346c5761}]

@DACL=(02 0000)

@="NMBAppPluginExportSlideshow Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}]

@DACL=(02 0000)

@="Portable Devices Menu"

"LocalizedString"=expand:"@%SystemRoot%\\System32\\WPDShextRes.dll,-511"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d68ef766-a220-46ba-9aaa-5e37ddd51328}]

@DACL=(02 0000)

@="NMSearc0PluginMediaLibrarySource Class"

"AppID"="{163F5B1A-3689-445F-8A0F-E6246DF74F19}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D7384E88-60EF-40E8-BF46-B4849D9A4736}]

@DACL=(02 0000)

@="AudioEffectLibrary.ConvolutionReverbPage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d74049dd-2208-4b7a-9b33-60476f2ce8c6}]

@DACL=(02 0000)

@="NMPCContentHandlerFactoryExample Class"

"AppID"="{8E1EAC0D-E841-4FA9-8696-9C4894F4D307}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D764FB17-666B-499A-99CD-809CB3C976EB}]

@DACL=(02 0000)

@="Nero Photo Source"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d7b847e1-3e20-4f63-92ba-4f8f734ac8bb}]

@DACL=(02 0000)

@="VirtualSurroundPage Class"

"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D7BCD582-12D9-41DE-A0DD-1140A140D8C3}]

@DACL=(02 0000)

@="ULXOnDiscFileBasedCaptureDVDDiscCompiler Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D7E9CB06-FD18-490F-BB58-B99C2353E97D}]

@DACL=(02 0000)

@="ArcSoft AC3 Audio Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d80699af-3c19-4ff6-8354-6b3cc095b622}]

@DACL=(02 0000)

@="NeFSGenericEvent Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8168F07-F09B-444B-AFF4-11A138CB3751}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d83d395f-2900-4da2-ad4b-a3a657e43860}]

@DACL=(02 0000)

@="NMBActionPluginBurnCDAHandle Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8705FEA-3AAC-4A82-BE72-C41AB9EDA76C}]

@DACL=(02 0000)

@="ScratchBox Control"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D897A894-0E8B-4AD3-A422-182399E88AB7}]

@DACL=(02 0000)

@="MoveInTransition"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8B4B4EB-58A7-483A-8CA4-3DCB66FC48D7}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d8b60741-b1c3-4b80-bda3-a6b5b5cb72b1}]

@DACL=(02 0000)

@="NMBDirectoryPluginScheduledTVRecordings Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8C6F225-8CC8-428A-8519-6FA175DDF52E}]

@DACL=(02 0000)

@="Teletext"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D9044CE1-CC5F-4AC2-BF94-EAB77098AE86}]

@DACL=(02 0000)

@="Pixelate"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D90B2379-6FE7-4319-9E78-0BBDE763747B}]

@DACL=(02 0000)

@="Multiply"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D9403860-297F-4A49-BF9B-77898150A442}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{1C3C4F9D-B84A-467D-9493-36CFBD59EA57}"

"RequiresFullStream"=dword:00000001

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="Exif Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D95F404D-82C1-44FC-A0E4-0E080975B283}]

@DACL=(02 0000)

@="Nero Thumbnail Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D960A3E9-FF13-46B3-8A8A-2F6F6F9D1FFD}]

@DACL=(02 0000)

@="DiscSysInfo Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d99e1d4a-42b7-4c95-9c28-367bbed05c27}]

@DACL=(02 0000)

@="NMDSDirAccProviderGetFindFileEnumerator Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D9B80BE3-DCBA-4856-A097-0731B2FCB0AB}]

@DACL=(02 0000)

@="Nero Resize Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d9f2bcc3-8b9f-4848-a82f-b7490ae5717e}]

@DACL=(02 0000)

@="NMBAppGlobalSettingsSetupWizard Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d9ff985d-8575-418c-8350-01a39f4e12bc}]

@DACL=(02 0000)

@="NMDSPlaylistManager Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA1923A5-2F78-4f8a-9530-6DFDD6D922ED}]

@DACL=(02 0000)

@="NMTProfileHelperFactory Class"

"AppID"="{29EB903B-19F4-4F20-959A-87AD70EFD39B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA365E3B-0E2E-40FF-B38E-A59A709F1F04}]

@DACL=(02 0000)

@="ulCache Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4D7D80-70BE-4D53-B1FB-D53C907391D3}]

@DACL=(02 0000)

@="Text Fly downwards"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{00000001-E965-440D-9C3E-E04704629F99}]

@DACL=(02 0000)

"FriendlyName"="Nero Digital"

"CLSID"="{00000001-E965-440D-9C3E-E04704629F99}"

"Merit"=dword:00600000

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{0A4252A0-7E70-11D0-A5D6-28DB04C10000}]

@DACL=(02 0000)

"CLSID"="{0A4252A0-7E70-11D0-A5D6-28DB04C10000}"

"FriendlyName"="WDM Streaming Tee/Splitter Devices"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{2721AE20-7E70-11D0-A5D6-28DB04C10000}]

@DACL=(02 0000)

"CLSID"="{2721AE20-7E70-11D0-A5D6-28DB04C10000}"

"FriendlyName"="WDM Stream Decompression Devices"

"Merit"=hex:00,00,64,00

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{2EB07EA0-7E70-11D0-A5D6-28DB04C10000}]

@DACL=(02 0000)

"CLSID"="{2EB07EA0-7E70-11D0-A5D6-28DB04C10000}"

"FriendlyName"="WDM Streaming Data Transforms"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{65E8773D-8F56-11D0-A3B9-00A0C9223196}]

@DACL=(02 0000)

"CLSID"="{65E8773D-8F56-11D0-A3B9-00A0C9223196}"

"FriendlyName"="WDM Streaming Capture Devices"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{65e8773e-8f56-11d0-a3b9-00a0c9223196}]

@DACL=(02 0000)

"CLSID"="{65e8773e-8f56-11d0-a3b9-00a0c9223196}"

"FriendlyName"="WDM Streaming Rendering Devices"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{AD809C00-7B88-11D0-A5D6-28DB04C10000}]

@DACL=(02 0000)

"CLSID"="{AD809C00-7B88-11D0-A5D6-28DB04C10000}"

"FriendlyName"="WDM Streaming Mixer Devices"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{CF1DDA2C-9743-11D0-A3EE-00A0C9223196}]

@DACL=(02 0000)

"CLSID"="{CF1DDA2C-9743-11D0-A3EE-00A0C9223196}"

"FriendlyName"="WDM Streaming Communication Transforms"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{CF1DDA2D-9743-11D0-A3EE-00A0C9223196}]

@DACL=(02 0000)

"CLSID"="{CF1DDA2D-9743-11D0-A3EE-00A0C9223196}"

"FriendlyName"="WDM Streaming Interface Transforms"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{FBF6F530-07B9-11D2-A71E-0000F8004788}]

@DACL=(02 0000)

"CLSID"="{FBF6F530-07B9-11D2-A71E-0000F8004788}"

"FriendlyName"="WDM Streaming System Devices"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dad8fbc7-c658-44ec-b97d-52a7a56470f6}]

@DACL=(02 0000)

@="NMPCSVCDContentHandlerFactory Class"

"AppID"="{41FA2214-273A-46D7-8B96-CA64C554296F}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{daef7299-1527-4e92-ac9c-2272f9fb74a9}]

@DACL=(02 0000)

@="NMBActionPluginPlayTVFactory Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DB179E3B-408D-4EAD-A6FD-DF51D3FA2398}]

@DACL=(02 0000)

@="Nero Search Tray Icon"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{db5d4c3b-02e3-4cbb-9f96-c5dcaf2b6a03}]

@DACL=(02 0000)

@="NMHDSPluginDVDs Class"

"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{db6ce926-eaf7-45e6-883f-70b7553ae922}]

@DACL=(02 0000)

@="NMBAppGlobalSettingsSlideShow Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{db76d02e-50bb-4ec3-be1a-89b35cbe273a}]

@DACL=(02 0000)

@="NMBDirectoryPluginCreateSnapshot Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DB85C504-C730-49DD-BEC1-7B39C6103B7A}]

@DACL=(02 0000)

@="MShellExtMenu Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DBBCE449-2EF5-4A11-B1A9-5FD3F72F3C98}]

@DACL=(02 0000)

@="ILXShareLog Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DBFD2065-9874-4D07-A46C-A1E11F7204C6}]

@DACL=(02 0000)

@="ArcSoft H.264 Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DBFD2065-9874-4D07-A46C-A1E11F7207C7}]

@DACL=(02 0000)

@="ArcSoft H.264 Decoder Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC377543-0DAB-4737-87DF-A7BB78769370}]

@DACL=(02 0000)

@="LdvdRecorder Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC4DF788-5659-4981-A785-2A0ED2F22D40}]

@DACL=(02 0000)

@="AACEncoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC651A43-0720-4a2b-9971-BD2EF1329A3D}]

@DACL=(02 0000)

@="IE Component Categories conditional cache daemon"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC70C4A5-2044-4c59-B806-DEFB9AE0DF7C}]

@DACL=(02 0000)

@="KbLogiExt Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DCB2D492-5F4F-4378-8FF4-DA87062D42E3}]

@DACL=(02 0000)

@="OpenGL Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DCBF3D8D-4BF2-4BCE-9540-F0E6F5BFEE13}]

@DACL=(02 0000)

@="Wipe Right"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dcc7c435-c7c2-460d-a3b0-5aa18c0efc6f}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dcdbc3ae-f8d6-43e5-9775-8a0c7eab9626}]

@DACL=(02 0000)

@="NMBAppPluginMain Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dd14ca6e-392e-45f7-8a91-9ba7609d5575}]

@DACL=(02 0000)

@="NMOEMCustomisatio0 Class"

"AppID"="{AB6AA495-ECA6-4036-8F5B-99B641DF2CC3}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DD7F2ECE-30BE-4E1B-A7A7-305B97625792}]

@DACL=(02 0000)

@="Text Fly downwards"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DD859D70-6E45-4064-914F-3FACBFA7BFB9}]

@DACL=(02 0000)

@="NCCaptureApiSetup Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDA11344-AB20-4AEC-94C4-6AA091574CD0}]

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDBE68A3-F53E-4E2D-B5AF-578F4302C032}]

@DACL=(02 0000)

@="Add pixel"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ddc43479-0f91-420a-a0aa-ca01a6665656}]

@DACL=(02 0000)

@="PauseButton Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDC5917C-D736-49F8-9F81-6D49FEFDDBB0}]

@DACL=(02 0000)

@="NeroSearchEnumUnknown Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDE33513-774E-4BCD-AE79-02F4ADFE62FC}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{8FD3DFC3-F951-492B-817F-69C2E6D9A5B0}"

"RequiresFullStream"=dword:00000000

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="App1 Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE030813-DB68-4605-898B-6B96E999DE31}]

@DACL=(02 0000)

@="Wobble"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE05ACD8-E76E-4BE2-A522-7D734FAFD072}]

@DACL=(02 0000)

@="NeroFileSystemTrackOptions Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{de88bc2f-09c2-4ac0-aead-748c823b719f}]

@DACL=(02 0000)

@="NMFullTextMSHtmlExtractor Class"

"AppID"="{2394E7B8-EA93-4731-B99D-F747EDC8DCFA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DEC52F0B-696A-47F6-8966-EB98B3769897}]

@DACL=(02 0000)

@="Posterize"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF03AA96-1265-441E-BA8A-2A4F482AA672}]

@DACL=(02 0000)

@="ArcSoft MP4Muxer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF03AA97-1265-441E-BA8A-2A4F482AA672}]

@DACL=(02 0000)

@="ArcSoft MP4Muxer Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF2FCE13-25EC-45bb-9D4C-CECD47C2430C}]

@DACL=(02 0000)

@="CUri"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF5F4E46-D041-416C-B77E-6F8E662E2734}]

@DACL=(02 0000)

@="ULXOnDiscDVDDiscCompiler Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E00238C7-396B-4718-9781-B804A41D6072}]

@DACL=(02 0000)

@="NCGraphManagerDv Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e03d7b52-205a-40ba-9d46-ea307ee88916}]

@DACL=(02 0000)

@="NMBMinimizedTask Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E05592E4-C0B5-11D0-A439-00A0C9223196}]

@DACL=(02 0000)

@="Plug In Distributor: IKsQualityForwarder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E061ECC4-E2B1-4672-A2BE-C23C01F8326F}]

@DACL=(02 0000)

@="Wave Scroller"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e0d31ca1-f598-49ac-8123-f27eeae28984}]

@DACL=(02 0000)

@="NMBActionPluginBurnDataDiscHandle Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E0D84E7C-1997-4F77-97C4-74D79FCF6B50}]

@DACL=(02 0000)

@="LMpgVparser Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1272C93-9F34-40CF-BD78-8103F891CB14}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E138D778-FAC2-4BC5-B0B2-01CBFB0288BE}]

@DACL=(02 0000)

@="Vertical Spin Slice"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E13908FB-2996-46F9-BCD2-11FD4563B238}]

@DACL=(02 0000)

@="AudioEffectLibrary.CameraDenoisePage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1A1C814-FD09-4c9d-BB4A-0394B836A1F0}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1A46626-9FD3-11D4-824D-B0D52C000000}]

@DACL=(02 0000)

@="NeroFolder Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e1d24ab8-53df-49ac-bae6-63a06d55a112}]

@DACL=(02 0000)

@="NMBAppGlobalSettingsTV_Folder Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1D4987F-C260-4875-A120-727EF116D46C}]

@DACL=(02 0000)

@="NMTVServerInProc Class"

"AppID"="{93D78BF0-45EF-44F4-AE80-A2C26D246B2B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1F1E7F6-1789-4F59-BE29-ED2C151C527F}]

@DACL=(02 0000)

@="AudioEffectLibrary.DeHumPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E2037A58-3425-4581-A9AE-64A043B05353}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E2CE4A0B-1E6A-426E-A90F-172F42528C90}]

@DACL=(02 0000)

@="Shift edges"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E3263B35-59B5-403D-A5A4-6BCC8FAE840D}]

@DACL=(02 0000)

@="TwistSpin"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E33D5162-3BAE-4CFF-8D72-916221E27BE1}]

@DACL=(02 0000)

@="Pixelize"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E36F5435-7BA3-4255-9062-D275F0BAAA7A}]

@DACL=(02 0000)

@="ILXShareLog Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E386F85E-3C25-474D-B303-45E987251872}]

@DACL=(02 0000)

@="Ulead DV SubTitle Filter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E386F85F-3C25-474D-B303-45E987251872}]

@DACL=(02 0000)

@="Ulead DV SubTitle Filter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E3B54E5D-579C-4FF2-853B-E21DD05EA690}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E3ED0D6D-93FF-4F63-9E6B-436E50B42B9E}]

@DACL=(02 0000)

@="AudioEffectLibrary.ReverbPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E41C6AFE-738D-4A56-957C-C352F41B3275}]

@DACL=(02 0000)

@="QTSrc"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4452E4B-3C68-4A8F-899D-002B4719B397}]

@DACL=(02 0000)

@="Kaleidoscope"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E45B8202-C4A7-4FF0-A394-49F3B443BCBB}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e45d7473-5d97-48b0-953e-1a433986f0df}]

@DACL=(02 0000)

@="NMISItemScannerSimilarImages Class"

"AppID"="{5760A24C-D938-4555-AF27-5ADFA9037C5C}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4771AC6-9154-4952-A3E4-C9C9FF9FE622}]

@DACL=(02 0000)

@="ArcWmdmDev Class"

"AppID"="{A4A41C25-5C78-46C9-ADD0-F9D540AFE25B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E48B2549-D510-4A76-8A5F-FC126A6215F0}]

@DACL=(02 0000)

@="CLSID_AntiPhishingBrowserSolution"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4903434-67CC-4448-9717-7A06103B0290}]

@DACL=(02 0000)

@="Rotate Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4A72332-DC45-4AA1-8164-1CCA8614AC75}]

@DACL=(02 0000)

@="NeroFileDlg Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5090C07-DE24-48C3-A690-3483577B7E26}]

@DACL=(02 0000)

@="3D - Vertical Spinning Strokes"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e50fceed-2660-4b46-a464-66795c3f708e}]

@DACL=(02 0000)

@="NMPCSlideShowContentHandler Class"

"AppID"="{360A9422-64AF-4F12-A5D0-16D3EDB000D1}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5209008-B49E-4A0A-932F-B5E7B0B46A03}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E53E2D39-A94F-4cef-BD64-AF3FEF525ECC}]

@DACL=(02 0000)

@="NMDSMdbMediaDatabase Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E569BDE7-A8DC-47F3-893F-FD2B31B3EEFD}]

@DACL=(02 0000)

@="Browser Application State"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e5b2709a-0e6b-45d3-83c8-ef90c2ed5340}]

@DACL=(02 0000)

@="ChooseSessionDlg Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5C438A0-3224-4019-A442-A68D6838E792}]

@DACL=(02 0000)

@="Nero Ogg Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5DCBA6A-6C50-4BFC-B550-D53DFE5FA025}]

@DACL=(02 0000)

@="NOSHttpPostPart Class"

"AppID"="{2E82C0B4-3147-4A6E-AF24-A1992108C420}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5DE60A7-8C6A-4D84-8F6E-DDA41935161E}]

@DACL=(02 0000)

@="Nero MP4 Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5ECC2B2-1ED9-43C7-BC75-F73E85E28684}]

@DACL=(02 0000)

@="ULXBuildUdfImage Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5F5B5A2-F9C2-49CE-BE5A-7893C92BBD39}]

@DACL=(02 0000)

@="AudioEffectLibrary.VolumePlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e6028af3-ee0a-4e49-a043-c44437680ad8}]

@DACL=(02 0000)

@="BurnSettingsDlg Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E60648A1-A2F1-4b00-A2D9-79B2EDB8F592}]

@DACL=(02 0000)

@="NMPCSVCDContentHandlerVMR9 Class"

"AppID"="{41FA2214-273A-46D7-8B96-CA64C554296F}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E61D368C-E0D1-4EAE-8B90-C151C60C743D}]

@DACL=(02 0000)

@="NCChannel Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E62509DF-ECBE-4D35-B195-7149886B4B73}]

@DACL=(02 0000)

@="Blinds"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E69C308A-0582-4BFF-B3DA-697BB2BB5CDA}]

@DACL=(02 0000)

@="LXContentCenter Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E6EE9AAC-F76B-4947-8260-A9F136138E11}]

@DACL=(02 0000)

@="IE Shell Band Site Menu"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E72F05CD-D565-41F1-92FC-69482B5EC060}]

@DACL=(02 0000)

@="NMPCTVStreamContentHandlerVMR9 Class"

"AppID"="{36C66FF0-507F-44B5-9E74-FA02CCB215CD}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e77b3b79-1a82-43b7-ad65-f526c53e062b}]

@DACL=(02 0000)

@="NMBActionPluginPlayAudio Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E7D06080-238B-11D3-80D7-00104B1F6CEA}]

@DACL=(02 0000)

@="InstallShield Script Engine"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E7E79A30-4F2C-4FAB-8D00-394F2D6BBEBE}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{833CCA5F-DCB7-4516-806F-6596AB26DCE4}"

"RequiresFullStream"=dword:00000000

"SupportsPadding"=dword:00000000

"Author"="Microsoft"

"FriendlyName"="XMP Bag Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E7F33474-CC23-4B5E-A7FA-75BFF421B206}]

@DACL=(02 0000)

@="AudioEffectLibrary.PitchCorrectionPage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E80A2814-3A36-4897-8BFF-924D39C26FF8}]

@DACL=(02 0000)

@="NeroFileProducer Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E843040D-3DC3-4592-9F88-54AAEA980244}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e84e182d-b68e-4cab-866f-f35c99dd8315}]

@DACL=(02 0000)

@="NMCFMicroEventManager Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E8658416-7CCB-4c1d-A021-AFF0A2EB8004}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E8933C4B-2C90-4a04-A677-E958D9509F1A}]

@DACL=(02 0000)

@="NMISCIndexingService Class"

"AppID"="{D55E16BA-BBC9-4F7E-A147-E5DFBCC71480}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E8AC0652-173D-4AA4-AA85-F82F0B6B9E94}]

@DACL=(02 0000)

@="AudioEffectLibrary.PseudoReversePlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E98E4C68-3F25-4762-B713-DEC5933E6A40}]

@DACL=(02 0000)

@="3D - Tunnelize"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e9d1594e-3c45-40de-a6d3-75a7ec14c2f9}]

@DACL=(02 0000)

@="NMDSFoundVolumeInfo Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E9F1F599-7B14-4213-BF46-F992758CAB81}]

@DACL=(02 0000)

@="RtlCP Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EAAEAEB6-C59B-4F79-B0B7-8C4B0A60BF46}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EABAAD79-1A74-4672-B7C3-0182B03D55D2}]

@DACL=(02 0000)

@="NeroSink"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EAD55AD3-060A-434A-9383-5BEBCDB2CA07}]

@DACL=(02 0000)

@="ULXBDRTCompiler Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EB18B220-F101-4EF6-B1A5-5360802CF130}]

@DACL=(02 0000)

@="ArcSoft Mpeg Splitter property"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{eb498078-b3a7-4867-aca5-b038d521ed12}]

@DACL=(02 0000)

@="NMBAppGlobalSettingsBurnMix Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EBF92551-A396-40FE-8242-A2B724F2A3AB}]

@DACL=(02 0000)

@="iHDRuntime.IHDRuntime"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EBF9A65D-571C-4746-A9B6-1B83A1033EC8}]

@DACL=(02 0000)

@="AudioRipping Class"

"AppID"="{5EC2B756-5110-4A94-A66D-BFBA2AF993F9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC342F89-D3DE-4D82-A96E-49D70541E3D2}]

@DACL=(02 0000)

@="Fade in/out Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ec39bf14-ca12-46cd-8ea2-b48d5a44350a}]

@DACL=(02 0000)

@="BurnSettings Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC529B00-1A1F-11D1-BAD9-00609744111A}]

@DACL=(02 0000)

@="WDM Streaming VPE VBI Property Set Interface Handler"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC61CE9E-D980-408B-9B90-BDC7EF6CE9EF}]

@DACL=(02 0000)

@="AudioEffectLibrary.PhaserPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC7D1B61-ABED-4022-9991-8A8CCEFD04C6}]

@DACL=(02 0000)

@="Split"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC811B32-852A-4f37-B9DD-A8709DA22B7B}]

@DACL=(02 0000)

@="NMAudioContentHandlerVMR9 Class"

"AppID"="{5BB9749E-DD3F-459F-8865-64A208D020EA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ecac5d28-d6a5-4d47-9fe5-8586db270f2f}]

@DACL=(02 0000)

@="NMSlideSho0Builder Class"

"AppID"="{E95BB462-E6C6-4383-BB6E-2CF3F3CB0502}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED19E3BD-7DB6-44A3-ADAD-B9B98101E0B9}]

@DACL=(02 0000)

@="NCEpgEvents Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED70EF71-8DF3-4C36-826D-E8D29FBB655F}]

@DACL=(02 0000)

@="Nero Search"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ed72f0d2-b701-4c53-adc3-f2fb59946dd8}]

@DACL=(02 0000)

@="ProtectedModeAPI"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED822C8C-D6BE-4301-A631-0E1416BAD28F}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{833CCA5F-DCB7-4516-806F-6596AB26DCE4}"

"RequiresFullStream"=dword:00000000

"SupportsPadding"=dword:00000000

"Author"="Microsoft"

"FriendlyName"="XMP Bag Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED87534F-A666-426B-8D9E-019B21122206}]

@DACL=(02 0000)

@="NCTunerDvbt Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{edbdd4f6-a501-40f2-bc26-9b167b1535e8}]

@DACL=(02 0000)

@="NMBDirectoryPluginTVConfiguration Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{edc8b699-7f88-41f8-aa97-39747a977be0}]

@DACL=(02 0000)

@="NMSSRGBImageBuffer Class"

"AppID"="{E95BB462-E6C6-4383-BB6E-2CF3F3CB0502}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EDF7AC62-3DF4-4A87-AFAF-1AFCD81C9836}]

@DACL=(02 0000)

@="NeAudioRender Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EE2D6561-D63C-11D2-B561-00A0C92E6848}]

@DACL=(02 0000)

@="ShellExt Class"

"AppID"="{3D62E9A1-D243-11D2-B561-00A0C92E6848}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EE366069-1832-420F-B381-0479AD066F19}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{8FD3DFC3-F951-492B-817F-69C2E6D9A5B0}"

"RequiresFullStream"=dword:00000000

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="App1 Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EE58DCFB-90E1-4C39-85B9-6489734AB835}]

@DACL=(02 0000)

@="Bouncing Characters"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EEBAF82E-54DD-4692-9A61-C14369DB03D7}]

@DACL=(02 0000)

@="NMISMediaDatabase Class"

"AppID"="{7AD010A8-C4D6-4CA0-B550-B4EA5F64F8CB}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{eef2bc59-7811-4e77-b3ad-7acb98cd38aa}]

@DACL=(02 0000)

@="NMBActionPluginBurnVCD Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EF134C3B-23E0-457B-A8C1-3B6987DCBD8D}]

@DACL=(02 0000)

@="NeVideoHD Main Property Page"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ef3ef5ef-8f4f-46bc-ba3f-3ace369c8612}]

@DACL=(02 0000)

@="NMDSUriAccessProviderGenericStream Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EF701812-6CC5-466F-9BF5-18825C434971}]

@DACL=(02 0000)

@="NeroSearchFilterSampleSize Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EFAF41AA-04C9-47E4-9226-2D40FFA27DD0}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EFC98D24-8686-4084-B28C-7507FA863BCD}]

@DACL=(02 0000)

@="CHpqLog Object"

"AppID"=""

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EFEDF1EE-AD78-4DE4-9878-8E110683E49F}]

@DACL=(02 0000)

@="NeroFSSecNo Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{effe6d19-b274-4501-afdc-390e46d6fe9b}]

@DACL=(02 0000)

@="ZippedStream Class"

"AppID"="{AB6AA495-ECA6-4036-8F5B-99B641DF2CC3}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F0672315-67B5-4B0F-8ED4-7FFCF7BF09A9}]

@DACL=(02 0000)

@="LVR_MANGR Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f0874e44-8581-46ed-881c-46783c183f6f}]

@DACL=(02 0000)

@="NMBAppPluginPanel Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F0CB4200-B513-43F8-9D05-24D9CE8DEF04}]

@DACL=(02 0000)

@="Ulead DVB Parser"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F0CB4201-B513-43F8-9D05-24D9CE8DEF04}]

@DACL=(02 0000)

@="Ulead DVB Parser Filter Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F13D5DCA-9FE6-4DCA-A3EC-2E161EC5ED33}]

@DACL=(02 0000)

@="Heat Trails"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F162AD9F-87DC-49AE-B697-F688E51D4E9D}]

@DACL=(02 0000)

@="Nero Sound Processor"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F1CCAB47-C8D4-4912-BA82-1D0380A32B3C}]

@DACL=(02 0000)

@="NeroSearchFilterTitle Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f1f2ece6-0289-4992-a536-f82dfc6f6d6e}]

@DACL=(02 0000)

@="DiscInfoDlg Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F1F60FDD-97EA-43F1-920F-6EE61F32F435}]

@DACL=(02 0000)

@="VSTBridge.VSTEffects"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F20D8ADA-A955-435D-8A49-707DAB401787}]

@DACL=(02 0000)

@="Unload Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F2324C9E-B4A5-41CA-BABA-0D12FF4F83AB}]

@DACL=(02 0000)

@="Separate Slide"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F263A5CC-9B97-46AD-8CD1-A2A34BE79049}]

@DACL=(02 0000)

@="ArcHWEventHandler Class"

"AppID"="{A4A41C25-5C78-46C9-ADD0-F9D540AFE25B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F29F4F9A-6914-4046-B8F8-139AA70E1487}]

@DACL=(02 0000)

@="Nero Scout Menu"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F2CF5485-4E02-4f68-819C-B92DE9277049}]

@DACL=(02 0000)

@="&Links"

"MenuTextPUI"="@c:\\WINDOWS\\system32\\ieframe.dll.mui,-13138"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f2deefee-8e64-45d7-83be-c244cff37267}]

@DACL=(02 0000)

@="NMDSFilteredDirectoryFactory Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f311c4e9-5e80-4c9e-a6bf-1beb3de5ad80}]

@DACL=(02 0000)

@="NMDSMetaDataFactoryRegistry Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F38FCD8D-6921-4147-890C-801E5F4F8275}]

@DACL=(02 0000)

@="Mirror: Vertical"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F3C633A2-46C8-498E-8FBB-CC6F721BBCDE}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{79007028-268D-45D6-A3C2-354E6A504BC9}"

"RequiresFullStream"=dword:00000000

"FixedSize"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="App0 Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F3FBC8E5-93A3-11D4-8217-A85459000000}]

@DACL=(02 0000)

@="Nero Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4453C84-C133-43F2-9E12-A9AB4B1422FE}]

@DACL=(02 0000)

@="Ulead OggVorbis Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4670DEF-0302-4F5E-BA74-843F2EC2B7C7}]

@DACL=(02 0000)

@="ArcSoft MP4 Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f472ed2b-87a0-4481-89af-2a60f862305a}]

@DACL=(02 0000)

@="Effect Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F47C211E-70D5-4BC6-B0E7-B045EC466146}]

@DACL=(02 0000)

@="Credits Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4817E4B-04B6-11D3-8862-00C04F72F303}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f495ebbe-a068-41fb-89b6-c605d20a2df3}]

@DACL=(02 0000)

