Trojan-Agent/Gen-PWS problem (3/11/2012)
Hi. SuperAntiSpyware software found a virus called Trojan-Agent/Gen-PWS (Trend Micro PC-illin was not aware of it) and is having problems ridding it. SuperAntiSpyware appears to hang after scanning and selecting the option to rid or quarantine the virus. The SuperAntiSpyware log is very large so I will try to attach it with this post. I will cut and paste the Malware log and the HijackThis log with this post.
Please help me remove this virus.
Thanks,
pjhussey
P.S. It appears that I could not upload the SuperAntiSpyware log. I will try to cut and paste it from the log again.
=== SuperAntiSpyware log ===
SUPERAntiSpyware Scan Log
SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!
Generated 03/07/2012 at 09:59 AM
Application Version : 4.22.1014
Core Rules Database Version : 8206
Trace Rules Database Version: 6018
Scan type : Quick Scan
Total Scan Time : 02:42:29
Memory items scanned : 596
Memory threats detected : 231
Registry items scanned : 613
Registry threats detected : 1020
File items scanned : 27005
File threats detected : 16759
Trojan.Agent/Gen-PWS
C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE
C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE
C:\PROGRAM FILES\SUPERANTISPYWARE\DEUPX.DLL
C:\PROGRAM FILES\SUPERANTISPYWARE\DEUPX.DLL
C:\DOCUMENTS AND SETTINGS\BDWU\APPLICATION DATA\SUPERANTISPYWARE.COM\SUPERANTISPYWARE\SDDLLS\SD10005.DLL
C:\DOCUMENTS AND SETTINGS\BDWU\APPLICATION DATA\SUPERANTISPYWARE.COM\SUPERANTISPYWARE\SDDLLS\SD10005.DLL
C:\PROGRAM FILES\SUPERANTISPYWARE\SASSEH.DLL
C:\PROGRAM FILES\SUPERANTISPYWARE\SASSEH.DLL
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\INK\SKCHUI.DLL
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\INK\SKCHUI.DLL
C:\WINDOWS\SYSTEM32\WGALOGON.DLL
C:\WINDOWS\SYSTEM32\WGALOGON.DLL
C:\WINDOWS\SYSTEM32\BCMLOGON.DLL
C:\WINDOWS\SYSTEM32\BCMLOGON.DLL
C:\PROGRAM FILES\ADOBE\ACROBAT 7.0\ACTIVEX\PDFSHELL.DLL
C:\PROGRAM FILES\ADOBE\ACROBAT 7.0\ACTIVEX\PDFSHELL.DLL
C:\WINDOWS\SYSTEM32\WLTRYSVC.EXE
C:\WINDOWS\SYSTEM32\WLTRYSVC.EXE
C:\WINDOWS\SYSTEM32\BCMWLTRY.EXE
C:\WINDOWS\SYSTEM32\BCMWLTRY.EXE
C:\WINDOWS\SYSTEM32\AEGISE5.DLL
C:\WINDOWS\SYSTEM32\AEGISE5.DLL
C:\WINDOWS\SYSTEM32\WLTRYNT.DLL
C:\WINDOWS\SYSTEM32\WLTRYNT.DLL
C:\PROGRAM FILES\LAVASOFT\AD-AWARE\AAWSERVICE.EXE
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDIAG.EXE
C:\PROGRA~1\MUSICM~1\MUSICM~3\COREDLL.DLL
C:\PROGRA~1\MUSICM~1\MUSICM~3\COREDLL.DLL
C:\PROGRAM FILES\DELL PHOTO AIO PRINTER 924\DLCCMON.EXE
C:\PROGRAM FILES\DELL PHOTO AIO PRINTER 924\DLCCMON.EXE
C:\PROGRAM FILES\DELL PHOTO AIO PRINTER 924\DLCCSCW.DLL
C:\PROGRAM FILES\DELL PHOTO AIO PRINTER 924\DLCCSCW.DLL
C:\PROGRAM FILES\ADOBE\PHOTOSHOP ALBUM STARTER EDITION\3.0\APPS\APDPROXY.EXE
C:\PROGRAM FILES\ADOBE\PHOTOSHOP ALBUM STARTER EDITION\3.0\APPS\APDPROXY.EXE
C:\PROGRAM FILES\ADOBE\PHOTOSHOP ALBUM STARTER EDITION\3.0\APPS\APDBOOT.DLL
C:\PROGRAM FILES\ADOBE\PHOTOSHOP ALBUM STARTER EDITION\3.0\APPS\APDBOOT.DLL
C:\PROGRAM FILES\ADOBE\PHOTOSHOP ALBUM STARTER EDITION\3.0\APPS\MSVCP71.DLL
C:\PROGRAM FILES\ADOBE\PHOTOSHOP ALBUM STARTER EDITION\3.0\APPS\MSVCP71.DLL
C:\PROGRAM FILES\ADOBE\PHOTOSHOP ALBUM STARTER EDITION\3.0\APPS\MSVCR71.DLL
C:\PROGRAM FILES\ADOBE\PHOTOSHOP ALBUM STARTER EDITION\3.0\APPS\MSVCR71.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MIM.EXE
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MIM.EXE
C:\WINDOWS\SYSTEM32\ATL71.DLL
C:\WINDOWS\SYSTEM32\ATL71.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MIMSESSIONMANAGER.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MIMSESSIONMANAGER.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MIMDB.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MIMDB.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\ATTRIBUTEINFO.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\ATTRIBUTEINFO.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\USAGEBRACKETING.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\USAGEBRACKETING.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\DEVICEMANAGER.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\DEVICEMANAGER.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\EVENTMGR.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\EVENTMGR.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MIMJOBS.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MIMJOBS.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\LICMGR.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\LICMGR.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MMGIT.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MMGIT.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MMDRM.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MMDRM.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\YDETECTQFE.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\YDETECTQFE.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\OBJECTMANAGER.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\OBJECTMANAGER.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PORTALSERVICES2.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PORTALSERVICES2.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\FILECACHEMGR.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\FILECACHEMGR.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\NETUTILSDLL.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\NETUTILSDLL.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\FILETAGOBJ.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\FILETAGOBJ.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MUSICNET.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MUSICNET.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\BASICOBJS.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\BASICOBJS.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\GRAPHICSUTILS.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\GRAPHICSUTILS.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MMLICMGR.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MMLICMGR.DLL
C:\DOCUMENTS AND SETTINGS\ALL USERS\DRM\INDIVBOX.KEY
C:\DOCUMENTS AND SETTINGS\ALL USERS\DRM\INDIVBOX.KEY
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\STREAM_FACTORY.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\STREAM_FACTORY.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\LOCALDISK_FACTORY.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\LOCALDISK_FACTORY.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PORTABLE_FACTORY.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PORTABLE_FACTORY.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\CDDVD_FACTORY.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\CDDVD_FACTORY.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\CDDVDACCESS.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\CDDVDACCESS.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PXSDKPLS.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PXSDKPLS.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\TOD_FACTORY.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\TOD_FACTORY.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\AUDIBLEOBJ.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\AUDIBLEOBJ.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\AREADYLB.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\AREADYLB.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\WAVMP3TAG.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\WAVMP3TAG.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\STREAM_DO.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\STREAM_DO.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\TOD_DO.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\TOD_DO.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\METADATACACHE.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\METADATACACHE.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PORTABLEAGENT.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PORTABLEAGENT.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PORTABLEDEVICE2.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PORTABLEDEVICE2.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PORTABLEDEVICE.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PORTABLEDEVICE.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\DUMMYTAGOBJ.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\DUMMYTAGOBJ.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\WMAOBJ.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\WMAOBJ.DLL
