Results 1 to 10 of 32

Thread: look2me/ guard.tmp/ command service etc

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Junior Member
    Join Date
    Nov 2006
    Posts
    24

    Cool look2me/ guard.tmp/ command service etc

    I have some spyware on my Pc and I donít know how to get rid of it. I was going to reformat the C drive and reinstall windows, but Iíve borrowed two external hard drives from people and my PC doesnít like either of them. It says the file system is RAW and that the device cannot be accessed because of an I/O error. I have two hard drives, C for program files and assorted necessities, and a D drive because I record a lot of music, using Cubase. Do pcís not like too many drives?

    When I run Ad-Aware and Spybot scans I always find the same files: guard.tmp, cmdservice, and always a randomly named file in system 32 thatís something to with look2me. None of these can be deleted. Iíve mucked about with my security settings to try to help but I donít really know what Iím doing, and now I canít seem to run an online scan Ė perhaps Iíve blocked that somehow.

    Symptoms: Slow startup, slow surfing, random popups. At first they were just annoying but weíve had porn ones now Ė my kids use the pc so I need this sorted. Now I canít open any icons on the desktop, including internet explorer and my computer. If I try everything disappears then comes back as if Iím restarting explorer. I tried a system restore but the problem hasnít gone away.

    Iím using MSN explore now which seems to be working fine Ė and I havenít had any popups today. MmmÖ

    There are other niggly things too. Here is the latest hijackthis log. Please help.

    regards

    Shorn


    Logfile of HijackThis v1.99.1
    Scan saved at 11:02:48, on 26/11/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\CTsvcCDA.exe
    C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
    C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
    C:\Program Files\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe
    C:\WINDOWS\system32\CTHELPER.EXE
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Microsoft Office\Office\WINWORD.EXE
    D:\UPDATE_FILES\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.co.uk/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe"
    O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Antivirus Platinum\Inicio.exe"
    O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
    O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
    O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
    O4 - HKLM\..\Run: [EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIE.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB001" /M "Stylus Photo R220"
    O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
    O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
    O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
    O16 - DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} (VideoEgg ActiveX Loader) - http://update.videoegg.com/Install/W...gPublisher.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
    O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

  2. #2
    Expert-Emeritus illukka's Avatar
    Join Date
    Nov 2005
    Location
    The Pits Of Hell
    Posts
    1,289

    Default

    hi

    i want you to do another hijackthis scan, only this time right click hijackthis before scanning, select "rename"
    rename it to scanner

    then doubleclick scanner.exe to launch it, perform another scan and post the resulting logfile here
    I Am A Proud Member of ASAP Since 2004

    To Ride, Shoot Straight And Speak TheTruth

    HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!

  3. #3
    Junior Member
    Join Date
    Nov 2006
    Posts
    24

    Default scanner log

    hope this is right

    thanks

    Stewart

    Logfile of HijackThis v1.99.1
    Scan saved at 00:11:58, on 29/11/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\CTsvcCDA.exe
    C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
    C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
    C:\Program Files\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe
    C:\WINDOWS\system32\CTHELPER.EXE
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\PROGRA~1\MSNMES~1\msnmsgr.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Microsoft Office\Office\WINWORD.EXE
    D:\UPDATE_FILES\scanner.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.co.uk/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: (no name) - {35F7813A-AF74-4474-B1DC-7EE6FB6C43C6} - C:\WINDOWS\system32\noiffvuj.dll
    O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll
    O2 - BHO: (no name) - {84D17891-1C72-4489-8797-A46632F6FF80} - C:\WINDOWS\system32\mwytxvwa.dll
    O2 - BHO: (no name) - {DC11CDED-814C-4BB5-BACC-C7D317C18204} - C:\WINDOWS\repair\natiibn.dll
    O2 - BHO: (no name) - {FC69FAC6-1D49-4723-AB15-3A97D285E12D} - C:\WINDOWS\repair\natiibn.dll
    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll
    O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe"
    O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Antivirus Platinum\Inicio.exe"
    O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
    O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
    O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
    O4 - HKLM\..\Run: [EPSON Stylus Photo R220 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIE.EXE /P30 "EPSON Stylus Photo R220 Series" /O6 "USB001" /M "Stylus Photo R220"
    O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
    O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
    O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
    O16 - DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} (VideoEgg ActiveX Loader) - http://update.videoegg.com/Install/W...gPublisher.exe
    O20 - Winlogon Notify: natiibn - C:\WINDOWS\repair\natiibn.dll
    O20 - Winlogon Notify: Reinstall - C:\WINDOWS\system32\en8ul1l91.dll (file missing)
    O20 - Winlogon Notify: Run - C:\WINDOWS\system32\jt2207foe.dll
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
    O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

  4. #4
    Expert-Emeritus illukka's Avatar
    Join Date
    Nov 2005
    Location
    The Pits Of Hell
    Posts
    1,289

    Default

    hi

    that was right on, and it revealed the infections i suspected--

    1. Download this file - combofix.exe
    be sure to save it to your desktop!

    2. then click start > run > and copy/paste the following command into the box

    "%userprofile\desktop\combofix.exe" /v noiffvuj mwytxvwa natiibn



    3. When finished, it shall produce a log for you. Post that log in your next reply


    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall

    "%userprofile\desktop\combofix.exe" /v
    I Am A Proud Member of ASAP Since 2004

    To Ride, Shoot Straight And Speak TheTruth

    HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!