@="RecorderCombobox Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4D36777-EAED-4cc5-9FE7-827BE5190B20}]

@DACL=(02 0000)

@="Microsoft Feeds Scheduler"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4E6633D-3404-4F4E-90EE-4B1A336F14CD}]

@DACL=(02 0000)

@="AudioDocFilter Class"

"AppID"=""

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F50B3F10-19C4-11CF-AA9A-02608C9BABA2}]

@DACL=(02 0000)

@="ArcSoft MPEG Video Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F50B3F11-19C4-11CF-AA9A-02608C9BABA2}]

@DACL=(02 0000)

@="ArcSoft Mpeg Decoder Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F50B3F12-19C4-11CF-AA9A-02608C9BABA2}]

@DACL=(02 0000)

@="ArcSoft Deinterlace Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F5549B02-B736-4D32-BD8C-15D4E260E9B9}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F556280E-71DD-4324-BB45-09F2E3DD2767}]

@DACL=(02 0000)

@="Gaussian Blur"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F578E21A-DB55-4C70-B04E-46D4F9BBD434}]

@DACL=(02 0000)

@="ULXMpegEncoder Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f57d6ba3-d37b-4ef7-9c2b-e05027603f5a}]

@DACL=(02 0000)

@="NMCFPropertyContainerFactory Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F5838CC6-EBBF-46D3-AE67-ED2F8D7218EC}]

@DACL=(02 0000)

@="ULXAudioCDManager Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f5af851c-c93b-416b-a6a9-851e4b2794e3}]

@DACL=(02 0000)

@="NMBActionPluginPlayRadio Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F6032A69-F002-49AB-B24B-757060B11C09}]

@DACL=(02 0000)

@="Nero Mpeg2 Encoder Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F6348C42-7114-468D-A302-EFBBBCA59ADE}]

@DACL=(02 0000)

@="COMTool Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F706F28F-C2C3-4B2B-A1C5-9782FDB677C9}]

@DACL=(02 0000)

@="Nero QuickTime™ Video Decoder Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F710DD5E-3ED7-442F-BA31-4BD2DF7F4366}]

@DACL=(02 0000)

@="ArcSoft 3GP Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F74D77D2-44CE-4315-90CB-DCC30CCFA0C8}]

@DACL=(02 0000)

@="Wipe Down"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F7A8E80E-2430-48CB-953D-23D6D34A623F}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F81D4B21-8E41-4283-B854-C2343756A157}]

@DACL=(02 0000)

@="LudfReader Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F81E7B20-3E76-4194-8171-FFDB0F6CBE49}]

@DACL=(02 0000)

@="CoverEdCtrl Control"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}]

@DACL=(02 0000)

@="IE Registry Tree Options Utility"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8512E22-9DB5-4297-A531-6313D9B64102}]

@DACL=(02 0000)

@="Blur Fade"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f866c0dd-1efb-477a-9dee-20e9bd38c892}]

@DACL=(02 0000)

@="NMDSUriAccessProviderLocalFS Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8777E65-5755-4E49-9237-8D98F0C2499F}]

@DACL=(02 0000)

@="Nero Video Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f87d21b9-5aac-4d8e-af4d-1f6943889382}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f8b558b4-3647-4e31-8157-9e4053de815e}]

@DACL=(02 0000)

@="NMBDirectoryPluginTVPrograms Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f8c26e45-f38b-4392-abdc-ed1caed86104}]

@DACL=(02 0000)

@="NMPCAudioSampleSequenceFactory Class"

"AppID"="{8E1EAC0D-E841-4FA9-8696-9C4894F4D307}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F9136BAA-1AA3-4F7A-B8B0-4F6399BC1B37}]

@DACL=(02 0000)

@="AudioEffectLibrary.ModulationPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F94687E8-1A40-42D2-9028-39DC65793988}]

@DACL=(02 0000)

@="Slime"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F95C8BFF-658C-4DF2-B496-280DBE5E6D20}]

@DACL=(02 0000)

@="AudioEffectLibrary.LoudnessPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F97125CC-1ED0-4E48-B995-E052B45CBDC5}]

@DACL=(02 0000)

@="NCTunerAtsc Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f99c08d6-0eff-4254-93c7-ceb4e890d805}]

@DACL=(02 0000)

@="NMHDSPluginTVScheduledRecordings Class"

"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f9b622f8-f676-4bed-8609-6916953c6bc6}]

@DACL=(02 0000)

@="FreeCurveEdit Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F9DB3544-CCCB-40C2-B24A-91E8BB87D661}]

@DACL=(02 0000)

@="ArcSoft AC3 Decoder Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FA4D6C69-CB72-4656-B570-462EEE447B64}]

@DACL=(02 0000)

@="Circles"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FAB5A83D-1CA1-49DB-8678-9898F4127DB4}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FADE020C-B6CB-400b-B794-5A51C9A5F6D0}]

@DACL=(02 0000)

@="IE Microsoft CommBand"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{faeb54c4-f66f-4806-83a0-805299f5e3ad}]

@DACL=(02 0000)

@="Microsoft Feeds Manager (scripting)"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FB012959-F4F6-44D7-9D09-DAA087A9DB57}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{243DCEE9-8703-40EE-8EF0-22A600B8058C}"

"RequiresFullStream"=dword:00000001

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="Thumbnail Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FB309DE8-723C-4D5B-AC22-DD8F4F28269F}]

@DACL=(02 0000)

@="NOSHttpConnection Class"

"AppID"="{2E82C0B4-3147-4A6E-AF24-A1992108C420}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FB8DC1C1-ED90-42EF-A115-A0494CC138A9}]

@DACL=(02 0000)

@="Voxelize"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FBC519A7-5FA7-45CF-8301-6FDF95164365}]

@DACL=(02 0000)

@="Glow"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FBF23B40-E3F0-101B-8488-00AA003E56F8}\Elevation]

@DACL=(02 0000)

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC1A861A-0782-4321-8FDD-A29C9DD27C5E}]

@DACL=(02 0000)

@="Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC1CF921-CCE5-11D2-8CE6-0000E84979EE}]

@DACL=(02 0000)

@="Audio Buffer Render"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC2B5A8C-EC3F-45bb-BDDC-60F492318D21}]

@DACL=(02 0000)

@="NBClientListener Class"

"AppID"="{A0829BAB-FD70-4f2b-8C0B-8484B6BBCD31}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC2FFAA3-0177-4B95-BEA3-CC42CE5BB41A}]

@DACL=(02 0000)

@="Text fly to right"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{fc63f70a-caae-4f81-be0b-527a1c65c476}]

@DACL=(02 0000)

@="NMSearc0ParserSpirit Class"

"AppID"="{A82BBCBD-CB95-43E6-BF3A-8A6EA9C5B795}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{fc9e87fc-39b0-4bba-a9cc-2ce0207fa6cd}]

@DACL=(02 0000)

@="NMDSFoundVolumeInfoList Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD000F57-10FA-4358-8512-8A6B7A3146A2}]

@DACL=(02 0000)

@="Nero DV Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}]

@DACL=(02 0000)

@="System Restore Wrapper"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD5995B0-0903-4177-9E00-F55BC80BAE7B}]

@DACL=(02 0000)

@="AvSource"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD5CD8B1-6FE0-44F3-BBFB-65E3655B096E}\ProgId]

@DACL=(02 0000)

@="Microsoft.Aspnet.Snapin.AspNetManagementUtility.2"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD83DDBE-2039-48EF-AC24-5C166D10ECB8}]

@DACL=(02 0000)

@="NeroSearchFilterBitrate Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FDBC502E-5417-4DC9-B1B2-811DB529959D}]

@DACL=(02 0000)

@="Spherical Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FDE7673D-2E19-4145-8376-BBD58C4BC7BA}]

@DACL=(02 0000)

@="IE Custom MRU AutoCompleted List"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FDEC7B7F-1209-40BC-AA36-9CAC8CD1A35A}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE1F4910-E20B-4047-BEB4-2798D98E9BA1}]

@DACL=(02 0000)

@="Nero HD Audio Mixer Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE4A53E9-F056-49BF-9841-4E9416B85FC2}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE520461-1A47-4D2F-8F0A-D741B1739022}]

@DACL=(02 0000)

@="ILXShareLog Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE6B11C3-C72E-4061-86C6-9D163121F229}]

@DACL=(02 0000)

@="Microsoft Feeds Manager"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE9617F6-E606-42AA-BECC-0E9CDA246D63}]

@DACL=(02 0000)

@="Color Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEC5F6B2-A15A-11D4-8250-9C9E8B000000}]

@DACL=(02 0000)

@="NeroIsoTrack Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ff0be41b-4a12-4ac1-9b25-1a4f14aa753f}]

@DACL=(02 0000)

@="NMBActionPluginPlay Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ff4d6e08-5f27-44b7-9147-ac7c5864794e}]

@DACL=(02 0000)

@="SourcePlacementPage Class"

"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FF8802ED-84A7-4b5f-8198-AD7151BD33D5}]

@DACL=(02 0000)

@="NMPCSlideShowContentHandlerVMR9 Class"

"AppID"="{360A9422-64AF-4F12-A5D0-16D3EDB000D1}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FFBB820D-964F-4141-A717-418A530EF57B}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ffd90217-f7c2-4434-9ee1-6f1b530db20f}]

@DACL=(02 0000)

@="XML Feed Moniker"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FFF2D28F-E4EE-44D9-8104-8E71556757F6}]

@DACL=(02 0000)

@="DWUpdateService"

.

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]

"OODEFRAG10.00.00.01WORKSTATION"="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"

.

Completion time: 2015-03-15  08:35:57

ComboFix-quarantined-files.txt  2015-03-14 22:35

.

Pre-Run: 7,161,360,384 bytes free

Post-Run: 7,085,305,856 bytes free

.

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

UnsupportedDebug="do not select this" /debug

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

[spybotsd]

timeout.old=30

.

- - End Of File - - 31306C3E08301C41BAD2ABE1A40ECD67

8F558EB6672622401DA993E1E865C861

[Advertisements]

Hello again Damon,
 

 

ComboFix came up saying that both AVG and Nod32 were active.

The Nod32 one is an old remnant I have included it in the fix below. AVG is showing everywhere in your logs. Are you sure you didn't know about it? Tell me when you return.

Now

You have the TeamViewer program on your machine. That is a legitimate program but is sometimes used for malicious purposes. If you know about it and installed it yourself then that is fine. If you don't know about it then uninstall it.

Next

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quote box below into it:
 

KillAll::

SecCenter::
AV: Eset NOD32 antivirus system 2.51 *Enabled/Outdated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

Driver::
vToolbarUpdater18.3.0

Folder::
c:\program files\Common Files\AVG Secure Search

Reboot::

Save this as CFScript.txt, in the same location as ComboFix.exe



Referring to the picture above, drag CFScript into ComboFix.exe

When finished, it will produce a log for you at C:\ComboFix.txt. Please post that here for further review.

[emeraldnzl]

Hello again Damon,
 

 

ComboFix came up saying that both AVG and Nod32 were active.

The Nod32 one is an old remnant I have included it in the fix below. AVG is showing everywhere in your logs. Are you sure you didn't know about it? Tell me when you return.

Now

You have the TeamViewer program on your machine. That is a legitimate program but is sometimes used for malicious purposes. If you know about it and installed it yourself then that is fine. If you don't know about it then uninstall it.

Next

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quote box below into it:
 

KillAll::

SecCenter::
AV: Eset NOD32 antivirus system 2.51 *Enabled/Outdated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

Driver::
vToolbarUpdater18.3.0

Folder::
c:\program files\Common Files\AVG Secure Search

Reboot::

Save this as CFScript.txt, in the same location as ComboFix.exe



Referring to the picture above, drag CFScript into ComboFix.exe

When finished, it will produce a log for you at C:\ComboFix.txt. Please post that here for further review.

[Damon(V)]

AVG - yes sorry! AVG I couldn't remove using add/remove programs and the folder wouldn't delete but the program is still there, not working as far as I'm aware. 

Teamviewer I installed but I no longer use it so will uninstall.

 

ComboFix 15-03-14.03 - Work 2 15/03/2015   9:22.2.2 - x86

Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.2039.1164 [GMT 10:00]

Running from: c:\documents and settings\Work 2\Desktop\ComboFix.exe

Command switches used :: c:\documents and settings\Work 2\Desktop\CFScript.txt

AV: AVG AntiVirus Free Edition 2015 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}

.

.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

.

(((((((((((((((((((((((((((((((((((((((   Drivers/Services   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Legacy_VTOOLBARUPDATER18.3.0

-------\Service_vToolbarUpdater18.3.0

.

.

(((((((((((((((((((((((((   Files Created from 2015-02-14 to 2015-03-14  )))))))))))))))))))))))))))))))

.

.

2015-03-14 04:00 . 2015-03-14 05:55 -------- d-----w- C:\AdwCleaner

2015-03-10 21:18 . 2015-03-14 09:25 -------- d-----w- C:\FRST

2015-03-09 10:57 . 2015-03-09 10:57 -------- d-----w- c:\documents and settings\User2

2015-03-09 10:27 . 2015-03-09 10:27 4579240 ----a-w- C:\avg_isct_stb_all_2015_5315_cm5.exe

2015-03-08 03:10 . 2015-03-08 03:12 5475064 ----a-w- C:\avast_free_antivirus_setup_online.exe

2015-03-08 01:15 . 2015-03-14 07:56 -------- d-----w- c:\program files\Spybot - Search & Destroy 2

2015-03-08 00:24 . 2015-03-08 00:25 -------- d-----w- c:\documents and settings\Administrator

2015-03-06 23:36 . 2015-03-06 23:36 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Identities

2015-03-06 23:34 . 2015-03-06 23:34 -------- d-----w- c:\program files\Common Files\Microsoft

.

.

.

((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2015-02-06 20:34 . 2012-04-02 07:41 701616 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2015-02-06 20:34 . 2011-06-12 04:21 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2015-02-06 20:34 . 2015-02-06 20:34 5059760 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe

.

.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-04-10 05:37 130736 ----a-w- c:\documents and settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-04-10 05:37 130736 ----a-w- c:\documents and settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-04-10 05:37 130736 ----a-w- c:\documents and settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2013-04-10 05:37 130736 ----a-w- c:\documents and settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"PeerBlock"="c:\program files\PeerBlock\peerblock.exe" [2014-01-14 2122824]

"Skype"="c:\program files\Skype\Phone\Skype.exe" [2015-01-23 31090792]

"GoogleChromeAutoLaunch_3DFCF6B2AEB445B8DC09B36EA9332B3A"="c:\documents and settings\Work 2\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2015-03-07 809288]

"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner.exe" [2015-02-19 5503768]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ANIWZCS2Service"="c:\program files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2007-01-19 49152]

"D-Link D-Link Wireless G DWA-110"="c:\program files\D-Link\D-Link Wireless G DWA-110\AirGCFG.exe" [2008-04-15 1675264]

"igfxtray"="c:\windows\system32\igfxtray.exe" [2006-03-22 94208]

"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-03-22 77824]

"igfxpers"="c:\windows\system32\igfxpers.exe" [2006-03-22 118784]

"RTHDCPL"="RTHDCPL.EXE" [2007-10-25 16855552]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-01 254336]

"TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" [2011-07-13 273544]

"AVG_UI"="c:\program files\AVG\AVG2015\avgui.exe" [2014-12-17 3667472]

"CheckNDISPort_df"="c:\program files\Hostless Modem\Telstra USB+Wi-Fi\CheckNDISPort_df.exe" [2012-09-20 442696]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]

.

c:\documents and settings\All Users\Start Menu\Programs\Startup\

Acrobat Assistant.lnk - c:\program files\Adobe\Acrobat 6.0\Distillr\acrotray.exe [2003-5-15 217193]

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute REG_MULTI_SZ    autocheck autochk *\0OODBS\0c:\progra~1\AVG\AVG2015\avgrsx.exe /sync /restart\0sdnclean.exe

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Photosmart Premier Fast Start.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Photosmart Premier Fast Start.lnk

backup=c:\windows\pss\HP Photosmart Premier Fast Start.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ImageMixer for HDD Camcorder.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\ImageMixer for HDD Camcorder.lnk

backup=c:\windows\pss\ImageMixer for HDD Camcorder.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^Work 2^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]

path=c:\documents and settings\Work 2\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk

backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

2010-11-10 02:49 932288 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

2010-11-10 02:49 35736 ----a-w- c:\program files\Adobe\Reader 10.0\Reader\reader_sl.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]

2010-03-05 17:44 500208 ------w- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]

2010-02-21 18:57 406992 ----a-w- c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]

2011-04-20 02:48 58656 ----a-w- c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]

2011-09-26 21:22 59240 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrStsMon00]

2010-06-10 03:42 2621440 ------r- c:\program files\Browny02\Brother\BrStMonW.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]

2011-03-14 17:09 2565520 ----a-w- c:\program files\Canon\MyPrinter\BJMYPRT.EXE

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenuEx]

2011-08-04 07:06 1612920 ----a-w- c:\program files\Canon\Solution Menu EX\CNSEMAIN.EXE

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]

2011-07-28 23:08 1259376 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Easy-PrintToolBox]

2006-10-17 01:20 398944 ----a-w- c:\program files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]

2014-10-22 06:05 107912 ----atw- c:\documents and settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]

2006-10-26 14:47 31016 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

2007-10-14 11:17 49152 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]

2007-08-22 06:31 80896 ----a-w- c:\program files\HP\Digital Imaging\bin\HpqSRmon.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

2011-10-09 08:06 421736 ----a-w- c:\program files\iTunes\iTunesHelper.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer]

2006-05-09 23:48 94208 ----a-w- c:\program files\Common Files\Logitech\KhalShared\KHALMNPR.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]

2008-04-13 19:42 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]

2007-12-03 04:21 2213160 ----a-w- c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

2007-03-01 04:57 153136 ----a-w- c:\program files\Common Files\Nero\Lib\NeroCheck.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OnlineTextBuddy]

2005-04-07 04:13 839680 ----a-w- c:\program files\Telstra\OnlineTextBuddy\OnlineTextBuddy.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]

2007-05-10 16:08 2512392 ----a-w- c:\windows\system32\oodtray.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

2011-07-05 08:36 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]

2007-10-11 03:04 1826816 ----a-r- c:\windows\SkyTel.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

2013-07-01 23:16 254336 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]

2010-02-19 03:37 517096 ----a-w- c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

2011-07-13 23:45 273544 ----a-w- c:\program files\Real\realplayer\Update\realsched.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS11 Preload]

2007-03-03 04:12 341488 ----a-w- c:\program files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\uTorrent\\uTorrent.exe"=

"c:\\Program Files\\Java\\jre7\\bin\\javaw.exe"=

"c:\\Documents and Settings\\Work 2\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.exe"=

"c:\\Documents and Settings\\Work 2\\Application Data\\Dropbox\\bin\\Dropbox.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Vuze\\Azureus.exe"=

"c:\\Program Files\\SkypeCallRecorder\\SkypeCallRecorder.exe"=

"c:\\Documents and Settings\\Work 2\\Local Settings\\Application Data\\Google\\Chrome\\Application\\chrome.exe"=

"c:\\Program Files\\AVG\\AVG2015\\avgmfapx.exe"=

"c:\\Program Files\\AVG\\AVG2015\\avgnsx.exe"=

"c:\\Program Files\\AVG\\AVG2015\\avgdiagex.exe"=

"c:\\Program Files\\AVG\\AVG2015\\avgemcx.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

"c:\\Program Files\\TeamViewer\\Version9\\TeamViewer.exe"=

"c:\\Program Files\\TeamViewer\\Version9\\TeamViewer_Service.exe"=

.

R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [9/17/2012 6:58 PM 154904]

R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [8/9/2012 1:56 PM 230680]

R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [8/10/2012 4:52 AM 27416]

R1 Avgdiskx;AVG Disk Driver;c:\windows\system32\drivers\avgdiskx.sys [9/25/2013 8:57 PM 121624]

R1 AVGIDSDriverl;AVGIDSDriverl;c:\windows\system32\drivers\avgidsdriverlx.sys [6/17/2014 4:17 PM 192792]

R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [8/10/2012 4:52 AM 21272]

R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [9/12/2012 11:47 AM 192792]

R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [9/12/2012 11:47 AM 200984]

R2 LBeepKE;LBeepKE;c:\windows\system32\drivers\LBeepKE.sys [8/20/2007 12:14 PM 3712]

R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2/12/2011 7:23 AM 35088]

R2 PS3 Media Server;PS3 Media Server;c:\program files\PS3 Media Server\win32\service\wrapper.exe [5/17/2011 5:25 PM 366872]

R2 TeamViewer9;TeamViewer 9;c:\program files\TeamViewer\Version9\TeamViewer_Service.exe [3/7/2015 9:21 PM 5249808]

R3 pbfilter;pbfilter;c:\program files\PeerBlock\pbfilter.sys [1/2/2011 10:20 AM 19016]

R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\drivers\teamviewervpn.sys [3/11/2010 7:17 PM 25088]

S2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2015\avgidsagent.exe [12/18/2014 9:54 AM 3432976]

S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2015\avgwdsvc.exe [12/18/2014 9:45 AM 298080]

S2 Ca1528av;SPCA1528 Video Camera Service;c:\windows\system32\Drivers\Ca1528av.sys --> c:\windows\system32\Drivers\Ca1528av.sys [?]

S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [1/2/2015 7:45 PM 315488]

S3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Adapter;c:\windows\system32\drivers\atl01_xp.sys [8/8/2007 7:09 AM 35712]

S3 AVEO;USB2.0 PC Camera;c:\windows\system32\drivers\AVEOdcnt.sys [1/26/2011 2:48 PM 224256]

S3 BrYNSvc;BrYNSvc;c:\program files\Browny02\BrYNSvc.exe [7/30/2013 4:27 PM 245760]

S3 Bulk1528;SPCA1528 Still Camera Service;c:\windows\system32\Drivers\Bulk1528.sys --> c:\windows\system32\Drivers\Bulk1528.sys [?]

S3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [1/12/2011 5:20 PM 113280]

S3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys --> c:\windows\system32\Drivers\ANDROIDUSB.sys [?]

S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [1/23/2014 5:12 PM 137600]

S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [1/23/2014 5:12 PM 8576]

S3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys [8/16/2011 11:09 AM 16472]

S3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys [8/16/2011 11:09 AM 11104]

S3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2/19/2010 1:37 PM 517096]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ    Pml Driver HPZ12 Net Driver HPZ12

hpdevmgmt REG_MULTI_SZ    hpqcxs08 hpqddsvc

.

Contents of the 'Scheduled Tasks' folder

.

2015-03-14 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-02 20:34]

.

2015-03-12 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 02:34]

.

2015-03-14 c:\windows\Tasks\Casper XP Scheduled Copy of Disk 1 to Disk 2.job

- c:\program files\Future Systems Solutions\Casper XP\CasperXP.EXE [2007-08-08 04:34]

.

2015-03-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2013-02-01 23:08]

.

2015-03-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2013-02-01 23:08]

.

2015-03-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-1326574676-725345543-1006Core.job

- c:\documents and settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-07-16 06:05]

.

2015-03-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-1326574676-725345543-1006UA.job

- c:\documents and settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-07-16 06:05]

.

2015-03-14 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1343024091-1326574676-725345543-1006.job

- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 00:47]

.

2015-03-12 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1343024091-1326574676-725345543-1006.job

- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 00:47]

.

2015-03-14 c:\windows\Tasks\WGASetup.job

- c:\windows\system32\KB905474\wgasetup.exe [2009-03-25 12:18]

.

.

------- Supplementary Scan -------

.

uStart Page = hxxp://www.google.com/

uInternet Connection Wizard,ShellNext = "c:\program files\Outlook Express\msimn.exe"

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html

IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html

IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html

IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html

TCP: DhcpNameServer = 192.168.0.1

Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

.

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2015-03-15 09:34

Windows 5.1.2600 Service Pack 3 NTFS

.

scanning hidden processes ...  

.

scanning hidden autostart entries ... 

.

scanning hidden files ...  

.

scan completed successfully

hidden files: 0

.

**************************************************************************

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC90C}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC90D}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC90E}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC90F}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC912}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC913}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC914}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC915}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC916}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC918}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC919}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC91B}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC91C}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC91D}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC91E}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC91F}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC920}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC921}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC922}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC923}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC924}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC925}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC926}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC927}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC928}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC929}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC92A}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC92B}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC92C}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC92D}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC92E}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC92F}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC930}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC931}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC932}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC933}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC934}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC935}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC936}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC937}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC938}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC939}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC93A}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC93B}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC93D}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC93E}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC93F}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC940}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC941}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Formats\{6FDDC324-4E03-4BFE-B185-3D77768DC942}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\InProcServer32]

@DACL=(02 0000)

@="wmphoto.dll"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A26CEC36-234C-4950-AE16-E34AACE71D0D}\Patterns]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A2735BEC-46BC-4082-99B9-F459F2E783FF}]

@DACL=(02 0000)

@="Nero MP3 Encoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a2822eff-6489-4459-861b-8806ac465a01}]

@DACL=(02 0000)

@="NMHDSPluginDevicesMyComputer Class"

"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a2b9f980-e9b1-473a-af7e-0a864b060710}]

@DACL=(02 0000)

@="NMDSUriAccessProviderGetObjectThumbnail Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A2C59623-BA04-42DF-AB69-3853430C7DD4}]

@DACL=(02 0000)

@="VST EIO"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A354BD60-4C0A-11d3-B561-00A0C92E6848}]

@DACL=(02 0000)

@="DataObject Class"

"AppID"="{3D62E9A1-D243-11D2-B561-00A0C92E6848}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A38B883C-1682-497E-97B0-0A3A9E801682}]

@DACL=(02 0000)

"ManualSafeSave"="1"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A3DD4F92-658A-410F-84FD-6FBBBEF2FFFE}]

@DACL=(02 0000)

@="Internet Options"

"InfoTip"="@c:\\WINDOWS\\system32\\inetcpl.cpl,-4313"

"LocalizedString"="@c:\\WINDOWS\\system32\\inetcpl.cpl,-4312"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A42D5816-2C1B-4C00-BB0A-B4A0E9E322B6}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A438687F-0BA2-4B04-9760-CB2FDB19E32E}]

@DACL=(02 0000)

@="NCTeletextPidInfo Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A4741943-6C4B-4cf7-BF44-A0F4207D1330}]

@DACL=(02 0000)

@="IE Property Set Storage In Memory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A524E396-3310-400c-A346-8B835B6E44E2}]

@DACL=(02 0000)

@="NOSMarketingRegistration Class"

"AppID"="{FCCD4F86-3FED-4968-BC86-2159D3E1018D}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A55803CC-4D53-404c-8557-FD63DBA95D24}]

@DACL=(02 0000)

@="WPDShextAutoplay"

"AppID"="{A55803CC-4D53-404c-8557-FD63DBA95D24}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A55974C4-FBA1-4BD0-A93E-9EA842DAB865}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A60E4D06-B66D-4AB3-9F06-380239F09F43}]

@DACL=(02 0000)

@="AudioEffectLibrary.DistortionPage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A6247D2A-C8F9-423B-A3D9-88D3BE59D6B5}]

@DACL=(02 0000)

@="Nero Video Controls Property Page"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a65786fa-926f-4ef3-9aa6-0aa28074f26d}]

@DACL=(02 0000)

@="NMBAppGlobals Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A67E7FC3-833A-4D1F-B959-5D17C8098779}]

@DACL=(02 0000)

@="ILXShareLog Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A6B222AB-A5EA-4899-B230-084657EDDC7D}]

@DACL=(02 0000)

@="Browser Thread State"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a709a741-be5b-4770-b56f-e0fa82a20a3f}]

@DACL=(02 0000)

@="NMHDSPluginMovies Class"

"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A76E25F7-3D1C-42E7-B6FA-0DD11C884740}]

@DACL=(02 0000)

@="General"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a861a366-0c7a-484b-9116-f366bf0fa23f}]

@DACL=(02 0000)

@="BurnProgressWindow Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A8792A31-F385-493C-A893-40F64EB45F6E}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a8a7eb46-fa1c-449a-9bb0-d6bdcddab9cb}]

@DACL=(02 0000)

@="NMSearc0DataFeedFactory Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A8F6550E-EEF4-4A19-B1F4-052404F217AC}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A92C2CFB-37ED-425D-9179-472A0D85E551}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a9a286c2-3cf5-4b20-95df-3099f642863c}]

@DACL=(02 0000)

@="SurroundLED Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a9b0528c-e8f1-4bb1-926d-a2bf7d87c411}]

@DACL=(02 0000)

@="NMBAppGlobalSettingsParentalControl Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A9C2CEBF-36DC-40A3-92E6-ED59FDD9D20D}]

@DACL=(02 0000)

@="SONY Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a9e32835-244e-4159-8bc6-c7f7e2759d28}]

@DACL=(02 0000)

@="NMCFPropertyValueCompoundValidator Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A9F5348E-6581-4D82-A23B-86C649544BF0}]

@DACL=(02 0000)

@="ArcSoft AAC Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA0AF823-B0D0-40c7-AE77-F13B14D9FFAE}]

@DACL=(02 0000)

@="Toolbar Extension for Bands"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA274BF6-E29B-4BD0-881F-217333F0215F}]

@DACL=(02 0000)

@="CAudioClipServer Object"

"AppID"=""

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA2E3476-56ED-473C-85A2-27C1B04D724D}]

@DACL=(02 0000)

@="Nero Audible Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA49CC5B-F871-4E04-AA59-72120508145B}]