C:\WINDOWS\SYSTEM32\PXSFS.DLL
C:\WINDOWS\SYSTEM32\PXSFS.DLL
C:\WINDOWS\SYSTEM32\PXMAS.DLL
C:\WINDOWS\SYSTEM32\PXMAS.DLL
C:\WINDOWS\SYSTEM32\PXWAVE.DLL
C:\WINDOWS\SYSTEM32\PXWAVE.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\WINMSGOBJECT.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\WINMSGOBJECT.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\LOCALDISK_DO.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\LOCALDISK_DO.DLL
C:\WINDOWS\SYSTEM32\VXBLOCK.DLL
C:\WINDOWS\SYSTEM32\VXBLOCK.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\CDDVD_DO.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\CDDVD_DO.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\RBCDREPOSITORY.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\RBCDREPOSITORY.DLL
C:\PROGRAM FILES\DELL\SHAREDLL\DJBSDK.DLL
C:\PROGRAM FILES\DELL\SHAREDLL\DJBSDK.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PLUGINS\PORTABLE2004\WMDM\MDPLUGIN.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PLUGINS\PORTABLE2004\WMDM\MDPLUGIN.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PLAYLISTFILEOBJ.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PLAYLISTFILEOBJ.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PLAYLISTM3UFILEOBJ.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PLAYLISTM3UFILEOBJ.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PLAYLISTPLSFILEOBJ.DLL
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\PLAYLISTPLSFILEOBJ.DLL
C:\PROGRAM FILES\DELL SUPPORT CENTER\BIN\SPRTCMD.EXE
C:\PROGRAM FILES\DELL SUPPORT CENTER\BIN\SPRTCMD.EXE
C:\PROGRAM FILES\DELL SUPPORT CENTER\BIN\SPRTMESSAGE.DLL
C:\PROGRAM FILES\DELL SUPPORT CENTER\BIN\SPRTMESSAGE.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\MSVCR71.DLL
C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\MSVCR71.DLL
C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\MSCORLIB\1.0.5000.0__B77A5C561934E089_22577B64\MSCORLIB.DLL
C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\MSCORLIB\1.0.5000.0__B77A5C561934E089_22577B64\MSCORLIB.DLL
C:\PROGRAM FILES\DELL SUPPORT CENTER\BIN\SPRTEVENT.DLL
C:\PROGRAM FILES\DELL SUPPORT CENTER\BIN\SPRTEVENT.DLL
C:\PROGRAM FILES\DELL SUPPORT CENTER\BIN\SPRTUI.DLL
C:\PROGRAM FILES\DELL SUPPORT CENTER\BIN\SPRTUI.DLL
C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM.XML\1.0.5000.0__B77A5C561934E089_EE62AF89\SYSTEM.XML.DLL
C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM.XML\1.0.5000.0__B77A5C561934E089_EE62AF89\SYSTEM.XML.DLL
C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\1.0.5000.0__B77A5C561934E089_3F5FB313\SYSTEM.DLL
C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\1.0.5000.0__B77A5C561934E089_3F5FB313\SYSTEM.DLL
C:\PROGRAM FILES\COMMON FILES\JAVA\JAVA UPDATE\JUSCHED.EXE
C:\PROGRAM FILES\COMMON FILES\JAVA\JAVA UPDATE\JUSCHED.EXE
C:\PROGRAM FILES\SEAGATE\SEAGATEMANAGER\FREEAGENT STATUS\STXMENUMGR.EXE
C:\PROGRAM FILES\SEAGATE\SEAGATEMANAGER\FREEAGENT STATUS\STXMENUMGR.EXE
C:\PROGRAM FILES\SEAGATE\SEAGATEMANAGER\FREEAGENT STATUS\OT4MAXMENU.DLL
C:\PROGRAM FILES\SEAGATE\SEAGATEMANAGER\FREEAGENT STATUS\OT4MAXMENU.DLL
C:\PROGRAM FILES\VERIZONDM\BIN\SPRTCMD.EXE
C:\PROGRAM FILES\VERIZONDM\BIN\SPRTCMD.EXE
C:\PROGRAM FILES\VERIZONDM\BIN\SPRTMESSAGE.DLL
C:\PROGRAM FILES\VERIZONDM\BIN\SPRTMESSAGE.DLL
C:\PROGRAM FILES\VERIZONDM\BIN\SPRTEVENT.DLL
C:\PROGRAM FILES\VERIZONDM\BIN\SPRTEVENT.DLL
C:\PROGRAM FILES\VERIZONDM\BIN\SPRTUI.DLL
C:\PROGRAM FILES\VERIZONDM\BIN\SPRTUI.DLL
C:\PROGRAM FILES\VERIZONDM\BIN\SPRTTRIGGER.DLL
C:\PROGRAM FILES\VERIZONDM\BIN\SPRTTRIGGER.DLL
C:\PROGRAM FILES\NETWAITING\NETWAITING.EXE
C:\PROGRAM FILES\NETWAITING\NETWAITING.EXE
C:\PROGRAM FILES\NETWAITING\BVRPDIAG.DLL
C:\PROGRAM FILES\NETWAITING\BVRPDIAG.DLL
C:\PROGRAM FILES\NETWAITING\MODEMMOH.DLL
C:\PROGRAM FILES\NETWAITING\MODEMMOH.DLL
C:\PROGRAM FILES\NETWAITING\BVRPCTLN.DLL
C:\PROGRAM FILES\NETWAITING\BVRPCTLN.DLL
C:\PROGRAM FILES\NETWAITING\MOHRC.DLL
C:\PROGRAM FILES\NETWAITING\MOHRC.DLL
C:\PROGRAM FILES\TREND MICRO\INTERNET SECURITY 12\TMAS_OE\TMAS_OEMON.EXE
C:\PROGRAM FILES\TREND MICRO\INTERNET SECURITY 12\TMAS_OE\TMAS_OEMON.EXE
C:\PROGRAM FILES\TREND MICRO\INTERNET SECURITY 12\TMAS_OE\TMAS_OEHOOK.DLL
C:\PROGRAM FILES\TREND MICRO\INTERNET SECURITY 12\TMAS_OE\TMAS_OEHOOK.DLL
C:\PROGRA~1\GOOGLE\GOOGLE~1\GOEC62~1.DLL
C:\PROGRA~1\GOOGLE\GOOGLE~1\GOEC62~1.DLL
C:\PROGRA~1\GOOGLE\GOOGLE~1\GOOGLEDESKTOPCOMMON.DLL
C:\PROGRA~1\GOOGLE\GOOGLE~1\GOOGLEDESKTOPCOMMON.DLL
C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\5.7.7227.1100\GTN.DLL
C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\5.7.7227.1100\GTN.DLL
C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\5.7.7227.1100\SWG.DLL
C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\5.7.7227.1100\SWG.DLL
C:\PROGRAM FILES\DELLSUPPORT\DSAGNT.EXE
C:\PROGRAM FILES\DELLSUPPORT\DSAGNT.EXE
C:\PROGRAM FILES\DELLSUPPORT\GTAGNT.DLL
C:\PROGRAM FILES\DELLSUPPORT\GTAGNT.DLL
C:\PROGRAM FILES\DELLSUPPORT\CFGDATA.DLL
C:\PROGRAM FILES\DELLSUPPORT\CFGDATA.DLL
C:\PROGRAM FILES\DELLSUPPORT\ACTMGR.DLL
C:\PROGRAM FILES\DELLSUPPORT\ACTMGR.DLL
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICE11\MSOXMLMF.DLL
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICE11\MSOXMLMF.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\HANDLERS\BRKRSVCH.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\HANDLERS\BRKRSVCH.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\HANDLERS\GROUPH.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\HANDLERS\GROUPH.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\HANDLERS\PNPH.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\HANDLERS\PNPH.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\HANDLERS\QDIAGH.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\HANDLERS\QDIAGH.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\HANDLERS\TRGLOADH.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\HANDLERS\TRGLOADH.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\HANDLERS\TRGREGH.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\HANDLERS\TRGREGH.DLL
C:\PROGRAM FILES\DELLSUPPORT\TRGMGR.DLL
C:\PROGRAM FILES\DELLSUPPORT\TRGMGR.DLL
C:\PROGRA~1\DELLSU~1\GDQL_D.DLL
C:\PROGRA~1\DELLSU~1\GDQL_D.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\TRIGGERS\TIMERT.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\TRIGGERS\TIMERT.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\TRIGGERS\DSPROCT.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\TRIGGERS\DSPROCT.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\TRIGGERS\DSWNHNT.DLL