  5. #5
    Junior Member
    Join Date
    Nov 2006
    Posts
    24

    Default combofix log

    Here we are. It's a bit big, I have to split it over several posts. S


    Stewart - 06-11-29 21:11:42.97 Service Pack 2
    ComboFix 06.11.27W - Running from: "C:\Documents and Settings\Stewart\Desktop"

    ((((((((((((((((((((((((((((((((((((((((((((( Look2Me's Log ))))))))))))))))))))))))))))))))))))))))))))))))))

    REGISTRY ENTRIES REMOVED:

    [HKEY_CLASSES_ROOT\clsid\{0715BD10-73A3-43DA-B43F-3063AF9D2805}]
    @=""
    "IDEx"="ADDR"

    [HKEY_CLASSES_ROOT\clsid\{0715BD10-73A3-43DA-B43F-3063AF9D2805}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{0715BD10-73A3-43DA-B43F-3063AF9D2805}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{0715BD10-73A3-43DA-B43F-3063AF9D2805}\InprocServer32]
    @="C:\\WINDOWS\\system32\\mdutilse.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{B024B1B6-5740-4B57-A9CD-F0073064B30B}]
    @=""
    "IDEx"="ADDR"

    [HKEY_CLASSES_ROOT\clsid\{B024B1B6-5740-4B57-A9CD-F0073064B30B}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B024B1B6-5740-4B57-A9CD-F0073064B30B}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B024B1B6-5740-4B57-A9CD-F0073064B30B}\InprocServer32]
    @="C:\\WINDOWS\\system32\\mqtlsapi.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{82FC3101-A10A-4D42-8313-312F7A276A88}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{82FC3101-A10A-4D42-8313-312F7A276A88}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{82FC3101-A10A-4D42-8313-312F7A276A88}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{82FC3101-A10A-4D42-8313-312F7A276A88}\InprocServer32]
    @="C:\\WINDOWS\\system32\\mrhtmled.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{D44AD208-B09B-4E12-959E-E56501831DC3}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{D44AD208-B09B-4E12-959E-E56501831DC3}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{D44AD208-B09B-4E12-959E-E56501831DC3}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{D44AD208-B09B-4E12-959E-E56501831DC3}\InprocServer32]
    @="C:\\WINDOWS\\system32\\mxtime.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{306C8E9C-E5AE-4A37-921E-4C3066E1D3F1}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{306C8E9C-E5AE-4A37-921E-4C3066E1D3F1}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{306C8E9C-E5AE-4A37-921E-4C3066E1D3F1}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{306C8E9C-E5AE-4A37-921E-4C3066E1D3F1}\InprocServer32]
    @="C:\\WINDOWS\\system32\\drskcopy.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{08CFE932-0640-4DE5-B090-BCF458D9645A}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{08CFE932-0640-4DE5-B090-BCF458D9645A}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{08CFE932-0640-4DE5-B090-BCF458D9645A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{08CFE932-0640-4DE5-B090-BCF458D9645A}\InprocServer32]
    @="C:\\WINDOWS\\system32\\pbgfilt.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{EA301F74-3BB9-42E6-BD2A-E7EB51125253}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{EA301F74-3BB9-42E6-BD2A-E7EB51125253}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{EA301F74-3BB9-42E6-BD2A-E7EB51125253}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{EA301F74-3BB9-42E6-BD2A-E7EB51125253}\InprocServer32]
    @="C:\\WINDOWS\\system32\\event97.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{1D9FA18A-9933-41AC-9BAB-6E36676C1DF8}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{1D9FA18A-9933-41AC-9BAB-6E36676C1DF8}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{1D9FA18A-9933-41AC-9BAB-6E36676C1DF8}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{1D9FA18A-9933-41AC-9BAB-6E36676C1DF8}\InprocServer32]
    @="C:\\WINDOWS\\system32\\wmbhits.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{529BD013-065B-4153-827F-2903A22106EE}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{529BD013-065B-4153-827F-2903A22106EE}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{529BD013-065B-4153-827F-2903A22106EE}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{529BD013-065B-4153-827F-2903A22106EE}\InprocServer32]
    @="C:\\WINDOWS\\system32\\saarddlg.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{2F86397E-EAD1-4A72-910A-781D3D756BE8}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2F86397E-EAD1-4A72-910A-781D3D756BE8}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2F86397E-EAD1-4A72-910A-781D3D756BE8}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2F86397E-EAD1-4A72-910A-781D3D756BE8}\InprocServer32]
    @="C:\\WINDOWS\\system32\\ueimdmat.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{BF9E72F2-B58F-468A-B038-CABE1952AF4F}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{BF9E72F2-B58F-468A-B038-CABE1952AF4F}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{BF9E72F2-B58F-468A-B038-CABE1952AF4F}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{BF9E72F2-B58F-468A-B038-CABE1952AF4F}\InprocServer32]
    @="C:\\WINDOWS\\system32\\sxhannel.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{BA5BA35F-9008-43EB-B174-A268C762D763}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{BA5BA35F-9008-43EB-B174-A268C762D763}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{BA5BA35F-9008-43EB-B174-A268C762D763}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{BA5BA35F-9008-43EB-B174-A268C762D763}\InprocServer32]
    @="C:\\WINDOWS\\system32\\ef66l1js1.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{B523299D-1478-4EC0-8A2E-BC83271E2DC9}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B523299D-1478-4EC0-8A2E-BC83271E2DC9}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B523299D-1478-4EC0-8A2E-BC83271E2DC9}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B523299D-1478-4EC0-8A2E-BC83271E2DC9}\InprocServer32]
    @="C:\\WINDOWS\\system32\\aostream.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{B45E0CFF-56C9-48BE-B3C5-86EDCFB5A101}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B45E0CFF-56C9-48BE-B3C5-86EDCFB5A101}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B45E0CFF-56C9-48BE-B3C5-86EDCFB5A101}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B45E0CFF-56C9-48BE-B3C5-86EDCFB5A101}\InprocServer32]
    @="C:\\WINDOWS\\system32\\sqlfx.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{F873640C-BD50-4BCB-BC53-8A6215C429D3}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F873640C-BD50-4BCB-BC53-8A6215C429D3}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F873640C-BD50-4BCB-BC53-8A6215C429D3}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F873640C-BD50-4BCB-BC53-8A6215C429D3}\InprocServer32]
    @="C:\\WINDOWS\\system32\\nysdexts.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{553AE8E2-2CAA-4FF8-A680-2955CC99FE05}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{553AE8E2-2CAA-4FF8-A680-2955CC99FE05}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{553AE8E2-2CAA-4FF8-A680-2955CC99FE05}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{553AE8E2-2CAA-4FF8-A680-2955CC99FE05}\InprocServer32]