@DACL=(02 0000)

@="AudioEffectLibrary.DistortionPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA4B69AD-D5E4-4BDD-8795-DA7EB3CFCE82}]

@DACL=(02 0000)

@="Additive Blend"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA5A7816-727A-471A-88EC-8D41B74199D2}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA7E2086-CB55-11D2-8094-00104B1F9838}]

@DACL=(02 0000)

@="InstallShield setup object wrapper"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA7E2087-CB55-11D2-8094-00104B1F9838}]

@DACL=(02 0000)

@="InstallShield setup object wrapper"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA7E3C50-864C-4604-BC04-8B0B76E637F6}]

@DACL=(02 0000)

"SpecVersion"="1.0.0.0"

"Version"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{326556A2-F502-4354-9CC0-8E3F48EAF6B5}"

"RequiresFullStream"=dword:00000000

"SupportsPadding"=dword:00000000

"Author"="Microsoft"

"FriendlyName"="App13 Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA8A3797-9E53-4C06-9891-875430FD3219}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AA94DCC2-B8B0-4898-B835-000AABD74393}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{7B08A675-91AA-481B-A798-4DA94908613B}"

"RequiresFullStream"=dword:00000000

"SupportsPadding"=dword:00000000

"Author"="Microsoft"

"FriendlyName"="XMP Alt Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AAC2B978-266D-48ae-AA28-60A3EBB872D0}]

@DACL=(02 0000)

@="IE RSS FeedFolder Tasks"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AADE03FE-7BB6-4312-981D-E9F6DAAA3D75}]

@DACL=(02 0000)

@="ULXDiscScriptWriter Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AAF4F5A6-00ED-4766-B0D0-0F12451D944C}]

@DACL=(02 0000)

@="AudioEffectLibrary.PitchBenderPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ab1858a0-2591-44c6-b978-7617773ab464}]

@DACL=(02 0000)

@="NMBCFactory Class"

"AppID"="{3E0C78AE-A3A5-49A6-8D3F-63AD6C80EBA0}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AB31E903-FFE4-4091-ABE6-E69CA1D629EE}]

@DACL=(02 0000)

@="MeltDown"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AB9DB457-1171-4D1F-99C1-63F6811ED440}]

@DACL=(02 0000)

@="Audio Mixer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ABA1523B-38A2-40AE-B3EC-C467FE1608E1}]

@DACL=(02 0000)

@="Supertwirl"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ABE3B9A4-257D-4B97-BD1A-294AF496222E}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC092426-DA6F-4A3D-A440-6E770ABBB000}]

@DACL=(02 0000)

@="NCSystemConfiguration Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC1682C6-78B4-4C0A-9D8C-D131F3068D2A}]

@DACL=(02 0000)

@="AudioEffectLibrary.StereoProcessorPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC4CE3CB-E1C1-44CD-8215-5A1665509EC2}]

@DACL=(02 0000)

"Author"="Microsoft"

"ColorManagementVersion"="1.0.0.0"

"ContainerFormat"="{57A37CAA-367A-4540-916B-F183C5093A4B}"

"FileExtensions"=".wdp"

"FriendlyName"="WMPhoto Encoder"

"MimeTypes"="image/vnd.ms-photo"

"SpecVersion"="1.0.0.0"

"SupportAnimation"=dword:00000000

"SupportChromakey"=dword:00000000

"SupportLossless"=dword:00000001

"SupportMultiframe"=dword:00000001

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"Version"="1.0.0.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC757296-3522-4E11-9862-C17BE5A1767E}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC8BF71E-E41F-4FE7-B58C-E4AC3555C0BF}]

@DACL=(02 0000)

@="DirectBurnSource Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ACE52D03-E5CD-4b20-82FF-E71B11BEAE1D}]

@DACL=(02 0000)

@="Shell Name Space ListView"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AD47916A-A2EB-48F7-9ACA-221790DA98CC}]

@DACL=(02 0000)

@="BackWeb Client Files Access"

"AppID"="{AD47916A-A2EB-48F7-9ACA-221790DA98CC}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{adc8513c-d58e-4d29-a6ab-7d5ea44562c4}]

@DACL=(02 0000)

@="UpConversionTransform Class"

"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{addea488-e976-492e-a67e-7354821794d2}]

@DACL=(02 0000)

@="NMDSOpenAsDirectoryHandlerZip Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{adfab5ce-4211-44b5-b96e-1c6d98dca47f}]

@DACL=(02 0000)

@="NMDSDirAccProviderGetObjectMetaData Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AE9D09AC-6BDA-424F-837E-C2DA8B3FE49B}]

@DACL=(02 0000)

@="NeSoundSwitch About"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AEC62F69-4A9A-4FFC-8528-7B57E3DFB1A0}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AED51F91-EBE9-4344-84A6-D116C4EC40D8}]

@DACL=(02 0000)

@="ULXDVDAudioCompiler Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AEF4E74F-7767-4FED-B4A8-2F9A0A713D26}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AF0996A6-75B5-457D-B417-49B5FBF97E73}]

@DACL=(02 0000)

@="InstallShield InstallDriver String Table"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AF24EC63-B3F1-41FE-8A22-84DAB1A2E3FF}]

@DACL=(02 0000)

@="Horizontal Fade"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AF56508B-F0FF-49D7-A94C-33C0D13CD25E}]

@DACL=(02 0000)

@="Nero Scout Language"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AF68A860-C2F9-4E8C-8312-4A85B09DCBDD}]

@DACL=(02 0000)

@="Zooming Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{af6fcf1c-07a3-44bf-9b4b-641a73efc7ba}]

@DACL=(02 0000)

@="NMBAppGlobalEventManager Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AF822D48-6DA7-4688-85F9-9BD73EDE0CFC}]

@DACL=(02 0000)

@="Vertical Blur"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AFA59C71-0C58-462B-A906-005CD8CAB090}]

@DACL=(02 0000)

@="AudioEffectLibrary.NoiseReductionPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AFAB506E-0531-4B35-B24C-ABD2D8B725A1}]

@DACL=(02 0000)

@="VideoCrossfade"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AFD62485-400B-42BC-9672-568012C88ACB}]

@DACL=(02 0000)

@="Rotate"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B06E521D-B3C9-4FD1-9018-B24D60589F34}]

@DACL=(02 0000)

@="NeroCoverEdFilter Class"

"AppID"="{7975C0BF-88A1-44AD-A292-4C20D698550C}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B0A800B3-AE28-4251-820A-54C47EA8533C}]

@DACL=(02 0000)

@="ULXDiscScriptWriter_XML Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B0A9727A-0896-4985-AE46-0F4891FC027F}]

@DACL=(02 0000)

@="Fuzzy Smooth"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b110f611-91fd-4e5a-8ea0-31f12fbc2254}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B11212BD-A797-4459-B8A7-5C9E7F49E1D0}]

@DACL=(02 0000)

@="IE OLE Document Property Handler"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B14D4AA1-A59B-4FEC-B6DE-15CD9FF6C801}]

@DACL=(02 0000)

@="ULXISO9660Parser Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b1568afb-068a-4992-8968-b3b941561faf}]

@DACL=(02 0000)

@="NMUI Streaming Drawing Engine Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B1D31C8E-FAC0-4E08-B350-279BFAF3F0CB}]

@DACL=(02 0000)

@="AudioEffectLibrary.ModulationPage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B1EBFC28-C9BD-47A2-8D33-B948769777A7}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{537396C6-2D8A-4BB6-9BF8-2F0A8E2A3ADF}"

"RequiresFullStream"=dword:00000001

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="Ifd Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B21A20C8-B807-4795-996A-EB86DC7F56CF}]

@DACL=(02 0000)

@="ULXBDParser Class"

"AppID"="{8E781F9A-A63D-4F08-8A41-0E0C5C0B00BA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B232B7E5-94A4-44E3-8759-CD4490619FAB}]

@DACL=(02 0000)

@="ILXShareLog Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B2BF1F99-6825-4D09-BE10-AB205E299B2E}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B31C5FAE-961F-415b-BAF0-E697A5178B94}]

@DACL=(02 0000)

@="IE Microsoft Multiple AutoComplete List Container"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B32BC53D-0CD9-4D68-8BD8-C4D4050C6654}]

@DACL=(02 0000)

@="Typewriter Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B32F4002-BB27-45FF-AF4F-06631C1E8DAD}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B34093CE-D636-437D-BC03-B53ECA20DDF5}]

@DACL=(02 0000)

@="NMCdRipDiscAccessFactory Class"

"AppID"="{95B8D609-BC19-4221-A047-F94757910455}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b35354ff-7e4a-46a4-bf69-4d92c3d7787b}]

@DACL=(02 0000)

@="NMUIResourceLoaderHarddisk Class"

"AppID"="{3A5C0833-DCDC-4475-A9C0-FA742C18D9D5}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B415BA29-CDC8-4202-89F8-A9046145DC70}]

@DACL=(02 0000)

@="Config Class"

"AppID"="{E3E65E5B-5E91-49DE-9A79-770889AEECA2}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}]

@DACL=(02 0000)

@="WinRAR"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B4282392-EB00-4326-92E3-8CC0A02B9C8D}]

@DACL=(02 0000)

@="udfVolumeInfo Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B4346D2E-E989-49B1-B3AB-4506028194C6}]

@DACL=(02 0000)

@="DiscSource Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B43E6609-D589-4F81-A300-9EC6A272039C}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B4DE1A0A-7110-4D8F-9ECC-587B047AE6F0}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b512f94e-18af-4a79-b775-8945fcf1fedb}]

@DACL=(02 0000)

@="NMBAppPluginMediaBrowserVideo Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B54E85D9-FE23-499F-8B88-6ACEA713752B}]

@DACL=(02 0000)

"ContainerFormat"="{163BCC30-E2E9-4F0B-961D-A3E9FDB788A3}"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"ColorManagementVersion"="1.0.0.0"

"MimeTypes"="image/tiff,image/tif"

"FileExtensions"=".tiff,.tif"

"SupportAnimation"=dword:00000000

"SupportChromakey"=dword:00000001

"SupportLossless"=dword:00000001

"SupportMultiframe"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="TIFF Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B5926F16-C9F1-4821-915D-064C1BC3F558}]

@DACL=(02 0000)

@="LBD_MANGR Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b59512ac-8211-4472-a55b-f4e462ab6722}]

@DACL=(02 0000)

@="Slider Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B5B38D71-EE16-4F1F-BCDB-B5229AA34755}]

@DACL=(02 0000)

@="NCAudioPidInfo Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B5C8B898-0074-459F-B700-860D4651EA14}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{ED686F8E-681F-4C8B-BD41-A8ADDBF6B3FC}"

"RequiresFullStream"=dword:00000001

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="Interop Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B5EBAFB9-253E-4A72-A744-0762D2685683}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{568D8936-C0A9-4923-905D-DF2B38238FBC}"

"FixedSize"=dword:00000001

"SupportsPadding"=dword:00000000

"RequiresFullStream"=dword:00000000

"Author"="Microsoft"

"FriendlyName"="Chunk tEXt Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B6327404-9294-4C38-AD35-E074641CE7E6}]

@DACL=(02 0000)

@="NOSMyNeroRegistration Class"

"AppID"="{2A385E8B-5598-4227-A850-5FDD9697E2BA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B66834C6-2E60-11CE-8748-524153480004}]

@DACL=(02 0000)

@="Tab Property Page Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B6913798-10BF-430C-A26F-E6DEE22EB9BA}]

@DACL=(02 0000)

@="WMEncoderAgent Class"

"AppID"="{75EF9314-0B57-4A58-A255-4DD5F41520D8}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B6AF959B-17D1-449A-AA86-447F7AE3E2EC}]

@DACL=(02 0000)

@="Grayscale"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B6C70017-D66B-435A-B534-56971D9DC17B}]

@DACL=(02 0000)

@="Light edges"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b6cd4a6f-7555-4e3a-b7ed-e50a9b4c14ab}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b6e03708-c84b-452f-ab80-07d1218641a0}]

@DACL=(02 0000)

@="NMBActionPluginPlayXRTVideo Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B6E1ED43-EF40-469f-9273-076A1B33A5F8}]

@DACL=(02 0000)

@="NOSWeb Class"

"AppID"="{D32D6B65-38E6-4756-81ED-68AC9994D7B1}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b6e385e4-89fb-4274-992d-a8edddd05030}]

@DACL=(02 0000)

@="NMBAppPluginMediaBrowserHandle Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B70B4695-CC3C-4B76-B20C-AB991E00B771}]

@DACL=(02 0000)

@="NCLnb Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B71FB6D6-F646-48E9-87EC-1CB81066B359}]

@DACL=(02 0000)

@="AudioEffectLibrary.EqualizerPage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B7509D6F-85EE-11d0-AF7D-00C04FD8DC02}]

@DACL=(02 0000)

@="PDF File Persistent Handler"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B8887594-5107-460E-9336-15DB7B340524}]

@DACL=(02 0000)

@="ILdvdSubPicStreamEffect Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B94384BE-1434-42C8-A7C5-7DADD5CF4D2E}]

@DACL=(02 0000)

@="Sparkle"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B97537A4-8308-484C-AAE0-823C6BE17840}]

@DACL=(02 0000)

@="3D - Horizontal Spinning Strokes"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B992D196-B642-4B27-86CA-B87EE66FDF96}]

@DACL=(02 0000)

@="Burn In"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B9B9F083-2B04-452A-8691-83694AC1037B}]

@DACL=(02 0000)

@="LogiExt Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B9E594F3-1362-43D3-9328-9014F52DF7E4}]

@DACL=(02 0000)

@="AudioEffectLibrary.DeesserPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b9f8ac3e-0f71-11d2-b72c-00c04fb6bd3d}]

@DACL=(02 0000)

@="%PlugIn_IBasicAudio%"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ba012a6a-e58d-48aa-8c6e-6338561e1539}]

@DACL=(02 0000)

@="InvokeTest Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BA11F969-397A-4146-AC96-236C3D76711D}]

@DACL=(02 0000)

@="DivX Subtitle Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ba1709eb-6de5-48ff-8443-1b51629cf8aa}]

@DACL=(02 0000)

@="NMBAppGlobalSettingsTV_Card Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ba4d8a48-57dd-467a-9d99-503908714996}]

@DACL=(02 0000)

@="ControlUpdate Class"

"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BA8FA0D6-C5F1-4492-A25F-078FB704DE99}]

@DACL=(02 0000)

@="AudioEffectLibrary.StereoProcessorPage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BB0EDC32-1939-4004-AE58-B310B14D0946}]

@DACL=(02 0000)

@="Splash"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{bb107ba8-c685-48a7-bc43-1ed8f6c1677a}]

@DACL=(02 0000)

@="PlayLoopedButton Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BB32FBED-A8CC-41A8-8A15-3F6D5E3D25C7}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BB37EFA1-7BA6-437D-99AA-16E023451DE2}]

@DACL=(02 0000)

@="ULXDiscCompiler Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{bb58849b-79e4-4607-9f20-8e41626db623}]

@DACL=(02 0000)

@="NMBAction Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC07DA8B-262D-42DD-BE69-1090E3D61479}]

@DACL=(02 0000)

@="NeroSearchFilterModificationTime Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC08386A-9952-40CD-BA50-9541D64A4B4E}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC0FDBFF-1075-4E6B-ABB6-70DF437EDB25}]

@DACL=(02 0000)

@="Mirror: Horizontal"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC198A31-AD6F-4475-AE87-537A050EA53F}]

@DACL=(02 0000)

@="ArcSoft Realtime Capture Encoder Filter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC198A32-AD6F-4475-AE87-537A050EA53F}]

@DACL=(02 0000)

@="ArcSoft Realtime Capture Encoder Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC29A660-30E3-11d0-9E69-00C04FD7C15B}]

@DACL=(02 0000)

@="WDM Streaming VPE Property Set Interface Handler"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC5C2E00-D852-47EF-B170-60B095D16586}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC91CA41-D7BA-4EAB-A416-0469496CBA3C}]

@DACL=(02 0000)

@="DXBridge.DXPropSheet"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{bc91ed21-e702-44e5-aa88-9f2f70e986c6}]

@DACL=(02 0000)

@="UserDlgHandler Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BC939A5D-2009-4A06-A97B-2FF7CF7D9D0D}]

@DACL=(02 0000)

@="AudioEffectLibrary.SurroundReverbPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD198FBE-F48F-4B2F-98A2-49E30BA3BB3E}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD20C278-FA54-4F7D-8930-1ED3CEF2C1E5}]

@DACL=(02 0000)

@="SubPicTimerStream Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD25C9E9-DD7C-4ECC-8DF8-C526BB751C45}]

@DACL=(02 0000)

@="NBCalendar Control 3"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD351036-74A1-4904-AB72-5625C8E9CB18}]

@DACL=(02 0000)

@="DCdBuilder Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD51FC13-DF3E-4DF5-93F7-0B2CA9D86B0C}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD606F29-5B18-4FAF-9853-7F02CCE1E853}]

@DACL=(02 0000)

@="EIO Manager"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{bd87748e-31c3-4224-9f2e-3374671e85f7}]

@DACL=(02 0000)

@="NMVideoContentHandler Class"

"AppID"="{5BB9749E-DD3F-459F-8865-64A208D020EA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BD8C6EB6-9190-4A6E-AD56-9FB41F9491BA}]

@DACL=(02 0000)

@="ArcSoft MP4Muxer Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BDB77E7A-D94E-4ccc-9B73-F7DBB4FFED97}]

@DACL=(02 0000)

@="NMTTranscode0DirectShowDefaultSessionFactoryInProc Class"

"AppID"="{29EB903B-19F4-4F20-959A-87AD70EFD39B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}]

@DACL=(02 0000)

@="Microsoft Tabbed Dialog Control 6.0 (SP5)"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BDC9B245-12B2-44C6-A884-5C0B5075F53E}]

@DACL=(02 0000)

@="BackWeb Client Files Access Via Directory"

"AppID"="{BDC9B245-12B2-44C6-A884-5C0B5075F53E}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BE27DE18-F318-41B2-AFCC-F28702278684}]

@DACL=(02 0000)

@="AudioEffectLibrary.VoiceTweakerPage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{be63d0b5-b390-491f-9b21-8dd9a8fa4bba}]

@DACL=(02 0000)

@="NMBAppGlobalSettingsFavouriteTransitions Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{be948da6-a8e7-4c66-ab0c-3015fce93e00}]

@DACL=(02 0000)

@="TransformGUIConnect Class"

"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BEE5207B-14CC-4435-A763-E389A1405E66}]

@DACL=(02 0000)

@="ULXDVDStream Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF27441E-CDCD-4659-AEBE-06F6E069714E}]

@DACL=(02 0000)

@="Screen Capture Filter Task Page"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF3128DD-55B8-11D4-8ED4-00E07D815373}]

@DACL=(02 0000)

@="MBProgressBar.ProgressBar"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF3128E6-55B8-11D4-8ED4-00E07D815373}]

@DACL=(02 0000)

@="MBProgressBar.pagGeneral"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF36E503-6CF5-4B18-9B59-A91868AA2237}]

@DACL=(02 0000)

@="Nero FilterInfo Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{bf404da2-7d3b-11d3-b9e5-00c04f79e399}]

@DACL=(02 0000)

@="RstrProgress Class"

"AppID"="{4E5C175A-7DB9-11D3-B9E5-00C04F79E399}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF53F2AF-4E62-4986-BA1B-ECC1816BFDB7}]

@DACL=(02 0000)

@="LdsStmRead Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF61440A-CE30-44EB-A854-44426449D21D}]

@DACL=(02 0000)

@="Straight Scroller"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF8C5A0F-C6DA-44A5-915E-B07D47295EB3}]

@DACL=(02 0000)

@="AudioEffectLibrary.MultiTapDelayPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BF90FB01-D663-4421-8F5F-9B83C3606B9A}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A}]

@DACL=(02 0000)

@="IE Shell Rebar BandSite"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BFCB490B-B2A4-401D-AEE1-C0CDB1474DD1}]

@DACL=(02 0000)

@="Nero Scout Control"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BFCB965B-580B-45F3-B13D-A2329DEDFC03}]

@DACL=(02 0000)

@="Popping Characters"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c0275218-f46e-4597-9a6b-9c3bd0755628}]

@DACL=(02 0000)

@="NMCFStringStringDictionary Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c04936b1-c7ca-4bb9-9d60-74841fbb3893}]

@DACL=(02 0000)

@="NMDSUriAccessProviderGetObjectMetaData Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c04f1516-2630-48c5-986d-7a84f4ead92f}]

@DACL=(02 0000)

@="BrowseButton Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C071C982-2EB2-4D3A-9821-E4B31B0142C8}]

@DACL=(02 0000)

@="Scheme Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c17bc5f7-ba71-46be-88e2-6b7b04e1740b}]

@DACL=(02 0000)

@="NMHDSPluginRadioChannels Class"

"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C17CABB2-D4A3-47D7-A557-339B2EFBD4F1}]

@DACL=(02 0000)

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"FriendlyName"="N-Channel Format Converter"

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c18d5e87-12b4-46a3-ae40-67cf39bc6758}]

@DACL=(02 0000)

@="WinFX Bootstrapper for .xps"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C21B45B8-5D76-4575-BA27-54823098C491}]

@DACL=(02 0000)

@="IE Microsoft Docking Bar Property Bag"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2316705-49F3-46a6-B178-FD617FA235D8}]

@DACL=(02 0000)

@="LmpgInfo Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C27BB47A-8823-4613-8C32-ADEBB5959985}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2A17604-1C2D-4096-BC73-7A2FD9B2FFAB}]

@DACL=(02 0000)

@="Mirror: Vertical"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2A723EC-9C68-42C6-9BEA-52D103661409}]

@DACL=(02 0000)

@="NMBGMonitorControl Class"

"AppID"="{9485CA40-B927-4F13-8D97-D36ACBFE6B9E}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c2bfc7d6-fb81-478d-a590-d428533751d5}]

@DACL=(02 0000)

@="NMSSEffect0AnimationFactory Class"

"AppID"="{0A399995-8A84-484A-8A58-1492BF805F91}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2BFE331-6739-4270-86C9-493D9A04CD38}]

@DACL=(02 0000)

@="DisplayConfig Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c2c4f00a-720e-4389-aeb9-e9c4b0d93c6f}]

@DACL=(02 0000)

@="InformationCardElementBehaviorFactory Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2C99FA5-CA27-4ee2-804D-04E0054414C0}]

@DACL=(02 0000)

@="BackWeb ClientExt Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2D44141-7563-11D5-8C11-0050BA17CEE2}]

@DACL=(02 0000)

@="CyberLink Load Image Property"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C2F1EEE2-9120-459C-8089-F54C9E15B886}]

@DACL=(02 0000)

@="ULXDirectCD Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C332C124-340D-4430-AA0D-C75602876FCC}]

@DACL=(02 0000)

@="CUIPower Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c3bd2e3f-45c6-45f6-94ab-2706b0f185a1}]

@DACL=(02 0000)

@="NMHDSPluginDevicesDV Class"

"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C447080C-D0C3-48AE-B31E-BB3E93591C69}]

@DACL=(02 0000)

@="WMEnc DV Timecode Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C4534263-0195-4053-9294-E913443A5F8D}]

@DACL=(02 0000)

@="NeroRCManager Class"

"AppID"="{CB0CCC20-210B-454E-88F8-0BDAD40A4060}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C47B04A8-266F-4977-9EA7-C1F9580E38F7}]

@DACL=(02 0000)

@="NMDSUriAccessProviderSetObjectThumbnail Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C482F15A-1498-4AE8-94A9-4DE5E58DFEBF}]

@DACL=(02 0000)

@="Nero Scout Cleanup"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C48DEE99-A419-47B9-878D-586DB7A42775}]

@DACL=(02 0000)

@="AudioEffectLibrary.ReanaloguePage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c49a347e-3469-4c86-9811-5b98106178fa}]

@DACL=(02 0000)

@="NMFullTextRtfExtractor Class"

"AppID"="{2394E7B8-EA93-4731-B99D-F747EDC8DCFA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C4B8CA0E-4270-4C7A-B0E3-0B9F0F0A336F}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C4EB6B0E-D072-4FA1-915A-3F60A18D1A3A}]

@DACL=(02 0000)

@="Vertical Flipping Characters"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C50CD0A8-3818-4942-8480-E5D988BA65AC}]

@DACL=(02 0000)

@="NOSWebDirectory Class"

"AppID"="{D32D6B65-38E6-4756-81ED-68AC9994D7B1}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5799BF6-11A3-484A-9897-0B3CD4828F6D}]

@DACL=(02 0000)

@="Acid"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5C4B2C9-D6A0-4865-B947-F718BD8070B6}]

@DACL=(02 0000)

@="Arcsoft WMV/ASF Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5C99024-3A99-4097-AD4E-79C25FFF1C46}]

@DACL=(02 0000)

@="ControlDeviceMapper.ControlMapper"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5E265B5-7573-4CC8-A316-ED0522CD6C60}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5F9370B-E232-464F-BE29-A885B1248193}]

@DACL=(02 0000)

@="ArcSoft H.264 Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5FACC37-F8C4-4849-8AAB-1553CDAEB59B}]

@DACL=(02 0000)

@="Duotone"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C5FEF23A-14D1-431A-93FF-BD45376FF6AB}]

@DACL=(02 0000)

@="AudioEffectLibrary.DummyEffect"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C61BFCDF-2E0F-4AAD-A8D7-E06BAFEBCDFE}]

@DACL=(02 0000)

"ContainerFormat"="{A3A860C4-338F-4C17-919A-FBA4B5628F21}"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"ColorManagementVersion"="1.0.0.0"

"MimeTypes"="image/ico,image/x-icon"

"FileExtensions"=".ico,.icon"

"SupportAnimation"=dword:00000000

"SupportChromakey"=dword:00000001

"SupportLossless"=dword:00000001

"SupportMultiframe"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="ICO Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C65055FA-6F66-41B4-8BEC-3929901F8275}]

@DACL=(02 0000)

@="SoundBox Control"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C6606CA5-2108-4CAF-8E52-1953F2DBF716}]

@DACL=(02 0000)

@="PropSet Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C6CF6703-29E5-4E29-B0FB-ABDF8D04A00C}]

@DACL=(02 0000)

@="Arcsoft Mpeg2Audio Encoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C6F6CFC2-870A-4B26-94B7-3539820B0256}]

@DACL=(02 0000)

@="Smoke"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c6f7158b-a330-474c-b76e-ecf14355aaba}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c7011688-e0cb-4e31-9098-d0b58c609eea}]

@DACL=(02 0000)

@="NMEPGEventDataSet Class"

"AppID"="{E731128E-C2D4-4A25-94B9-FEF94F6997B9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c736d415-dc5f-459e-9985-024661738b68}]

@DACL=(02 0000)

@="NMBAppPluginSettings Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C740F918-D49B-46F6-BF79-B237B24F4181}]

@DACL=(02 0000)

@="3D - Flying Quads"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c742dd90-a95a-4874-888a-d1fcb00deb16}]

@DACL=(02 0000)

@="NMBAppPluginAdvancedSearch Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C79C3183-D7F7-439A-98CC-33906A691708}]

@DACL=(02 0000)

@="Gamma correction"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7C1034B-7F25-4BE4-BCDA-4EC86D22AA9D}]

@DACL=(02 0000)

@="AudioEffectLibrary.PitchBenderPage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7D29C02-0584-40E8-82A2-61E9D2CB0589}]

@DACL=(02 0000)

@="Dance Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7E786B3-38E7-45E5-9478-76DCE73FF5DA}]

@DACL=(02 0000)

@="Text fly upwards"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C7FA08F8-567F-421D-B001-7C4177929597}]

@DACL=(02 0000)

@="Nero QuickTime™ Audio Decoder Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C8059EB6-D2FC-4ecf-A15F-AF427F5E4DB6}]

@DACL=(02 0000)

@="Feeds Background Sync"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c8a0f376-c4d0-496d-9be2-86a8f4c4159c}]

@DACL=(02 0000)

@="NMBActionPluginPlayXRTTVFactory Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C8B1CBD0-6386-4292-B10D-69A389D8EA2E}]

@DACL=(02 0000)

@="NOSWebCommunityExportDialog Class"

"AppID"="{2360A21B-6EDC-4524-A570-AAF72EDAF233}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{c8e108ef-90b4-49ea-8bc0-dbcc07e4e286}]

@DACL=(02 0000)

@="NMBAppGlobalSettingsBurnVideo Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C8F48908-55A1-4719-81D7-4F03275F3F0B}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9460283-3EED-11D0-A647-00A0C91EF7B9}]

@DACL=(02 0000)

@="ImageViewerCP 2.5"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9460284-3EED-11D0-A647-00A0C91EF7B9}]

@DACL=(02 0000)

@="ImageViewerCP 2.5 Property Page"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9614C1F-85CC-4BF2-97DA-E0B8DEF4A49C}]

@DACL=(02 0000)

@="Dance Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C96FAF0D-38FA-4E40-AD29-9BFC1ACFBB02}]

@DACL=(02 0000)

@="Color Filter: Blue"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C99422F2-7157-4563-ACA1-16B9F9BA95A4}]

@DACL=(02 0000)

@="Ulead MP3 Encoder Property Page"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9A14CDA-C339-460B-9078-D4DEBCFABE91}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{1C3C4F9D-B84A-467D-9493-36CFBD59EA57}"

"RequiresFullStream"=dword:00000001

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="Exif Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9CD1A93-D7B4-11D2-80C5-00104B1F6CEA}]

@DACL=(02 0000)