C:\PROGRA~1\DELLSU~1\GTACTION\TRIGGERS\DSWNHNT.DLL
C:\PROGRAM FILES\AMERICA ONLINE 9.0\AOLTRAY.EXE
C:\PROGRAM FILES\AMERICA ONLINE 9.0\AOLTRAY.EXE
C:\PROGRAM FILES\DIGITAL LINE DETECT\DLG.EXE
C:\PROGRAM FILES\DIGITAL LINE DETECT\DLG.EXE
C:\PROGRAM FILES\DIGITAL LINE DETECT\BVRPDIAG.DLL
C:\PROGRAM FILES\DIGITAL LINE DETECT\BVRPDIAG.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPROXY.EXE
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPROXY.EXE
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPXHELP.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPXHELP.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMTDI.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMTDI.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMSMMAIL.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMSMMAIL.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPEVS.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPEVS.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\VSAPI32.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\VSAPI32.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPEASPM.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPEASPM.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPHPOP3.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPHPOP3.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPHSMTP.DLL
C:\PROGRA~1\TRENDM~1\INTERN~1\TMPHSMTP.DLL
[SigmatelSysTrayApp] C:\WINDOWS\STSYSTRA.EXE
[Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
C:\WINDOWS\system32\WLTRAY
[Dell QuickSet] C:\PROGRAM FILES\DELL\QUICKSET\QUICKSET.EXE
[DVDLauncher] C:\PROGRAM FILES\CYBERLINK\POWERDVD\DVDLAUNCHER.EXE
[RealTray] C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
[QuickTime Task] C:\PROGRAM FILES\QUICKTIME\QTTASK.EXE
C:\PROGRAM FILES\QUICKTIME\QTTASK.EXE
[ISUSPM Startup] C:\PROGRAM FILES\COMMON FILES\INSTALLSHIELD\UPDATESERVICE\ISUSPM.EXE
C:\PROGRAM FILES\COMMON FILES\INSTALLSHIELD\UPDATESERVICE\ISUSPM.EXE
[ISUSScheduler] C:\PROGRAM FILES\COMMON FILES\INSTALLSHIELD\UPDATESERVICE\ISSCH.EXE
[MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\MIMBOOT.EXE
C:\PROGRA~1\MUSICM~1\MUSICM~3\MIMBOOT.EXE
[MMTray] C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MM_TRAY.EXE
[pccguide.exe] C:\PROGRAM FILES\TREND MICRO\INTERNET SECURITY 12\PCCGUIDE.EXE
C:\PROGRAM FILES\TREND MICRO\INTERNET SECURITY 12\PCCGUIDE.EXE
[Google Desktop Search] C:\PROGRAM FILES\GOOGLE\GOOGLE DESKTOP SEARCH\GOOGLEDESKTOP.EXE
[Corel Photo Downloader] C:\PROGRAM FILES\COREL\COREL PHOTO ALBUM 6\MEDIADETECT.EXE
[dla] C:\WINDOWS\SYSTEM32\DLA\TFSWCTRL.EXE
[dlccmon.exe] C:\PROGRAM FILES\DELL PHOTO AIO PRINTER 924\DLCCMON.EXE
[Adobe Photo Downloader] C:\PROGRAM FILES\ADOBE\PHOTOSHOP ALBUM STARTER EDITION\3.0\APPS\APDPROXY.EXE
[DellSupportCenter] C:\PROGRAM FILES\DELL SUPPORT CENTER\BIN\SPRTCMD.EXE
[SunJavaUpdateSched] C:\PROGRAM FILES\COMMON FILES\JAVA\JAVA UPDATE\JUSCHED.EXE
[CarboniteSetupLite] C:\PROGRAM FILES\CARBONITE\CARBONITEPREINSTALLER.EXE
C:\PROGRAM FILES\CARBONITE\CARBONITEPREINSTALLER.EXE
[MaxMenuMgr] C:\PROGRAM FILES\SEAGATE\SEAGATEMANAGER\FREEAGENT STATUS\STXMENUMGR.EXE
[VERIZONDM] C:\PROGRAM FILES\VERIZONDM\BIN\SPRTCMD.EXE
[ModemOnHold] C:\PROGRAM FILES\NETWAITING\NETWAITING.EXE
[OE_OEM] C:\PROGRAM FILES\TREND MICRO\INTERNET SECURITY 12\TMAS_OE\TMAS_OEMON.EXE
[swg] C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
[DellSupport] C:\PROGRAM FILES\DELLSUPPORT\DSAGNT.EXE
[DellSupportCenter] C:\PROGRAM FILES\DELL SUPPORT CENTER\BIN\SPRTCMD.EXE
[DebugOptions] 2048
2048
[Documents]
[DosPrint] no
no
[NetMessage] no
[NullPort] None
None
[Device] Fax,winspool,Ne01:
Fax,winspool,Ne01:
[DebugOptions] 2048
[Documents]
[DosPrint] no
[load]
[NetMessage] no
[NullPort] None
[Device] Fax,winspool,Ne01:
[DebugOptions] 2048
[Documents]
[DosPrint] no
[load]
[NetMessage] no
[NullPort] None
[Device] Fax,winspool,Ne01:
[DebugOptions] 2048
[Documents]
[DosPrint] no
[NetMessage] no
[NullPort] None
[Device] Dell
Dell
[DebugOptions] 2048
[Documents]
[DosPrint] no
[NetMessage] no
[NullPort] None
[Device] Fax,winspool,Ne01:
[BackupWallpaper]
[BackupWallpaper]
[BackupWallpaper]
[BackupWallpaper] C:\WINDOWS\WEB\WALLPAPER\BLISS.BMP
C:\WINDOWS\WEB\WALLPAPER\BLISS.BMP
[WallpaperFileTime]
[WallpaperLocalFileTime]
[TileWallpaper] 0
0
[WallpaperStyle] 2
2
[Wallpaper] C:\WINDOWS\WEB\WALLPAPER\BLISS.BMP
[ComponentsPositioned]
[BackupWallpaper]
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\InprocServer32
HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\InprocServer32#ThreadingModel
HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\ProgID
HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\Programmable
HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\TypeLib
HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\VersionIndependentProgID
HKCR\CLSID\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
HKCR\CLSID\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}
HKCR\CLSID\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\InprocServer32
HKCR\CLSID\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\InprocServer32#ThreadingModel
HKCR\CLSID\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\MiscStatus
HKCR\CLSID\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\MiscStatus\1
HKCR\CLSID\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\ProgID
HKCR\CLSID\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\ToolboxBitmap32
HKCR\CLSID\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\TypeLib
HKCR\CLSID\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\Version
HKCR\CLSID\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\VersionIndependentProgID
HKCR\QuickTime.QuickTime.4
HKCR\QuickTime.QuickTime.4\CLSID
HKCR\QuickTime.QuickTime.4\NotInsertable
HKCR\QuickTime.QuickTime
HKCR\QuickTime.QuickTime\CLSID
HKCR\QuickTime.QuickTime\CurVer
HKCR\QuickTime.QuickTime\NotInsertable
HKCR\TypeLib\{02BF25D2-8C17-4B23-BC80-D3488ABDDC6B}
HKCR\TypeLib\{02BF25D2-8C17-4B23-BC80-D3488ABDDC6B}\2.0
HKCR\TypeLib\{02BF25D2-8C17-4B23-BC80-D3488ABDDC6B}\2.0\0
HKCR\TypeLib\{02BF25D2-8C17-4B23-BC80-D3488ABDDC6B}\2.0\0\win32
HKCR\TypeLib\{02BF25D2-8C17-4B23-BC80-D3488ABDDC6B}\2.0\FLAGS
HKCR\TypeLib\{02BF25D2-8C17-4B23-BC80-D3488ABDDC6B}\2.0\HELPDIR
C:\PROGRAM FILES\QUICKTIME\QTPLUGIN.OCX
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{17492023-C23A-453E-A040-C7C580BBF700}
HKCR\CLSID\{17492023-C23A-453E-A040-C7C580BBF700}
HKCR\CLSID\{17492023-C23A-453E-A040-C7C580BBF700}
HKCR\CLSID\{17492023-C23A-453E-A040-C7C580BBF700}#AppID
HKCR\CLSID\{17492023-C23A-453E-A040-C7C580BBF700}\InprocServer32
HKCR\CLSID\{17492023-C23A-453E-A040-C7C580BBF700}\InprocServer32#ThreadingModel
HKCR\CLSID\{17492023-C23A-453E-A040-C7C580BBF700}\ProgID
HKCR\CLSID\{17492023-C23A-453E-A040-C7C580BBF700}\TypeLib
HKCR\CLSID\{17492023-C23A-453E-A040-C7C580BBF700}\VersionIndependentProgID
HKCR\LegitCheckControl.LegitCheck.1
HKCR\LegitCheckControl.LegitCheck.1\CLSID
HKCR\LegitCheckControl.LegitCheck
HKCR\LegitCheckControl.LegitCheck\CLSID
HKCR\LegitCheckControl.LegitCheck\CurVer
HKCR\TypeLib\{5E649A63-7EE9-43F4-9926-0DEAA462A8FB}
HKCR\TypeLib\{5E649A63-7EE9-43F4-9926-0DEAA462A8FB}\1.0
HKCR\TypeLib\{5E649A63-7EE9-43F4-9926-0DEAA462A8FB}\1.0\0
HKCR\TypeLib\{5E649A63-7EE9-43F4-9926-0DEAA462A8FB}\1.0\0\win32
HKCR\TypeLib\{5E649A63-7EE9-43F4-9926-0DEAA462A8FB}\1.0\FLAGS