    @="C:\\WINDOWS\\system32\\mnvcp60.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{BDFFBB30-74EE-4CED-9F5E-730BF0CA0735}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{BDFFBB30-74EE-4CED-9F5E-730BF0CA0735}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{BDFFBB30-74EE-4CED-9F5E-730BF0CA0735}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{BDFFBB30-74EE-4CED-9F5E-730BF0CA0735}\InprocServer32]
    @="C:\\WINDOWS\\system32\\amicap32.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{9554D3B7-822C-42C0-8265-FC42C9F441E3}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{9554D3B7-822C-42C0-8265-FC42C9F441E3}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{9554D3B7-822C-42C0-8265-FC42C9F441E3}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{9554D3B7-822C-42C0-8265-FC42C9F441E3}\InprocServer32]
    @="C:\\WINDOWS\\system32\\eys.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{F8B81EAD-7722-4B4C-B038-CDC339A6BF69}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F8B81EAD-7722-4B4C-B038-CDC339A6BF69}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F8B81EAD-7722-4B4C-B038-CDC339A6BF69}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F8B81EAD-7722-4B4C-B038-CDC339A6BF69}\InprocServer32]
    @="C:\\WINDOWS\\system32\\cWtsrvut.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{12C304E3-5CCD-4911-8375-E63DEF2C0140}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{12C304E3-5CCD-4911-8375-E63DEF2C0140}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{12C304E3-5CCD-4911-8375-E63DEF2C0140}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{12C304E3-5CCD-4911-8375-E63DEF2C0140}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{FBD400FB-A558-464F-95EC-25B97BE46EDE}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{FBD400FB-A558-464F-95EC-25B97BE46EDE}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{FBD400FB-A558-464F-95EC-25B97BE46EDE}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{FBD400FB-A558-464F-95EC-25B97BE46EDE}\InprocServer32]
    @="C:\\WINDOWS\\system32\\mzxclu.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{2C76E83E-892D-40C5-8A24-9E83AE7E901D}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2C76E83E-892D-40C5-8A24-9E83AE7E901D}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2C76E83E-892D-40C5-8A24-9E83AE7E901D}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2C76E83E-892D-40C5-8A24-9E83AE7E901D}\InprocServer32]
    @="C:\\WINDOWS\\system32\\udrsdpia.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{7654FBFD-9200-4DCE-8A8C-B1FBEB262287}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{7654FBFD-9200-4DCE-8A8C-B1FBEB262287}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{7654FBFD-9200-4DCE-8A8C-B1FBEB262287}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{7654FBFD-9200-4DCE-8A8C-B1FBEB262287}\InprocServer32]
    @="C:\\WINDOWS\\system32\\nmtui1.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{072D79B9-496D-4B97-9DEF-1D84028236FE}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{072D79B9-496D-4B97-9DEF-1D84028236FE}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{072D79B9-496D-4B97-9DEF-1D84028236FE}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{072D79B9-496D-4B97-9DEF-1D84028236FE}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{57D45B7D-CF5B-47FD-8C2A-8E5FE5A329F2}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{57D45B7D-CF5B-47FD-8C2A-8E5FE5A329F2}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{57D45B7D-CF5B-47FD-8C2A-8E5FE5A329F2}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{57D45B7D-CF5B-47FD-8C2A-8E5FE5A329F2}\InprocServer32]
    @="C:\\WINDOWS\\system32\\dwskadp.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{22513F7F-D4A0-4000-B692-AB0667811C61}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{22513F7F-D4A0-4000-B692-AB0667811C61}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{22513F7F-D4A0-4000-B692-AB0667811C61}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{22513F7F-D4A0-4000-B692-AB0667811C61}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{0A8460FB-AAD5-4941-8170-E7BB13B4E43A}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{0A8460FB-AAD5-4941-8170-E7BB13B4E43A}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{0A8460FB-AAD5-4941-8170-E7BB13B4E43A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{0A8460FB-AAD5-4941-8170-E7BB13B4E43A}\InprocServer32]
    @="C:\\WINDOWS\\system32\\mesign32.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{AB9C814C-31CC-4C49-944B-4B2BA6BBD550}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{AB9C814C-31CC-4C49-944B-4B2BA6BBD550}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{AB9C814C-31CC-4C49-944B-4B2BA6BBD550}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{AB9C814C-31CC-4C49-944B-4B2BA6BBD550}\InprocServer32]
    @="C:\\WINDOWS\\system32\\myihnd.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{74A2F35B-039F-402D-81A2-E97C9182B0DF}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{74A2F35B-039F-402D-81A2-E97C9182B0DF}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{74A2F35B-039F-402D-81A2-E97C9182B0DF}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{74A2F35B-039F-402D-81A2-E97C9182B0DF}\InprocServer32]
    @="C:\\WINDOWS\\system32\\izxrtmgr.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{B7380D4C-4D3F-485F-B730-5340D499A00F}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B7380D4C-4D3F-485F-B730-5340D499A00F}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B7380D4C-4D3F-485F-B730-5340D499A00F}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B7380D4C-4D3F-485F-B730-5340D499A00F}\InprocServer32]
    @="C:\\WINDOWS\\system32\\wlv8dmod.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{160CE84A-C641-4F99-965E-0BE5ECAF1D25}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{160CE84A-C641-4F99-965E-0BE5ECAF1D25}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{160CE84A-C641-4F99-965E-0BE5ECAF1D25}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{160CE84A-C641-4F99-965E-0BE5ECAF1D25}\InprocServer32]
    @="C:\\WINDOWS\\system32\\cpmsvcs.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{56ABAB7F-90E3-4FC6-8FAC-D96C8CCA67B4}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{56ABAB7F-90E3-4FC6-8FAC-D96C8CCA67B4}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{56ABAB7F-90E3-4FC6-8FAC-D96C8CCA67B4}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{56ABAB7F-90E3-4FC6-8FAC-D96C8CCA67B4}\InprocServer32]
    @="C:\\WINDOWS\\system32\\muencode.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{71B46EE6-B69A-4EB6-A224-4E10922A8BE8}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{71B46EE6-B69A-4EB6-A224-4E10922A8BE8}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{71B46EE6-B69A-4EB6-A224-4E10922A8BE8}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{71B46EE6-B69A-4EB6-A224-4E10922A8BE8}\InprocServer32]
    @="C:\\WINDOWS\\system32\\mrorcl32.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{DF3CADDC-FC79-4B0F-8D28-DDBD1E29C269}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{DF3CADDC-FC79-4B0F-8D28-DDBD1E29C269}\Implemented Categories]
    @=""