@="InstallShield setup user interafce"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{C9FBE3DE-662A-4ED1-81B8-04D5AEB4335F}]

@DACL=(02 0000)

@="AudioEffectLibrary.VolumePage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA0F26EA-FC00-437F-9841-5B529DDCD615}]

@DACL=(02 0000)

@="NFDSessionBrowser Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA362417-D620-4A52-B767-B9357FBBF1C4}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA5B7520-9B16-4952-BC02-80B0082D2030}]

@DACL=(02 0000)

@="Reverse Rotate Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA602B8D-D77D-4e93-8D6A-87B9F1264BA7}]

@DACL=(02 0000)

@="NMVideoContentHandlerVMR9 Class"

"AppID"="{5BB9749E-DD3F-459F-8865-64A208D020EA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ca615804-dbeb-4d42-bd9e-7d0ca4b3c24b}]

@DACL=(02 0000)

@="Cube Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA682A65-16E0-4692-946D-2DC00EF1DF0F}]

@DACL=(02 0000)

@="NMiTunesIntegrationService Class"

"AppID"="{67FE5B0C-E921-4A9B-9612-4D8C1188F28C}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CA6B2E64-9FBF-48AF-BCAC-21A795CFCA9C}]

@DACL=(02 0000)

@="AudioEffectLibrary.ConvolutionReverbPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ca965a82-a63e-4b1f-848c-495e450ac6d1}]

@DACL=(02 0000)

@="NMBAppPluginMediaBrowserPlaylists Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CAA52C33-E721-449A-AC7B-FE2DFFA658D1}]

@DACL=(02 0000)

@="Nero Subtitle Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CACAF262-9370-4615-A13B-9F5539DA4C0A}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cb069c2c-53fc-4aeb-9805-43857e2059e3}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CB376549-DD5A-461D-8C73-D4BB386DC813}]

@DACL=(02 0000)

@="NCAudioDevice Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CB676F53-F526-461B-8A56-7D354A3C9AAB}]

@DACL=(02 0000)

@="Distortion - Twirl"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CB8C13E4-62B5-4C96-A48B-6BA6ACE39C76}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{7134AB8A-9351-44AD-AF62-448DB6B502EC}"

"RequiresFullStream"=dword:00000001

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="Gps Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cbbd10c7-f6eb-4c73-a894-5499e2c55b46}]

@DACL=(02 0000)

@="NMDSVolumeIdPathMapper Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC0CA09A-5B84-43F2-BE5C-9169C192565F}]

@DACL=(02 0000)

@="RTLCSSAPI Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC0CA09A-5B84-43F2-BE5C-9169C192565F}\Programmable]

@DACL=(02 0000)

@=""

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC350820-EB63-4308-BC92-F6795B499128}]

@DACL=(02 0000)

@="NOSHttpCookie Class"

"AppID"="{2E82C0B4-3147-4A6E-AF24-A1992108C420}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC7BFB46-F175-11D1-A392-00E0291F3959}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC956901-F2FF-492E-AFA8-214AFC267C15}]

@DACL=(02 0000)

@="NeroInFDiscCopyServer Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CC98AEC5-E5DE-4b12-ABC2-059C481B2211}]

@DACL=(02 0000)

@="NOSMyNeroAccount Class"

"AppID"="{2A385E8B-5598-4227-A850-5FDD9697E2BA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cccf8f47-9400-49be-bc1d-141580118d47}]

@DACL=(02 0000)

@="NMBAppPluginMediaBrowserAutoStart Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CD737E2E-FB63-4041-B47B-5A0246F3DA73}]

@DACL=(02 0000)

@="NCGraphManagerAnalog Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CD7C317C-51D9-4115-964F-D3F8375763CC}]

@DACL=(02 0000)

@="GCAsyncSrc"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cdf2dc2a-6ef6-4806-a4a8-c1878db3ae1a}]

@DACL=(02 0000)

@="NMCFStringVariantDictionary Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CE5DDB65-7BB6-496E-8735-79076C7CFAF4}]

@DACL=(02 0000)

@="NFDSessionBrowser Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cf43bc7b-9664-4e1e-a3a2-ae56adff6159}]

@DACL=(02 0000)

@="NMBActionPluginShowImages Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{cf728626-846f-41e6-a8fd-6d27a439bc72}]

@DACL=(02 0000)

@="NMCFSettings Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CF957FA0-77FE-4192-A59F-95CA43BD04BA}]

@DACL=(02 0000)

@="ULead File Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CFADDED4-2A35-4A0F-B8C9-4973F94A573E}]

@DACL=(02 0000)

@="VobuIdx Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{CFD9633F-C4D4-49EB-A8F6-976C16D782C4}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[Damon(V)]

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D049B20C-5DD0-44FE-B0B3-8F92C8E6D080}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{243DCEE9-8703-40EE-8EF0-22A600B8058C}"

"RequiresFullStream"=dword:00000001

"FixedSize"=dword:00000001

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="Thumbnail Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D050D736-2D21-4723-AD58-5B541FFB6C11}]

@DACL=(02 0000)

@="DivXContentUploadPlugin Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D05F9FC4-7E34-45AE-947A-2576B8DAD5CE}]

@DACL=(02 0000)

@="NeroSearchFilterFolder Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D12C8A94-E72F-4224-BFBA-2DEB97EA3360}]

@DACL=(02 0000)

@="Nero Audio Transcoder Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D19355DC-9045-4B3A-B321-1710330B5AB8}]

@DACL=(02 0000)

@="ULXSVCDDiscCompiler Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D1AF3A1D-EE0A-4C81-BB5B-B515CEE463E7}]

@DACL=(02 0000)

@="Color Filter: Green"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d1b2ebcf-62ea-4e04-a5fd-31e7d62db98d}]

@DACL=(02 0000)

@="NMBApplicationDispatc0 Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d1cb2121-8923-4000-81b8-3d6606e14c01}]

@DACL=(02 0000)

@="NMBActionPluginBurn Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d1f939f1-7f06-4c85-bd92-fc1c3212671e}]

@DACL=(02 0000)

@="RedoButton Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d222981d-3e71-4d7b-9dfc-e1dc6f0941f8}]

@DACL=(02 0000)

@="NMCFSTAServices Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d23b90d0-144f-46bd-841d-59e4eb19dc59}]

@DACL=(02 0000)

@="WMVideo Advanced Encoder DMO"

"WMSDKMerit"=dword:00000100

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d29a1deb-95eb-490c-bdc6-2efe1bfe896d}]

@DACL=(02 0000)

@="NMHDSPluginDevicesDrives Class"

"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d304199a-4ee9-456a-b3bf-4dc62ace4a96}]

@DACL=(02 0000)

@="NMUIScripting Class"

"AppID"="{BF9365C8-57A5-4365-BDC1-AA7763CD494C}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D320EDB6-6545-412F-9514-C6765BD0B1C4}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D335C1B3-FA6A-4014-B256-CC745CB8C2C2}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D39F8A6E-F96F-11D2-9AEC-00A0C95AC349}]

@DACL=(02 0000)

@="Logitech MouseWare - Browser Collection"

"AppID"="{D39F8A62-F96F-11D2-9AEC-00A0C95AC349}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D3D6BB70-C79B-42B7-8C7B-630743D38DB9}]

@DACL=(02 0000)

@="Horizontal Spin Slice"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d3eaa2fe-d4c0-4e72-aee4-6b2a7c4aa978}]

@DACL=(02 0000)

@="NMB0ollectionFactory Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4082021-53DE-4F13-8334-7D5D70D50EC1}]

@DACL=(02 0000)

@="BCGPOleAcc.BCGPPopupMenuAcc2"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4202D1F-8377-4F7D-BDBB-7D77FE4E34C5}]

@DACL=(02 0000)

@="Nero InteractiveGraphics Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D436AA54-CDDA-47D7-8AB8-C18302B3B6E7}]

@DACL=(02 0000)

@="NCPmtPidInfo Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4AD8206-C45B-4240-A090-E063A222B66C}]

@DACL=(02 0000)

@="NeroVideoItems Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4C09F9E-F464-4e80-9F70-63E306799C8B}]

@DACL=(02 0000)

@="NMINetSubscribeInfo Class"

"AppID"="{1287EB79-BA58-4385-A65E-0CA8F82C47B0}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4CAFD1F-8AE4-4270-87C6-E27C7AE13721}]

@DACL=(02 0000)

@="Space Scroller"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4DCD3D7-B4C2-47D9-A6BF-B89BA396A4A3}]

@DACL=(02 0000)

"SpecVersion"="1.0.0.0"

"Version"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{16100D66-8570-4BB9-B92D-FDA4B23ECE67}"

"RequiresFullStream"=dword:00000000

"SupportsPadding"=dword:00000000

"Author"="Microsoft"

"FriendlyName"="IRB Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D4FA3D4E-BE69-11D4-AA30-00902704C6BF}]

@DACL=(02 0000)

@="DataObject Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5028632-9B7D-4198-95B7-D92DA3234904}]

@DACL=(02 0000)

@="AudioEffectLibrary.NoiseGatePlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5073D4E-FF32-4AF9-ADAC-3D358C9D2F5D}]

@DACL=(02 0000)

@="Closed Caption"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D570F8AA-FBB9-4CD3-AE27-CFE80140F27A}]

@DACL=(02 0000)

@="Transform"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D57917F3-1001-43BB-B479-CE1CA2F78B49}]

@DACL=(02 0000)

@="AudioEffectLibrary.SurroundReverbPage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D588370C-E215-486F-CE29-A875D12480AF}]

@DACL=(02 0000)

@="ArcSoft MPEG4 Decoder Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D588370C-E232-464F-CE29-A875D12480AF}]

@DACL=(02 0000)

@="ArcSoft H.263 Decoder Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d5b0bbd3-3ae6-4366-8c83-a7e0ce4162b6}]

@DACL=(02 0000)

@="NMBAppPluginSearchPanel Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5C3C622-391A-49FB-B58F-D72B7A8FC7C1}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5CBFE52-930B-47B5-99E5-CB6D67834B3D}]

@DACL=(02 0000)

@="GCOSD"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370B-E232-464F-BE29-A885B1248093}]

@DACL=(02 0000)

@="ArcSoft MPEG Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370B-E232-464F-BE29-A885B1249191}]

@DACL=(02 0000)

@="ArcSoft TS Stream"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370C-E232-464F-BE29-A885B1248098}]

@DACL=(02 0000)

@="Arcsoft AMREncoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370C-E232-464F-BE29-A885B1248099}]

@DACL=(02 0000)

@="Arcsoft AMRDecoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370C-E232-464F-BE29-A885B124809F}]

@DACL=(02 0000)

@="ArcSoft MPEG4 Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D5F9370E-E232-464F-BE29-A885B1248098}]

@DACL=(02 0000)

@="AMREncoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d6712690-639f-4491-a88a-86b2346c5761}]

@DACL=(02 0000)

@="NMBAppPluginExportSlideshow Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}]

@DACL=(02 0000)

@="Portable Devices Menu"

"LocalizedString"=expand:"@%SystemRoot%\\System32\\WPDShextRes.dll,-511"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d68ef766-a220-46ba-9aaa-5e37ddd51328}]

@DACL=(02 0000)

@="NMSearc0PluginMediaLibrarySource Class"

"AppID"="{163F5B1A-3689-445F-8A0F-E6246DF74F19}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D7384E88-60EF-40E8-BF46-B4849D9A4736}]

@DACL=(02 0000)

@="AudioEffectLibrary.ConvolutionReverbPage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d74049dd-2208-4b7a-9b33-60476f2ce8c6}]

@DACL=(02 0000)

@="NMPCContentHandlerFactoryExample Class"

"AppID"="{8E1EAC0D-E841-4FA9-8696-9C4894F4D307}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D764FB17-666B-499A-99CD-809CB3C976EB}]

@DACL=(02 0000)

@="Nero Photo Source"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d7b847e1-3e20-4f63-92ba-4f8f734ac8bb}]

@DACL=(02 0000)

@="VirtualSurroundPage Class"

"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D7BCD582-12D9-41DE-A0DD-1140A140D8C3}]

@DACL=(02 0000)

@="ULXOnDiscFileBasedCaptureDVDDiscCompiler Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D7E9CB06-FD18-490F-BB58-B99C2353E97D}]

@DACL=(02 0000)

@="ArcSoft AC3 Audio Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d80699af-3c19-4ff6-8354-6b3cc095b622}]

@DACL=(02 0000)

@="NeFSGenericEvent Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8168F07-F09B-444B-AFF4-11A138CB3751}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d83d395f-2900-4da2-ad4b-a3a657e43860}]

@DACL=(02 0000)

@="NMBActionPluginBurnCDAHandle Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8705FEA-3AAC-4A82-BE72-C41AB9EDA76C}]

@DACL=(02 0000)

@="ScratchBox Control"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D897A894-0E8B-4AD3-A422-182399E88AB7}]

@DACL=(02 0000)

@="MoveInTransition"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8B4B4EB-58A7-483A-8CA4-3DCB66FC48D7}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d8b60741-b1c3-4b80-bda3-a6b5b5cb72b1}]

@DACL=(02 0000)

@="NMBDirectoryPluginScheduledTVRecordings Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D8C6F225-8CC8-428A-8519-6FA175DDF52E}]

@DACL=(02 0000)

@="Teletext"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D9044CE1-CC5F-4AC2-BF94-EAB77098AE86}]

@DACL=(02 0000)

@="Pixelate"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D90B2379-6FE7-4319-9E78-0BBDE763747B}]

@DACL=(02 0000)

@="Multiply"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D9403860-297F-4A49-BF9B-77898150A442}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{1C3C4F9D-B84A-467D-9493-36CFBD59EA57}"

"RequiresFullStream"=dword:00000001

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="Exif Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D95F404D-82C1-44FC-A0E4-0E080975B283}]

@DACL=(02 0000)

@="Nero Thumbnail Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D960A3E9-FF13-46B3-8A8A-2F6F6F9D1FFD}]

@DACL=(02 0000)

@="DiscSysInfo Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d99e1d4a-42b7-4c95-9c28-367bbed05c27}]

@DACL=(02 0000)

@="NMDSDirAccProviderGetFindFileEnumerator Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D9B80BE3-DCBA-4856-A097-0731B2FCB0AB}]

@DACL=(02 0000)

@="Nero Resize Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d9f2bcc3-8b9f-4848-a82f-b7490ae5717e}]

@DACL=(02 0000)

@="NMBAppGlobalSettingsSetupWizard Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{d9ff985d-8575-418c-8350-01a39f4e12bc}]

@DACL=(02 0000)

@="NMDSPlaylistManager Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA1923A5-2F78-4f8a-9530-6DFDD6D922ED}]

@DACL=(02 0000)

@="NMTProfileHelperFactory Class"

"AppID"="{29EB903B-19F4-4F20-959A-87AD70EFD39B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA365E3B-0E2E-40FF-B38E-A59A709F1F04}]

@DACL=(02 0000)

@="ulCache Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4D7D80-70BE-4D53-B1FB-D53C907391D3}]

@DACL=(02 0000)

@="Text Fly downwards"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{00000001-E965-440D-9C3E-E04704629F99}]

@DACL=(02 0000)

"FriendlyName"="Nero Digital"

"CLSID"="{00000001-E965-440D-9C3E-E04704629F99}"

"Merit"=dword:00600000

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{0A4252A0-7E70-11D0-A5D6-28DB04C10000}]

@DACL=(02 0000)

"CLSID"="{0A4252A0-7E70-11D0-A5D6-28DB04C10000}"

"FriendlyName"="WDM Streaming Tee/Splitter Devices"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{2721AE20-7E70-11D0-A5D6-28DB04C10000}]

@DACL=(02 0000)

"CLSID"="{2721AE20-7E70-11D0-A5D6-28DB04C10000}"

"FriendlyName"="WDM Stream Decompression Devices"

"Merit"=hex:00,00,64,00

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{2EB07EA0-7E70-11D0-A5D6-28DB04C10000}]

@DACL=(02 0000)

"CLSID"="{2EB07EA0-7E70-11D0-A5D6-28DB04C10000}"

"FriendlyName"="WDM Streaming Data Transforms"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{65E8773D-8F56-11D0-A3B9-00A0C9223196}]

@DACL=(02 0000)

"CLSID"="{65E8773D-8F56-11D0-A3B9-00A0C9223196}"

"FriendlyName"="WDM Streaming Capture Devices"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{65e8773e-8f56-11d0-a3b9-00a0c9223196}]

@DACL=(02 0000)

"CLSID"="{65e8773e-8f56-11d0-a3b9-00a0c9223196}"

"FriendlyName"="WDM Streaming Rendering Devices"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{AD809C00-7B88-11D0-A5D6-28DB04C10000}]

@DACL=(02 0000)

"CLSID"="{AD809C00-7B88-11D0-A5D6-28DB04C10000}"

"FriendlyName"="WDM Streaming Mixer Devices"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{CF1DDA2C-9743-11D0-A3EE-00A0C9223196}]

@DACL=(02 0000)

"CLSID"="{CF1DDA2C-9743-11D0-A3EE-00A0C9223196}"

"FriendlyName"="WDM Streaming Communication Transforms"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{CF1DDA2D-9743-11D0-A3EE-00A0C9223196}]

@DACL=(02 0000)

"CLSID"="{CF1DDA2D-9743-11D0-A3EE-00A0C9223196}"

"FriendlyName"="WDM Streaming Interface Transforms"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DA4E3DA0-D07D-11d0-BD50-00A0C911CE86}\Instance\{FBF6F530-07B9-11D2-A71E-0000F8004788}]

@DACL=(02 0000)

"CLSID"="{FBF6F530-07B9-11D2-A71E-0000F8004788}"

"FriendlyName"="WDM Streaming System Devices"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dad8fbc7-c658-44ec-b97d-52a7a56470f6}]

@DACL=(02 0000)

@="NMPCSVCDContentHandlerFactory Class"

"AppID"="{41FA2214-273A-46D7-8B96-CA64C554296F}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{daef7299-1527-4e92-ac9c-2272f9fb74a9}]

@DACL=(02 0000)

@="NMBActionPluginPlayTVFactory Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DB179E3B-408D-4EAD-A6FD-DF51D3FA2398}]

@DACL=(02 0000)

@="Nero Search Tray Icon"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{db5d4c3b-02e3-4cbb-9f96-c5dcaf2b6a03}]

@DACL=(02 0000)

@="NMHDSPluginDVDs Class"

"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{db6ce926-eaf7-45e6-883f-70b7553ae922}]

@DACL=(02 0000)

@="NMBAppGlobalSettingsSlideShow Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{db76d02e-50bb-4ec3-be1a-89b35cbe273a}]

@DACL=(02 0000)

@="NMBDirectoryPluginCreateSnapshot Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DB85C504-C730-49DD-BEC1-7B39C6103B7A}]

@DACL=(02 0000)

@="MShellExtMenu Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DBBCE449-2EF5-4A11-B1A9-5FD3F72F3C98}]

@DACL=(02 0000)

@="ILXShareLog Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DBFD2065-9874-4D07-A46C-A1E11F7204C6}]

@DACL=(02 0000)

@="ArcSoft H.264 Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DBFD2065-9874-4D07-A46C-A1E11F7207C7}]

@DACL=(02 0000)

@="ArcSoft H.264 Decoder Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC377543-0DAB-4737-87DF-A7BB78769370}]

@DACL=(02 0000)

@="LdvdRecorder Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC4DF788-5659-4981-A785-2A0ED2F22D40}]

@DACL=(02 0000)

@="AACEncoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC651A43-0720-4a2b-9971-BD2EF1329A3D}]

@DACL=(02 0000)

@="IE Component Categories conditional cache daemon"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DC70C4A5-2044-4c59-B806-DEFB9AE0DF7C}]

@DACL=(02 0000)

@="KbLogiExt Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DCB2D492-5F4F-4378-8FF4-DA87062D42E3}]

@DACL=(02 0000)

@="OpenGL Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DCBF3D8D-4BF2-4BCE-9540-F0E6F5BFEE13}]

@DACL=(02 0000)

@="Wipe Right"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dcc7c435-c7c2-460d-a3b0-5aa18c0efc6f}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dcdbc3ae-f8d6-43e5-9775-8a0c7eab9626}]

@DACL=(02 0000)

@="NMBAppPluginMain Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dd14ca6e-392e-45f7-8a91-9ba7609d5575}]

@DACL=(02 0000)

@="NMOEMCustomisatio0 Class"

"AppID"="{AB6AA495-ECA6-4036-8F5B-99B641DF2CC3}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DD7F2ECE-30BE-4E1B-A7A7-305B97625792}]

@DACL=(02 0000)

@="Text Fly downwards"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DD859D70-6E45-4064-914F-3FACBFA7BFB9}]

@DACL=(02 0000)

@="NCCaptureApiSetup Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDA11344-AB20-4AEC-94C4-6AA091574CD0}]

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDBE68A3-F53E-4E2D-B5AF-578F4302C032}]

@DACL=(02 0000)

@="Add pixel"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ddc43479-0f91-420a-a0aa-ca01a6665656}]

@DACL=(02 0000)

@="PauseButton Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDC5917C-D736-49F8-9F81-6D49FEFDDBB0}]

@DACL=(02 0000)

@="NeroSearchEnumUnknown Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DDE33513-774E-4BCD-AE79-02F4ADFE62FC}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{8FD3DFC3-F951-492B-817F-69C2E6D9A5B0}"

"RequiresFullStream"=dword:00000000

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="App1 Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE030813-DB68-4605-898B-6B96E999DE31}]

@DACL=(02 0000)

@="Wobble"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE05ACD8-E76E-4BE2-A522-7D734FAFD072}]

@DACL=(02 0000)

@="NeroFileSystemTrackOptions Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{de88bc2f-09c2-4ac0-aead-748c823b719f}]

@DACL=(02 0000)

@="NMFullTextMSHtmlExtractor Class"

"AppID"="{2394E7B8-EA93-4731-B99D-F747EDC8DCFA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DEC52F0B-696A-47F6-8966-EB98B3769897}]

@DACL=(02 0000)

@="Posterize"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF03AA96-1265-441E-BA8A-2A4F482AA672}]

@DACL=(02 0000)

@="ArcSoft MP4Muxer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF03AA97-1265-441E-BA8A-2A4F482AA672}]

@DACL=(02 0000)

@="ArcSoft MP4Muxer Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF2FCE13-25EC-45bb-9D4C-CECD47C2430C}]

@DACL=(02 0000)

@="CUri"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DF5F4E46-D041-416C-B77E-6F8E662E2734}]

@DACL=(02 0000)

@="ULXOnDiscDVDDiscCompiler Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E00238C7-396B-4718-9781-B804A41D6072}]

@DACL=(02 0000)

@="NCGraphManagerDv Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e03d7b52-205a-40ba-9d46-ea307ee88916}]

@DACL=(02 0000)

@="NMBMinimizedTask Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E05592E4-C0B5-11D0-A439-00A0C9223196}]

@DACL=(02 0000)

@="Plug In Distributor: IKsQualityForwarder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E061ECC4-E2B1-4672-A2BE-C23C01F8326F}]

@DACL=(02 0000)

@="Wave Scroller"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e0d31ca1-f598-49ac-8123-f27eeae28984}]

@DACL=(02 0000)

@="NMBActionPluginBurnDataDiscHandle Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E0D84E7C-1997-4F77-97C4-74D79FCF6B50}]

@DACL=(02 0000)

@="LMpgVparser Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1272C93-9F34-40CF-BD78-8103F891CB14}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E138D778-FAC2-4BC5-B0B2-01CBFB0288BE}]

@DACL=(02 0000)

@="Vertical Spin Slice"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E13908FB-2996-46F9-BCD2-11FD4563B238}]

@DACL=(02 0000)

@="AudioEffectLibrary.CameraDenoisePage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1A1C814-FD09-4c9d-BB4A-0394B836A1F0}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1A46626-9FD3-11D4-824D-B0D52C000000}]

@DACL=(02 0000)

@="NeroFolder Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e1d24ab8-53df-49ac-bae6-63a06d55a112}]

@DACL=(02 0000)

@="NMBAppGlobalSettingsTV_Folder Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1D4987F-C260-4875-A120-727EF116D46C}]

@DACL=(02 0000)

@="NMTVServerInProc Class"

"AppID"="{93D78BF0-45EF-44F4-AE80-A2C26D246B2B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E1F1E7F6-1789-4F59-BE29-ED2C151C527F}]

@DACL=(02 0000)

@="AudioEffectLibrary.DeHumPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E2037A58-3425-4581-A9AE-64A043B05353}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E2CE4A0B-1E6A-426E-A90F-172F42528C90}]

@DACL=(02 0000)

@="Shift edges"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E3263B35-59B5-403D-A5A4-6BCC8FAE840D}]

@DACL=(02 0000)

@="TwistSpin"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E33D5162-3BAE-4CFF-8D72-916221E27BE1}]

@DACL=(02 0000)

@="Pixelize"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E36F5435-7BA3-4255-9062-D275F0BAAA7A}]

@DACL=(02 0000)

@="ILXShareLog Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E386F85E-3C25-474D-B303-45E987251872}]

@DACL=(02 0000)

@="Ulead DV SubTitle Filter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E386F85F-3C25-474D-B303-45E987251872}]

@DACL=(02 0000)

@="Ulead DV SubTitle Filter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E3B54E5D-579C-4FF2-853B-E21DD05EA690}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E3ED0D6D-93FF-4F63-9E6B-436E50B42B9E}]

@DACL=(02 0000)

@="AudioEffectLibrary.ReverbPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E41C6AFE-738D-4A56-957C-C352F41B3275}]

@DACL=(02 0000)

@="QTSrc"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4452E4B-3C68-4A8F-899D-002B4719B397}]

@DACL=(02 0000)

@="Kaleidoscope"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E45B8202-C4A7-4FF0-A394-49F3B443BCBB}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e45d7473-5d97-48b0-953e-1a433986f0df}]

@DACL=(02 0000)

@="NMISItemScannerSimilarImages Class"

"AppID"="{5760A24C-D938-4555-AF27-5ADFA9037C5C}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4771AC6-9154-4952-A3E4-C9C9FF9FE622}]

@DACL=(02 0000)

@="ArcWmdmDev Class"

"AppID"="{A4A41C25-5C78-46C9-ADD0-F9D540AFE25B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E48B2549-D510-4A76-8A5F-FC126A6215F0}]

@DACL=(02 0000)

@="CLSID_AntiPhishingBrowserSolution"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4903434-67CC-4448-9717-7A06103B0290}]

@DACL=(02 0000)

@="Rotate Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E4A72332-DC45-4AA1-8164-1CCA8614AC75}]

@DACL=(02 0000)

@="NeroFileDlg Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5090C07-DE24-48C3-A690-3483577B7E26}]

@DACL=(02 0000)

@="3D - Vertical Spinning Strokes"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e50fceed-2660-4b46-a464-66795c3f708e}]

@DACL=(02 0000)

@="NMPCSlideShowContentHandler Class"

"AppID"="{360A9422-64AF-4F12-A5D0-16D3EDB000D1}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5209008-B49E-4A0A-932F-B5E7B0B46A03}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E53E2D39-A94F-4cef-BD64-AF3FEF525ECC}]

@DACL=(02 0000)

@="NMDSMdbMediaDatabase Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E569BDE7-A8DC-47F3-893F-FD2B31B3EEFD}]

@DACL=(02 0000)

@="Browser Application State"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e5b2709a-0e6b-45d3-83c8-ef90c2ed5340}]

@DACL=(02 0000)

@="ChooseSessionDlg Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5C438A0-3224-4019-A442-A68D6838E792}]

@DACL=(02 0000)

@="Nero Ogg Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5DCBA6A-6C50-4BFC-B550-D53DFE5FA025}]

@DACL=(02 0000)

@="NOSHttpPostPart Class"

"AppID"="{2E82C0B4-3147-4A6E-AF24-A1992108C420}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5DE60A7-8C6A-4D84-8F6E-DDA41935161E}]

@DACL=(02 0000)

@="Nero MP4 Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5ECC2B2-1ED9-43C7-BC75-F73E85E28684}]

@DACL=(02 0000)

@="ULXBuildUdfImage Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E5F5B5A2-F9C2-49CE-BE5A-7893C92BBD39}]

@DACL=(02 0000)

@="AudioEffectLibrary.VolumePlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e6028af3-ee0a-4e49-a043-c44437680ad8}]

@DACL=(02 0000)

@="BurnSettingsDlg Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E60648A1-A2F1-4b00-A2D9-79B2EDB8F592}]

@DACL=(02 0000)

@="NMPCSVCDContentHandlerVMR9 Class"

"AppID"="{41FA2214-273A-46D7-8B96-CA64C554296F}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E61D368C-E0D1-4EAE-8B90-C151C60C743D}]

@DACL=(02 0000)

@="NCChannel Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E62509DF-ECBE-4D35-B195-7149886B4B73}]

@DACL=(02 0000)

@="Blinds"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E69C308A-0582-4BFF-B3DA-697BB2BB5CDA}]

@DACL=(02 0000)

@="LXContentCenter Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E6EE9AAC-F76B-4947-8260-A9F136138E11}]

@DACL=(02 0000)

@="IE Shell Band Site Menu"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E72F05CD-D565-41F1-92FC-69482B5EC060}]

@DACL=(02 0000)

@="NMPCTVStreamContentHandlerVMR9 Class"

"AppID"="{36C66FF0-507F-44B5-9E74-FA02CCB215CD}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e77b3b79-1a82-43b7-ad65-f526c53e062b}]

@DACL=(02 0000)