HKCR\TypeLib\{5E649A63-7EE9-43F4-9926-0DEAA462A8FB}\1.0\HELPDIR
C:\WINDOWS\SYSTEM32\LEGITCHECKCONTROL.DLL
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\InprocServer32
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\InprocServer32#ThreadingModel
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{38481807-CA0E-42D2-BF39-B33AF135CC4D}
HKCR\CLSID\{38481807-CA0E-42D2-BF39-B33AF135CC4D}
HKCR\CLSID\{38481807-CA0E-42D2-BF39-B33AF135CC4D}
HKCR\CLSID\{38481807-CA0E-42D2-BF39-B33AF135CC4D}\InprocServer32
HKCR\CLSID\{38481807-CA0E-42D2-BF39-B33AF135CC4D}\InprocServer32#ThreadingModel
HKCR\CLSID\{38481807-CA0E-42D2-BF39-B33AF135CC4D}\ProgID
HKCR\CLSID\{38481807-CA0E-42D2-BF39-B33AF135CC4D}\Programmable
HKCR\CLSID\{38481807-CA0E-42D2-BF39-B33AF135CC4D}\TypeLib
HKCR\CLSID\{38481807-CA0E-42D2-BF39-B33AF135CC4D}\VersionIndependentProgID
HKCR\Ietag.Factory.1
HKCR\Ietag.Factory.1\CLSID
HKCR\Ietag.Factory
HKCR\Ietag.Factory\CLSID
HKCR\Ietag.Factory\CurVer
HKCR\TypeLib\{06CA6721-CB57-449E-8097-E65B9F543A1A}
HKCR\TypeLib\{06CA6721-CB57-449E-8097-E65B9F543A1A}\1.0
HKCR\TypeLib\{06CA6721-CB57-449E-8097-E65B9F543A1A}\1.0\0
HKCR\TypeLib\{06CA6721-CB57-449E-8097-E65B9F543A1A}\1.0\0\win32
HKCR\TypeLib\{06CA6721-CB57-449E-8097-E65B9F543A1A}\1.0\FLAGS
HKCR\TypeLib\{06CA6721-CB57-449E-8097-E65B9F543A1A}\1.0\HELPDIR
C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3E68E405-C6DE-49FF-83AE-41EE9F4C36CE}
HKCR\CLSID\{3E68E405-C6DE-49FF-83AE-41EE9F4C36CE}
HKCR\CLSID\{3E68E405-C6DE-49FF-83AE-41EE9F4C36CE}
HKCR\CLSID\{3E68E405-C6DE-49FF-83AE-41EE9F4C36CE}\InprocServer32
HKCR\CLSID\{3E68E405-C6DE-49FF-83AE-41EE9F4C36CE}\InprocServer32#ThreadingModel
HKCR\CLSID\{3E68E405-C6DE-49FF-83AE-41EE9F4C36CE}\ProgID
HKCR\CLSID\{3E68E405-C6DE-49FF-83AE-41EE9F4C36CE}\Programmable
HKCR\CLSID\{3E68E405-C6DE-49FF-83AE-41EE9F4C36CE}\VersionIndependentProgID
HKCR\OPUCatalog.OPUCatalog11.1
HKCR\OPUCatalog.OPUCatalog11.1\CLSID
HKCR\OPUCatalog.OPUCatalog11
HKCR\OPUCatalog.OPUCatalog11\CurVer
C:\WINDOWS\OPUC.DLL
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5CA3D70E-1895-11CF-8E15-001234567890}
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\Control
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\Implemented Categories
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352}
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\Implemented Categories\{0DE86A53-2BAA-11CF-A229-00AA003D7352}
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\Implemented Categories\{0DE86A57-2BAA-11CF-A229-00AA003D7352}
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\Implemented Categories\{40FC6ED4-2438-11CF-A3DB-080036F12502}
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\InprocServer32
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\InprocServer32#InprocServer32
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\MiscStatus
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\MiscStatus\1
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\ProgID
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\ToolboxBitmap32
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\TypeLib
HKCR\CLSID\{A0E1A488-044D-4DA4-B60F-8CA2A0BA74CA}\VERSION
HKCR\BrownTifViewer.TifViewer
HKCR\BrownTifViewer.TifViewer\CLSID
HKCR\TypeLib\{79DBD8AA-C872-4741-9611-F0809995FA78}
HKCR\TypeLib\{79DBD8AA-C872-4741-9611-F0809995FA78}\1.c
HKCR\TypeLib\{79DBD8AA-C872-4741-9611-F0809995FA78}\1.c\0
HKCR\TypeLib\{79DBD8AA-C872-4741-9611-F0809995FA78}\1.c\0\win32
HKCR\TypeLib\{79DBD8AA-C872-4741-9611-F0809995FA78}\1.c\FLAGS
HKCR\TypeLib\{79DBD8AA-C872-4741-9611-F0809995FA78}\1.c\HELPDIR
C:\PROGRAM FILES\BROWNTECH\BROWNTECH IMAGE PLUGIN\BROWNTIF.OCX
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA58ED58-01DD-4D91-8333-CF10577473F7}
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CA6319C0-31B7-401E-A518-A07C3DB8F777}
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CA8A9780-280D-11CF-A24D-444553540000}
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}#AppID
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\Control
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\DocObject
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\EnableFullPage
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\EnableFullPage\.fdf
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\EnableFullPage\.pdf
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\EnableFullPage\.xdp
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\EnableFullPage\.xfd
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\EnableFullPage\.xfdf
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\Implemented Categories
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\InprocServer32
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\InprocServer32#ThreadingModel
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\MiscStatus
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\MiscStatus\1
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\ProgID
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\Programmable
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\ToolboxBitmap32
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\TypeLib
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\Version
HKCR\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\VersionIndependentProgID
HKCR\AcroPDF.PDF.1
HKCR\AcroPDF.PDF.1#EditFlags
HKCR\AcroPDF.PDF.1\CLSID
HKCR\AcroPDF.PDF.1\DocObject
HKCR\AcroPDF.PDF
HKCR\AcroPDF.PDF\CLSID
HKCR\AcroPDF.PDF\CurVer
HKCR\TypeLib\{05BFD3F1-6319-4F30-B752-C7A22889BCC4}
HKCR\TypeLib\{05BFD3F1-6319-4F30-B752-C7A22889BCC4}\1.0
HKCR\TypeLib\{05BFD3F1-6319-4F30-B752-C7A22889BCC4}\1.0\0
HKCR\TypeLib\{05BFD3F1-6319-4F30-B752-C7A22889BCC4}\1.0\0\win32
HKCR\TypeLib\{05BFD3F1-6319-4F30-B752-C7A22889BCC4}\1.0\FLAGS
HKCR\TypeLib\{05BFD3F1-6319-4F30-B752-C7A22889BCC4}\1.0\HELPDIR
C:\PROGRAM FILES\ADOBE\ACROBAT 7.0\ACTIVEX\ACROPDF.DLL
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA}
HKCR\CLSID\{CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA}
HKCR\CLSID\{CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA}
HKCR\CLSID\{CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA}\InprocServer32
HKCR\CLSID\{CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA}\InprocServer32#ThreadingModel
C:\WINDOWS\SYSTEM32\DEPLOYJAVA1.DLL
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D27CDB6E-AE6D-11CF-96B8-444553540000}
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\Control
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\EnableFullPage
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\EnableFullPage\.mfp
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\EnableFullPage\.spl
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\EnableFullPage\.swf
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\Implemented Categories
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\InprocServer32
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\InprocServer32#ThreadingModel
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\MiscStatus
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\MiscStatus\1
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ProgID
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\Programmable
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ToolboxBitmap32
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\TypeLib
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\Version
HKCR\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\VersionIndependentProgID