  6. #6
    Junior Member
    Join Date
    Nov 2006
    Posts
    24

    Default log contd

    [HKEY_CLASSES_ROOT\clsid\{DF3CADDC-FC79-4B0F-8D28-DDBD1E29C269}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{DF3CADDC-FC79-4B0F-8D28-DDBD1E29C269}\InprocServer32]
    @="C:\\WINDOWS\\system32\\rGcpldlg.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{25F32BBB-5172-4FEB-B326-8E3061570F04}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{25F32BBB-5172-4FEB-B326-8E3061570F04}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{25F32BBB-5172-4FEB-B326-8E3061570F04}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{25F32BBB-5172-4FEB-B326-8E3061570F04}\InprocServer32]
    @="C:\\WINDOWS\\system32\\wkhtcpip.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{56D725AA-8576-460B-89AF-F04574CB7BCD}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{56D725AA-8576-460B-89AF-F04574CB7BCD}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{56D725AA-8576-460B-89AF-F04574CB7BCD}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{56D725AA-8576-460B-89AF-F04574CB7BCD}\InprocServer32]
    @="C:\\WINDOWS\\system32\\xTctsrv.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{1E197EE4-BD6D-461D-93F6-7417207F9999}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{1E197EE4-BD6D-461D-93F6-7417207F9999}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{1E197EE4-BD6D-461D-93F6-7417207F9999}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{1E197EE4-BD6D-461D-93F6-7417207F9999}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{830DE4B2-84FB-4C15-BD18-31B463F46E60}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{830DE4B2-84FB-4C15-BD18-31B463F46E60}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{830DE4B2-84FB-4C15-BD18-31B463F46E60}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{830DE4B2-84FB-4C15-BD18-31B463F46E60}\InprocServer32]
    @="C:\\WINDOWS\\system32\\czmaddin.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{BF47DE4F-882E-4E28-A221-12E071211C83}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{BF47DE4F-882E-4E28-A221-12E071211C83}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{BF47DE4F-882E-4E28-A221-12E071211C83}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{BF47DE4F-882E-4E28-A221-12E071211C83}\InprocServer32]
    @="C:\\WINDOWS\\system32\\drocx.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{B7621E48-9559-4752-B9B2-39B2D138BBD7}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B7621E48-9559-4752-B9B2-39B2D138BBD7}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B7621E48-9559-4752-B9B2-39B2D138BBD7}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B7621E48-9559-4752-B9B2-39B2D138BBD7}\InprocServer32]
    @="C:\\WINDOWS\\system32\\kfdir.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{13B7B2F3-3801-4015-86C9-C859BD3883D8}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{13B7B2F3-3801-4015-86C9-C859BD3883D8}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{13B7B2F3-3801-4015-86C9-C859BD3883D8}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{13B7B2F3-3801-4015-86C9-C859BD3883D8}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{0DAE7718-2178-4A1F-8F6E-D9D5304338FA}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{0DAE7718-2178-4A1F-8F6E-D9D5304338FA}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{0DAE7718-2178-4A1F-8F6E-D9D5304338FA}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{0DAE7718-2178-4A1F-8F6E-D9D5304338FA}\InprocServer32]
    @="C:\\WINDOWS\\system32\\mvmtapi.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{2714F8A2-9913-4A67-8515-3201B5ED949E}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2714F8A2-9913-4A67-8515-3201B5ED949E}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2714F8A2-9913-4A67-8515-3201B5ED949E}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2714F8A2-9913-4A67-8515-3201B5ED949E}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{26B7C83D-C27A-4557-9D0B-13D34FE75A28}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{26B7C83D-C27A-4557-9D0B-13D34FE75A28}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{26B7C83D-C27A-4557-9D0B-13D34FE75A28}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{26B7C83D-C27A-4557-9D0B-13D34FE75A28}\InprocServer32]
    @="C:\\WINDOWS\\system32\\dalayx.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{0A8F9F15-686C-4C9E-8919-AE522C913DAB}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{0A8F9F15-686C-4C9E-8919-AE522C913DAB}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{0A8F9F15-686C-4C9E-8919-AE522C913DAB}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{0A8F9F15-686C-4C9E-8919-AE522C913DAB}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{563202AA-AB4A-401B-A475-171076CBC512}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{563202AA-AB4A-401B-A475-171076CBC512}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{563202AA-AB4A-401B-A475-171076CBC512}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{563202AA-AB4A-401B-A475-171076CBC512}\InprocServer32]
    @="C:\\WINDOWS\\system32\\nkevtmsg.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{9364D38E-80FB-410F-8403-051C95842E5A}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{9364D38E-80FB-410F-8403-051C95842E5A}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{9364D38E-80FB-410F-8403-051C95842E5A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{9364D38E-80FB-410F-8403-051C95842E5A}\InprocServer32]