@="NMBActionPluginPlayAudio Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E7D06080-238B-11D3-80D7-00104B1F6CEA}]

@DACL=(02 0000)

@="InstallShield Script Engine"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E7E79A30-4F2C-4FAB-8D00-394F2D6BBEBE}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{833CCA5F-DCB7-4516-806F-6596AB26DCE4}"

"RequiresFullStream"=dword:00000000

"SupportsPadding"=dword:00000000

"Author"="Microsoft"

"FriendlyName"="XMP Bag Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E7F33474-CC23-4B5E-A7FA-75BFF421B206}]

@DACL=(02 0000)

@="AudioEffectLibrary.PitchCorrectionPage"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E80A2814-3A36-4897-8BFF-924D39C26FF8}]

@DACL=(02 0000)

@="NeroFileProducer Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E843040D-3DC3-4592-9F88-54AAEA980244}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e84e182d-b68e-4cab-866f-f35c99dd8315}]

@DACL=(02 0000)

@="NMCFMicroEventManager Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E8658416-7CCB-4c1d-A021-AFF0A2EB8004}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E8933C4B-2C90-4a04-A677-E958D9509F1A}]

@DACL=(02 0000)

@="NMISCIndexingService Class"

"AppID"="{D55E16BA-BBC9-4F7E-A147-E5DFBCC71480}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E8AC0652-173D-4AA4-AA85-F82F0B6B9E94}]

@DACL=(02 0000)

@="AudioEffectLibrary.PseudoReversePlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E98E4C68-3F25-4762-B713-DEC5933E6A40}]

@DACL=(02 0000)

@="3D - Tunnelize"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{e9d1594e-3c45-40de-a6d3-75a7ec14c2f9}]

@DACL=(02 0000)

@="NMDSFoundVolumeInfo Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E9F1F599-7B14-4213-BF46-F992758CAB81}]

@DACL=(02 0000)

@="RtlCP Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EAAEAEB6-C59B-4F79-B0B7-8C4B0A60BF46}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EABAAD79-1A74-4672-B7C3-0182B03D55D2}]

@DACL=(02 0000)

@="NeroSink"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EAD55AD3-060A-434A-9383-5BEBCDB2CA07}]

@DACL=(02 0000)

@="ULXBDRTCompiler Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EB18B220-F101-4EF6-B1A5-5360802CF130}]

@DACL=(02 0000)

@="ArcSoft Mpeg Splitter property"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{eb498078-b3a7-4867-aca5-b038d521ed12}]

@DACL=(02 0000)

@="NMBAppGlobalSettingsBurnMix Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EBF92551-A396-40FE-8242-A2B724F2A3AB}]

@DACL=(02 0000)

@="iHDRuntime.IHDRuntime"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EBF9A65D-571C-4746-A9B6-1B83A1033EC8}]

@DACL=(02 0000)

@="AudioRipping Class"

"AppID"="{5EC2B756-5110-4A94-A66D-BFBA2AF993F9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC342F89-D3DE-4D82-A96E-49D70541E3D2}]

@DACL=(02 0000)

@="Fade in/out Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ec39bf14-ca12-46cd-8ea2-b48d5a44350a}]

@DACL=(02 0000)

@="BurnSettings Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC529B00-1A1F-11D1-BAD9-00609744111A}]

@DACL=(02 0000)

@="WDM Streaming VPE VBI Property Set Interface Handler"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC61CE9E-D980-408B-9B90-BDC7EF6CE9EF}]

@DACL=(02 0000)

@="AudioEffectLibrary.PhaserPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC7D1B61-ABED-4022-9991-8A8CCEFD04C6}]

@DACL=(02 0000)

@="Split"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EC811B32-852A-4f37-B9DD-A8709DA22B7B}]

@DACL=(02 0000)

@="NMAudioContentHandlerVMR9 Class"

"AppID"="{5BB9749E-DD3F-459F-8865-64A208D020EA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ecac5d28-d6a5-4d47-9fe5-8586db270f2f}]

@DACL=(02 0000)

@="NMSlideSho0Builder Class"

"AppID"="{E95BB462-E6C6-4383-BB6E-2CF3F3CB0502}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED19E3BD-7DB6-44A3-ADAD-B9B98101E0B9}]

@DACL=(02 0000)

@="NCEpgEvents Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED70EF71-8DF3-4C36-826D-E8D29FBB655F}]

@DACL=(02 0000)

@="Nero Search"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ed72f0d2-b701-4c53-adc3-f2fb59946dd8}]

@DACL=(02 0000)

@="ProtectedModeAPI"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED822C8C-D6BE-4301-A631-0E1416BAD28F}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{833CCA5F-DCB7-4516-806F-6596AB26DCE4}"

"RequiresFullStream"=dword:00000000

"SupportsPadding"=dword:00000000

"Author"="Microsoft"

"FriendlyName"="XMP Bag Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ED87534F-A666-426B-8D9E-019B21122206}]

@DACL=(02 0000)

@="NCTunerDvbt Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{edbdd4f6-a501-40f2-bc26-9b167b1535e8}]

@DACL=(02 0000)

@="NMBDirectoryPluginTVConfiguration Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{edc8b699-7f88-41f8-aa97-39747a977be0}]

@DACL=(02 0000)

@="NMSSRGBImageBuffer Class"

"AppID"="{E95BB462-E6C6-4383-BB6E-2CF3F3CB0502}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EDF7AC62-3DF4-4A87-AFAF-1AFCD81C9836}]

@DACL=(02 0000)

@="NeAudioRender Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EE2D6561-D63C-11D2-B561-00A0C92E6848}]

@DACL=(02 0000)

@="ShellExt Class"

"AppID"="{3D62E9A1-D243-11D2-B561-00A0C92E6848}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EE366069-1832-420F-B381-0479AD066F19}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{8FD3DFC3-F951-492B-817F-69C2E6D9A5B0}"

"RequiresFullStream"=dword:00000000

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="App1 Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EE58DCFB-90E1-4C39-85B9-6489734AB835}]

@DACL=(02 0000)

@="Bouncing Characters"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EEBAF82E-54DD-4692-9A61-C14369DB03D7}]

@DACL=(02 0000)

@="NMISMediaDatabase Class"

"AppID"="{7AD010A8-C4D6-4CA0-B550-B4EA5F64F8CB}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{eef2bc59-7811-4e77-b3ad-7acb98cd38aa}]

@DACL=(02 0000)

@="NMBActionPluginBurnVCD Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EF134C3B-23E0-457B-A8C1-3B6987DCBD8D}]

@DACL=(02 0000)

@="NeVideoHD Main Property Page"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ef3ef5ef-8f4f-46bc-ba3f-3ace369c8612}]

@DACL=(02 0000)

@="NMDSUriAccessProviderGenericStream Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EF701812-6CC5-466F-9BF5-18825C434971}]

@DACL=(02 0000)

@="NeroSearchFilterSampleSize Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EFAF41AA-04C9-47E4-9226-2D40FFA27DD0}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EFC98D24-8686-4084-B28C-7507FA863BCD}]

@DACL=(02 0000)

@="CHpqLog Object"

"AppID"=""

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EFEDF1EE-AD78-4DE4-9878-8E110683E49F}]

@DACL=(02 0000)

@="NeroFSSecNo Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{effe6d19-b274-4501-afdc-390e46d6fe9b}]

@DACL=(02 0000)

@="ZippedStream Class"

"AppID"="{AB6AA495-ECA6-4036-8F5B-99B641DF2CC3}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F0672315-67B5-4B0F-8ED4-7FFCF7BF09A9}]

@DACL=(02 0000)

@="LVR_MANGR Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f0874e44-8581-46ed-881c-46783c183f6f}]

@DACL=(02 0000)

@="NMBAppPluginPanel Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F0CB4200-B513-43F8-9D05-24D9CE8DEF04}]

@DACL=(02 0000)

@="Ulead DVB Parser"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F0CB4201-B513-43F8-9D05-24D9CE8DEF04}]

@DACL=(02 0000)

@="Ulead DVB Parser Filter Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F13D5DCA-9FE6-4DCA-A3EC-2E161EC5ED33}]

@DACL=(02 0000)

@="Heat Trails"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F162AD9F-87DC-49AE-B697-F688E51D4E9D}]

@DACL=(02 0000)

@="Nero Sound Processor"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F1CCAB47-C8D4-4912-BA82-1D0380A32B3C}]

@DACL=(02 0000)

@="NeroSearchFilterTitle Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f1f2ece6-0289-4992-a536-f82dfc6f6d6e}]

@DACL=(02 0000)

@="DiscInfoDlg Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F1F60FDD-97EA-43F1-920F-6EE61F32F435}]

@DACL=(02 0000)

@="VSTBridge.VSTEffects"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F20D8ADA-A955-435D-8A49-707DAB401787}]

@DACL=(02 0000)

@="Unload Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F2324C9E-B4A5-41CA-BABA-0D12FF4F83AB}]

@DACL=(02 0000)

@="Separate Slide"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F263A5CC-9B97-46AD-8CD1-A2A34BE79049}]

@DACL=(02 0000)

@="ArcHWEventHandler Class"

"AppID"="{A4A41C25-5C78-46C9-ADD0-F9D540AFE25B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F29F4F9A-6914-4046-B8F8-139AA70E1487}]

@DACL=(02 0000)

@="Nero Scout Menu"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F2CF5485-4E02-4f68-819C-B92DE9277049}]

@DACL=(02 0000)

@="&Links"

"MenuTextPUI"="@c:\\WINDOWS\\system32\\ieframe.dll.mui,-13138"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f2deefee-8e64-45d7-83be-c244cff37267}]

@DACL=(02 0000)

@="NMDSFilteredDirectoryFactory Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f311c4e9-5e80-4c9e-a6bf-1beb3de5ad80}]

@DACL=(02 0000)

@="NMDSMetaDataFactoryRegistry Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F38FCD8D-6921-4147-890C-801E5F4F8275}]

@DACL=(02 0000)

@="Mirror: Vertical"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F3C633A2-46C8-498E-8FBB-CC6F721BBCDE}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{79007028-268D-45D6-A3C2-354E6A504BC9}"

"RequiresFullStream"=dword:00000000

"FixedSize"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="App0 Writer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F3FBC8E5-93A3-11D4-8217-A85459000000}]

@DACL=(02 0000)

@="Nero Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4453C84-C133-43F2-9E12-A9AB4B1422FE}]

@DACL=(02 0000)

@="Ulead OggVorbis Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4670DEF-0302-4F5E-BA74-843F2EC2B7C7}]

@DACL=(02 0000)

@="ArcSoft MP4 Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f472ed2b-87a0-4481-89af-2a60f862305a}]

@DACL=(02 0000)

@="Effect Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F47C211E-70D5-4BC6-B0E7-B045EC466146}]

@DACL=(02 0000)

@="Credits Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4817E4B-04B6-11D3-8862-00C04F72F303}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f495ebbe-a068-41fb-89b6-c605d20a2df3}]

@DACL=(02 0000)

@="RecorderCombobox Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4D36777-EAED-4cc5-9FE7-827BE5190B20}]

@DACL=(02 0000)

@="Microsoft Feeds Scheduler"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F4E6633D-3404-4F4E-90EE-4B1A336F14CD}]

@DACL=(02 0000)

@="AudioDocFilter Class"

"AppID"=""

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F50B3F10-19C4-11CF-AA9A-02608C9BABA2}]

@DACL=(02 0000)

@="ArcSoft MPEG Video Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F50B3F11-19C4-11CF-AA9A-02608C9BABA2}]

@DACL=(02 0000)

@="ArcSoft Mpeg Decoder Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F50B3F12-19C4-11CF-AA9A-02608C9BABA2}]

@DACL=(02 0000)

@="ArcSoft Deinterlace Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F5549B02-B736-4D32-BD8C-15D4E260E9B9}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F556280E-71DD-4324-BB45-09F2E3DD2767}]

@DACL=(02 0000)

@="Gaussian Blur"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F578E21A-DB55-4C70-B04E-46D4F9BBD434}]

@DACL=(02 0000)

@="ULXMpegEncoder Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f57d6ba3-d37b-4ef7-9c2b-e05027603f5a}]

@DACL=(02 0000)

@="NMCFPropertyContainerFactory Class"

"AppID"="{44B7557A-465A-41DB-B2DD-6CD1BB58C800}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F5838CC6-EBBF-46D3-AE67-ED2F8D7218EC}]

@DACL=(02 0000)

@="ULXAudioCDManager Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f5af851c-c93b-416b-a6a9-851e4b2794e3}]

@DACL=(02 0000)

@="NMBActionPluginPlayRadio Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F6032A69-F002-49AB-B24B-757060B11C09}]

@DACL=(02 0000)

@="Nero Mpeg2 Encoder Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F6348C42-7114-468D-A302-EFBBBCA59ADE}]

@DACL=(02 0000)

@="COMTool Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F706F28F-C2C3-4B2B-A1C5-9782FDB677C9}]

@DACL=(02 0000)

@="Nero QuickTime™ Video Decoder Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F710DD5E-3ED7-442F-BA31-4BD2DF7F4366}]

@DACL=(02 0000)

@="ArcSoft 3GP Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F74D77D2-44CE-4315-90CB-DCC30CCFA0C8}]

@DACL=(02 0000)

@="Wipe Down"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F7A8E80E-2430-48CB-953D-23D6D34A623F}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F81D4B21-8E41-4283-B854-C2343756A157}]

@DACL=(02 0000)

@="LudfReader Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F81E7B20-3E76-4194-8171-FFDB0F6CBE49}]

@DACL=(02 0000)

@="CoverEdCtrl Control"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}]

@DACL=(02 0000)

@="IE Registry Tree Options Utility"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8512E22-9DB5-4297-A531-6313D9B64102}]

@DACL=(02 0000)

@="Blur Fade"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f866c0dd-1efb-477a-9dee-20e9bd38c892}]

@DACL=(02 0000)

@="NMDSUriAccessProviderLocalFS Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8777E65-5755-4E49-9237-8D98F0C2499F}]

@DACL=(02 0000)

@="Nero Video Decoder"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f87d21b9-5aac-4d8e-af4d-1f6943889382}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f8b558b4-3647-4e31-8157-9e4053de815e}]

@DACL=(02 0000)

@="NMBDirectoryPluginTVPrograms Class"

"AppID"="{3D261FC4-4BE7-41A7-BA15-DB9FC39E3792}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f8c26e45-f38b-4392-abdc-ed1caed86104}]

@DACL=(02 0000)

@="NMPCAudioSampleSequenceFactory Class"

"AppID"="{8E1EAC0D-E841-4FA9-8696-9C4894F4D307}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F9136BAA-1AA3-4F7A-B8B0-4F6399BC1B37}]

@DACL=(02 0000)

@="AudioEffectLibrary.ModulationPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F94687E8-1A40-42D2-9028-39DC65793988}]

@DACL=(02 0000)

@="Slime"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F95C8BFF-658C-4DF2-B496-280DBE5E6D20}]

@DACL=(02 0000)

@="AudioEffectLibrary.LoudnessPlugIn"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F97125CC-1ED0-4E48-B995-E052B45CBDC5}]

@DACL=(02 0000)

@="NCTunerAtsc Class"

"AppID"="{A3DABA07-89B0-4C1C-90E3-B70F956FD8FA}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f99c08d6-0eff-4254-93c7-ceb4e890d805}]

@DACL=(02 0000)

@="NMHDSPluginTVScheduledRecordings Class"

"AppID"="{F7CA8AF7-6AD6-410B-B770-0E6223E9DDEF}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{f9b622f8-f676-4bed-8609-6916953c6bc6}]

@DACL=(02 0000)

@="FreeCurveEdit Class"

"AppID"="{6C9A9A5F-CF69-4D76-8DDC-55C552340928}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F9DB3544-CCCB-40C2-B24A-91E8BB87D661}]

@DACL=(02 0000)

@="ArcSoft AC3 Decoder Setting"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FA4D6C69-CB72-4656-B570-462EEE447B64}]

@DACL=(02 0000)

@="Circles"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FAB5A83D-1CA1-49DB-8678-9898F4127DB4}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FADE020C-B6CB-400b-B794-5A51C9A5F6D0}]

@DACL=(02 0000)

@="IE Microsoft CommBand"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{faeb54c4-f66f-4806-83a0-805299f5e3ad}]

@DACL=(02 0000)

@="Microsoft Feeds Manager (scripting)"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FB012959-F4F6-44D7-9D09-DAA087A9DB57}]

@DACL=(02 0000)

"Version"="1.0.0.0"

"SpecVersion"="1.0.0.0"

"Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"

"MetadataFormat"="{243DCEE9-8703-40EE-8EF0-22A600B8058C}"

"RequiresFullStream"=dword:00000001

"SupportsPadding"=dword:00000001

"Author"="Microsoft"

"FriendlyName"="Thumbnail Reader"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FB309DE8-723C-4D5B-AC22-DD8F4F28269F}]

@DACL=(02 0000)

@="NOSHttpConnection Class"

"AppID"="{2E82C0B4-3147-4A6E-AF24-A1992108C420}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FB8DC1C1-ED90-42EF-A115-A0494CC138A9}]

@DACL=(02 0000)

@="Voxelize"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FBC519A7-5FA7-45CF-8301-6FDF95164365}]

@DACL=(02 0000)

@="Glow"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FBF23B40-E3F0-101B-8488-00AA003E56F8}\Elevation]

@DACL=(02 0000)

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC1A861A-0782-4321-8FDD-A29C9DD27C5E}]

@DACL=(02 0000)

@="Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC1CF921-CCE5-11D2-8CE6-0000E84979EE}]

@DACL=(02 0000)

@="Audio Buffer Render"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC2B5A8C-EC3F-45bb-BDDC-60F492318D21}]

@DACL=(02 0000)

@="NBClientListener Class"

"AppID"="{A0829BAB-FD70-4f2b-8C0B-8484B6BBCD31}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FC2FFAA3-0177-4B95-BEA3-CC42CE5BB41A}]

@DACL=(02 0000)

@="Text fly to right"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{fc63f70a-caae-4f81-be0b-527a1c65c476}]

@DACL=(02 0000)

@="NMSearc0ParserSpirit Class"

"AppID"="{A82BBCBD-CB95-43E6-BF3A-8A6EA9C5B795}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{fc9e87fc-39b0-4bba-a9cc-2ce0207fa6cd}]

@DACL=(02 0000)

@="NMDSFoundVolumeInfoList Class"

"AppID"="{5B6B7FA0-1598-46B0-A586-96DA77C19844}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD000F57-10FA-4358-8512-8A6B7A3146A2}]

@DACL=(02 0000)

@="Nero DV Splitter"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}]

@DACL=(02 0000)

@="System Restore Wrapper"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD5995B0-0903-4177-9E00-F55BC80BAE7B}]

@DACL=(02 0000)

@="AvSource"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD5CD8B1-6FE0-44F3-BBFB-65E3655B096E}\ProgId]

@DACL=(02 0000)

@="Microsoft.Aspnet.Snapin.AspNetManagementUtility.2"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FD83DDBE-2039-48EF-AC24-5C166D10ECB8}]

@DACL=(02 0000)

@="NeroSearchFilterBitrate Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FDBC502E-5417-4DC9-B1B2-811DB529959D}]

@DACL=(02 0000)

@="Spherical Text"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FDE7673D-2E19-4145-8376-BBD58C4BC7BA}]

@DACL=(02 0000)

@="IE Custom MRU AutoCompleted List"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FDEC7B7F-1209-40BC-AA36-9CAC8CD1A35A}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE1F4910-E20B-4047-BEB4-2798D98E9BA1}]

@DACL=(02 0000)

@="Nero HD Audio Mixer Properties"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE4A53E9-F056-49BF-9841-4E9416B85FC2}]

@Class="REG_SZ"

@DACL=(02 0000)

@="PSFactoryBuffer"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE520461-1A47-4D2F-8F0A-D741B1739022}]

@DACL=(02 0000)

@="ILXShareLog Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE6B11C3-C72E-4061-86C6-9D163121F229}]

@DACL=(02 0000)

@="Microsoft Feeds Manager"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FE9617F6-E606-42AA-BECC-0E9CDA246D63}]

@DACL=(02 0000)

@="Color Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEC5F6B2-A15A-11D4-8250-9C9E8B000000}]

@DACL=(02 0000)

@="NeroIsoTrack Class"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ff0be41b-4a12-4ac1-9b25-1a4f14aa753f}]

@DACL=(02 0000)

@="NMBActionPluginPlay Class"

"AppID"="{4E505BB4-9521-4DDE-8F82-336604ADF01B}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ff4d6e08-5f27-44b7-9147-ac7c5864794e}]

@DACL=(02 0000)

@="SourcePlacementPage Class"

"AppID"="{015A4199-B904-4E9B-B7FD-8870A290569E}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FF8802ED-84A7-4b5f-8198-AD7151BD33D5}]

@DACL=(02 0000)

@="NMPCSlideShowContentHandlerVMR9 Class"

"AppID"="{360A9422-64AF-4F12-A5D0-16D3EDB000D1}"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FFBB820D-964F-4141-A717-418A530EF57B}]

@DACL=(02 0000)

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{ffd90217-f7c2-4434-9ee1-6f1b530db20f}]

@DACL=(02 0000)

@="XML Feed Moniker"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FFF2D28F-E4EE-44D9-8104-8E71556757F6}]

@DACL=(02 0000)

@="DWUpdateService"

.

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]

"OODEFRAG10.00.00.01WORKSTATION"="8D40FBF355B23727A5A3D995C56052ADDDBF5945B9B947D7A11A0408CD8296481A133006FAED3DC256E7DE7D4A18D14900FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933FEBC9E127BECC74C8EDD5E5BE2F6E667C038D530D6EB345287CB5A477225A30AF2DEF2890289784F75FD449C8183A5CE5201E4DBF35884876A359DE7936C1C4348B8D0DB4B6AB44F7F64C181F7EFC7C1D446A2A880D630D2BF2FF4013404BABE30C7B80C07C87541B3BFF0970F57DF96D905F04EDDC4E218758F7D57249A14DDA7BC3C02A1FD53773CB97807F0592F32D67CAC5597A8A06E6FCE6AF2E74393871DE905E5BEC4BDC9B41F943A7DFB46FAB414C80BE4F0C06B020D8221B87274A372C5CCA7B13C75132C5D9661C5278CDD5053487D3870EDAE770A9F750283C69F00EAE2F885E61130270B62ED90A6BBC8FA674602345A29570FADAFC1E4B570EE1099AB4FF62EF8051FDE6F19D8AB65B1F8216E30AFC9C68979803522B62AA986E2B31C65785C6DF77DB34B5D4DC9E90E0475836537BA6D6F5C3046F0FE687FDF2A40C2392E227DF3248B15F8CFF981DA487DD9410A109935D28F8D5279DA52780D6A3C0D729090E6660902EFF798B41868755BA61B8D990BEA15C92919CDD7D12602BC6652A060440DF3D8888FE6E448F73F85BF125E132627D8CC9E80F5977286770C90902DF80353B8784F9407447381DEE876CB0FFC3E7B1A7B210869EEE32F63059821763F9C69E64E123A0358257F7D2BFCD611A311D33AD161BD220FB2188096512E1EE511F2B2616467C77DED656905C5F5B9A65F8D3FDE54DFFD7BF02C2EC3D1162DF8610973C79E362461DF1811C38A22C2786CF953C13366400FB44AED25F1690FD495B6A62E5A74CD06146E8BC94606C8E201E0C434FA760F74984568E4D16D132C37FCE9D57626DBC426B78F0C3A81CD806BFA837E6D6E74ADB765E643529C6A83564E021298804CC6B4B47C93E9273741FB7727FE105EDE8F36E359139A24AFB60494584C24EEFE0A6319D17C1DBF4E6885F5E9A82A8AA2C23970D2BA14E4DC71582B767F488EB7E2DA0FB379E047410FE20F2881C9EBF2C2E82F89366DF551B66DE00EBC70341E7746B2EC4F84EA2020EF4CE524412FEB6273B55715981E4FDBE17BF12753E541C2551769D79C10615C0D2A47BEA3B38CC48B8FBDFACB5E010A58B19A7965DB8F92BBBE3A8080CE5DD51E1C9592CC10B5E3663BDD1E01656F41F631247D6207DD8AB1A314C94E70D2740D084176568A2F0B3DAC7FC9769A0C5069984D944B09E5A2F133CF48E47661F5C6C75AD5252122DCCE4A8CDDAE16285F5E7B7BB2DFB74124BB4E6AA6E71490683A2997ADDB849ECCDA7094CD6E26FBE687E3B5E02A9FF1ACD4C984A13FAFC831"

.

--------------------- DLLs Loaded Under Running Processes ---------------------

.

- - - - - - - > 'explorer.exe'(196)

c:\documents and settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll

c:\windows\system32\ieframe.dll

c:\windows\system32\OneX.DLL

c:\windows\system32\eappprxy.dll

c:\windows\system32\webcheck.dll

c:\windows\system32\WPDShServiceObj.dll

c:\windows\system32\hnetcfg.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

------------------------ Other Running Processes ------------------------

.

c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\program files\Common Files\InterVideo\DeviceService\DevSvc.exe

c:\program files\Common Files\LightScribe\LSSrvc.exe

c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe

c:\windows\system32\oodag.exe

c:\program files\Google\Update\1.3.26.9\GoogleCrashHandler.exe

c:\program files\Cyberlink\Shared files\RichVideo.exe

c:\program files\TVersity\Media Server\MediaServer.exe

c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

c:\windows\system32\wdfmgr.exe

c:\windows\system32\java.exe

c:\program files\TeamViewer\Version9\TeamViewer.exe

c:\program files\TeamViewer\Version9\tv_w32.exe

c:\windows\RTHDCPL.EXE

c:\windows\system32\wscntfy.exe

c:\windows\system32\dwwin.exe

.

**************************************************************************

.

Completion time: 2015-03-15  09:39:09 - machine was rebooted

ComboFix-quarantined-files.txt  2015-03-14 23:39

ComboFix2.txt  2015-03-14 22:35

.

Pre-Run: 7,224,127,488 bytes free

Post-Run: 7,007,539,200 bytes free

.

- - End Of File - - CBF137568E752970C035ACB203ACDD60

8F558EB6672622401DA993E1E865C861

[emeraldnzl]

AVG - yes sorry! AVG I couldn't remove using add/remove programs and the folder wouldn't delete but the program is still there, not working as far as I'm aware.

Often malware will prevent anti-virus programs working. Let's see what happens as we go along. Maybe it will begin working and if you want to you can uninstall it. I see you have the Avast installer on your machine, perhaps that is the one you want?

Moving on

Let's see if things have freed up enough for us to run these ones:

Please download Junkware Removal Tool to your desktop.
 

• Shut down your protection software to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right click JRT.exe and "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

After that

Please download : ADWCleaner to your desktop  (use the Download Now @ BleepingComputer button)..

NOTE: If using Internet Explorer and get an alert that stops the program downloading, click on the warning and allow the download to complete.

Close all programs and click on the AdwCleaner icon. AdwCleaner will update itself and then open.



Click on Scan  and follow the prompts. It may appear not to be doing anything, please be patient and let it run unhindered. When the "Please uncheck elements you don't want to remove" appears just go ahead and click on the Clean button, and follow the prompts. Allow the system to reboot. You will then be presented with the report. Copy and paste back here. If a report doesn't appear, press the report button and Copy & Paste the contents on your next reply.

A copy of the report is also saved in the C:\AdwCleaner folder.

So when you return please post

• JRT.txt
• AdwCleaner log

[Damon(V)]

 

AVG - yes sorry! AVG I couldn't remove using add/remove programs and the folder wouldn't delete but the program is still there, not working as far as I'm aware.

Often malware will prevent anti-virus programs working. Let's see what happens as we go along. Maybe it will begin working and if you want to you can uninstall it. I see you have the Avast installer on your machine, perhaps that is the one you want?

I got Avast because I was trying to see if any antivirus would work, I'm not sure which is best to use moving forward, I was think about paying for AVG internet security? I was using AVG free. 


JRT appears to run and then comes up with a dos box saying "The system cannot find the file specified" a few times then "press any key to continue" after which nothing happens.

[emeraldnzl]

 

I got Avast because I was trying to see if any antivirus would work, I'm not sure which is best to use moving forward, I was think about paying for AVG internet security? I was using AVG free.

We can revisit that a little later. Both AVG and Avast have free versions. It is likely your AVG one wasn't working with the infection. I think there may be residual corruption on your machine too. We will address that as we go along.
 

JRT appears to run and then comes up with a dos box saying "The system cannot find the file specified" a few times then "press any key to continue" after which nothing happens

 
Leave that then and move on to AdwCleaner.

 

Edit

 

I hadn't mentioned it yet but FRST reported that you have less that 1% free on your hard drive. It is so low that I was reluctant to report it in case FRST had somehow got it wrong. We will run FRST again soon to check but I should perhaps tell you, that with less then 5% of your drive free you are in danger of messing up the Master File Table of your computer. It is risky running the tools we are using at this low level of free space.

Under 15% free is less than optimum.

I suggest that, as soon as you can, uninstall any old programs and backup and remove any data you don't need.

[Damon(V)]

"I suggest that, as soon as you can, uninstall any old programs and backup and remove any data you don't need."

Ok, will do, yes drive is pretty much full.
 