HKCR\ShockwaveFlash.ShockwaveFlash.1
HKCR\ShockwaveFlash.ShockwaveFlash.1\CLSID
HKCR\ShockwaveFlash.ShockwaveFlash
HKCR\ShockwaveFlash.ShockwaveFlash\CLSID
HKCR\ShockwaveFlash.ShockwaveFlash\CurVer
HKCR\TypeLib\{D27CDB6B-AE6D-11cf-96B8-444553540000}
HKCR\TypeLib\{D27CDB6B-AE6D-11cf-96B8-444553540000}\1.0
HKCR\TypeLib\{D27CDB6B-AE6D-11cf-96B8-444553540000}\1.0\0
HKCR\TypeLib\{D27CDB6B-AE6D-11cf-96B8-444553540000}\1.0\0\win32
HKCR\TypeLib\{D27CDB6B-AE6D-11cf-96B8-444553540000}\1.0\FLAGS
HKCR\TypeLib\{D27CDB6B-AE6D-11cf-96B8-444553540000}\1.0\HELPDIR
C:\WINDOWS\SYSTEM32\MACROMED\FLASH\FLASH.OCX
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}
HKCR\CLSID\{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}
HKCR\CLSID\{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}
HKCR\CLSID\{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}\Implemented Categories
HKCR\CLSID\{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
HKCR\CLSID\{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}
HKCR\CLSID\{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}\InprocServer32
HKCR\CLSID\{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}\InprocServer32#ThreadingModel
HKCR\CLSID\{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}\ProgID
HKCR\CLSID\{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}\Programmable
HKCR\CLSID\{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}\TypeLib
HKCR\CLSID\{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}\VersionIndependentProgID
HKCR\QuickTimeCheckObject.QuickTimeCheck.1
HKCR\QuickTimeCheckObject.QuickTimeCheck.1\CLSID
HKCR\QuickTimeCheckObject.QuickTimeCheck
HKCR\QuickTimeCheckObject.QuickTimeCheck\CLSID
HKCR\QuickTimeCheckObject.QuickTimeCheck\CurVer
HKCR\TypeLib\{DE4AF3A1-F4D4-11D3-B41A-0050DA2E6C21}
HKCR\TypeLib\{DE4AF3A1-F4D4-11D3-B41A-0050DA2E6C21}\1.0
HKCR\TypeLib\{DE4AF3A1-F4D4-11D3-B41A-0050DA2E6C21}\1.0\0
HKCR\TypeLib\{DE4AF3A1-F4D4-11D3-B41A-0050DA2E6C21}\1.0\0\win32
HKCR\TypeLib\{DE4AF3A1-F4D4-11D3-B41A-0050DA2E6C21}\1.0\FLAGS
HKCR\TypeLib\{DE4AF3A1-F4D4-11D3-B41A-0050DA2E6C21}\1.0\HELPDIR
C:\WINDOWS\SYSTEM32\QUICKTIMECHECK.OCX
HKU\S-1-5-21-1144335909-3069691573-3759953391-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}
HKLM\Software\Microsoft\Internet Explorer\Toolbar#{2318C2B1-4965-11d4-9B18-009027A5CD4F}
HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{3E68E405-C6DE-49FF-83AE-41EE9F4C36CE}
HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}
HKCR\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}
HKCR\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}
HKCR\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\InprocServer32
HKCR\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\InprocServer32#ThreadingModel
HKCR\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\MiscStatus
HKCR\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\MiscStatus\1
C:\PROGRAM FILES\JAVA\JRE6\BIN\NPJPI160_30.DLL
HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
HKCR\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
HKCR\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
HKCR\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}\InprocServer32
HKCR\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}\InprocServer32#ThreadingModel
HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
HKCR\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
HKCR\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
HKCR\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\InprocServer32
HKCR\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\InprocServer32#ThreadingModel
HKCR\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\MiscStatus
HKCR\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\MiscStatus\1
HKCR\Folder\shellex\columnhandlers\{F9DB5320-233E-11D1-9F84-707F02C10627}
HKCR\CLSID\{F9DB5320-233E-11D1-9F84-707F02C10627}
HKCR\CLSID\{F9DB5320-233E-11D1-9F84-707F02C10627}
HKCR\CLSID\{F9DB5320-233E-11D1-9F84-707F02C10627}\InprocServer32
HKCR\CLSID\{F9DB5320-233E-11D1-9F84-707F02C10627}\InprocServer32#ThreadingModel
HKCR\Folder\shellex\contextmenuhandlers\{48F45200-91E6-11CE-8A4F-0080C81A28D4}
HKCR\CLSID\{48F45200-91E6-11CE-8A4F-0080C81A28D4}
HKCR\CLSID\{48F45200-91E6-11CE-8A4F-0080C81A28D4}
HKCR\CLSID\{48F45200-91E6-11CE-8A4F-0080C81A28D4}\InProcServer32
HKCR\CLSID\{48F45200-91E6-11CE-8A4F-0080C81A28D4}\InProcServer32#ThreadingModel
C:\PROGRAM FILES\TREND MICRO\INTERNET SECURITY 12\TMDSHELL.DLL
HKLM\System\ControlSet001\Services\AegisP
C:\WINDOWS\SYSTEM32\DRIVERS\AEGISP.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_AegisP
HKLM\System\ControlSet001\Services\APPDRV
C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_APPDRV
HKLM\System\ControlSet001\Services\drvmcdb
C:\WINDOWS\SYSTEM32\DRIVERS\DRVMCDB.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_drvmcdb
HKLM\System\ControlSet001\Services\drvnddm
C:\WINDOWS\SYSTEM32\DRIVERS\DRVNDDM.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_drvnddm
HKLM\System\ControlSet001\Services\DSBrokerService
C:\PROGRAM FILES\DELLSUPPORT\BRKRSVC.EXE
HKLM\System\ControlSet001\Enum\Root\LEGACY_DSBrokerService
HKLM\System\ControlSet001\Services\DSproct
C:\PROGRAM FILES\DELLSUPPORT\GTACTION\TRIGGERS\DSPROCT.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_DSproct
HKLM\System\ControlSet001\Services\omci
C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_omci
HKLM\System\ControlSet001\Services\ose
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\SOURCE ENGINE\OSE.EXE
HKLM\System\ControlSet001\Enum\Root\LEGACY_ose
HKLM\System\ControlSet001\Services\PxHelp20
C:\WINDOWS\SYSTEM32\DRIVERS\PXHELP20.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_PxHelp20
HKLM\System\ControlSet001\Services\SASDIFSV
C:\PROGRAM FILES\SUPERANTISPYWARE\SASDIFSV.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_SASDIFSV
HKLM\System\ControlSet001\Services\SASKUTIL
C:\PROGRAM FILES\SUPERANTISPYWARE\SASKUTIL.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_SASKUTIL
HKLM\System\ControlSet001\Services\sscdbhk5
C:\WINDOWS\SYSTEM32\DRIVERS\SSCDBHK5.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_sscdbhk5
HKLM\System\ControlSet001\Services\ssrtln
C:\WINDOWS\SYSTEM32\DRIVERS\SSRTLN.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_ssrtln
HKLM\System\ControlSet001\Services\tfsnboio
C:\WINDOWS\SYSTEM32\DLA\TFSNBOIO.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_tfsnboio
HKLM\System\ControlSet001\Services\tfsncofs
C:\WINDOWS\SYSTEM32\DLA\TFSNCOFS.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_tfsncofs
HKLM\System\ControlSet001\Services\tfsndrct
C:\WINDOWS\SYSTEM32\DLA\TFSNDRCT.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_tfsndrct
HKLM\System\ControlSet001\Services\tfsndres
C:\WINDOWS\SYSTEM32\DLA\TFSNDRES.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_tfsndres
HKLM\System\ControlSet001\Services\tfsnifs
C:\WINDOWS\SYSTEM32\DLA\TFSNIFS.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_tfsnifs
HKLM\System\ControlSet001\Services\tfsnopio
C:\WINDOWS\SYSTEM32\DLA\TFSNOPIO.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_tfsnopio
HKLM\System\ControlSet001\Services\tfsnpool
C:\WINDOWS\SYSTEM32\DLA\TFSNPOOL.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_tfsnpool
HKLM\System\ControlSet001\Services\tfsnudf
C:\WINDOWS\SYSTEM32\DLA\TFSNUDF.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_tfsnudf
HKLM\System\ControlSet001\Services\tfsnudfa