    @="C:\\WINDOWS\\system32\\amvapi32.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{3B2DB45F-889A-4951-A03B-3BFDDB9B611F}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{3B2DB45F-889A-4951-A03B-3BFDDB9B611F}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{3B2DB45F-889A-4951-A03B-3BFDDB9B611F}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{3B2DB45F-889A-4951-A03B-3BFDDB9B611F}\InprocServer32]
    @="C:\\WINDOWS\\system32\\mur2cenu.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{35CE0589-91FA-407E-A445-98555B1DD9BD}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{35CE0589-91FA-407E-A445-98555B1DD9BD}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{35CE0589-91FA-407E-A445-98555B1DD9BD}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{35CE0589-91FA-407E-A445-98555B1DD9BD}\InprocServer32]
    @="C:\\WINDOWS\\system32\\MJC71ENU.DLL"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{C05F3712-0DAC-46F5-92CA-28A7FA487DD4}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{C05F3712-0DAC-46F5-92CA-28A7FA487DD4}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{C05F3712-0DAC-46F5-92CA-28A7FA487DD4}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{C05F3712-0DAC-46F5-92CA-28A7FA487DD4}\InprocServer32]
    @="C:\\WINDOWS\\system32\\ikv6mon.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{9580299B-98D0-4548-B229-C280DCA7ACF5}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{9580299B-98D0-4548-B229-C280DCA7ACF5}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{9580299B-98D0-4548-B229-C280DCA7ACF5}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{9580299B-98D0-4548-B229-C280DCA7ACF5}\InprocServer32]
    @="C:\\WINDOWS\\system32\\akmparse.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{F9B25F5C-55F7-4C03-BDDE-C9CC867C9550}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F9B25F5C-55F7-4C03-BDDE-C9CC867C9550}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F9B25F5C-55F7-4C03-BDDE-C9CC867C9550}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F9B25F5C-55F7-4C03-BDDE-C9CC867C9550}\InprocServer32]
    @="C:\\WINDOWS\\system32\\hFlu0539e.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{51BA42BA-C3C0-44B1-A6DD-F88594086599}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{51BA42BA-C3C0-44B1-A6DD-F88594086599}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{51BA42BA-C3C0-44B1-A6DD-F88594086599}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{51BA42BA-C3C0-44B1-A6DD-F88594086599}\InprocServer32]
    @="C:\\WINDOWS\\system32\\agao09f3e.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{F85FD67B-62AC-4F46-A384-FE69F69AD22A}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F85FD67B-62AC-4F46-A384-FE69F69AD22A}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F85FD67B-62AC-4F46-A384-FE69F69AD22A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F85FD67B-62AC-4F46-A384-FE69F69AD22A}\InprocServer32]
    @="C:\\WINDOWS\\system32\\qaartz.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{D6D189FC-1019-48AD-B6E4-D9F7C01DCADF}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{D6D189FC-1019-48AD-B6E4-D9F7C01DCADF}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{D6D189FC-1019-48AD-B6E4-D9F7C01DCADF}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{D6D189FC-1019-48AD-B6E4-D9F7C01DCADF}\InprocServer32]
    @="C:\\WINDOWS\\system32\\rfutils.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{F192788C-4761-42E6-8A25-A49A7B807696}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F192788C-4761-42E6-8A25-A49A7B807696}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F192788C-4761-42E6-8A25-A49A7B807696}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F192788C-4761-42E6-8A25-A49A7B807696}\InprocServer32]
    @="C:\\WINDOWS\\system32\\izircl.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{B7D12971-B131-4BC7-9A79-CB48541ECFA3}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B7D12971-B131-4BC7-9A79-CB48541ECFA3}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B7D12971-B131-4BC7-9A79-CB48541ECFA3}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B7D12971-B131-4BC7-9A79-CB48541ECFA3}\InprocServer32]
    @="C:\\WINDOWS\\system32\\njwmsdrm.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{20793309-8BB1-4716-A056-65E6F0EB2080}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{20793309-8BB1-4716-A056-65E6F0EB2080}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{20793309-8BB1-4716-A056-65E6F0EB2080}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{20793309-8BB1-4716-A056-65E6F0EB2080}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{7CF7EA34-F75F-4F34-B1EF-126B40EE6E25}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{7CF7EA34-F75F-4F34-B1EF-126B40EE6E25}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{7CF7EA34-F75F-4F34-B1EF-126B40EE6E25}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{7CF7EA34-F75F-4F34-B1EF-126B40EE6E25}\InprocServer32]
    @="C:\\WINDOWS\\system32\\dhnksfxm.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{98955577-63AD-4F7A-B19A-F22896B09EF3}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{98955577-63AD-4F7A-B19A-F22896B09EF3}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{98955577-63AD-4F7A-B19A-F22896B09EF3}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{98955577-63AD-4F7A-B19A-F22896B09EF3}\InprocServer32]