# AdwCleaner v4.112 - Logfile created 15/03/2015 at 10:49:35

# Updated 09/03/2015 by Xplode

# Database : 2015-03-05.1 [Server]

# Operating system : Microsoft Windows XP Service Pack 3 (x86)

# Username : Work 2 - COMPUTER

# Running from : C:\Documents and Settings\Work 2\Desktop\AdwCleaner.exe

# Option : Cleaning

 

***** [ Services ] *****

 

 

***** [ Files / Folders ] *****

 

 

***** [ Scheduled tasks ] *****

 

 

***** [ Shortcuts ] *****

 

 

***** [ Registry ] *****

 

 

***** [ Web browsers ] *****

 

-\\ Internet Explorer v8.0.6001.18702

 

 

-\\ Mozilla Firefox v36.0.1 (x86 en-US)

 

 

-\\ Google Chrome v

 

 

*************************

 

AdwCleaner[R0].txt - [21463 bytes] - [14/03/2015 14:01:04]

AdwCleaner[R1].txt - [21463 bytes] - [14/03/2015 14:01:26]

AdwCleaner[R2].txt - [972 bytes] - [14/03/2015 15:09:15]

AdwCleaner[R3].txt - [1415 bytes] - [14/03/2015 15:48:05]

AdwCleaner[R4].txt - [1474 bytes] - [14/03/2015 15:52:16]

AdwCleaner[R5].txt - [1208 bytes] - [15/03/2015 10:45:14]

AdwCleaner[S0].txt - [22534 bytes] - [14/03/2015 14:05:56]

AdwCleaner[S1].txt - [1542 bytes] - [14/03/2015 15:55:06]

AdwCleaner[S2].txt - [1136 bytes] - [15/03/2015 10:49:35]

 

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1195  bytes] ##########

[emeraldnzl]

Hmm... wouldn't be surprised if JunkwareRemover didn't work after all. That's all to the good.

 

Now

 

Please run another FRST scan with the Addition.txt box ticked and post back the two logs generated - FRST.txt and Addition.txt.

[Damon(V)]

I have run Adwcleaner previously myself.

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015

Ran by Work 2 (administrator) on COMPUTER on 15-03-2015 11:29:36

Running from C:\Documents and Settings\Work 2\Desktop

Loaded Profiles: Work 2 (Available profiles: Work 2 & User2 & Administrator)

Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: English (United States)

Internet Explorer Version 8 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(InterVideo Inc.) C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

(O&O Software GmbH) C:\WINDOWS\system32\oodag.exe

(Google Inc.) C:\Program Files\Google\Update\1.3.26.9\GoogleCrashHandler.exe

(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

(Wireless Service) C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

(D-Link) C:\Program Files\D-Link\D-Link Wireless G DWA-110\AirGCFG.exe

(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe

(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

() C:\Program Files\Hostless Modem\Telstra USB+Wi-Fi\CheckNDISPort_df.exe

(PeerBlock, LLC) C:\Program Files\PeerBlock\peerblock.exe

(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe

(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe

(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe

(Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe

 

 

==================== Registry (Whitelisted) ==================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [ANIWZCS2Service] => C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [49152 2007-01-19] (Wireless Service)

HKLM\...\Run: [D-Link D-Link Wireless G DWA-110] => C:\Program Files\D-Link\D-Link Wireless G DWA-110\AirGCFG.exe [1675264 2008-04-15] (D-Link)

HKLM\...\Run: [igfxhkcmd] => C:\WINDOWS\system32\hkcmd.exe [77824 2006-03-23] (Intel Corporation)

HKLM\...\Run: [igfxpers] => C:\WINDOWS\system32\igfxpers.exe [118784 2006-03-23] (Intel Corporation)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16855552 2007-10-25] (Realtek Semiconductor Corp.)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM\...\Run: [TkBellExe] => C:\program files\real\realplayer\update\realsched.exe [273544 2011-07-14] (RealNetworks, Inc.)

HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3667472 2014-12-18] (AVG Technologies CZ, s.r.o.)

HKLM\...\Run: [CheckNDISPort_df] => C:\Program Files\Hostless Modem\Telstra USB+Wi-Fi\CheckNDISPort_df.exe [442696 2012-09-21] ()

HKU\S-1-5-21-1343024091-1326574676-725345543-1006\...\Run: [PeerBlock] => C:\Program Files\PeerBlock\peerblock.exe [2122824 2014-01-14] (PeerBlock, LLC)

HKU\S-1-5-21-1343024091-1326574676-725345543-1006\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [31090792 2015-01-23] (Skype Technologies S.A.)

HKU\S-1-5-21-1343024091-1326574676-725345543-1006\...\Run: [GoogleChromeAutoLaunch_3DFCF6B2AEB445B8DC09B36EA9332B3A] => C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\Application\chrome.exe [809288 2015-03-07] (Google Inc.)

HKU\S-1-5-21-1343024091-1326574676-725345543-1006\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5503768 2015-02-20] (Piriform Ltd)

Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk

ShortcutTarget: Acrobat Assistant.lnk -> C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe (Adobe Systems Inc.)

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)

BootExecute: autocheck autochk * OODBSC:\PROGRA~1\AVG\AVG2015\avgrsx.exe /sync /restartsdnclean.exe

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-1343024091-1326574676-725345543-1006\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft...d=ie&ar=msnhome

HKU\S-1-5-21-1343024091-1326574676-725345543-1006\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1343024091-1326574676-725345543-1006 -> {F02EF4DB-5280-4E91-B854-AA0795C93A5A} URL = http://au.search.yah...p={searchTerms}

BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll No File

BHO: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll [2003-05-15] (Adobe Systems Incorporated)

BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-10] (Adobe Systems Incorporated)

BHO: EWPBrowseObject Class -> {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} -> C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll [2006-06-09] ()

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-18] (Oracle Corporation)

BHO: AcroIEToolbarHelper Class -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15] ()

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-18] (Oracle Corporation)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll No File

Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15] ()

Toolbar: HKU\S-1-5-21-1343024091-1326574676-725345543-1006 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15] ()

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab

DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab

DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab

DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab

Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll [2007-08-27] (Logitech Inc.)

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

 

FireFox:

========

FF ProfilePath: C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default

FF DefaultSearchEngine.US: Google

FF Homepage: https://www.facebook...s://isohunt.to/

FF Keyword.URL: hxxp://flybuys.search.adlux.com/search/?utm_source=adlux&utm_medium=cpc&ourmark=3&q=

FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*'))%20%7B%20return%20'PROXY%20us09.sq.proxmate.me%3A8000%3B%20PROXY%20us04.sq.proxmate.me%3A8000%3B%20PROXY%20us02.sq.proxmate.me%3A8000%3B%20PROXY%20us08.sq.proxmate.me%3A8000%3B%20PROXY%20us10.sq.proxmate.me%3A8000%3B%20PROXY%20us11.sq.proxmate.me%3A8000%3B%20PROXY%20us01.sq.proxmate.me%3A8000%3B%20PROXY%20us06.sq.proxmate.me%3A8000%3B%20PROXY%20us05.sq.proxmate.me%3A8000%3B%20PROXY%20us03.sq.proxmate.me%3A8000%3B%20PROXY%20us07.sq.proxmate.me%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"

FF NetworkProxy: "type", 2

FF Plugin: @abr.gov.au/KeyMgmtPlugin -> C:\Program Files\ABR\Plug-In\bin\npAUSkeyPlugin.dll [2012-10-25] (Commonwealth Government of Australia)

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-07] ()

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2011-06-10] ()

FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-21] (CANON INC.)

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-21] (DivX, LLC.)

FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-08] (Google)

FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-12-18] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-12-18] (Oracle Corporation)

FF Plugin: @nokia.com/EnablerPlugin -> C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2013-10-02] ( )

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-07] (Google Inc.)

FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-04-15] (VideoLAN)

FF Plugin HKU\S-1-5-21-1343024091-1326574676-725345543-1006: @talk.google.com/GoogleTalkPlugin -> C:\Documents and Settings\Work 2\Application Data\Mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)

FF Plugin HKU\S-1-5-21-1343024091-1326574676-725345543-1006: @talk.google.com/O1DPlugin -> C:\Documents and Settings\Work 2\Application Data\Mozilla\plugins\npo1d.dll [2015-01-27] (Google)

FF Plugin HKU\S-1-5-21-1343024091-1326574676-725345543-1006: @tools.google.com/Google Update;version=3 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-08] (Google Inc.)

FF Plugin HKU\S-1-5-21-1343024091-1326574676-725345543-1006: @tools.google.com/Google Update;version=9 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-08] (Google Inc.)

FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\Work 2\Application Data\mozilla\plugins\npgoogletalk.dll [2015-01-27] (Google)

FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\Work 2\Application Data\mozilla\plugins\npo1d.dll [2015-01-27] (Google)

FF SearchPlugin: C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\searchplugins\search-to-earn-points.xml [2014-07-05]

FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2015-03-07]

FF Extension: Blur (Formerly DoNotTrackMe) - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2014-11-22]

FF Extension: NetVideoHunter - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2015-03-04]

FF Extension: Youtube Downloader - 4K Download - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2015-03-07]

FF Extension: EPUBReader - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2015-02-13]

FF Extension: FireFTP - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f} [2015-01-16]

FF Extension: DownloadHelper - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-07]

FF Extension: Vuze Remote  - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} [2015-01-15]

FF Extension: Add to Amazon Wish List Button - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-10-31]

FF Extension: YouTube Video and Audio Downloader - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2014-03-06]

FF Extension: ProxMate - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2014-03-06]

FF Extension: QR Decoder - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-11-04]

FF Extension: Rainbow - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-03-18]

FF Extension: Tile Tabs - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2011-08-11]

FF Extension: RSS Ticker - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{1f91cde0-c040-11da-a94d-0800200c9a66}.xpi [2012-12-28]

FF Extension: Mobile Barcoder - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{A5C87640-F7CF-11DA-974D-0800200C9A66}.xpi [2012-11-04]

FF Extension: Modify Headers - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2012-03-27]

FF Extension: flybuys Toolbar - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{d8c4975b-9e4b-4574-b5ab-67fe58455a95}.xpi [2012-12-01]

FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

 

Chrome: 

=======

CHR HomePage: Default -> hxxp://www.google.com

CHR StartupUrls: Default -> "hxxp://www.nutritionforliving.com.au/wp-login.php?redirect_to=http%3A%2F%2Fwww.nutritionforliving.com.au%2Fwp-admin%2Fplugins.php&reauth=1", "hxxp://www.veganspeaks.com.au/wp-login.php?redirect_to=http%3A%2F%2Fwww.veganspeaks.com.au%2Fwp-admin%2Fnetwork%2Fplugins.php%3Ferror%3Dtrue%26main%3Dtrue%26plugin_status%3Dall%26paged%3D1%26s%3D&reauth=1"

CHR Profile: C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default

CHR Extension: (Dualless) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bgdpkilkheacbboffppjgceiplijhfpd [2014-05-15]

CHR Extension: (Tab Resize - split screen layouts) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bkpenclhmiealbebdopglffmfdiilejc [2014-05-15]

CHR Extension: (Tab Scissors) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\cdochbecpfdpjobpgnacnbepkgcfhoek [2014-05-15]

CHR Extension: (Share link via email) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ejdbkikfbnnhmachnnomjfgjbgkcnjkb [2014-05-16]

CHR Extension: (Readium) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\fepbnnnkkadjhjahcafoaglimekefifl [2015-03-14]

CHR Extension: (Dual View Split Screen) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gmdbkgponhaodlapckmpicgahloncdog [2014-05-15]

CHR Extension: (Chrome Hotword Shared Module) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13]

CHR Extension: (Chrome Reader) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lojpenhmoajbiciapkjkiekmobleogjc [2012-08-13]

CHR Extension: (Hangouts) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2014-08-02]

CHR Extension: (Google Wallet) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-13]

CHR Extension: (Simple EPUB Reader) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ojhbgcchcbdjdenibfmjofobklkkhofc [2015-03-14]

CHR Extension: (Google Reader) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjjhlfkghdhmijklfnahfkpgmhcmfgcm [2012-08-13]

CHR Extension: (Send Link by Email or Gmail) - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\plcgkgghkdfgfhiidfjkhmainebgmklf [2014-05-16]

CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path Or update_url value

CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - No Path Or update_url value

StartMenuInternet: chrome.exe - C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

 

========================== Services (Whitelisted) =================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

S2 ANIWZCSdService; C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe [49152 2007-01-19] (Wireless Service) [File not signed]

S2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3432976 2014-12-18] (AVG Technologies CZ, s.r.o.)

S2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [298080 2014-12-18] (AVG Technologies CZ, s.r.o.)

S3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]

R2 Capture Device Service; C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [198168 2007-03-06] (InterVideo Inc.)

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-11-06] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [139264 2007-11-06] (Hewlett-Packard Co.) [File not signed]

S3 idsvc; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [741376 2006-10-30] (Microsoft Corporation) [File not signed]

S3 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()

R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440 2006-10-19] (Hewlett-Packard Company) [File not signed]

S3 LiveUpdate; C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE [2918008 2007-01-05] (Symantec Corporation)

R2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [43520 2008-01-16] (Hewlett-Packard) [File not signed]

R2 O&O Defrag; C:\WINDOWS\system32\oodag.exe [1050120 2007-05-11] (O&O Software GmbH)

R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53760 2008-01-16] (Hewlett-Packard) [File not signed]

S2 PS3 Media Server; C:\Program Files\PS3 Media Server\win32\service\wrapper.exe [366872 2011-05-17] (Tanuki Software, Ltd.)

S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [67056 2007-03-03] (Ulead Systems, Inc.)

S2 WMPNetworkSvc; C:\Program Files\Windows Media Player\WMPNetwk.exe [913408 2006-10-18] (Microsoft Corporation) [File not signed]

 

==================== Drivers (Whitelisted) ====================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 ANIO; C:\WINDOWS\system32\ANIO.SYS [28195 2007-05-12] (Alpha Networks Inc.) [File not signed]

R2 Aspi32; C:\WINDOWS\System32\drivers\aspi32.sys [16512 2007-11-16] (Adaptec) [File not signed]

S3 AtcL001; C:\WINDOWS\System32\DRIVERS\atl01_xp.sys [35712 2006-08-22] (Attansic Technology corporation.)

R3 AtcL002; C:\WINDOWS\System32\DRIVERS\l251x86.sys [30720 2007-10-17] (Atheros Communications, Inc.)

S3 AVEO; C:\WINDOWS\System32\DRIVERS\AVEOdcnt.sys [224256 2010-01-21] (AVEO Corp) [File not signed]

R1 Avgdiskx; C:\WINDOWS\System32\DRIVERS\avgdiskx.sys [121624 2014-06-18] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSDriverl; C:\WINDOWS\System32\DRIVERS\avgidsdriverlx.sys [192792 2014-12-08] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHX; C:\WINDOWS\System32\DRIVERS\avgidshx.sys [154904 2014-11-18] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSShim; C:\WINDOWS\System32\DRIVERS\avgidsshimx.sys [21272 2014-06-18] (AVG Technologies CZ, s.r.o.)

R1 Avgldx86; C:\WINDOWS\System32\DRIVERS\avgldx86.sys [192792 2014-08-28] (AVG Technologies CZ, s.r.o.)

R0 Avglogx; C:\WINDOWS\System32\DRIVERS\avglogx.sys [230680 2014-07-18] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx86; C:\WINDOWS\System32\DRIVERS\avgmfx86.sys [98584 2014-10-05] (AVG Technologies CZ, s.r.o.)

R0 Avgrkx86; C:\WINDOWS\System32\DRIVERS\avgrkx86.sys [27416 2014-06-18] (AVG Technologies CZ, s.r.o.)

R1 Avgtdix; C:\WINDOWS\System32\DRIVERS\avgtdix.sys [200984 2014-10-10] (AVG Technologies CZ, s.r.o.)

S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)

S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49920 2007-11-02] (HP)

S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2007-11-02] (HP)

S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2007-11-02] (HP)

R2 LBeepKE; C:\WINDOWS\System32\Drivers\LBeepKE.sys [3712 2006-05-25] (Logitech, Inc.) [File not signed]

R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()

S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)

R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35088 2011-02-12] (CACE Technologies, Inc.)

R3 pbfilter; C:\Program Files\PeerBlock\pbfilter.sys [19016 2014-01-14] ()

S3 pwdrvio; C:\WINDOWS\system32\pwdrvio.sys [16472 2011-05-06] ()

S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [11104 2011-05-06] ()

R3 RT73; C:\WINDOWS\System32\DRIVERS\Dr71WU.sys [459520 2008-01-15] (Ralink Technology, Corp.)

R1 SCDEmu; C:\WINDOWS\system32\Drivers\SCDEmu.sys [26844 2006-03-18] (PowerISO Computing, Inc.) [File not signed]

S3 SONYPVU1; C:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS [7552 2001-08-17] (Sony Corporation)

R1 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [5632 2006-07-24] () [File not signed]

S3 teamviewervpn; C:\WINDOWS\System32\DRIVERS\teamviewervpn.sys [25088 2013-10-18] (TeamViewer GmbH)

S3 usbsermptxp; C:\WINDOWS\System32\DRIVERS\usbsermptxp.sys [25600 2007-10-19] (Microsoft Corporation)

S3 Bulk1528; System32\Drivers\Bulk1528.sys [X]

S2 Ca1528av; System32\Drivers\Ca1528av.sys [X]

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 HTCAND32; System32\Drivers\ANDROIDUSB.sys [X]

S4 IntelIde; No ImagePath

U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

 

 

==================== One Month Created Files and Folders ========

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2015-03-15 10:43 - 2015-03-15 10:43 - 02171392 _____ () C:\Documents and Settings\Work 2\Desktop\AdwCleaner.exe

2015-03-15 10:19 - 2015-03-15 10:19 - 01388333 _____ (Thisisu) C:\Documents and Settings\Work 2\Desktop\JRT.exe

2015-03-15 09:39 - 2015-03-15 10:52 - 00000000 ____D () C:\Documents and Settings\NetworkService\Local Settings\temp

2015-03-15 09:39 - 2015-03-15 09:39 - 00121271 _____ () C:\ComboFix.txt

2015-03-15 09:39 - 2015-03-15 09:39 - 00000000 ____D () C:\Documents and Settings\User2\Local Settings\temp

2015-03-15 09:39 - 2015-03-15 09:39 - 00000000 ____D () C:\Documents and Settings\LocalService\Local Settings\temp

2015-03-15 09:39 - 2015-03-15 09:39 - 00000000 ____D () C:\Documents and Settings\Default User\Local Settings\temp

2015-03-15 09:39 - 2015-03-15 09:39 - 00000000 ____D () C:\Documents and Settings\Administrator\Local Settings\temp

2015-03-15 09:31 - 2015-03-15 11:30 - 00000000 ____D () C:\Documents and Settings\Work 2\Local Settings\temp

2015-03-15 09:31 - 2015-03-15 09:31 - 00008192 ____H () C:\WINDOWS\system32\config\SECURITY.tmp.LOG

2015-03-15 09:31 - 2015-03-15 09:31 - 00000000 ____H () C:\WINDOWS\system32\config\SAM.tmp.LOG

2015-03-15 08:20 - 2015-03-15 08:20 - 00000000 _RSHD () C:\cmdcons

2015-03-15 08:20 - 2015-03-14 14:44 - 00000245 _____ () C:\Boot.bak

2015-03-15 08:20 - 2004-08-03 23:00 - 00260272 __RSH () C:\cmldr

2015-03-15 08:17 - 2011-06-26 16:45 - 00256000 _____ () C:\WINDOWS\PEV.exe

2015-03-15 08:17 - 2010-11-08 03:20 - 00208896 _____ () C:\WINDOWS\MBR.exe

2015-03-15 08:17 - 2009-04-20 14:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe

2015-03-15 08:17 - 2000-08-31 10:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe

2015-03-15 08:17 - 2000-08-31 10:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe

2015-03-15 08:17 - 2000-08-31 10:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe

2015-03-15 08:17 - 2000-08-31 10:00 - 00098816 _____ () C:\WINDOWS\sed.exe

2015-03-15 08:17 - 2000-08-31 10:00 - 00080412 _____ () C:\WINDOWS\grep.exe

2015-03-15 08:17 - 2000-08-31 10:00 - 00068096 _____ () C:\WINDOWS\zip.exe

2015-03-15 08:15 - 2015-03-15 09:39 - 00000000 ____D () C:\Qoobox

2015-03-15 08:15 - 2015-03-15 09:31 - 00000000 ____D () C:\WINDOWS\erdnt

2015-03-15 08:14 - 2015-03-15 08:14 - 05615380 ____R (Swearware) C:\Documents and Settings\Work 2\Desktop\ComboFix.exe

2015-03-15 07:16 - 2015-03-15 07:16 - 01943800 _____ (Bleeping Computer, LLC) C:\Documents and Settings\Work 2\Desktop\rkill.scr

2015-03-15 07:15 - 2015-03-15 07:15 - 01943800 _____ (Bleeping Computer, LLC) C:\Documents and Settings\Work 2\Desktop\rkill.exe

2015-03-15 07:15 - 2015-03-15 07:15 - 01943800 _____ (Bleeping Computer, LLC) C:\Documents and Settings\Work 2\Desktop\rkill.com

2015-03-15 06:01 - 2015-03-15 06:02 - 04197016 _____ (Kaspersky Lab ZAO) C:\Documents and Settings\Work 2\Desktop\tdsskiller.exe

2015-03-14 17:05 - 2015-03-14 17:05 - 00000723 _____ () C:\Documents and Settings\All Users\Desktop\calibre - E-book management.lnk

2015-03-14 16:58 - 2015-03-14 16:58 - 00002329 _____ () C:\Documents and Settings\Work 2\Desktop\Chrome App Launcher.lnk

2015-03-14 16:57 - 2015-03-14 16:57 - 01025278 _____ () C:\Documents and Settings\Work 2\Desktop\Mind If I Order the Cheeseburger And Other Questions People Ask Vegans.epub

2015-03-14 16:48 - 2015-03-14 17:03 - 56419840 _____ () C:\Documents and Settings\Work 2\Desktop\calibre-1.48.0.msi

2015-03-14 15:16 - 2015-03-14 15:16 - 00000686 _____ () C:\Documents and Settings\All Users\Desktop\CCleaner.lnk

2015-03-14 15:12 - 2015-03-14 15:14 - 05325696 _____ (Piriform Ltd) C:\Documents and Settings\Work 2\Desktop\ccsetup503.exe

2015-03-14 14:34 - 2015-03-14 14:33 - 00451175 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20150314-143411.backup

2015-03-14 14:33 - 2015-03-08 12:57 - 00451115 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20150314-143318.backup

2015-03-14 14:24 - 2015-03-14 14:24 - 04816784 _____ (AVG Technologies) C:\Documents and Settings\Work 2\Desktop\avg_isc_stb_all_2015_ltst_206.exe

2015-03-14 14:00 - 2015-03-15 10:49 - 00000000 ____D () C:\AdwCleaner

2015-03-14 09:17 - 2015-03-15 11:30 - 00028973 _____ () C:\Documents and Settings\Work 2\Desktop\FRST.txt

2015-03-14 09:16 - 2015-03-14 09:16 - 01135104 _____ (Farbar) C:\Documents and Settings\Work 2\Desktop\FRST.exe

2015-03-14 08:58 - 2015-03-14 09:00 - 20447072 _____ (Malwarebytes Corporation ) C:\Documents and Settings\Work 2\Desktop\mbam-setup-2.0.4.1028.exe

2015-03-14 08:35 - 2015-03-11 07:26 - 04197016 _____ (Kaspersky Lab ZAO) C:\Documents and Settings\Administrator\Desktop\tdsskiller.exe

2015-03-13 07:29 - 2015-03-13 07:29 - 00000000 ____D () C:\Documents and Settings\Work 2\Desktop\FRST-OlderVersion

2015-03-11 07:26 - 2015-03-11 07:26 - 00259584 _____ (OldTimer Tools) C:\Documents and Settings\Work 2\Desktop\OTH.scr

2015-03-11 07:18 - 2015-03-15 11:29 - 00000000 ____D () C:\FRST

2015-03-09 21:10 - 2015-03-09 21:10 - 00000027 _____ () C:\Documents and Settings\User2\Application Data\mbam.context.scan

2015-03-09 21:03 - 2015-03-09 21:03 - 00000000 ____D () C:\Documents and Settings\User2\Local Settings\Application Data\Sun

2015-03-09 21:03 - 2015-03-09 21:03 - 00000000 ____D () C:\Documents and Settings\User2\Application Data\Sun

2015-03-09 20:58 - 2015-03-09 20:58 - 00000000 ____D () C:\Documents and Settings\User2\Local Settings\Application Data\Avg2015

2015-03-09 20:58 - 2015-03-09 20:58 - 00000000 ____D () C:\Documents and Settings\User2\Application Data\Real

2015-03-09 20:57 - 2015-03-15 06:18 - 00000178 ___SH () C:\Documents and Settings\User2\ntuser.ini

2015-03-09 20:57 - 2015-03-09 20:57 - 00000796 _____ () C:\Documents and Settings\User2\Start Menu\Programs\Windows Media Player.lnk

2015-03-09 20:57 - 2015-03-09 20:57 - 00000771 _____ () C:\Documents and Settings\User2\Start Menu\Programs\Internet Explorer.lnk

2015-03-09 20:57 - 2015-03-09 20:57 - 00000742 _____ () C:\Documents and Settings\User2\Start Menu\Programs\Outlook Express.lnk

2015-03-09 20:57 - 2015-03-09 20:57 - 00000000 __SHD () C:\Documents and Settings\User2\IETldCache

2015-03-09 20:57 - 2015-03-09 20:57 - 00000000 ___RD () C:\Documents and Settings\User2\Start Menu\Programs\Accessories

2015-03-09 20:57 - 2015-03-09 20:57 - 00000000 ____D () C:\Documents and Settings\User2

2015-03-09 20:57 - 2012-10-13 09:59 - 00000000 ____D () C:\Documents and Settings\User2\Application Data\TuneUp Software

2015-03-09 20:57 - 2011-02-10 15:05 - 00001609 _____ () C:\Documents and Settings\User2\Start Menu\Programs\Remote Assistance.lnk

2015-03-09 20:57 - 2011-01-24 17:49 - 00000000 ____D () C:\Documents and Settings\User2\Application Data\Macromedia

2015-03-09 20:27 - 2015-03-09 20:27 - 04579240 _____ (AVG Technologies) C:\Documents and Settings\Work 2\Desktop\avg_isct_stb_all_2015_5315_cm5.exe

2015-03-09 20:27 - 2015-03-09 20:27 - 04579240 _____ (AVG Technologies) C:\avg_isct_stb_all_2015_5315_cm5.exe

2015-03-08 13:10 - 2015-03-08 13:12 - 05475064 _____ (Avast Software s.r.o.) C:\avast_free_antivirus_setup_online.exe

2015-03-08 12:57 - 2015-03-08 12:01 - 00451115 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20150308-125715.backup

2015-03-08 12:01 - 2015-03-08 11:54 - 00451115 ____R () C:\WINDOWS\system32\Drivers\etc\hosts.20150308-120131.backup

2015-03-08 11:54 - 2011-03-09 20:01 - 00001216 _____ () C:\WINDOWS\system32\Drivers\etc\hosts.20150308-115437.backup

2015-03-08 11:45 - 2015-03-08 11:45 - 00000000 ____D () C:\Documents and Settings\Work 2\My Documents\ProcAlyzer Dumps

2015-03-08 11:16 - 2015-03-08 12:26 - 00065536 _____ () C:\WINDOWS\system32\config\SpybotSD.evt

2015-03-08 11:15 - 2015-03-14 17:56 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2

2015-03-08 10:42 - 2015-03-08 10:43 - 46525608 _____ (Safer-Networking Ltd. ) C:\Documents and Settings\Work 2\Desktop\spybot-2.4.exe

2015-03-08 10:26 - 2015-03-08 10:26 - 00000000 ____D () C:\Documents and Settings\Administrator\Local Settings\Application Data\Avg2015

2015-03-08 10:25 - 2015-03-08 10:25 - 00000000 __SHD () C:\Documents and Settings\Administrator\IETldCache

2015-03-08 10:24 - 2015-03-14 08:38 - 00000178 ___SH () C:\Documents and Settings\Administrator\ntuser.ini

2015-03-08 10:24 - 2015-03-08 10:25 - 00000000 ____D () C:\Documents and Settings\Administrator

2015-03-08 10:24 - 2012-10-13 09:59 - 00000000 ____D () C:\Documents and Settings\Administrator\Application Data\TuneUp Software

2015-03-08 10:24 - 2011-02-10 15:05 - 00001609 _____ () C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk

2015-03-08 10:24 - 2011-02-10 15:04 - 00000000 ___RD () C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories

2015-03-08 10:24 - 2011-01-24 17:49 - 00000000 ____D () C:\Documents and Settings\Administrator\Application Data\Macromedia

2015-03-08 10:14 - 2015-03-08 10:14 - 04800936 _____ (AVG Technologies) C:\Documents and Settings\Work 2\Desktop\avg_free_stb_all_5751p1_177.exe

2015-03-07 09:37 - 2015-03-13 03:59 - 01133868 _____ () C:\WINDOWS\system32\CFG2561008352

2015-03-01 17:46 - 2015-03-01 17:51 - 00828994 _____ () C:\Documents and Settings\Work 2\Desktop\glf.mp4

2015-02-22 12:29 - 2015-02-22 12:29 - 03037217 _____ () C:\Documents and Settings\Work 2\Desktop\Intro to veganism2 Narration.wma

2015-02-22 09:28 - 2015-02-22 09:28 - 00019456 _____ () C:\Documents and Settings\Work 2\Desktop\Intro to veganism.MSWMM

2015-02-22 09:14 - 2015-02-22 09:14 - 00001701 _____ () C:\Documents and Settings\Work 2\Desktop\v.utf

2015-02-22 08:50 - 2015-02-22 08:50 - 00003771 _____ () C:\Documents and Settings\Work 2\Desktop\Do you believe.utf.txt

2015-02-22 08:44 - 2015-02-22 09:06 - 00003771 _____ () C:\Documents and Settings\Work 2\Desktop\Do you believe.txt

2015-02-21 11:30 - 2015-02-21 11:30 - 04535732 _____ () C:\Documents and Settings\Work 2\Desktop\MyPost_Deliveries.mp4

2015-02-15 11:13 - 2015-02-15 11:13 - 00000016 ____H () C:\Documents and Settings\SyncToy_aa29d182-7c79-4e0d-ad30-a891204c8004.dat

2015-02-15 10:06 - 2015-02-15 10:06 - 00007758 _____ () C:\Documents and Settings\Work 2\Desktop\Mix 1.xspf

2015-02-14 12:59 - 2015-02-14 12:59 - 00012110 _____ () C:\Documents and Settings\Work 2\Desktop\Gwen.xspf

 

==================== One Month Modified Files and Folders =======

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2015-03-15 11:30 - 2013-02-02 09:08 - 00000886 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2015-03-15 11:28 - 2007-08-22 09:02 - 00000030 _____ () C:\WINDOWS\ALL2006.INI

2015-03-15 11:26 - 2007-09-18 10:10 - 00000000 ____D () C:\myob17

2015-03-15 11:24 - 2007-08-08 07:06 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information

2015-03-15 11:22 - 2011-07-16 20:24 - 00000982 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-1326574676-725345543-1006UA.job

2015-03-15 11:22 - 2007-08-09 13:11 - 00000000 ____D () C:\myob16

2015-03-15 11:16 - 2007-09-18 11:20 - 00000000 ____D () C:\Program Files\Cyberlink

2015-03-15 11:09 - 2011-01-07 18:36 - 00000000 ____D () C:\Program Files\TVersity

2015-03-15 11:08 - 2013-01-11 08:11 - 00516616 _____ () C:\WINDOWS\setupapi.log

2015-03-15 11:08 - 2007-08-08 11:15 - 00000000 ____D () C:\Documents and Settings\All Users\Start Menu\Programs\HP

2015-03-15 11:06 - 2009-03-26 03:00 - 00000260 _____ () C:\WINDOWS\Tasks\WGASetup.job

2015-03-15 11:03 - 2011-01-02 10:20 - 00000000 ____D () C:\Program Files\PeerBlock

2015-03-15 10:57 - 2013-01-04 08:24 - 00422149 _____ () C:\WINDOWS\WindowsUpdate.log

2015-03-15 10:56 - 2010-03-01 06:36 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\Skype

2015-03-15 10:53 - 2009-10-27 13:28 - 00003284 _____ () C:\WINDOWS\system32\ANIWZCS{ABC6C283-2BF8-45CA-8598-F5669FA7FF12}

2015-03-15 10:52 - 2013-02-02 09:08 - 00000882 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2015-03-15 10:52 - 2011-07-14 09:46 - 00000280 _____ () C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1343024091-1326574676-725345543-1006.job

2015-03-15 10:52 - 2009-10-27 13:27 - 00000007 _____ () C:\WINDOWS\system32\ANIWZCSUSERNAME{ABC6C283-2BF8-45CA-8598-F5669FA7FF12}

2015-03-15 10:52 - 2009-08-04 15:45 - 00000007 _____ () C:\WINDOWS\system32\ANIWZCSUSERNAME

2015-03-15 10:51 - 2011-08-15 15:40 - 00000000 ____D () C:\Program Files\PS3 Media Server

2015-03-15 10:51 - 2007-08-10 12:09 - 01171009 _____ () C:\WINDOWS\system32\oodbs.lor

2015-03-15 10:51 - 2007-08-08 06:59 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2015-03-15 10:51 - 2007-08-08 02:30 - 00000159 _____ () C:\WINDOWS\wiadebug.log

2015-03-15 10:51 - 2007-08-08 02:30 - 00000049 _____ () C:\WINDOWS\wiaservc.log

2015-03-15 10:49 - 2008-10-14 14:28 - 00000278 ___SH () C:\Documents and Settings\Work 2\ntuser.ini

2015-03-15 10:49 - 2007-08-08 06:59 - 00032590 _____ () C:\WINDOWS\SchedLgU.Txt

2015-03-15 10:34 - 2012-10-13 10:37 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2015-03-15 09:33 - 2004-08-04 22:00 - 00000227 _____ () C:\WINDOWS\system.ini

2015-03-15 09:32 - 2007-08-08 02:25 - 65011712 _____ () C:\WINDOWS\system32\config\software.bak

2015-03-15 09:32 - 2007-08-08 02:25 - 14942208 _____ () C:\WINDOWS\system32\config\system.bak

2015-03-15 09:32 - 2007-08-08 02:25 - 05505024 _____ () C:\WINDOWS\system32\config\default.bak

2015-03-15 09:32 - 2007-08-08 02:25 - 00262144 _____ () C:\WINDOWS\system32\config\SECURITY.bak

2015-03-15 09:32 - 2007-08-08 02:25 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.bak

2015-03-15 08:20 - 2007-08-08 02:25 - 00000355 __RSH () C:\boot.ini

2015-03-15 07:43 - 2010-12-06 20:55 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\vlc

2015-03-15 07:22 - 2011-07-16 20:24 - 00000930 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-1326574676-725345543-1006Core.job

2015-03-15 05:56 - 2014-10-24 06:43 - 00000556 _____ () C:\WINDOWS\Tasks\Casper XP Scheduled Copy of Disk 1 to Disk 2.job

2015-03-14 17:54 - 2011-01-02 10:22 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\uTorrent

2015-03-14 17:37 - 2012-09-21 07:54 - 00001242 _____ () C:\WINDOWS\wininit.ini

2015-03-14 17:36 - 2007-08-09 11:14 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard

2015-03-14 17:10 - 2012-01-26 14:24 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\calibre

2015-03-14 17:05 - 2012-01-26 14:22 - 00000000 ____D () C:\Program Files\Calibre2

2015-03-14 17:05 - 2012-01-26 14:22 - 00000000 ____D () C:\Documents and Settings\All Users\Start Menu\Programs\calibre - E-book Management

2015-03-14 16:58 - 2011-07-16 20:26 - 00000000 ____D () C:\Documents and Settings\Work 2\Start Menu\Programs\Google Chrome

2015-03-14 15:45 - 2012-10-07 21:53 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\Azureus

2015-03-14 15:45 - 2011-02-16 19:41 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\FileZilla

2015-03-14 15:45 - 2010-01-04 11:18 - 00000000 ____D () C:\Documents and Settings\Work 2\Application Data\TeamViewer

2015-03-14 15:43 - 2009-09-15 12:51 - 00000000 ____D () C:\WINDOWS\Minidump

2015-03-14 15:41 - 2008-10-14 14:28 - 00000000 ____D () C:\Documents and Settings\Work 2

2015-03-14 15:16 - 2012-12-26 13:41 - 00000000 ____D () C:\Documents and Settings\All Users\Start Menu\Programs\CCleaner

2015-03-14 15:15 - 2012-12-26 13:41 - 00000000 ____D () C:\Program Files\CCleaner

2015-03-14 14:26 - 2007-08-09 11:10 - 00000000 ____D () C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy

2015-03-14 11:27 - 2008-10-14 14:34 - 00000000 ____D () C:\Documents and Settings\Work 2\My Documents\Damon

2015-03-14 07:36 - 2004-08-04 22:00 - 00012598 _____ () C:\WINDOWS\system32\wpa.dbl

2015-03-13 08:40 - 2011-10-15 09:13 - 00000284 _____ () C:\WINDOWS\Tasks\AppleSoftwareUpdate.job

2015-03-12 12:46 - 2011-07-14 09:46 - 00000288 _____ () C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1343024091-1326574676-725345543-1006.job

2015-03-11 18:00 - 2011-02-10 20:12 - 00000000 ____D () C:\Documents and Settings\Work 2\My Documents\Desktop Temp

2015-03-11 07:05 - 2010-01-13 15:44 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared

2015-03-11 07:05 - 2010-01-13 15:43 - 00000000 ____D () C:\Program Files\Symantec

2015-03-11 07:05 - 2010-01-13 15:43 - 00000000 ____D () C:\Documents and Settings\All Users\Application Data\Symantec

2015-03-10 17:54 - 2013-06-12 19:50 - 00006174 _____ () C:\WINDOWS\setupact.log

2015-03-10 12:41 - 2007-08-09 12:14 - 00000000 ____D () C:\Documents and Settings\Work 2\My Documents\Software

2015-03-10 12:31 - 2008-10-21 16:56 - 00000000 ____D () C:\Documents and Settings\Work 2\My Documents\Shaun Shared

2015-03-10 05:46 - 2014-07-23 19:51 - 00000007 _____ () C:\WINDOWS\system32\ANIWZCSUSERNAME{02F3C557-80E4-415C-A588-B850710C9CA3}

2015-03-09 20:57 - 2013-10-16 14:48 - 00002801 _____ () C:\WINDOWS\wmsetup.log

2015-03-08 12:32 - 2015-01-24 17:40 - 00000007 _____ () C:\WINDOWS\system32\ANIWZCSUSERNAME{E096EEF9-C664-46EA-AA51-3939B376610F}

2015-03-08 11:15 - 2007-08-09 11:10 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy

2015-03-08 07:23 - 2007-08-08 06:54 - 00000000 ____D () C:\WINDOWS\Registration

2015-03-07 21:24 - 2014-08-09 01:11 - 00000771 _____ () C:\WINDOWS\system32\TeamViewer9_Hooks.log

2015-03-07 18:43 - 2011-10-20 18:37 - 00000000 ____D () C:\WINDOWS\system32\oodag

2015-03-07 00:47 - 2012-09-25 22:43 - 00000000 ____D () C:\Documents and Settings\All Users\Application Data\MFAData

2015-03-01 17:52 - 2014-12-19 19:55 - 00000000 ____D () C:\Documents and Settings\Work 2\Desktop\GLF vids

2015-02-22 16:54 - 2011-03-17 21:16 - 00000000 ____D () C:\Documents and Settings\Work 2\Local Settings\Application Data\WMTools Downloaded Files

2015-02-22 16:23 - 2008-12-09 21:14 - 00066048 _____ () C:\Documents and Settings\Work 2\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-02-21 12:45 - 2010-03-01 06:35 - 00000000 ____D () C:\Documents and Settings\All Users\Application Data\Skype

2015-02-21 12:44 - 2010-03-01 06:35 - 00000000 ___RD () C:\Program Files\Skype

2015-02-21 11:23 - 2015-01-09 08:08 - 00014251 _____ () C:\Documents and Settings\Work 2\Desktop\Change of Address Jan 2015.xlsx

2015-02-20 17:58 - 2014-06-15 08:18 - 00133632 ___SH () C:\Documents and Settings\Work 2\Desktop\Thumbs.db

2015-02-15 12:48 - 2015-02-12 06:43 - 00000007 _____ () C:\WINDOWS\system32\ANIWZCSUSERNAME{7EF6EEBD-2E61-42CD-A876-2028A185E7DF}

2015-02-15 11:57 - 2015-02-11 06:43 - 00000007 _____ () C:\WINDOWS\system32\ANIWZCSUSERNAME{2E5E5122-B8B0-41BA-84DC-5B12E3F13377}

2015-02-15 11:57 - 2011-02-15 22:43 - 01789952 _____ () C:\Documents and Settings\Work 2\Local Settings\Application Data\filesync.metadata

2015-02-15 11:12 - 2011-02-15 22:43 - 00002259 _____ () C:\Documents and Settings\All Users\Start Menu\Programs\SyncToy 2.0.lnk

2015-02-14 10:08 - 2007-08-08 02:28 - 00605412 _____ () C:\WINDOWS\system32\PerfStringBackup.INI

 

==================== Files in the root of some directories =======

 

2013-06-27 10:13 - 2014-06-28 08:28 - 0003728 _____ () C:\Program Files\Mozilla Firefoxavg-secure-search.xml

2011-03-30 20:28 - 2011-03-30 20:31 - 0000132 _____ () C:\Documents and Settings\Work 2\Application Data\Adobe BMP Format CS5 Prefs

2011-03-31 11:25 - 2014-02-26 14:35 - 0000132 _____ () C:\Documents and Settings\Work 2\Application Data\Adobe GIF Format CS5 Prefs

2011-07-12 13:40 - 2014-08-10 11:27 - 0000132 _____ () C:\Documents and Settings\Work 2\Application Data\Adobe PNG Format CS5 Prefs

2013-10-20 13:51 - 2014-03-09 11:59 - 0000096 _____ () C:\Documents and Settings\Work 2\Application Data\Camdata.ini

2013-10-20 13:51 - 2014-03-09 11:59 - 0000408 _____ () C:\Documents and Settings\Work 2\Application Data\CamLayout.ini

2013-10-20 13:51 - 2014-03-09 11:59 - 0000408 _____ () C:\Documents and Settings\Work 2\Application Data\CamShapes.ini

2013-10-20 13:51 - 2014-03-09 11:59 - 0004510 _____ () C:\Documents and Settings\Work 2\Application Data\CamStudio.cfg

2011-07-20 14:30 - 2013-11-15 11:49 - 0001456 _____ () C:\Documents and Settings\Work 2\Local Settings\Application Data\Adobe Save for Web 12.0 Prefs

2008-12-09 21:14 - 2015-02-22 16:23 - 0066048 _____ () C:\Documents and Settings\Work 2\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2011-02-15 22:43 - 2015-02-15 11:57 - 1789952 _____ () C:\Documents and Settings\Work 2\Local Settings\Application Data\filesync.metadata

2008-10-14 14:29 - 2008-10-14 14:29 - 0000129 _____ () C:\Documents and Settings\Work 2\Local Settings\Application Data\fusioncache.dat

 

Some content of TEMP:

====================

C:\Documents and Settings\Work 2\Local Settings\temp\hpzmsi01.exe

C:\Documents and Settings\Work 2\Local Settings\temp\hpzscr01.EXE

 

 

==================== Bamital & volsnap Check =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

 

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015

Ran by Work 2 at 2015-03-15 11:30:36

Running from C:\Documents and Settings\Work 2\Desktop

Boot Mode: Normal

==========================================================

 

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

 

==================== Installed Programs ======================

 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

µTorrent (HKLM\...\uTorrent) (Version: 3.2.2.28110 - BitTorrent Inc.)

32 Bit HP CIO Components Installer (Version: 2.1.0 - Hewlett-Packard) Hidden

Adobe Acrobat 6.0 Professional - English, Français, Deutsch (HKLM\...\{AC76BA86-1033-F400-7760-000000000001}) (Version: 006.000.000 - Adobe Systems)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.4.0.2540 - Adobe Systems Incorporated)

Adobe Community Help (HKLM\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Media Player (HKLM\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)

Adobe Photoshop CS5 (HKLM\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)

Adobe Reader X (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA0000000001}) (Version: 10.0.0 - Adobe Systems Incorporated)

Amazon Send to Kindle (HKLM\...\SendToKindle) (Version: 1.0.0.192 - Amazon)

ANIO Service (HKLM\...\{7B5CE976-C7A9-4E38-A7F3-6C8EF025DD8E}) (Version:  - )

ANIWZCS2 Service (HKLM\...\{4C590030-7469-453E-8589-D15DA9D03F52}) (Version:  - )

Any DVD Cloner Platinum 1.2.0 (HKLM\...\Any DVD Cloner Platinum_is1) (Version:  - dvdsmith.com)

Any Video Converter Professional 5.0.8 (HKLM\...\Any Video Converter Professional_is1) (Version:  - Any-Video-Converter.com)

AnyCAD Viewer 2011 (HKLM\...\{65147B19-6211-43E1-9897-EA6AC44D4E24}) (Version: 2.5.0 - AnyCAD Solution)

Apple Application Support (HKLM\...\{A83279FD-CA4B-4206-9535-90974DE76654}) (Version: 2.1.5 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}) (Version: 4.0.0.96 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ArcSoft MediaConverter 2 (HKLM\...\{33295076-A0D0-49B8-9EA0-A9AB3631CDC8}) (Version:  - ArcSoft)

AsusUpdate (HKLM\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version:  - )

Attansic Giga Ethernet Utility (HKLM\...\{1F698102-5739-441E-96F0-74F4EA540F06}) (Version: 1.0 - )

Attansic L1 Gigabit Ethernet Driver (HKLM\...\AtcL1) (Version:  - )

AUSkey software 1.4.4 (HKLM\...\{24D37B30-83B4-46A7-A691-30F2FCEAE58E}) (Version: 1.4.4 - ABR)

Avanquest update (HKLM\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.12 - Avanquest Software)

AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5645 - AVG Technologies)

AVG 2015 (Version: 15.0.4299 - AVG Technologies) Hidden

AVG 2015 (Version: 15.0.5645 - AVG Technologies) Hidden

Avidemux 2.5 (32-bit) (HKLM\...\Avidemux 2.5) (Version: 2.5.4.7200 - )

AxCrypt (Remove Only) (HKLM\...\AxCrypt) (Version:  - Axon Data)

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

Bullzip PDF Printer 4.0.0.463 (HKLM\...\Bullzip PDF Printer_is1) (Version:  - Bullzip)

calibre (HKLM\...\{DD649DA2-BBD9-4247-85DD-E04F7C1E8552}) (Version: 1.48.0 - Kovid Goyal)

CamStudio version 2.7 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7 - CamStudio Open Source)

Canon Easy-PhotoPrint EX (HKLM\...\Easy-PhotoPrint EX) (Version:  - )

Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM\...\CANONIJPLM100) (Version:  - )

Canon iP4300 (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4300) (Version:  - )

Canon MG2100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2100_series) (Version:  - )

Canon MG2100 series On-screen Manual (HKLM\...\Canon MG2100 series On-screen Manual) (Version:  - )

Canon MP Navigator EX 4.0 (HKLM\...\MP Navigator EX 4.0) (Version:  - )

Canon MP Navigator EX 5.0 (HKLM\...\MP Navigator EX 5.0) (Version:  - )

Canon MP280 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP280_series) (Version:  - )

Canon My Printer (HKLM\...\CanonMyPrinter) (Version:  - )

Canon Setup Utility 2.3 (HKLM\...\Canon Setup Utility 2.3) (Version:  - )

Canon Solution Menu EX (HKLM\...\CanonSolutionMenuEX) (Version:  - )

Canon Utilities Easy-PhotoPrint (HKLM\...\Easy-PhotoPrint) (Version:  - )

Canon Utilities Easy-PrintToolBox (HKLM\...\Easy-PrintToolBox) (Version:  - )

Casper XP (HKLM\...\{243FA669-BEA1-4FD7-906F-DAF000D6B33A}) (Version: 3.0.224 - Future Systems Solutions, Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)

CD-LabelPrint (HKLM\...\MediaNavigation.CDLabelPrint) (Version:  - )

Centrebet.net (HKLM\...\Centrebet Poker.NET) (Version:  - )

CL-Eye Driver (HKLM\...\CL-Eye Driver) (Version: 5.3.0.0341 - Code Laboratories, Inc.)

Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6021.5000 - Microsoft Corporation)

ConvertHelper 2.2 (HKLM\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)

Core FTP LE (HKLM\...\CoreFTP) (Version:  - )

DaeViewer (HKLM\...\DaeViewer.76CE1EF822E2E36CA97855F1F5AE3A25B8F1B9B8.1) (Version: v1 - UNKNOWN)

DaeViewer (Version: 1 - UNKNOWN) Hidden

DeviceFunctionQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden

DivX Codec (HKLM\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.8.0 - DivX, Inc.)

DivX Content Uploader (HKLM\...\{D050D7362D214723AD585B541FFB6C11}) (Version: 1.2.1 - DivX, Inc.)

DivX Converter (HKLM\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 6.5.1 - DivX, Inc.)

DivX Setup (HKLM\...\DivX Setup) (Version: 2.6.0.34 - DivX, LLC)

DivX Web Player (HKLM\...\{B7050CBDB2504B34BC2A9CA0A692CC29}) (Version: 1.4.0 - DivX,Inc.)

D-Link Wireless G DWA-110 (HKLM\...\{5F753314-628E-4C13-B8AE-BFA7FD514CBE}) (Version:  - D-Link)

DocProcQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden

DocumentViewerQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden

Dropbox (HKU\S-1-5-21-1343024091-1326574676-725345543-1006\...\Dropbox) (Version: 2.0.22 - Dropbox, Inc.)

DVD Shrink 3.2 (HKLM\...\DVD Shrink_is1) (Version:  - DVD Shrink)

DVD-CLONER V5.00 Build 959 (HKLM\...\DVD-CLONER V_is1) (Version:  - )

Easy-WebPrint (HKLM\...\Easy-WebPrint) (Version:  - )

e-tax 2011 (HKLM\...\{C078C299-C2C2-4110-A6EF-8D5E66C228DA}) (Version: 11.1.704 - ATO)

e-tax 2012 (HKLM\...\{B0F1B02F-47A6-411D-A38B-E44CC7F53CCC}) (Version: 6.0.577 - Australian Taxation Office)

e-tax 2013 (HKLM\...\{FFF14233-FE39-4671-A38E-76FD8F24A879}) (Version: 0.10.558 - Australian Taxation Office)

e-tax 2014 (HKLM\...\{42D5C0B2-A309-4F84-9BD7-5DDDFE6C09E1}) (Version: 2.10.788 - Australian Taxation Office)

ffdshow [rev 3154] [2009-12-09] (HKLM\...\ffdshow_is1) (Version: 1.0 - )

FileMind QuickFix (HKLM\...\{92789900-80D0-4B61-B742-7897964A69AB}_is1) (Version: Build 4184 - Metability Software)

FileZilla Client 3.5.0 (HKLM\...\FileZilla Client) (Version: 3.5.0 - )

Final Draft 7 (HKLM\...\{78D62D17-D970-42DA-B8CF-5E5576293B33}) (Version: 7.1.1.19 - Final Draft, Inc.)

Free CBR Reader (HKLM\...\{B9240DAE-EFA1-4A0E-824F-17B3F99194F8}) (Version: 1.0.0 - Free Picture Solutions)

Free Convert Audio to iPhone iPod Music Converter 5.8 (HKLM\...\Free Convert Audio to iPhone iPod Music Converter_is1) (Version:  - Xillvideo Software, Inc.)

Free M4a to MP3 Converter 8.0 (HKLM\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)

Free MKV Video2Dvd 3.30 (HKLM\...\Free MKV Video2Dvd 3.30_is1) (Version:  - EffectMatrix, Inc.)

FullDPAppQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden

Google Chrome (HKU\S-1-5-21-1343024091-1326574676-725345543-1006\...\Google Chrome) (Version: 41.0.2272.89 - Google Inc.)

Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Talk Plugin (HKLM\...\{C77CC230-7417-3F01-B70D-52583DC9FEC9}) (Version: 5.40.2.0 - Google)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden

GPL Ghostscript Lite 8.70 (HKLM\...\GPL Ghostscript Lite_is1) (Version:  - )

HL-2130 (HKLM\...\{E2A97415-BD97-4867-B906-05E39E9EE51F}) (Version: 1.0.7.0 - Brother Industries, Ltd.)

HPProductAssistant (Version: 100.0.170.000 - Hewlett-Packard) Hidden

HTC BMP USB Driver (HKLM\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)

HyperSnap 6 (HKLM\...\HyperSnap 6) (Version: 5 - Hyperionics Technology LLC)

ImageMixer for HDD Camcorder (HKLM\...\{44E5B47F-870E-4E38-A458-8A5FC4DCFECF}) (Version: 3.01.001 - PIXELA)

Intel® Graphics Media Accelerator Driver (HKLM\...\{8A708DD8-A5E6-11D4-A706-000629E95E20}) (Version: 6.14.10.4543 - )

InterVideo DeviceService (HKLM\...\{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}) (Version: 1.0.0 - InterVideo)

IRAS (HKLM\...\Remote Administration System_is1) (Version:  - )

iTunes (HKLM\...\{29ED20C9-5E15-4969-9279-25BF3727A3DA}) (Version: 10.5.0.142 - Apple Inc.)

Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)

Java™ 6 Update 2 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160020}) (Version: 1.6.0.20 - Sun Microsystems, Inc.)

Java™ 6 Update 3 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160030}) (Version: 1.6.0.30 - Sun Microsystems, Inc.)

Java™ 6 Update 30 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216011FF}) (Version: 6.0.300 - Sun Microsystems, Inc.)

JavaFX 2.1.0 (HKLM\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)

Juice 2.2 (HKLM\...\Juice) (Version: 2.2 - Juice Team)

KhalSetup (Version: 3.0.101 - Logitech) Hidden

K-Lite Codec Pack 4.0.0 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 4.0.0 - )

LightScribe  1.4.124.1 (Version: 1.4.124.1 - http://www.lightscribe.com) Hidden

LiveReg (Symantec Corporation) (HKLM\...\LiveReg) (Version: 2.4.2.2295 - Symantec Corporation)

LiveUpdate 3.2 (Symantec Corporation) (HKLM\...\LiveUpdate) (Version: 3.2.0.41 - Symantec Corporation)

Logitech Desktop Messenger (HKLM\...\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}) (Version: 2.52.18 - Logitech, Inc.)

Logitech Harmony Remote Software 7 (HKLM\...\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.3.2.5 - Logitech)

Logitech SetPoint (HKLM\...\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}) (Version: 3.0 - Logitech)

Macromedia Dreamweaver 8 (HKLM\...\{0837A661-FEC3-48B3-876C-91E7D32048A9}) (Version: 8.0.0.2734 - Macromedia)

Macromedia Extension Manager (HKLM\...\{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}) (Version: 1.7.240 - Macromedia, Inc.)

Macromedia Fireworks 8 (HKLM\...\{4C24A8C1-7CFA-4650-AF15-732F5BD7B46D}) (Version: 8.0.0.777 - Macromedia)

Macromedia Flash 8 (HKLM\...\{2BD5C305-1B27-4D41-B690-7A61172D2FEB}) (Version: 8.00.0000 - Macromedia)

Macromedia Flash 8 Video Encoder (HKLM\...\{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}) (Version: 1.00.0000 - Macromedia)

Macromedia Flash Player 8 (HKLM\...\{885A63EA-382B-4DD4-A755-14809B8557D6}) (Version: 8.0.22.0 - Macromedia)

Magic ISO Maker v5.4 (build 0239) (HKLM\...\Magic ISO Maker v5.4 (build 0239)) (Version:  - )

Mavis Beacon Teaches Typing Platinum 20 (HKLM\...\{58F9D852-9443-4955-A1ED-12C9E0504DD0}) (Version: 20.00.0000 - Broderbund)

Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )

Microsoft .NET Framework 1.1 Hotfix (KB928366) (HKLM\...\M928366) (Version:  - )

Microsoft .NET Framework 3.0 (HKLM\...\Microsoft .NET Framework 3.0) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft Sync Framework Runtime v1.0 (x86) (HKLM\...\{A8BD5A60-E843-46DC-8271-ABF20756BE0F}) (Version: 1.0.1215.0 - Microsoft Corporation)

Microsoft Sync Framework Services v1.0 (x86) (HKLM\...\{03CAB33F-D1C2-48C6-8766-DAE84DFC25FE}) (Version: 1.0.1215.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft WinUsb 2.0 (HKLM\...\winusb0200) (Version:  - Microsoft Corporation)

MiniTool Partition Wizard Home Edition 6.0 (HKLM\...\{067B277E-F94B-4F04-B380-BA967C00377C}_is1) (Version:  - MiniTool Solution Ltd.)

MobileMe Control Panel (HKLM\...\{779DECD7-E072-4B56-9B6B-BEB5973EEEB5}) (Version: 3.1.6.0 - Apple Inc.)

Motorola Driver Installation (HKLM\...\{3324A5DC-C7F6-430A-ACC8-F251CD8F4FC7}) (Version: 2.7.2 - Motorola Inc.)

Motorola Phone Tools (HKLM\...\{BAD8CA9C-77C0-4663-B00B-A8D3B13C341B}) (Version: 4.3.5a 10-03-2006 - Avanquest Software)

Motorola Phone Tools (Version: 4.30 - BVRP Software) Hidden

MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden

MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden

MSXML 4.0 SP2 (KB927978) (HKLM\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 6 Service Pack 2 (KB954459) (HKLM\...\{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}) (Version: 6.20.1099.0 - Microsoft Corporation)

MYOB Accounting Plus v18.5 (HKLM\...\InstallShield_{60D06F5E-876E-4D0C-B6EE-C1820D61A5B2}) (Version: 18.5.0 - MYOB Technology Pty Ltd)

MYOB Accounting Plus v18.5 (Version: 18.5.0 - MYOB Technology Pty Ltd) Hidden

MYOB ODBC Direct v7 (HKLM\...\InstallShield_{C71F2873-3229-4A9E-A2A2-F14DCBF63F56}) (Version: 7.0.0 - MYOB Technology Pty Ltd)

MYOB ODBC Direct v7 (Version: 7.0.0 - MYOB Technology Pty Ltd) Hidden

MYOB ODBC Direct v9 AUS (HKLM\...\InstallShield_{92FF8F7F-F7AF-4643-AD5E-550E7E243C34}) (Version: 9.0.0 - MYOB Technology Pty Ltd)

MYOB ODBC Direct v9 AUS (Version: 9.0.0 - MYOB Technology Pty Ltd) Hidden

Nero 8 (HKLM\...\{5FCCD531-1B38-4A94-924C-127F722F1033}) (Version: 8.2.89 - Nero AG)

NirSoft VideoCacheView (HKLM\...\NirSoft VideoCacheView) (Version:  - )

Nokia Connectivity Cable Driver (HKLM\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)

Nokia Suite (HKLM\...\Nokia Suite) (Version: 3.8.48.0 - Nokia)

Nokia Suite (Version: 3.8.48.0 - Nokia) Hidden

O&O Defrag Professional Edition (HKLM\...\{53480330-E1D1-41CA-B8F8-7F78644F7F50}) (Version: 10.0.1634 - O&O Software GmbH)

PC Connectivity Solution (HKLM\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)

PDF Settings CS5 (Version: 10.0 - Adobe Systems Incorporated) Hidden

PeerBlock 1.2 (r693) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC)

PhotoNow! 1.0 (HKLM\...\{D36DD326-7280-11D8-97C8-000129760CBE}) (Version:  - )

PIXresizer 1.0.9 (HKLM\...\PIXresizer_is1) (Version:  - Bluefive software)

PowerISO (HKLM\...\PowerISO) (Version:  - )

PS3 Media Server (HKLM\...\PS3 Media Server) (Version: 1.54.0 - PS3 Media Server)

Qtrax 0.2beta (20080125) (HKLM\...\Qtrax 20080125) (Version:  - )

QuickTime (HKLM\...\{C9E14402-3631-4182-B377-6B0DFB1C0339}) (Version: 7.70.80.34 - Apple Inc.)

Real Alternative 2.0.2 (HKLM\...\RealAlt_is1) (Version: 2.0.2 - )

RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden

RealPlayer (HKLM\...\RealPlayer 12.0) (Version:  - RealNetworks)

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.5506 - Realtek Semiconductor Corp.)

RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden

Remote Control USB Driver (HKLM\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )

Rhapsody Player Engine (HKLM\...\{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}) (Version: 1.0.604 - RealNetworks)

RMVB Converter 1.8 (HKLM\...\{C3BDF1C8-66EF-4A0F-B427-A99E39706F45}_is1) (Version:  - RMVB Codec)

SAMSUNG Mobile Composite Device Software (HKLM\...\SAMSUNG Mobile Composite Device) (Version:  - )

SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version:  - )

Samsung Mobile phone USB driver Software (HKLM\...\Samsung Mobile phone USB driver) (Version:  - )

SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )

SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )

Samsung PC Studio 3 (HKLM\...\{C4A4722E-79F9-417C-BD72-8D359A090C97}) (Version: 3.2.2.80805 - Samsung Electronics Co., Ltd.)

Samsung PC Studio 3 (Version: 3.0.0.80805 - Samsung Electronics Co., Ltd.) Hidden

Samsung PC Studio 3 USB Driver Installer (HKLM\...\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}) (Version: 3.2.0.70701 - Samsung Electronics Co., Ltd.)

SketchUp 8 (HKLM\...\{8EB62C87-AAA6-4850-A5BC-64155884B973}) (Version: 3.0.16846 - Trimble Navigation Limited)

Skype Call Recorder (HKLM\...\{31FDDB24-D8FE-456A-8479-5E0526D5EAAF}) (Version: 0.7.2 - Alexander Nikiforov)

Skype™ 7.1 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)

Sony Vegas Movie Studio Platinum 8.0 (HKLM\...\{987B8E44-5E06-48A5-9745-46EB2B8A3CB0}) (Version: 8.0.122 - Sony)

SPCA1528 PC Driver (HKLM\...\{570C2A84-A145-4DF0-AE9D-012584DF09DC}) (Version: 2.2.2.0 - sunplus)

Spell Checker For OE 2.1 (HKLM\...\Spell Checker For OE 2.1) (Version:  - )

StreamTransport version: 1.0.2.2171 (HKLM\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version:  - )

SyncToy 2.0 (x86) (HKLM\...\{AFDFC350-C142-4790-BE12-8357AECD028F}) (Version: 2.0.100.0 - Microsoft)

Telstra Online Text Buddy 1.0 (HKLM\...\{DC970EE0-4C92-4CDE-A323-0E2F1552C35E}) (Version: 1.0 - Telstra)

Telstra USB+Wi-Fi Hostless Modem (HKLM\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.2 - ZTE Corporation)

Toolbox (Version: 61.0.163.000 - Hewlett-Packard) Hidden

TubeHunter Ultra (HKLM\...\{366FCBA4-3AB9-4EF1-938E-E7054BEA2E22}) (Version: 1.7.2155 - Neoretix Laboratory)

Ulead DVD DiskRecorder 2.1.1 (HKLM\...\{31E1050B-F69F-4A16-8F5A-E44D31901250}) (Version:  - Ulead Systems, Inc.)

Ulead DVD MovieFactory 6 (HKLM\...\InstallShield_{CCC4E428-411E-4605-B515-317D50ABD477}) (Version: 6.0.0 - InterVideo Digital Technology Corporation)

Ulead DVD MovieFactory 6 (Version: 6.0.0 - InterVideo Digital Technology Corporation) Hidden

Ulead MediaStudio Pro 8.0 (HKLM\...\{A6E71574-2126-4E95-816E-32B2411C94BA}) (Version: 8.0 - Ulead Systems, Inc.)

Ulead VideoStudio 11 (HKLM\...\InstallShield_{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}) (Version: 11.0.0.0000 - InterVideo Digital Technology Corporation)

Unload (Version: 6.0.0 - Hewlett-Packard) Hidden

USB2.0 PC Camera (HKLM\...\{417D86A0-89FE-4308-B172-45B74DCE6F8F}) (Version: 1.0.0.7 - )

VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden

VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden

VideoStudio (Version: 11.0.0.0000 - InterVideo Digital Technology Corporation) Hidden

Virgin Mobile (HKLM\...\Virgin Mobile) (Version: 13.001.08.00.261 - Huawei Technologies Co.,Ltd)

Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VLC media player 2.0.6 (HKLM\...\VLC media player) (Version: 2.0.6 - VideoLAN)

Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.2.0.0 - Azureus Software, Inc.)

WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden

Windows Driver Package - MobileTop (sshpmdm) Modem  (02/23/2007 2.5.0.0) (HKLM\...\6194C28A8F62DD817EA1B918E6E46E806A21B452) (Version: 02/23/2007 2.5.0.0 - MobileTop)

Windows Driver Package - MobileTop (sshpusb) USB  (02/23/2007 2.5.0.0) (HKLM\...\65B6FE5418CE28F4D72543FB2D964C3CEC83F161) (Version: 02/23/2007 2.5.0.0 - MobileTop)

Windows Driver Package - Nokia pccsmcfd “LegacyDriver”  (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)

Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version:  - Microsoft Corporation)

Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0036.0 - Microsoft Corporation)

Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation)

Windows Media Encoder 9 Series (HKLM\...\Windows Media Encoder 9) (Version:  - )

Windows Media Format Runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )

Windows Media Player 11 (HKLM\...\Windows Media Player) (Version:  - )

Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)

Windows XP Service Pack 3 (HKLM\...\Windows XP Service Pack) (Version: 20080414.031525 - Microsoft Corporation)

WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)

WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )

Xiph.Org Open Codecs 0.85.17777 (HKLM\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)

XML Paper Specification Shared Components Pack 1.0 (Version:  - Microsoft Corporation) Hidden

YTD Toolbar v6.2 (HKLM\...\{BCC315E7-2E8F-4EFD-8A0B-F8F276FE73F2}) (Version: 6.2 - Spigot, Inc.) <==== ATTENTION

 

==================== Custom CLSID (selected items): ==========================

 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

 

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{035FBE31-3755-450A-A775-5E6BBD43D344}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.135\psuser.dll (the data entry has 8 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{095A2EEC-F7FE-42E8-96FB-C20E53081908}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.99\psuser.dll  (the data entry has 7 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{0E55CBE1-B06A-49B6-AD8D-9EFAA0160C6F}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.57\psuser.dll  (the data entry has 7 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.25.5\psuser.dll N (the data entry has 6 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{218D2740-5A50-42A8-AB9F-62FF1B168782}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.69\psuser.dll  (the data entry has 7 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{320F0FDB-BE0A-4648-9D18-4A2C3448C007}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.79\psuser.dll  (the data entry has 7 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.23.9\psuser.dll N (the data entry has 6 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Google Talk Plugin\googletalkax.dll (Google)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Chrome\Application\41.0.2272.89\delegate_execute.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.145\psuser.dll (the data entry has 8 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.123\psuser.dll (the data entry has 8 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{66E8DCC7-97D2-4A89-8E08-D0610FF0878C}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Conduit\Community Alerts\Alert.dll  (the data entry has 7 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.153\psuser.dll (the data entry has 8 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.24.15\psuser.dll  (the data entry has 7 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.149\psuser.dll (the data entry has 8 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{A45426FB-E444-42B2-AA56-419F8FBEEC61}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.22.3\psuser.dll N (the data entry has 6 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{A54D478D-4F70-4F72-9A74-17C9986E35AB}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.165\psuser.dll (the data entry has 8 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Google Talk Plugin\o1dax.dll (Google)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{ba14329e-9550-4989-b3f2-9732e92d17cc}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Vuze_Remote\prxtbVuz2.dll No File

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\psuser.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.115\psuser.dll (the data entry has 8 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.25.11\psuser.dll  (the data entry has 7 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{DB25D157-76D4-41C1-97B5-359E4A4CECEB}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.65\psuser.dll  (the data entry has 7 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{E30ED111-BD63-48C2-A6CB-AB3C9FFFB07C}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Vuze_Remote\prxtbVuz2.dll No File

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\GoogleUpdateOnDemand.exe (Google Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{E69341A3-E6D2-4175-B60C-C9D3D6FA40F6}\localserver32 -> C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.26.9\psuser.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{EB06378B-ABB6-4B3C-9B40-D488DD8A6E93}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.22.5\psuser.dll N (the data entry has 6 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Documents and Settings\Work 2\Application Data\Dropbox\bin\DropboxExt.19.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.21.111\psuser.dll (the data entry has 8 more characters).

CustomCLSID: HKU\S-1-5-21-1343024091-1326574676-725345543-1006_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\1.3.24.7\psuser.dll N (the data entry has 6 more characters).

 

==================== Restore Points  =========================

 

09-03-2015 21:36:23 System Checkpoint

10-03-2015 21:56:40 System Checkpoint

11-03-2015 07:05:07 Removed Symantec pcAnywhere.

12-03-2015 07:51:27 System Checkpoint

13-03-2015 08:35:19 System Checkpoint

14-03-2015 17:04:15 Installed calibre

14-03-2015 17:05:50 Removed calibre

14-03-2015 17:36:17 Removed Ad-Aware 2007

14-03-2015 17:38:14 Removed RIA-Media Viewer

14-03-2015 17:38:56 Removed YTD Toolbar v6.2.

14-03-2015 17:39:14 Removed YTD Toolbar v6.2.

15-03-2015 11:10:12 Removed YTD Toolbar v6.2.

15-03-2015 11:10:30 Removed QuarkXPress 7.2.

15-03-2015 11:11:22 Configured PowerDirector

15-03-2015 11:19:27 Configured MYOB Accounting Plus v18.5

15-03-2015 11:20:32 Configured MYOB Accounting Plus v16

15-03-2015 11:24:28 Configured MYOB Accounting Plus v17

15-03-2015 11:28:48 Removed Australian City Streets Ver 3

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2004-08-04 22:00 - 2015-03-15 09:32 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost

 

==================== Scheduled Tasks (whitelisted) =============

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Program Files\Apple Software Update\SoftwareUpdate.exe

Task: C:\WINDOWS\Tasks\Casper XP Scheduled Copy of Disk 1 to Disk 2.job => C:\Program Files\Future Systems Solutions\Casper XP\CasperXP.EXE

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-1326574676-725345543-1006Core.job => C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-1326574676-725345543-1006UA.job => C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1343024091-1326574676-725345543-1006.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe

Task: C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1343024091-1326574676-725345543-1006.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe

Task: C:\WINDOWS\Tasks\WGASetup.job => C:\WINDOWS\system32\KB905474\wgasetup.exe

 

==================== Loaded Modules (whitelisted) ==============

 

2012-12-16 12:01 - 2005-03-28 19:13 - 00077824 _____ () C:\WINDOWS\system32\csdlocalmon.dll

2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2007-07-27 22:00 - 2008-04-14 05:41 - 00059904 _____ () C:\WINDOWS\system32\devenum.dll

2007-07-27 22:00 - 2008-04-14 05:42 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll

2007-07-27 22:00 - 2008-04-14 05:42 - 00386048 _____ () C:\WINDOWS\system32\qdvd.dll

2007-07-27 22:00 - 2008-04-14 05:42 - 01288192 _____ () C:\WINDOWS\system32\quartz.dll

2007-07-27 22:00 - 2008-04-14 05:42 - 00192512 _____ () C:\WINDOWS\system32\qcap.dll

2009-10-27 13:27 - 2007-12-11 15:36 - 00245760 _____ () C:\WINDOWS\system32\WlanApp.dll

2015-01-25 10:35 - 2012-09-21 00:16 - 00442696 _____ () C:\Program Files\Hostless Modem\Telstra USB+Wi-Fi\CheckNDISPort_df.exe

 

==================== Alternate Data Streams (whitelisted) =========

 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

 

 

==================== Safe Mode (whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

 

==================== EXE Association (whitelisted) ===============

 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

 

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-1343024091-1326574676-725345543-1006\Control Panel\Desktop\\Wallpaper -> C:\Documents and Settings\Work 2\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

DNS Servers: 192.168.0.1

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

(Currently there is no automatic fix for this section.)

 

MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Photosmart Premier Fast Start.lnk => C:\WINDOWS\pss\HP Photosmart Premier Fast Start.lnkCommon Startup

MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ImageMixer for HDD Camcorder.lnk => C:\WINDOWS\pss\ImageMixer for HDD Camcorder.lnkCommon Startup

MSCONFIG\startupfolder: C:^Documents and Settings^Work 2^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk => C:\WINDOWS\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"

MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

MSCONFIG\startupreg: AppleSyncNotifier => C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe

MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: BrStsMon00 => C:\Program Files\Browny02\Brother\BrStMonW.exe /AUTORUN

MSCONFIG\startupreg: CanonMyPrinter => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon

MSCONFIG\startupreg: CanonSolutionMenuEx => C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon

MSCONFIG\startupreg: DivXUpdate => "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

MSCONFIG\startupreg: Easy-PrintToolBox => C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon

MSCONFIG\startupreg: Google Update => "C:\Documents and Settings\Work 2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: hpqSRMon => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: Logitech Hardware Abstraction Layer => "C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE"

MSCONFIG\startupreg: MSMSGS => "C:\Program Files\Messenger\msmsgs.exe" /background

MSCONFIG\startupreg: NBKeyScan => "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

MSCONFIG\startupreg: NeroFilterCheck => C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe

MSCONFIG\startupreg: OnlineTextBuddy => "C:\Program Files\Telstra\OnlineTextBuddy\OnlineTextBuddy.exe" /quiet

MSCONFIG\startupreg: OODefragTray => C:\WINDOWS\system32\oodtray.exe

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SkyTel => SkyTel.EXE

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: SwitchBoard => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

MSCONFIG\startupreg: TkBellExe => "C:\Program Files\real\realplayer\update\realsched.exe"  -osboot

MSCONFIG\startupreg: UVS11 Preload => C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe

 

==================== Accounts: =============================

 

Administrator (S-1-5-21-1343024091-1326574676-725345543-500 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Administrator

ASPNET (S-1-5-21-1343024091-1326574676-725345543-1005 - Limited - Enabled)

Guest (S-1-5-21-1343024091-1326574676-725345543-501 - Limited - Disabled)

HelpAssistant (S-1-5-21-1343024091-1326574676-725345543-1000 - Limited - Disabled)

SUPPORT_388945a0 (S-1-5-21-1343024091-1326574676-725345543-1002 - Limited - Disabled)

User2 (S-1-5-21-1343024091-1326574676-725345543-1008 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\User2

Work 2 (S-1-5-21-1343024091-1326574676-725345543-1006 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Work 2

 

==================== Faulty Device Manager Devices =============

 

Name: Logitech PS/2 Keyboard

Description: Logitech PS/2 Keyboard

Class Guid: {4D36E96B-E325-11CE-BFC1-08002BE10318}

Manufacturer: Logitech

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (03/15/2015 11:10:11 AM) (Source: MsiInstaller) (EventID: 11316) (User: COMPUTER)

Description: Product: YTD Toolbar v6.2 -- Error 1316.A network error occurred while attempting to read from the file C:\WINDOWS\Installer\ytdToolbar.msi

 

Error: (03/15/2015 10:56:07 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.

Processing media-specific event for [chrome.exe!ws!]

 

Error: (03/15/2015 10:53:20 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.

Processing media-specific event for [chrome.exe!ws!]

 

Error: (03/15/2015 10:52:44 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application ANIWZCSdS.exe, version 1.0.3.7034, faulting module user32.dll, version 5.1.2600.5512, fault address 0x00014acd.

Processing media-specific event for [ANIWZCSdS.exe!ws!]

 

Error: (03/15/2015 10:23:02 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.

Processing media-specific event for [chrome.exe!ws!]

 

Error: (03/15/2015 09:41:38 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.

Processing media-specific event for [chrome.exe!ws!]

 

Error: (03/15/2015 09:34:28 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.

Processing media-specific event for [chrome.exe!ws!]

 

Error: (03/15/2015 07:55:01 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.

Processing media-specific event for [chrome.exe!ws!]

 

Error: (03/15/2015 07:53:10 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.

Processing media-specific event for [chrome.exe!ws!]

 

Error: (03/15/2015 05:57:54 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application chrome.exe, version 41.0.2272.89, faulting module , version 0.0.0.0, fault address 0x00000000.

Processing media-specific event for [chrome.exe!ws!]

 

 

System errors:

=============

Error: (03/15/2015 10:56:05 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The ANIWZCSd Service service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (03/15/2015 10:52:52 AM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: The HP CUE DeviceDiscovery Service service hung on starting.

 

Error: (03/15/2015 10:51:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The SPCA1528 Video Camera Service service failed to start due to the following error: 

%%2

 

Error: (03/15/2015 10:51:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The AVG WatchDog service failed to start due to the following error: 

%%1053

 

Error: (03/15/2015 10:51:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Timeout (30000 milliseconds) waiting for the AVG WatchDog service to connect.

 

Error: (03/15/2015 10:51:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The AVGIDSAgent service failed to start due to the following error: 

%%1053

 

Error: (03/15/2015 10:51:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Timeout (30000 milliseconds) waiting for the AVGIDSAgent service to connect.

 

Error: (03/15/2015 10:51:26 AM) (Source: WMPNetworkSvc) (EventID: 14325) (User: )

Description: Service 'WMPNetworkSvc' did not start correctly because QueryService encountered error '0x80004002'. In Windows Media Player, turn off media sharing, and then turn it back on.

 

Error: (03/15/2015 09:34:15 AM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: The HP CUE DeviceDiscovery Service service hung on starting.

 

Error: (03/15/2015 09:32:33 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The SPCA1528 Video Camera Service service failed to start due to the following error: 

%%2

 

 

Microsoft Office Sessions:

=========================

Error: (12/15/2014 05:45:07 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 805 seconds with 240 seconds of active time.  This session ended with a crash.

 

Error: (09/22/2014 06:46:04 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 2679 seconds with 300 seconds of active time.  This session ended with a crash.

 

Error: (08/11/2014 07:34:18 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 3750 seconds with 600 seconds of active time.  This session ended with a crash.

 

Error: (01/31/2014 03:20:05 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 6344 seconds with 1560 seconds of active time.  This session ended with a crash.

 

Error: (10/30/2013 07:36:01 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1401 seconds with 360 seconds of active time.  This session ended with a crash.

 

Error: (10/03/2013 08:42:54 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 711 seconds with 240 seconds of active time.  This session ended with a crash.

 

Error: (09/11/2013 02:18:14 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 5 seconds with 0 seconds of active time.  This session ended with a crash.

 

Error: (06/22/2013 03:20:16 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 18698 seconds with 2400 seconds of active time.  This session ended with a crash.

 

Error: (06/19/2013 09:13:26 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 19942 seconds with 2100 seconds of active time.  This session ended with a crash.

 

Error: (05/21/2013 10:04:09 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1611 seconds with 780 seconds of active time.  This session ended with a crash.

 

 

==================== Memory info =========================== 

 

Processor: Intel® Core™2 Duo CPU E6750 @ 2.66GHz

Percentage of memory in use: 37%

Total physical RAM: 2039.07 MB

Available physical RAM: 1268.17 MB

Total Pagefile: 4970.38 MB

Available Pagefile: 4277.51 MB

Total Virtual: 2047.88 MB

Available Virtual: 1927.88 MB

 

==================== Drives ================================

 

Drive c: (Main) (Fixed) (Total:931.51 GB) (Free:8.71 GB) NTFS ==>[Drive with boot components (Windows XP)]

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: C8188012)

Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

 

==================== End Of Log ============================

[emeraldnzl]

Question:

 

Are you aware of proxy configuration in Firefox has been edited?

[Damon(V)]

Question:

 

Are you aware of proxy configuration in Firefox has been edited?

Not recently, that sounds like something I may have done in the past possibly but sorry I don't remember, would have been a long time ago.

I have removed firefox after getting the virus.

[emeraldnzl]

Hello Damon,

 

Open notepad.

Please copy the contents of the code box below.

To do this highlight (click in the box and press Ctrl + A) the contents of the box and right click on it. Paste this into the open notepad. Save it to the Desktop as fixlist.txt.

Alternatively type the contents of the box into notepad and save it to your desktop as fixlist.txt.

NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1343024091-1326574676-725345543-1006\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-1343024091-1326574676-725345543-1006 -> {F02EF4DB-5280-4E91-B854-AA0795C93A5A} URL = http://au.search.yah...p={searchTerms}
YTD Toolbar v6.2 (HKLM\...\{BCC315E7-2E8F-4EFD-8A0B-F8F276FE73F2}) (Version: 6.2 - Spigot, Inc.) <==== ATTENTION
FF Keyword.URL: hxxp://flybuys.search.adlux.com/search/?utm_source=adlux&utm_medium=cpc&ourmark=3&q=
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*'))%20%7B%20return%20'PROXY%20us09.sq.proxmate.me%3A8000%3B%20PROXY%20us04.sq.proxmate.me%3A8000%3B%20PROXY%20us02.sq.proxmate.me%3A8000%3B%20PROXY%20us08.sq.proxmate.me%3A8000%3B%20PROXY%20us10.sq.proxmate.me%3A8000%3B%20PROXY%20us11.sq.proxmate.me%3A8000%3B%20PROXY%20us01.sq.proxmate.me%3A8000%3B%20PROXY%20us06.sq.proxmate.me%3A8000%3B%20PROXY%20us05.sq.proxmate.me%3A8000%3B%20PROXY%20us03.sq.proxmate.me%3A8000%3B%20PROXY%20us07.sq.proxmate.me%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF SearchPlugin: C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\searchplugins\search-to-earn-points.xml [2014-07-05]
FF Extension: Vuze Remote  - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} [2015-01-15]
FF Extension: ProxMate - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2014-03-06]
FF Extension: QR Decoder - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-11-04]
FF Extension: Rainbow - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-03-18]
FF Extension: Tile Tabs - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2011-08-11]
FF Extension: RSS Ticker - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{1f91cde0-c040-11da-a94d-0800200c9a66}.xpi [2012-12-28]
FF Extension: Mobile Barcoder - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{A5C87640-F7CF-11DA-974D-0800200C9A66}.xpi [2012-11-04]
FF Extension: Modify Headers - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2012-03-27]
FF Extension: flybuys Toolbar - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{d8c4975b-9e4b-4574-b5ab-67fe58455a95}.xpi [2012-12-01]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - No Path Or update_url value
EmptyTemp:

This script is specifically written for the infection on this person's computer. It should NOT to be used on another machine. It may cause serious damage even to the point of rendering the computer unusable.

Run FRST/FRST64 and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

 

[Damon(V)]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-03-2015

Ran by Work 2 at 2015-03-15 12:44:29 Run:3

Running from C:\Documents and Settings\Work 2\Desktop

Loaded Profiles: Work 2 (Available profiles: Work 2 & User2 & Administrator)

Boot Mode: Normal

 

==============================================

 

Content of fixlist:

*****************

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-1343024091-1326574676-725345543-1006\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

SearchScopes: HKU\S-1-5-21-1343024091-1326574676-725345543-1006 -> {F02EF4DB-5280-4E91-B854-AA0795C93A5A} URL = http://au.search.yah...p={searchTerms}

YTD Toolbar v6.2 (HKLM\...\{BCC315E7-2E8F-4EFD-8A0B-F8F276FE73F2}) (Version: 6.2 - Spigot, Inc.) <==== ATTENTION

FF Keyword.URL: hxxp://flybuys.search.adlux.com/search/?utm_source=adlux&utm_medium=cpc&ourmark=3&q=

FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*'))%20%7B%20return%20'PROXY%20us09.sq.proxmate.me%3A8000%3B%20PROXY%20us04.sq.proxmate.me%3A8000%3B%20PROXY%20us02.sq.proxmate.me%3A8000%3B%20PROXY%20us08.sq.proxmate.me%3A8000%3B%20PROXY%20us10.sq.proxmate.me%3A8000%3B%20PROXY%20us11.sq.proxmate.me%3A8000%3B%20PROXY%20us01.sq.proxmate.me%3A8000%3B%20PROXY%20us06.sq.proxmate.me%3A8000%3B%20PROXY%20us05.sq.proxmate.me%3A8000%3B%20PROXY%20us03.sq.proxmate.me%3A8000%3B%20PROXY%20us07.sq.proxmate.me%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"

FF NetworkProxy: "type", 2

FF SearchPlugin: C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\searchplugins\search-to-earn-points.xml [2014-07-05]

FF Extension: Vuze Remote  - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} [2015-01-15]

FF Extension: ProxMate - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2014-03-06]

FF Extension: QR Decoder - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-11-04]

FF Extension: Rainbow - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2012-03-18]

FF Extension: Tile Tabs - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] [2011-08-11]

FF Extension: RSS Ticker - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{1f91cde0-c040-11da-a94d-0800200c9a66}.xpi [2012-12-28]

FF Extension: Mobile Barcoder - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{A5C87640-F7CF-11DA-974D-0800200C9A66}.xpi [2012-11-04]

FF Extension: Modify Headers - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2012-03-27]

FF Extension: flybuys Toolbar - C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{d8c4975b-9e4b-4574-b5ab-67fe58455a95}.xpi [2012-12-01]

FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path Or update_url value

CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - No Path Or update_url value

EmptyTemp:

*****************

 

"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.

"HKU\S-1-5-21-1343024091-1326574676-725345543-1006\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.

"HKU\S-1-5-21-1343024091-1326574676-725345543-1006\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F02EF4DB-5280-4E91-B854-AA0795C93A5A}" => Key deleted successfully.

HKCR\CLSID\{F02EF4DB-5280-4E91-B854-AA0795C93A5A} => Key not found. 

YTD Toolbar v6.2 (HKLM\...\{BCC315E7-2E8F-4EFD-8A0B-F8F276FE73F2}) (Version: 6.2 - Spigot, Inc.) <==== ATTENTION => Error: No automatic fix found for this entry.

Firefox Keyword.URL deleted successfully.

Firefox Proxy settings were reset.

Firefox Proxy settings were reset.

C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\searchplugins\search-to-earn-points.xml => Moved successfully.

C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} => Moved successfully.

C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] => Moved successfully.

C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] => Moved successfully.

C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] => Moved successfully.

C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\[email protected] => Moved successfully.

C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{1f91cde0-c040-11da-a94d-0800200c9a66}.xpi => Moved successfully.

C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{A5C87640-F7CF-11DA-974D-0800200C9A66}.xpi => Moved successfully.

C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi => Moved successfully.

C:\Documents and Settings\Work 2\Application Data\Mozilla\Firefox\Profiles\9fauh4ap.default\Extensions\{d8c4975b-9e4b-4574-b5ab-67fe58455a95}.xpi => Moved successfully.

C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} => not found.

"HKLM\SOFTWARE\Google\Chrome\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk" => Key deleted successfully.

"HKLM\SOFTWARE\Google\Chrome\Extensions\nneajnkjbffgblleaoojgaacokifdkhm" => Key deleted successfully.

EmptyTemp: => Removed 112.8 MB temporary data.

 

 

The system needed a reboot. 

 

==== End of Fixlog 12:44:47 ====

[emeraldnzl]

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quote box below into it:
 

KillAll::

Folder::
C:\Program Files\YTD Toolbar

Reboot::

Save this as CFScript.txt, in the same location as ComboFix.exe



Referring to the picture above, drag CFScript into ComboFix.exe

When finished, it will produce a log for you at C:\ComboFix.txt. Please post that here for further review.