C:\WINDOWS\SYSTEM32\DLA\TFSNUDFA.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_tfsnudfa
HKLM\System\ControlSet001\Services\Tmfilter
C:\WINDOWS\SYSTEM32\DRIVERS\TMXPFLT.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_Tmfilter
HKLM\System\ControlSet001\Services\Tmpreflt
C:\WINDOWS\SYSTEM32\DRIVERS\TMPREFLT.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_Tmpreflt
HKLM\System\ControlSet001\Services\tmtdi
C:\WINDOWS\SYSTEM32\DRIVERS\TMTDI.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_tmtdi
HKLM\System\ControlSet001\Services\tm_cfw
C:\WINDOWS\SYSTEM32\DRIVERS\TM_CFW.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_tm_cfw
HKLM\System\ControlSet001\Services\Vsapint
C:\WINDOWS\SYSTEM32\DRIVERS\VSAPINT.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_Vsapint
HKLM\System\ControlSet002\Services\AegisP
HKLM\System\ControlSet002\Enum\Root\LEGACY_AegisP
HKLM\System\ControlSet002\Services\APPDRV
HKLM\System\ControlSet002\Enum\Root\LEGACY_APPDRV
HKLM\System\ControlSet002\Services\drvmcdb
HKLM\System\ControlSet002\Enum\Root\LEGACY_drvmcdb
HKLM\System\ControlSet002\Services\drvnddm
HKLM\System\ControlSet002\Enum\Root\LEGACY_drvnddm
HKLM\System\ControlSet002\Services\DSBrokerService
HKLM\System\ControlSet002\Enum\Root\LEGACY_DSBrokerService
HKLM\System\ControlSet002\Services\DSproct
HKLM\System\ControlSet002\Enum\Root\LEGACY_DSproct
HKLM\System\ControlSet002\Services\omci
HKLM\System\ControlSet002\Enum\Root\LEGACY_omci
HKLM\System\ControlSet002\Services\ose
HKLM\System\ControlSet002\Enum\Root\LEGACY_ose
HKLM\System\ControlSet002\Services\PxHelp20
HKLM\System\ControlSet002\Enum\Root\LEGACY_PxHelp20
HKLM\System\ControlSet002\Services\SASDIFSV
HKLM\System\ControlSet002\Enum\Root\LEGACY_SASDIFSV
HKLM\System\ControlSet002\Services\SASKUTIL
HKLM\System\ControlSet002\Enum\Root\LEGACY_SASKUTIL
HKLM\System\ControlSet002\Services\sscdbhk5
HKLM\System\ControlSet002\Enum\Root\LEGACY_sscdbhk5
HKLM\System\ControlSet002\Services\ssrtln
HKLM\System\ControlSet002\Enum\Root\LEGACY_ssrtln
HKLM\System\ControlSet002\Services\tfsnboio
HKLM\System\ControlSet002\Enum\Root\LEGACY_tfsnboio
HKLM\System\ControlSet002\Services\tfsncofs
HKLM\System\ControlSet002\Enum\Root\LEGACY_tfsncofs
HKLM\System\ControlSet002\Services\tfsndrct
HKLM\System\ControlSet002\Enum\Root\LEGACY_tfsndrct
HKLM\System\ControlSet002\Services\tfsndres
HKLM\System\ControlSet002\Enum\Root\LEGACY_tfsndres
HKLM\System\ControlSet002\Services\tfsnifs
HKLM\System\ControlSet002\Enum\Root\LEGACY_tfsnifs
HKLM\System\ControlSet002\Services\tfsnopio
HKLM\System\ControlSet002\Enum\Root\LEGACY_tfsnopio
HKLM\System\ControlSet002\Services\tfsnpool
HKLM\System\ControlSet002\Enum\Root\LEGACY_tfsnpool
HKLM\System\ControlSet002\Services\tfsnudf
HKLM\System\ControlSet002\Enum\Root\LEGACY_tfsnudf
HKLM\System\ControlSet002\Services\tfsnudfa
HKLM\System\ControlSet002\Enum\Root\LEGACY_tfsnudfa
HKLM\System\ControlSet002\Services\Tmfilter
HKLM\System\ControlSet002\Enum\Root\LEGACY_Tmfilter
HKLM\System\ControlSet002\Services\Tmpreflt
HKLM\System\ControlSet002\Enum\Root\LEGACY_Tmpreflt
HKLM\System\ControlSet002\Services\tmtdi
HKLM\System\ControlSet002\Enum\Root\LEGACY_tmtdi
HKLM\System\ControlSet002\Services\tm_cfw
HKLM\System\ControlSet002\Enum\Root\LEGACY_tm_cfw
HKLM\System\ControlSet002\Services\Vsapint
HKLM\System\ControlSet002\Enum\Root\LEGACY_Vsapint
HKLM\System\CurrentControlSet\Services\AegisP
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_AegisP
HKLM\System\CurrentControlSet\Services\APPDRV
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_APPDRV
HKLM\System\CurrentControlSet\Services\drvmcdb
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_drvmcdb
HKLM\System\CurrentControlSet\Services\drvnddm
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_drvnddm
HKLM\System\CurrentControlSet\Services\DSBrokerService
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_DSBrokerService
HKLM\System\CurrentControlSet\Services\DSproct
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_DSproct
HKLM\System\CurrentControlSet\Services\omci
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_omci
HKLM\System\CurrentControlSet\Services\ose
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_ose
HKLM\System\CurrentControlSet\Services\PxHelp20
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_PxHelp20
HKLM\System\CurrentControlSet\Services\SASDIFSV
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_SASDIFSV
HKLM\System\CurrentControlSet\Services\SASKUTIL
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_SASKUTIL
HKLM\System\CurrentControlSet\Services\sscdbhk5
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_sscdbhk5
HKLM\System\CurrentControlSet\Services\ssrtln
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_ssrtln
HKLM\System\CurrentControlSet\Services\tfsnboio
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_tfsnboio
HKLM\System\CurrentControlSet\Services\tfsncofs
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_tfsncofs
HKLM\System\CurrentControlSet\Services\tfsndrct
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_tfsndrct
HKLM\System\CurrentControlSet\Services\tfsndres
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_tfsndres
HKLM\System\CurrentControlSet\Services\tfsnifs
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_tfsnifs
HKLM\System\CurrentControlSet\Services\tfsnopio
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_tfsnopio
HKLM\System\CurrentControlSet\Services\tfsnpool
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_tfsnpool
HKLM\System\CurrentControlSet\Services\tfsnudf
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_tfsnudf
HKLM\System\CurrentControlSet\Services\tfsnudfa
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_tfsnudfa
HKLM\System\CurrentControlSet\Services\Tmfilter
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_Tmfilter
HKLM\System\CurrentControlSet\Services\Tmpreflt
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_Tmpreflt
HKLM\System\CurrentControlSet\Services\tmtdi
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_tmtdi
HKLM\System\CurrentControlSet\Services\tm_cfw
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_tm_cfw
HKLM\System\CurrentControlSet\Services\Vsapint
C:\WINDOWS\SYSTEM32\PIXN1320.DLL
C:\WINDOWS\SYSTEM32\PIXN1520.DLL
C:\WINDOWS\SYSTEM32\PIXN20.DLL
C:\WINDOWS\SYSTEM32\PIXNAME.HLP
C:\WINDOWS\SYSTEM32\PIXNAMEN.DLL
C:\WINDOWS\SYSTEM32\PIXNOTEN.DLL
C:\WINDOWS\SYSTEM32\PIXPANN.DLL
C:\WINDOWS\SYSTEM32\PIXPEI.DLL
C:\WINDOWS\SYSTEM32\PIXPERMN.DLL
C:\WINDOWS\SYSTEM32\PIXRAMN.DLL
C:\WINDOWS\SYSTEM32\PIXSLN.DLL
C:\WINDOWS\SYSTEM32\PIXTAGN.DLL
C:\WINDOWS\SYSTEM32\PIXTIFFN.DLL
C:\WINDOWS\SYSTEM32\PIXTREEN.DLL
C:\WINDOWS\SYSTEM32\PNDX5016.DLL
C:\WINDOWS\SYSTEM32\PNDX5032.DLL
C:\WINDOWS\SYSTEM32\PREFSCPL.CPL
C:\WINDOWS\SYSTEM32\PREINSTALL\WINSE\WXP_X86_0409_V1\SPCUSTOM.DLL.REF
C:\WINDOWS\SYSTEM32\PREINSTALL\WINSE\WXP_X86_0409_V1\SPMSG.DLL.REF
C:\WINDOWS\SYSTEM32\PREINSTALL\WINSE\WXP_X86_0409_V1\SPUNINST.EXE.REF
C:\WINDOWS\SYSTEM32\PREINSTALL\WINSE\WXP_X86_0409_V1\SPUPDSVC.EXE.REF
C:\WINDOWS\SYSTEM32\PREINSTALL\WINSE\WXP_X86_0409_V1\UPDATE.EXE.REF
C:\WINDOWS\SYSTEM32\PREINSTALL\WINSE\WXP_X86_0409_V1\UPDSPAPI.DLL.REF
C:\WINDOWS\SYSTEM32\QDIAGD.OCX
C:\WINDOWS\SYSTEM32\PXCPYA64.EXE
C:\WINDOWS\SYSTEM32\PXCPYI64.EXE
C:\WINDOWS\TASKS\SA.DAT
C:\WINDOWS\WT\WTUPDATES\WTUPDATER\APPINFO.DAT
C:\WINDOWS\WT\WTUPDATES\WTWEBDRIVER\UPDATE_INFO\DATA.WTS
C:\WINDOWS\WT\WTVH.DLL
HKCR\Interface\{02BF25D3-8C17-4B23-BC80-D3488ABDDC6B}
HKCR\Interface\{02BF25D3-8C17-4B23-BC80-D3488ABDDC6B}\ProxyStubClsid
HKCR\Interface\{02BF25D3-8C17-4B23-BC80-D3488ABDDC6B}\ProxyStubClsid32
HKCR\Interface\{02BF25D3-8C17-4B23-BC80-D3488ABDDC6B}\TypeLib
HKCR\Interface\{02BF25D3-8C17-4B23-BC80-D3488ABDDC6B}\TypeLib#Version
HKCR\Interface\{02BF25D4-8C17-4B23-BC80-D3488ABDDC6B}
HKCR\Interface\{02BF25D4-8C17-4B23-BC80-D3488ABDDC6B}\ProxyStubClsid
HKCR\Interface\{02BF25D4-8C17-4B23-BC80-D3488ABDDC6B}\ProxyStubClsid32
HKCR\Interface\{02BF25D4-8C17-4B23-BC80-D3488ABDDC6B}\TypeLib
HKCR\Interface\{02BF25D4-8C17-4B23-BC80-D3488ABDDC6B}\TypeLib#Version
HKCR\Interface\{13720C8A-CB2F-4BE1-B007-2A1F97DCDF7D}
HKCR\Interface\{13720C8A-CB2F-4BE1-B007-2A1F97DCDF7D}\ProxyStubClsid
HKCR\Interface\{13720C8A-CB2F-4BE1-B007-2A1F97DCDF7D}\ProxyStubClsid32
HKCR\Interface\{13720C8A-CB2F-4BE1-B007-2A1F97DCDF7D}\TypeLib
HKCR\Interface\{13720C8A-CB2F-4BE1-B007-2A1F97DCDF7D}\TypeLib#Version
HKCR\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0}
HKCR\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0}\ProxyStubClsid
HKCR\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0}\ProxyStubClsid32
HKCR\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0}\TypeLib
HKCR\Interface\{17484B9D-89FA-484F-912E-017D06C41FE0}\TypeLib#Version
HKCR\Interface\{1F7328B7-E25A-4527-B24B-D9173401BB89}
HKCR\Interface\{1F7328B7-E25A-4527-B24B-D9173401BB89}\ProxyStubClsid
HKCR\Interface\{1F7328B7-E25A-4527-B24B-D9173401BB89}\ProxyStubClsid32
HKCR\Interface\{1F7328B7-E25A-4527-B24B-D9173401BB89}\TypeLib
HKCR\Interface\{1F7328B7-E25A-4527-B24B-D9173401BB89}\TypeLib#Version
HKCR\Interface\{2212951C-1623-4095-906B-AC50B8F91016}
HKCR\Interface\{2212951C-1623-4095-906B-AC50B8F91016}\ProxyStubClsid
HKCR\Interface\{2212951C-1623-4095-906B-AC50B8F91016}\ProxyStubClsid32
HKCR\Interface\{2212951C-1623-4095-906B-AC50B8F91016}\TypeLib
HKCR\Interface\{2212951C-1623-4095-906B-AC50B8F91016}\TypeLib#Version
HKCR\Interface\{2351B346-00E8-4EAC-9B75-B138B465D659}
HKCR\Interface\{2351B346-00E8-4EAC-9B75-B138B465D659}\ProxyStubClsid
HKCR\Interface\{2351B346-00E8-4EAC-9B75-B138B465D659}\ProxyStubClsid32
HKCR\Interface\{2351B346-00E8-4EAC-9B75-B138B465D659}\TypeLib
HKCR\Interface\{2351B346-00E8-4EAC-9B75-B138B465D659}\TypeLib#Version
HKCR\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB}
HKCR\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB}\ProxyStubClsid
HKCR\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB}\ProxyStubClsid32
HKCR\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB}\TypeLib
HKCR\Interface\{235317AD-6EF4-4209-9354-F88869E1A3BB}\TypeLib#Version
HKCR\Interface\{277FD1E8-9884-4E0A-9392-7CFF83F067B2}
HKCR\Interface\{277FD1E8-9884-4E0A-9392-7CFF83F067B2}\ProxyStubClsid
HKCR\Interface\{277FD1E8-9884-4E0A-9392-7CFF83F067B2}\ProxyStubClsid32
HKCR\Interface\{277FD1E8-9884-4E0A-9392-7CFF83F067B2}\TypeLib
HKCR\Interface\{277FD1E8-9884-4E0A-9392-7CFF83F067B2}\TypeLib#Version
HKCR\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6}
HKCR\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6}\ProxyStubClsid
HKCR\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6}\ProxyStubClsid32
HKCR\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6}\TypeLib
HKCR\Interface\{315A0BBF-D55B-4FCE-833E-8BAA5B6344F6}\TypeLib#Version
HKCR\Interface\{36CFF953-FB06-45AD-896F-94A0259AB3DD}
HKCR\Interface\{36CFF953-FB06-45AD-896F-94A0259AB3DD}\ProxyStubClsid
HKCR\Interface\{36CFF953-FB06-45AD-896F-94A0259AB3DD}\ProxyStubClsid32
HKCR\Interface\{36CFF953-FB06-45AD-896F-94A0259AB3DD}\TypeLib
HKCR\Interface\{36CFF953-FB06-45AD-896F-94A0259AB3DD}\TypeLib#Version
HKCR\Interface\{3B813CE7-7C10-4F84-AD06-9DF76D97A9AA}
HKCR\Interface\{3B813CE7-7C10-4F84-AD06-9DF76D97A9AA}\NumMethods
HKCR\Interface\{3B813CE7-7C10-4F84-AD06-9DF76D97A9AA}\ProxyStubClsid
HKCR\Interface\{3B813CE7-7C10-4F84-AD06-9DF76D97A9AA}\ProxyStubClsid32
HKCR\Interface\{3B813CE7-7C10-4F84-AD06-9DF76D97A9AA}\TypeLib
HKCR\Interface\{3B813CE7-7C10-4F84-AD06-9DF76D97A9AA}\TypeLib#Version
HKCR\Interface\{480AD54B-C652-44B9-BCF6-746745055CD3}
HKCR\Interface\{480AD54B-C652-44B9-BCF6-746745055CD3}\ProxyStubClsid
HKCR\Interface\{480AD54B-C652-44B9-BCF6-746745055CD3}\ProxyStubClsid32
HKCR\Interface\{480AD54B-C652-44B9-BCF6-746745055CD3}\TypeLib
HKCR\Interface\{480AD54B-C652-44B9-BCF6-746745055CD3}\TypeLib#Version
HKCR\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41}
HKCR\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41}\ProxyStubClsid
HKCR\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41}\ProxyStubClsid32
HKCR\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41}\TypeLib
HKCR\Interface\{5D358B5C-3415-42BB-A606-E1089B674F41}\TypeLib#Version
HKCR\Interface\{68352C65-F3D2-44D3-8404-B02E54FE0EFD}
HKCR\Interface\{68352C65-F3D2-44D3-8404-B02E54FE0EFD}\ProxyStubClsid
HKCR\Interface\{68352C65-F3D2-44D3-8404-B02E54FE0EFD}\ProxyStubClsid32
HKCR\Interface\{68352C65-F3D2-44D3-8404-B02E54FE0EFD}\TypeLib
HKCR\Interface\{68352C65-F3D2-44D3-8404-B02E54FE0EFD}\TypeLib#Version
HKCR\Interface\{6C110376-C248-47F6-9DB2-CFCDEADB6A3E}
HKCR\Interface\{6C110376-C248-47F6-9DB2-CFCDEADB6A3E}\ProxyStubClsid
HKCR\Interface\{6C110376-C248-47F6-9DB2-CFCDEADB6A3E}\ProxyStubClsid32
HKCR\Interface\{6C110376-C248-47F6-9DB2-CFCDEADB6A3E}\TypeLib
HKCR\Interface\{6C110376-C248-47F6-9DB2-CFCDEADB6A3E}\TypeLib#Version
HKCR\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2}
HKCR\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2}\ProxyStubClsid
HKCR\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2}\ProxyStubClsid32
HKCR\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2}\TypeLib
HKCR\Interface\{6EACF525-5F81-4381-9E46-DC316C39E0D2}\TypeLib#Version
HKCR\Interface\{86DFD6C4-F004-46C0-8C6D-F5B7FBA66A82}
HKCR\Interface\{86DFD6C4-F004-46C0-8C6D-F5B7FBA66A82}\ProxyStubClsid
HKCR\Interface\{86DFD6C4-F004-46C0-8C6D-F5B7FBA66A82}\ProxyStubClsid32
HKCR\Interface\{86DFD6C4-F004-46C0-8C6D-F5B7FBA66A82}\TypeLib
HKCR\Interface\{86DFD6C4-F004-46C0-8C6D-F5B7FBA66A82}\TypeLib#Version
HKCR\Interface\{91959FBB-853A-4AC7-A082-2DDF787F4CA9}
HKCR\Interface\{91959FBB-853A-4AC7-A082-2DDF787F4CA9}\ProxyStubClsid
HKCR\Interface\{91959FBB-853A-4AC7-A082-2DDF787F4CA9}\ProxyStubClsid32
HKCR\Interface\{91959FBB-853A-4AC7-A082-2DDF787F4CA9}\TypeLib
HKCR\Interface\{91959FBB-853A-4AC7-A082-2DDF787F4CA9}\TypeLib#Version
HKCR\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2}
HKCR\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2}\ProxyStubClsid
HKCR\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2}\ProxyStubClsid32
HKCR\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2}\TypeLib
HKCR\Interface\{91F39C2A-95E7-497A-A539-0AC715DC66D2}\TypeLib#Version
HKCR\Interface\{9891812B-5820-4A77-827E-772B200239E1}
HKCR\Interface\{9891812B-5820-4A77-827E-772B200239E1}\ProxyStubClsid
HKCR\Interface\{9891812B-5820-4A77-827E-772B200239E1}\ProxyStubClsid32
HKCR\Interface\{9891812B-5820-4A77-827E-772B200239E1}\TypeLib
HKCR\Interface\{9891812B-5820-4A77-827E-772B200239E1}\TypeLib#Version
HKCR\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA}
HKCR\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA}\ProxyStubClsid
HKCR\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA}\ProxyStubClsid32
HKCR\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA}\TypeLib
HKCR\Interface\{9D932020-700E-4F0D-8446-2872ABD8B4FA}\TypeLib#Version
HKCR\Interface\{9DF0C21E-FBC2-436A-9C9D-71BC6A6AC9F4}
HKCR\Interface\{9DF0C21E-FBC2-436A-9C9D-71BC6A6AC9F4}\ProxyStubClsid
HKCR\Interface\{9DF0C21E-FBC2-436A-9C9D-71BC6A6AC9F4}\ProxyStubClsid32
HKCR\Interface\{9DF0C21E-FBC2-436A-9C9D-71BC6A6AC9F4}\TypeLib
HKCR\Interface\{9DF0C21E-FBC2-436A-9C9D-71BC6A6AC9F4}\TypeLib#Version
HKCR\Interface\{A0CF48B9-DB91-49A5-BEE7-2FB45BA2F610}
HKCR\Interface\{A0CF48B9-DB91-49A5-BEE7-2FB45BA2F610}\ProxyStubClsid
HKCR\Interface\{A0CF48B9-DB91-49A5-BEE7-2FB45BA2F610}\ProxyStubClsid32
HKCR\Interface\{A0CF48B9-DB91-49A5-BEE7-2FB45BA2F610}\TypeLib
HKCR\Interface\{A0CF48B9-DB91-49A5-BEE7-2FB45BA2F610}\TypeLib#Version
HKCR\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075}
HKCR\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075}\ProxyStubClsid
HKCR\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075}\ProxyStubClsid32
HKCR\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075}\TypeLib
HKCR\Interface\{A45CDEEB-65F5-49AE-AA3E-9376F4806075}\TypeLib#Version
HKCR\Interface\{AD5FB04F-5A8D-44D4-8206-6A8734186EA2}
HKCR\Interface\{AD5FB04F-5A8D-44D4-8206-6A8734186EA2}\ProxyStubClsid
HKCR\Interface\{AD5FB04F-5A8D-44D4-8206-6A8734186EA2}\ProxyStubClsid32
HKCR\Interface\{AD5FB04F-5A8D-44D4-8206-6A8734186EA2}\TypeLib
HKCR\Interface\{AD5FB04F-5A8D-44D4-8206-6A8734186EA2}\TypeLib#Version
HKCR\Interface\{AF606610-3627-4DF2-A6D5-32C6A355ACD1}
HKCR\Interface\{AF606610-3627-4DF2-A6D5-32C6A355ACD1}\ProxyStubClsid
HKCR\Interface\{AF606610-3627-4DF2-A6D5-32C6A355ACD1}\ProxyStubClsid32
HKCR\Interface\{AF606610-3627-4DF2-A6D5-32C6A355ACD1}\TypeLib
HKCR\Interface\{AF606610-3627-4DF2-A6D5-32C6A355ACD1}\TypeLib#Version
HKCR\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192}
HKCR\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192}\ProxyStubClsid
HKCR\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192}\ProxyStubClsid32
HKCR\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192}\TypeLib
HKCR\Interface\{BACAB2F3-7213-4865-96E9-B6B06BF49192}\TypeLib#Version
HKCR\Interface\{CFD00282-E42D-41C6-8CF8-BF309DC05B8A}
HKCR\Interface\{CFD00282-E42D-41C6-8CF8-BF309DC05B8A}\ProxyStubClsid
HKCR\Interface\{CFD00282-E42D-41C6-8CF8-BF309DC05B8A}\ProxyStubClsid32
HKCR\Interface\{CFD00282-E42D-41C6-8CF8-BF309DC05B8A}\TypeLib
HKCR\Interface\{CFD00282-E42D-41C6-8CF8-BF309DC05B8A}\TypeLib#Version
HKCR\Interface\{D27CDB6C-AE6D-11CF-96B8-444553540000}
HKCR\Interface\{D27CDB6C-AE6D-11CF-96B8-444553540000}\ProxyStubClsid
HKCR\Interface\{D27CDB6C-AE6D-11CF-96B8-444553540000}\ProxyStubClsid32
HKCR\Interface\{D27CDB6C-AE6D-11CF-96B8-444553540000}\TypeLib
HKCR\Interface\{D27CDB6C-AE6D-11CF-96B8-444553540000}\TypeLib#Version
HKCR\Interface\{D27CDB6D-AE6D-11CF-96B8-444553540000}
HKCR\Interface\{D27CDB6D-AE6D-11CF-96B8-444553540000}\ProxyStubClsid
HKCR\Interface\{D27CDB6D-AE6D-11CF-96B8-444553540000}\ProxyStubClsid32
HKCR\Interface\{D27CDB6D-AE6D-11CF-96B8-444553540000}\TypeLib
HKCR\Interface\{D27CDB6D-AE6D-11CF-96B8-444553540000}\TypeLib#Version
HKCR\Interface\{DA69D3CC-7676-4A65-889F-C052977F1AA9}
HKCR\Interface\{DA69D3CC-7676-4A65-889F-C052977F1AA9}\ProxyStubClsid
HKCR\Interface\{DA69D3CC-7676-4A65-889F-C052977F1AA9}\ProxyStubClsid32
HKCR\Interface\{DA69D3CC-7676-4A65-889F-C052977F1AA9}\TypeLib
HKCR\Interface\{DA69D3CC-7676-4A65-889F-C052977F1AA9}\TypeLib#Version
HKCR\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9}
HKCR\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9}\ProxyStubClsid
HKCR\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9}\ProxyStubClsid32
HKCR\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9}\TypeLib
HKCR\Interface\{DD65ABB2-2628-425B-86F5-825E4A3D3AD9}\TypeLib#Version
HKCR\Interface\{DE4AF3AF-F4D4-11D3-B41A-0050DA2E6C21}
HKCR\Interface\{DE4AF3AF-F4D4-11D3-B41A-0050DA2E6C21}\ProxyStubClsid
HKCR\Interface\{DE4AF3AF-F4D4-11D3-B41A-0050DA2E6C21}\ProxyStubClsid32
HKCR\Interface\{DE4AF3AF-F4D4-11D3-B41A-0050DA2E6C21}\TypeLib
HKCR\Interface\{DE4AF3AF-F4D4-11D3-B41A-0050DA2E6C21}\TypeLib#Version
HKCR\Interface\{E790E1D1-9DE8-4853-8AC6-933D4FD9C927}
HKCR\Interface\{E790E1D1-9DE8-4853-8AC6-933D4FD9C927}\ProxyStubClsid
HKCR\Interface\{E790E1D1-9DE8-4853-8AC6-933D4FD9C927}\ProxyStubClsid32
HKCR\Interface\{E790E1D1-9DE8-4853-8AC6-933D4FD9C927}\TypeLib
HKCR\Interface\{E790E1D1-9DE8-4853-8AC6-933D4FD9C927}\TypeLib#Version
HKCR\Interface\{EE5A151A-AD2A-4CEE-AD65-228B59F5B4AD}
HKCR\Interface\{EE5A151A-AD2A-4CEE-AD65-228B59F5B4AD}\NumMethods
HKCR\Interface\{EE5A151A-AD2A-4CEE-AD65-228B59F5B4AD}\ProxyStubClsid
HKCR\Interface\{EE5A151A-AD2A-4CEE-AD65-228B59F5B4AD}\ProxyStubClsid32
HKCR\Interface\{EE5A151A-AD2A-4CEE-AD65-228B59F5B4AD}\TypeLib
HKCR\Interface\{EE5A151A-AD2A-4CEE-AD65-228B59F5B4AD}\TypeLib#Version
HKCR\Interface\{F1A383D4-0364-4092-82E0-C39DAE5D801D}
HKCR\Interface\{F1A383D4-0364-4092-82E0-C39DAE5D801D}\ProxyStubClsid
HKCR\Interface\{F1A383D4-0364-4092-82E0-C39DAE5D801D}\ProxyStubClsid32
HKCR\Interface\{F1A383D4-0364-4092-82E0-C39DAE5D801D}\TypeLib
HKCR\Interface\{F1A383D4-0364-4092-82E0-C39DAE5D801D}\TypeLib#Version
=== Malware log ===
Malwarebytes Anti-Malware 1.60.1.1000
Malwarebytes : Free anti-malware, anti-virus and spyware removal download
Database version: v2012.03.11.07
Windows XP Service Pack 3 x86 NTFS
Internet Explorer 7.0.5730.11
bdwu :: BDWU2005 [administrator]
3/11/2012 10:25:18 AM
mbam-log-2012-03-11 (10-25-18).txt
Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 307486
Time elapsed: 4 hour(s), 13 minute(s), 59 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 1
HKCU\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow|*.starsdoor.com (Backdoor.Bot) -> Data: -> Quarantined and deleted successfully.
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)
=== Hijack This log ===
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:59:02 PM, on 3/11/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17108)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\VERIZONDM\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\Program Files\VERIZONDM\bin\sprtcmd.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\America Online 9.0\aoltray.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\Program Files\Hijack this 2012\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll
O2 - BHO: GoogleAFE - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\GoogleAFE\GoogleAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [dlccmon.exe] "C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [CarboniteSetupLite] "C:\Program Files\Carbonite\CarbonitePreinstaller.exe" /preinstalled /showonfirst /reshowat=900
O4 - HKLM\..\Run: [MaxMenuMgr] "C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe"
O4 - HKLM\..\Run: [VERIZONDM] "C:\Program Files\VERIZONDM\bin\sprtcmd.exe" /P VERIZONDM
O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [OE_OEM] "C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - Startup: Seagate 2GE90JKC Product Registration.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mp4: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: dlcc_device - Unknown owner - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Seagate Service (FreeAgentGoNext Service) - Seagate Technology LLC - C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: SupportSoft Sprocket Service (verizondm) (sprtsvc_verizondm) - SupportSoft, Inc. - C:\Program Files\VERIZONDM\bin\sprtsvc.exe
O23 - Service: SupportSoft Repair Service (verizondm) (tgsrvc_verizondm) - SupportSoft, Inc. - C:\Program Files\VERIZONDM\bin\tgsrvc.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe
--
End of file - 11966 bytes