    @="C:\\WINDOWS\\system32\\donaddr.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{3F6355BE-FED7-4C08-A30B-DFCC85C21CA4}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{3F6355BE-FED7-4C08-A30B-DFCC85C21CA4}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{3F6355BE-FED7-4C08-A30B-DFCC85C21CA4}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{3F6355BE-FED7-4C08-A30B-DFCC85C21CA4}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{188EA058-2FDE-4467-BA7D-F3D7977F40F9}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{188EA058-2FDE-4467-BA7D-F3D7977F40F9}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{188EA058-2FDE-4467-BA7D-F3D7977F40F9}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{188EA058-2FDE-4467-BA7D-F3D7977F40F9}\InprocServer32]
    @="C:\\WINDOWS\\system32\\mlmefilt.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{4E0B2B4A-780E-416C-84D8-6AD22D6F8D14}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{4E0B2B4A-780E-416C-84D8-6AD22D6F8D14}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{4E0B2B4A-780E-416C-84D8-6AD22D6F8D14}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{4E0B2B4A-780E-416C-84D8-6AD22D6F8D14}\InprocServer32]
    @="C:\\WINDOWS\\system32\\jLvaprxy.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{58E83CBF-84E1-4176-BF52-AA74EE43DCF2}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{58E83CBF-84E1-4176-BF52-AA74EE43DCF2}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{58E83CBF-84E1-4176-BF52-AA74EE43DCF2}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{58E83CBF-84E1-4176-BF52-AA74EE43DCF2}\InprocServer32]
    @="C:\\WINDOWS\\system32\\cHmocx.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{6B96E708-FB34-4220-A266-0F17CEC22299}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{6B96E708-FB34-4220-A266-0F17CEC22299}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{6B96E708-FB34-4220-A266-0F17CEC22299}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{6B96E708-FB34-4220-A266-0F17CEC22299}\InprocServer32]
    @="C:\\WINDOWS\\system32\\wmavusd.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{A180FF5B-65FC-4FF7-8547-09230D71A757}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{A180FF5B-65FC-4FF7-8547-09230D71A757}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{A180FF5B-65FC-4FF7-8547-09230D71A757}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{A180FF5B-65FC-4FF7-8547-09230D71A757}\InprocServer32]
    @="C:\\WINDOWS\\system32\\mnsnap.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{D23F61CA-6434-4508-82B5-62C08963A02E}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{D23F61CA-6434-4508-82B5-62C08963A02E}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{D23F61CA-6434-4508-82B5-62C08963A02E}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{D23F61CA-6434-4508-82B5-62C08963A02E}\InprocServer32]
    @="C:\\WINDOWS\\system32\\dv0m01d1e.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{5043BBB1-5138-4B96-A99A-E8A754475BD5}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{5043BBB1-5138-4B96-A99A-E8A754475BD5}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{5043BBB1-5138-4B96-A99A-E8A754475BD5}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{5043BBB1-5138-4B96-A99A-E8A754475BD5}\InprocServer32]
    @="C:\\WINDOWS\\system32\\drdskmgr.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{4837F8D4-3806-40D9-B249-B5F7474F3379}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{4837F8D4-3806-40D9-B249-B5F7474F3379}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{4837F8D4-3806-40D9-B249-B5F7474F3379}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{4837F8D4-3806-40D9-B249-B5F7474F3379}\InprocServer32]
    @="C:\\WINDOWS\\system32\\wqdmps.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{27FD5E13-F952-4FEA-B72E-A1A64AAA4009}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{27FD5E13-F952-4FEA-B72E-A1A64AAA4009}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{27FD5E13-F952-4FEA-B72E-A1A64AAA4009}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{27FD5E13-F952-4FEA-B72E-A1A64AAA4009}\InprocServer32]
    @="C:\\WINDOWS\\system32\\sgi.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{6490AECE-D83F-4D91-BFBD-FE7F4A445A19}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{6490AECE-D83F-4D91-BFBD-FE7F4A445A19}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{6490AECE-D83F-4D91-BFBD-FE7F4A445A19}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{6490AECE-D83F-4D91-BFBD-FE7F4A445A19}\InprocServer32]
    @="C:\\WINDOWS\\system32\\ccosys.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{DE46557C-4ABE-4C66-A149-7ADB3F2F5A72}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{DE46557C-4ABE-4C66-A149-7ADB3F2F5A72}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{DE46557C-4ABE-4C66-A149-7ADB3F2F5A72}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{DE46557C-4ABE-4C66-A149-7ADB3F2F5A72}\InprocServer32]
    @="C:\\WINDOWS\\system32\\sbcpack.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{2F3415A0-CA3A-4500-9534-1CECCA18B2AB}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2F3415A0-CA3A-4500-9534-1CECCA18B2AB}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2F3415A0-CA3A-4500-9534-1CECCA18B2AB}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2F3415A0-CA3A-4500-9534-1CECCA18B2AB}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{C8762F8F-1BC9-4447-A4B8-C9834B6ABDF0}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{C8762F8F-1BC9-4447-A4B8-C9834B6ABDF0}\Implemented Categories]
    @=""

  7. #7
    Junior Member
    Join Date
    Nov 2006
    Posts
    24

    Default contd

    [HKEY_CLASSES_ROOT\clsid\{C8762F8F-1BC9-4447-A4B8-C9834B6ABDF0}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{C8762F8F-1BC9-4447-A4B8-C9834B6ABDF0}\InprocServer32]
    @="C:\\WINDOWS\\system32\\dIdxof.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{66B258BD-B41F-43CD-AB5C-4E738D887A37}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{66B258BD-B41F-43CD-AB5C-4E738D887A37}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{66B258BD-B41F-43CD-AB5C-4E738D887A37}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{66B258BD-B41F-43CD-AB5C-4E738D887A37}\InprocServer32]
    @="C:\\WINDOWS\\system32\\Mqos432.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{B05FD176-ADC9-4F24-94DD-3B2810C29D66}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B05FD176-ADC9-4F24-94DD-3B2810C29D66}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B05FD176-ADC9-4F24-94DD-3B2810C29D66}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{B05FD176-ADC9-4F24-94DD-3B2810C29D66}\InprocServer32]
    @="C:\\WINDOWS\\system32\\kwrberos.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{2359BC93-9FCD-4870-B047-AEC1FDCC0802}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2359BC93-9FCD-4870-B047-AEC1FDCC0802}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2359BC93-9FCD-4870-B047-AEC1FDCC0802}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2359BC93-9FCD-4870-B047-AEC1FDCC0802}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{AE37A4E9-EF4D-4C2B-8650-1CEC5E237C52}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{AE37A4E9-EF4D-4C2B-8650-1CEC5E237C52}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{AE37A4E9-EF4D-4C2B-8650-1CEC5E237C52}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{AE37A4E9-EF4D-4C2B-8650-1CEC5E237C52}\InprocServer32]
    @="C:\\WINDOWS\\system32\\wcnnls.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{3D3ED9E6-AE71-4814-9DD7-61C1E7665747}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{3D3ED9E6-AE71-4814-9DD7-61C1E7665747}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{3D3ED9E6-AE71-4814-9DD7-61C1E7665747}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{3D3ED9E6-AE71-4814-9DD7-61C1E7665747}\InprocServer32]
    @="C:\\WINDOWS\\system32\\ouecli.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{ECEB7842-A31C-4DC9-971E-BB886D675144}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{ECEB7842-A31C-4DC9-971E-BB886D675144}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{ECEB7842-A31C-4DC9-971E-BB886D675144}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{ECEB7842-A31C-4DC9-971E-BB886D675144}\InprocServer32]
    @="C:\\WINDOWS\\system32\\fulemgmt.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{FC63007F-B1DE-425B-8E64-83E067DDF008}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{FC63007F-B1DE-425B-8E64-83E067DDF008}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{FC63007F-B1DE-425B-8E64-83E067DDF008}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{FC63007F-B1DE-425B-8E64-83E067DDF008}\InprocServer32]
    @="C:\\WINDOWS\\system32\\jOvacypt.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{4A061480-36BF-4149-B683-B81EAC1897BC}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{4A061480-36BF-4149-B683-B81EAC1897BC}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{4A061480-36BF-4149-B683-B81EAC1897BC}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{4A061480-36BF-4149-B683-B81EAC1897BC}\InprocServer32]
    @="C:\\WINDOWS\\system32\\jvdw400.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{CF380040-C236-40C4-A900-B93078B1EF15}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{CF380040-C236-40C4-A900-B93078B1EF15}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{CF380040-C236-40C4-A900-B93078B1EF15}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{CF380040-C236-40C4-A900-B93078B1EF15}\InprocServer32]
    @="C:\\WINDOWS\\system32\\moisam11.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{603BCE56-CE2C-49D7-AAAB-B31F9B2B357A}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{603BCE56-CE2C-49D7-AAAB-B31F9B2B357A}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{603BCE56-CE2C-49D7-AAAB-B31F9B2B357A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{603BCE56-CE2C-49D7-AAAB-B31F9B2B357A}\InprocServer32]
    @="C:\\WINDOWS\\system32\\kldgr1.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{6120A0A0-C1AC-4070-AA87-7C98D712B9FC}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{6120A0A0-C1AC-4070-AA87-7C98D712B9FC}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{6120A0A0-C1AC-4070-AA87-7C98D712B9FC}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{6120A0A0-C1AC-4070-AA87-7C98D712B9FC}\InprocServer32]
    @="C:\\WINDOWS\\system32\\ldcalui.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{1535274F-5C85-4F73-9617-D92F2892EA35}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{1535274F-5C85-4F73-9617-D92F2892EA35}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{1535274F-5C85-4F73-9617-D92F2892EA35}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{1535274F-5C85-4F73-9617-D92F2892EA35}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{2627B18C-9A06-48A9-B913-B3DCA9B8F6A2}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2627B18C-9A06-48A9-B913-B3DCA9B8F6A2}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2627B18C-9A06-48A9-B913-B3DCA9B8F6A2}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2627B18C-9A06-48A9-B913-B3DCA9B8F6A2}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{EABEA7A8-06A7-44D2-B628-4D7537997D58}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{EABEA7A8-06A7-44D2-B628-4D7537997D58}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{EABEA7A8-06A7-44D2-B628-4D7537997D58}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{EABEA7A8-06A7-44D2-B628-4D7537997D58}\InprocServer32]
    @="C:\\WINDOWS\\system32\\scrmfilt.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{CA63A942-9ACA-4A14-ADB2-3808BDEF2756}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{CA63A942-9ACA-4A14-ADB2-3808BDEF2756}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{CA63A942-9ACA-4A14-ADB2-3808BDEF2756}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{CA63A942-9ACA-4A14-ADB2-3808BDEF2756}\InprocServer32]
    @="C:\\WINDOWS\\system32\\nxdll.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{8278ACF7-7F33-4BC5-9C3A-5F2A5EDB1C12}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{8278ACF7-7F33-4BC5-9C3A-5F2A5EDB1C12}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{8278ACF7-7F33-4BC5-9C3A-5F2A5EDB1C12}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{8278ACF7-7F33-4BC5-9C3A-5F2A5EDB1C12}\InprocServer32]
    @="C:\\WINDOWS\\system32\\muidle.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{3391ABA2-540B-4A1D-A5AF-A6C798343417}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{3391ABA2-540B-4A1D-A5AF-A6C798343417}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{3391ABA2-540B-4A1D-A5AF-A6C798343417}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{3391ABA2-540B-4A1D-A5AF-A6C798343417}\InprocServer32]
    @="C:\\WINDOWS\\system32\\dq0m01d1e.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{2721810A-D1B0-4D19-A1DA-F058D7259D12}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2721810A-D1B0-4D19-A1DA-F058D7259D12}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2721810A-D1B0-4D19-A1DA-F058D7259D12}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{2721810A-D1B0-4D19-A1DA-F058D7259D12}\InprocServer32]
    @="C:\\WINDOWS\\system32\\MPC42ENU.DLL"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{77C84760-C4D4-48FA-B3AE-DE3047D8417D}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{77C84760-C4D4-48FA-B3AE-DE3047D8417D}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{77C84760-C4D4-48FA-B3AE-DE3047D8417D}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{77C84760-C4D4-48FA-B3AE-DE3047D8417D}\InprocServer32]
    @="C:\\WINDOWS\\system32\\SMP32.DLL"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{F56FBEEC-9E01-4EF5-ADEE-31138D44AF41}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F56FBEEC-9E01-4EF5-ADEE-31138D44AF41}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F56FBEEC-9E01-4EF5-ADEE-31138D44AF41}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{F56FBEEC-9E01-4EF5-ADEE-31138D44AF41}\InprocServer32]
    @="C:\\WINDOWS\\system32\\cvyptsvc.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{C85130A8-CB5A-466B-9398-6D6367BEB6EB}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{C85130A8-CB5A-466B-9398-6D6367BEB6EB}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{C85130A8-CB5A-466B-9398-6D6367BEB6EB}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{C85130A8-CB5A-466B-9398-6D6367BEB6EB}\InprocServer32]
    @="C:\\WINDOWS\\system32\\asi3d1ag.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{6B44EFF2-68F1-410E-89C0-66B861D0B2BA}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{6B44EFF2-68F1-410E-89C0-66B861D0B2BA}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{6B44EFF2-68F1-410E-89C0-66B861D0B2BA}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{6B44EFF2-68F1-410E-89C0-66B861D0B2BA}\InprocServer32]
    @="C:\\WINDOWS\\system32\\rLssapi.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{77C01624-CE76-4871-AB27-8302E696F217}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{77C01624-CE76-4871-AB27-8302E696F217}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{77C01624-CE76-4871-AB27-8302E696F217}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{77C01624-CE76-4871-AB27-8302E696F217}\InprocServer32]
    @="C:\\WINDOWS\\system32\\wbhtcpip.dll"
    "ThreadingModel"="Apartment"

    [HKEY_CLASSES_ROOT\clsid\{DF58BC62-CF6B-4AE8-9E8D-FED173764C41}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{DF58BC62-CF6B-4AE8-9E8D-FED173764C41}\Implemented Categories]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{DF58BC62-CF6B-4AE8-9E8D-FED173764C41}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
    @=""

    [HKEY_CLASSES_ROOT\clsid\{DF58BC62-CF6B-4AE8-9E8D-FED173764C41}\InprocServer32]
    @="C:\\WINDOWS\\system32\\guard.tmp"
    "ThreadingModel"="Apartment"

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •