Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

HiJackThis Log

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

HiJackThis Log

Unread postby Westbound » May 4th, 2010, 12:49 pm

Hello. Last Thursday I was attacked by a load of viruses, I’ve managed to clean up most of them, yet there’s a browser hijacker that’s lurking around and nothing I seem to download can find it. Here is my hijack this log. Thanks for your help.
Also this is my first time ever posting on a support website, so my terminology on the subject isn't outstanding.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:48:17, on 04/05/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\DNA\btdna.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\3\3Connect\AutoUpdateSrv.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\WTablet\Pen_TabletUser.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uk.msn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... io&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... io&pf=cndt
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [BlackBerryAutoUpdate] C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe /background
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Desktop Manager.lnk = C:\Program Files\Research In Motion\BlackBerry\DesktopMgr.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Update Agent.lnk = ?
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O13 - Gopher Prefix:
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: AVG Firewall (avgfws9) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgfws9.exe
O23 - Service: AVG9IDSAgent (AVGIDSAgent) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Computer Browser BrowserRasAuto (BrowserRasAuto) - Unknown owner - C:\Windows\system32\admparsek.exe (file missing)
O23 - Service: Windows Media Center Scheduler Service ehSchediphlpsvc (ehSchediphlpsvc) - Unknown owner - C:\Windows\system32\Ahmbedk.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Unknown owner - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe (file missing)
O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Windows\system32\Pen_Tablet.exe
O23 - Service: WUSB54GSVC - GEMTEKS - C:\Program Files\WUSB54G Wireless-G Adapter\WLService.exe

--
End of file - 9494 bytes
Westbound
Active Member
 
Posts: 13
Joined: May 4th, 2010, 12:39 pm
Advertisement
Register to Remove

Re: HiJackThis Log

Unread postby melboy » May 8th, 2010, 10:04 am

Hi and welcome to the MR forums. :)

I'm melboy and I am going to try to help you with your problem. Please take note of the following:

  1. I will be working on your Malware issues this may or may not solve other issues you have with your machine.
  2. The fixes are specific to your problem and should only be used for this issue on this machine.
  3. If you don't know or understand something, please don't hesitate to ask.
  4. Please DO NOT run any other tools or scans whilst I am helping you.
  5. It is important that you reply to this thread. Do not start a new topic.
  6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
  7. Absence of symptoms does not mean that everything is clear.


NOTE: Please take time to read the Malware Removal Forum Guidelines and Rules where the conditions for receiving help at this forum are explained.


IMPORTANT: Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start.



No Reply Within 3 Days Will Result In Your Topic Being Closed!! If you need more time, please inform me.


====================================================


With reference to Malware Removal's P2P Programs Policy, please uninstall the following programs before we continue:
BitTorrent
When you use them you are downloading software from an unknown source directly onto your computer, bypassing your Firewall and Anti-Virus software. Hardly surprising then that many of these Downloads are being targeted to carry infections.
We see no purpose in cleaning your machine if you use P2P programmes, as it is pretty much certain that if you continue to use them then you will get infected again.

  • Go to start > control panel > programs and features.
  • Right click on:
      BitTorrent
  • Click Uninstall & then follow the prompts to remove it.



*Vista Advice*

The programs I ask you to run need to be run in Administrator Mode by... Right clicking the program file & selecting: Run as Administrator.

Additionally, the built-in User Account Control (UAC) utility, if enabled, may prompt you for permission to run the program.
  • When prompted, please select: Allow

Reference: User Account Control (UAC) and Running as Administrator



DDS

Please disable any anti-malware program that will block scripts from running before running DDS.

Please download DDS from one of the links below and save it to your desktop:

Link1
Link2
Link3

Disable any script blocker, and then right click dds.scr and choose "Run as Administrator" to run the tool. A command window will appear, this is normal.

Image
  • When done, DDS will open two (2) logs:
    1. DDS.txt
    2. Attach.txt
  • Save both reports to your desktop.

Please copy & paste the contents of :
  • DDS.txt
  • Attach.txt
And post them in your next reply.



CKScanner
Download CKScanner from here
  • Important - Save it to your desktop.
  • Right click CKScanner.exe and choose "Run as Administrator"
  • When the program opens click Search For Files.
  • After a very short time, when the cursor hourglass disappears, click Save List To File.
  • A message box will verify the file saved.
  • Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.



In your next reply:
  1. DDS.txt
  2. Attach.txt
  3. CKFiles.txt
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK

Re: HiJackThis Log

Unread postby Westbound » May 8th, 2010, 11:02 am

Hello, thanks for your help. Here are the logs requested



DDS (Ver_10-03-17.01) - NTFSx86
Run by Lewis at 15:50:09.18 on 08/05/2010
Internet Explorer: 8.0.6001.18904 BrowserJavaVersion: 1.6.0_15
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.39.1033.18.2942.1396 [GMT 1:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
SP: AdwareBot *disabled* (Updated) {B3253E32-8154-4A4C-B70F-4EFC78BF0701}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Windows\system32\lsm.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Windows\system32\taskeng.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\3\3Connect\AutoUpdateSrv.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\AVG\AVG9\avgfws9.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Program Files\AVG\AVG9\avgam.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\Pen_Tablet.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\WTablet\Pen_TabletUser.exe
C:\Windows\system32\Pen_Tablet.exe
C:\Program Files\WUSB54G Wireless-G Adapter\WLService.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\WUSB54G Wireless-G Adapter\WUSB54G.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\explorer.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Users\Lewis\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE= ... io&pf=cndt
mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE= ... io&pf=cndt
uInternet Settings,ProxyOverride = <local>;*.local
uInternet Settings,ProxyServer = http=127.0.0.1:5555
uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
TB: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
uRun: [HPAdvisor] c:\program files\hewlett-packard\hp advisor\HPAdvisor.exe autorun=AUTORUN
uRun: [AdobeBridge]
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [hpsysdrv] c:\hp\support\hpsysdrv.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [HP Health Check Scheduler] c:\program files\hewlett-packard\hp health check\HPHC_Scheduler.exe
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin
mRun: [BlackBerryAutoUpdate] c:\program files\common files\research in motion\auto update\RIMAutoUpdate.exe /background
mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [AVG9_TRAY] c:\progra~1\avg\avg9\avgtray.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
StartupFolder: c:\users\lewis\appdata\roaming\micros~1\windows\startm~1\programs\startup\deskto~1.lnk - c:\program files\research in motion\blackberry\DesktopMgr.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\update~1.lnk - c:\program files\3\3connect\AutoUpdateSrv.exe
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/fl ... rashim.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
AppInit_DLLs: avgrsstx.dll

================= FIREFOX ===================

FF - ProfilePath - c:\users\lewis\appdata\roaming\mozilla\firefox\profiles\jg50e0ld.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.co.uk/ig?hl=en&source=iglk
FF - component: c:\program files\avg\avg9\firefox\components\avgssff.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\xpavgtbapi.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation

foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);

============= SERVICES / DRIVERS ===============

R0 AVGIDSErHrvtx;AVG9IDSErHr;c:\windows\system32\drivers\AVGIDSvx.sys [2010-4-29 25096]
R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [2010-4-29 52872]
R1 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwd6x.sys [2010-4-29 24856]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2010-4-29 216200]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2010-4-29 29512]
R1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2010-4-29 242896]
R2 avg9emc;AVG E-mail Scanner;c:\program files\avg\avg9\avgemc.exe [2010-4-29 916760]
R2 avg9wd;AVG WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-4-29 308064]
R2 avgfws9;AVG Firewall;c:\program files\avg\avg9\avgfws9.exe [2010-4-29 2325816]
R2 AVGIDSAgent;AVG9IDSAgent;c:\program files\avg\avg9\identity protection\agent\bin\AVGIDSAgent.exe [2010-4-29 5888008]
R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe -k netsvcs [2008-1-21 21504]
R2 TabletServicePen;TabletServicePen;c:\windows\system32\Pen_Tablet.exe [2009-8-11 2749736]
R2 WUSB54GSVC;WUSB54GSVC;c:\program files\wusb54g wireless-g adapter\WLService.exe [2009-8-8 41027]
R3 AVGIDSDrivervtx;AVG9IDSDriver;c:\program files\avg\avg9\identity protection\agent\driver\platform_vista\AVGIDSDriver.sys [2010-4-29 122376]
R3 AVGIDSFiltervtx;AVG9IDSFilter;c:\program files\avg\avg9\identity protection\agent\driver\platform_vista\AVGIDSFilter.sys [2010-4-29 30216]
R3 AVGIDSShimvtx;AVG9IDSShim;c:\program files\avg\avg9\identity protection\agent\driver\platform_vista\AVGIDSShim.sys [2010-4-29 27144]
S2 BrowserRasAuto;Computer Browser BrowserRasAuto;c:\windows\system32\admparsek.exe srv --> c:\windows\system32\admparsek.exe srv [?]
S2 ehSchediphlpsvc;Windows Media Center Scheduler Service ehSchediphlpsvc;c:\windows\system32\ahmbedk.exe srv --> c:\windows\system32\Ahmbedk.exe srv [?]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg9\toolbar\ToolbarBroker.exe [2010-4-29 369920]
S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504]
S3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\drivers\wacmoumonitor.sys [2009-8-11 15656]
S3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\drivers\WSDPrint.sys [2008-1-21 16896]

============== File Associations ===============

.txt=

=============== Created Last 30 ================

2010-05-04 15:04:44 0 dc----w- c:\users\lewis\appdata\roaming\Panda Security
2010-05-04 15:03:22 0 dc----w- c:\program files\Panda Security
2010-05-04 14:51:45 0 dc----w- c:\users\lewis\appdata\roaming\CheckPoint
2010-05-04 14:40:38 144 -c--a-w- c:\windows\system32\lkfl.dat
2010-05-04 14:40:35 0 dc----w- c:\program files\CheckPoint
2010-05-04 14:38:24 0 dc----w- c:\programdata\CheckPoint
2010-05-01 21:25:43 0 dc----w- c:\users\lewis\appdata\roaming\AVG9
2010-05-01 06:34:51 0 dc----w- C:\WTablet
2010-04-30 17:24:59 0 dc----w- c:\program files\Trend Micro
2010-04-30 16:36:53 0 dc----w- c:\programdata\SUPERAntiSpyware.com
2010-04-30 16:35:08 0 dc----w- c:\program files\SUPERAntiSpyware
2010-04-30 06:11:36 20 -c--a-w- c:\windows\system32\SYSTEM
2010-04-29 12:23:22 0 dc----w- c:\program files\iPod
2010-04-29 12:23:16 0 dc----w- c:\program files\iTunes
2010-04-29 09:52:05 0 dc-h--w- C:\$AVG
2010-04-29 09:51:47 12464 -c--a-w- c:\windows\system32\avgrsstx.dll
2010-04-29 09:51:46 216200 -c--a-w- c:\windows\system32\drivers\avgldx86.sys
2010-04-29 09:51:43 0 dc----w- c:\windows\system32\drivers\Avg
2010-04-29 09:51:40 0 dc----w- c:\programdata\AVG Security Toolbar
2010-04-29 09:50:34 25096 -c--a-w- c:\windows\system32\drivers\AVGIDSvx.sys
2010-04-29 09:50:33 52872 -c--a-w- c:\windows\system32\drivers\avgrkx86.sys
2010-04-29 09:50:32 242896 -c--a-w- c:\windows\system32\drivers\avgtdix.sys
2010-04-29 09:50:13 24856 -c--a-w- c:\windows\system32\drivers\avgfwd6x.sys
2010-04-29 09:49:09 0 dc----w- c:\program files\AVG
2010-04-29 09:48:48 0 dc----w- c:\programdata\avg9
2010-04-29 08:42:42 0 dc----w- c:\programdata\Norton
2010-04-28 07:54:18 38224 -c--a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-28 07:54:16 20952 -c--a-w- c:\windows\system32\drivers\mbam.sys
2010-04-28 07:54:16 0 dc----w- c:\program files\Malwarebytes' Anti-Malware
2010-04-27 20:03:04 1295 -c--a-w- c:\windows\lsrslt.ini
2010-04-27 19:34:45 0 dc----w- c:\users\lewis\appdata\roaming\881C5D5D406B957D4BF6DD90B42CCB8A
2010-04-27 19:27:10 100 -cs-a-w- c:\windows\system32\1330106359.dat
2010-04-16 09:54:20 0 dc----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-04-14 06:29:44 904576 -c--a-w- c:\windows\system32\drivers\tcpip.sys
2010-04-14 06:29:44 25088 -c--a-w- c:\windows\system32\drivers\tunnel.sys
2010-04-14 06:29:44 200704 -c--a-w- c:\windows\system32\iphlpsvc.dll
2010-04-14 06:29:39 79360 -c--a-w- c:\windows\system32\drivers\mrxsmb20.sys
2010-04-14 06:29:39 212992 -c--a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-04-14 06:29:39 106496 -c--a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-04-14 06:29:36 3600776 -c--a-w- c:\windows\system32\ntkrnlpa.exe
2010-04-14 06:29:36 3548040 -c--a-w- c:\windows\system32\ntoskrnl.exe
2010-04-14 06:29:32 420352 -c--a-w- c:\windows\system32\vbscript.dll
2010-04-14 06:28:45 62464 -c--a-w- c:\windows\system32\l3codeca.acm
2010-04-14 06:28:45 220672 -c--a-w- c:\windows\system32\l3codecp.acm
2010-04-14 06:23:39 172032 -c--a-w- c:\windows\system32\wintrust.dll
2010-04-14 06:23:38 98304 -c--a-w- c:\windows\system32\cabview.dll

==================== Find3M ====================

2010-05-04 14:58:59 51200 ----a-w- c:\windows\inf\infpub.dat
2010-05-04 14:58:59 143360 ----a-w- c:\windows\inf\infstrng.dat
2010-05-04 14:58:59 143360 ----a-w- c:\windows\inf\infstor.dat
2010-05-02 10:02:04 139924 -c-ha-w- c:\windows\system32\mlfcache.dat
2010-04-29 11:32:42 116240 -c--a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
2010-04-29 11:12:39 10848 -c--a-w- c:\users\lewis\appdata\roaming\wklnhst.dat
2010-04-08 12:20:02 91424 -c--a-w- c:\windows\system32\dnssd.dll
2010-04-08 12:20:02 107808 -c--a-w- c:\windows\system32\dns-sd.exe
2010-03-09 17:21:04 19652 -c--a-w- c:\windows\fonts\LongTime.ttf
2010-02-24 09:16:06 181632 -c----w- c:\windows\system32\MpSigStub.exe
2010-02-23 06:39:13 916480 -c--a-w- c:\windows\system32\wininet.dll
2010-02-23 06:33:45 71680 -c--a-w- c:\windows\system32\iesetup.dll
2010-02-23 06:33:45 109056 -c--a-w- c:\windows\system32\iesysprep.dll
2010-02-23 04:55:36 133632 -c--a-w- c:\windows\system32\ieUnatt.exe
2010-02-20 23:06:41 24064 -c--a-w- c:\windows\system32\nshhttp.dll
2010-02-20 23:05:14 30720 -c--a-w- c:\windows\system32\httpapi.dll
2010-02-18 11:17:04 588472 -c--a-w- c:\windows\system32\ezsvc7x.dll
2010-02-12 10:32:56 293376 -c--a-w- c:\windows\system32\browserchoice.exe
2009-11-18 11:51:00 665600 ----a-w- c:\windows\inf\drvindex.dat
2008-01-21 02:43:21 174 --sha-w- c:\program files\desktop.ini
2006-11-02 12:42:02 30674 -c--a-w- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 12:42:02 30674 -c--a-w- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 12:42:02 287440 -c--a-w- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 12:42:02 287440 -c--a-w- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 09:20:21 287440 -c--a-w- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 09:20:21 287440 -c--a-w- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 09:20:19 30674 -c--a-w- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 09:20:19 30674 -c--a-w- c:\windows\inf\perflib\0000\perfc.dat
2009-07-05 16:50:58 245760 -csha-w- c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\ietldcache\index.dat
2009-10-15 09:13:39 245760 -csha-w- c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\ietldcache\index.dat
2008-10-06 17:07:26 8192 --sha-w- c:\windows\users\default\NTUSER.DAT

============= FINISH: 15:51:25.82 ===============




UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-03-17.01)

Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 18/10/2008 16:14:41
System Uptime: 05/08/2010 13:18:30 (-2134 hours ago)

Motherboard: PEGATRON CORPORATION | | NARRA3
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 5000+ | Socket AM2 | 2600/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 286 GiB total, 143.03 GiB free.
D: is FIXED (NTFS) - 12 GiB total, 1.701 GiB free.
E: is CDROM ()
F: is CDROM ()
G: is Removable
H: is Removable
I: is Removable
L: is Removable

==== Disabled Device Manager Items =============

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft 6to4 Adapter
Device ID: ROOT\*6TO4MP\0000
Manufacturer: Microsoft
Name: 6TO4 Adapter
PNP Device ID: ROOT\*6TO4MP\0000
Service: tunnel

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft ISATAP Adapter
Device ID: ROOT\*ISATAP\0001
Manufacturer: Microsoft
Name: Microsoft ISATAP Adapter #2
PNP Device ID: ROOT\*ISATAP\0001
Service: tunnel

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft ISATAP Adapter
Device ID: ROOT\*ISATAP\0002
Manufacturer: Microsoft
Name: Microsoft ISATAP Adapter #3
PNP Device ID: ROOT\*ISATAP\0002
Service: tunnel

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft ISATAP Adapter
Device ID: ROOT\*ISATAP\0003
Manufacturer: Microsoft
Name: Microsoft ISATAP Adapter #4
PNP Device ID: ROOT\*ISATAP\0003
Service: tunnel

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft ISATAP Adapter
Device ID: ROOT\*ISATAP\0004
Manufacturer: Microsoft
Name: Microsoft ISATAP Adapter #5
PNP Device ID: ROOT\*ISATAP\0004
Service: tunnel

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft ISATAP Adapter
Device ID: ROOT\*ISATAP\0005
Manufacturer: Microsoft
Name: Microsoft ISATAP Adapter #6
PNP Device ID: ROOT\*ISATAP\0005
Service: tunnel

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft ISATAP Adapter
Device ID: ROOT\*ISATAP\0006
Manufacturer: Microsoft
Name: Microsoft ISATAP Adapter #7
PNP Device ID: ROOT\*ISATAP\0006
Service: tunnel

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft ISATAP Adapter
Device ID: ROOT\*ISATAP\0007
Manufacturer: Microsoft
Name: Microsoft ISATAP Adapter #8
PNP Device ID: ROOT\*ISATAP\0007
Service: tunnel

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft ISATAP Adapter
Device ID: ROOT\*ISATAP\0008
Manufacturer: Microsoft
Name: Microsoft ISATAP Adapter #9
PNP Device ID: ROOT\*ISATAP\0008
Service: tunnel

==== System Restore Points ===================

No restore point in system.

==== Installed Programs ======================

32 Bit HP CIO Components Installer
3Connect
Adobe After Effects CS4
Adobe After Effects CS4 Presets
Adobe After Effects CS4 Third Party Content
Adobe AIR
Adobe Anchor Service CS3
Adobe Anchor Service CS4
Adobe Asset Services CS3
Adobe Bridge CS3
Adobe Bridge CS4
Adobe Bridge Start Meeting
Adobe Camera Raw 4.0
Adobe CMaps CS4
Adobe Color - Photoshop Specific CS4
Adobe Color EU Recommended Settings CS4
Adobe Color JA Extra Settings CS4
Adobe Color NA Extra Settings CS4
Adobe Color Video Profiles AE CS4
Adobe Color Video Profiles CS CS4
Adobe Creative Suite 4 Master Collection
Adobe CS4 American English Speech Analysis Models
Adobe CSI CS4
Adobe Default Language CS4
Adobe Device Central CS3
Adobe Device Central CS4
Adobe Drive CS4
Adobe Dynamiclink Support
Adobe Encore CS4 Codecs
Adobe ExtendScript Toolkit 2
Adobe ExtendScript Toolkit CS4
Adobe Extension Manager CS4
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Fonts All
Adobe Help Viewer CS3
Adobe Illustrator CS4
Adobe Linguistics CS3
Adobe Linguistics CS4
Adobe Media Encoder CS4
Adobe Media Encoder CS4 Additional Exporter
Adobe Media Encoder CS4 Exporter
Adobe Media Encoder CS4 Importer
Adobe MotionPicture Color Files CS4
Adobe Output Module
Adobe PDF Library Files CS4
Adobe Photoshop CS4
Adobe Photoshop CS4 Support
Adobe Photoshop Lightroom 2.5
Adobe Premiere Pro CS3
Adobe Premiere Pro CS3 Functional Content
Adobe Premiere Pro CS3 Third Party Content
Adobe Premiere Pro CS4 Third Party Content
Adobe Reader 9.3.2
Adobe Search for Help
Adobe Service Manager Extension
Adobe Setup
Adobe Soundbooth CS4
Adobe Soundbooth CS4 Codecs
Adobe Type Support CS4
Adobe Update Manager CS3
Adobe Update Manager CS4
Adobe Version Cue CS3 Client
Adobe WinSoft Linguistics Plugin
Adobe XMP DVA Panels CS3
Adobe XMP Panels CS3
Adobe XMP Panels CS4
AdobeColorCommonSetCMYK
AdobeColorCommonSetRGB
Amazon MP3 Downloader 1.0.10
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ASIO4ALL
Audacity 1.2.6
AutoUpdate
AVG 9.0
Bonjour
BufferChm
C4400
C4400_Help
Cards_Calendar_OrderGift_DoMorePlugout
Compatibility Pack for the 2007 Office system
Connect
Copy
CyberLink DVD Suite Deluxe
Destination Component
DeviceDiscovery
DeviceManagementQFolder
DivX Codec
DivX Player
DivX Version Checker
DivX Web Player
DVD Decrypter (Remove Only)
eSupportQFolder
Final Draft 7
FL Studio 9
GPBaseService
Hardware Diagnostic Tools
Hewlett-Packard Active Check for Health Check
Hewlett-Packard Asset Agent for Health Check
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
HP Active Support Library
HP Customer Feedback
HP Demo
HP Easy Setup - Frontend
HP Imaging Device Functions 10.0
HP Photosmart C4400 All-In-One Driver Software 10.0 Rel .3
HP Photosmart Essential 2.5
HP Photosmart Essential 3.0
HP Recovery Manager RSS
HP Smart Web Printing
HP Solution Center 10.0
HP Update
HPPhotoSmartPhotobookWebPack1
HPProductAssistant
Huawei modem
iTunes
Java(TM) 6 Update 15
Java(TM) SE Runtime Environment 6 Update 1
kuler
LabelPrint
LightScribe System Software 1.14.17.1
Linksys Wireless-G USB Network Adapter
Malwarebytes' Anti-Malware
MFC80
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works
Mozilla Firefox (3.6.3)
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
NEF Codec
Nikon Message Center
NVIDIA Drivers
OGA Notifier 2.0.0048.0
PanoStandAlone
PDF Settings CS4
Pen Tablet
Photomatix Pro version 3.0
Photoshop Camera Raw
Pixel Bender Toolkit
Power2Go
PowerDirector
PS_AIO_03_C4400_ProductContext
PS_AIO_03_C4400_Software
PS_AIO_03_C4400_Software_Min
PSSWCORE
QuickTime
Realtek High Definition Audio Driver
RETAS!PRO STYLOS HD 2.1E DEMO
Rosetta Stone Version 3
Scan
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB978380)
Security Update for Microsoft Office Excel 2007 (KB978382)
Security Update for Microsoft Office PowerPoint 2007 (KB957789)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB969613)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Sid Meier's Civilization 4
SmartWebPrintingOC
SolutionCenter
Spotify
Status
Suite Shared Configuration CS4
Toolbox
Toxic Biohazard
TrayApp
UnloadSupport
Update for 2007 Microsoft Office System (KB967642)
Update for 2007 Microsoft Office System (KB981715)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office InfoPath 2007 (KB976416)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 (KB974561)
Update for Microsoft Office Word 2007 Help (KB963665)
VC80CRTRedist - 8.0.50727.762
Vegas Pro 9.0
VideoToolkit01
VLC media player 0.9.8a
VobSub v2.23 (Remove Only)
WebReg
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Upload Tool
Windows Media Player Firefox Plugin
WinRAR archiver
Xvid 1.2.2 final uninstall

==== Event Viewer Messages From Past Week ========

08/05/2010 13:50:48, Error: bowser [8003] - The master browser has received a server

announcement from the computer MACBOOKPRO-69AE that believes that it is the master browser for

the domain on transport NetBT_Tcpip_{8E0B6D30-CE55-4947-8CBB-A2. The master browser is stopping

or an election is being forced.
08/05/2010 13:21:50, Error: Service Control Manager [7022] - The HP CUE DeviceDiscovery Service

service hung on starting.
08/05/2010 13:20:32, Error: Service Control Manager [7000] - The Parallel port driver service

failed to start due to the following error: The service cannot be started, either because it is

disabled or because it has no enabled devices associated with it.
08/05/2010 13:20:29, Error: Microsoft-Windows-DistributedCOM [10016] - The application-specific

permission settings do not grant Local Launch permission for the COM Server application with

CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18)

from address LocalHost (Using LRPC). This security permission can be modified using the

Component Services administrative tool.
06/05/2010 16:11:55, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease

192.168.0.5 for the Network Card with network address 000F6673A6B5 has been denied by the DHCP

server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
04/05/2010 16:03:46, Error: Service Control Manager [7030] - The NanoServiceMain service is

marked as an interactive service. However, the system is configured to not allow interactive

services. This service may not function properly.
04/05/2010 15:40:39, Error: Service Control Manager [7030] - The ZoneAlarm ForceField IswSvc

service is marked as an interactive service. However, the system is configured to not allow

interactive services. This service may not function properly.
04/05/2010 15:39:20, Error: Service Control Manager [7030] - The TrueVector Internet Monitor

service is marked as an interactive service. However, the system is configured to not allow

interactive services. This service may not function properly.
04/05/2010 15:39:01, Error: Microsoft-Windows-Dhcp-Client [1001] - Your computer was not

assigned an address from the network (by the DHCP Server) for the Network Card with network

address 000F6673A6B5. The following error occurred: The operation was canceled by the user..

Your computer will continue to try and obtain an address on its own from the network address

(DHCP) server.
03/05/2010 19:51:12, Error: Service Control Manager [7001] - The PnP-X IP Bus Enumerator

service depends on the Function Discovery Provider Host service which failed to start because of

the following error: The dependency service or group failed to start.
03/05/2010 19:49:48, Error: Service Control Manager [7026] - The following boot-start or

system-start driver(s) failed to load: AvgLdx86 AvgMfx86 spldr sptd Wanarpv6
03/05/2010 19:49:48, Error: Service Control Manager [7001] - The Computer Browser service

depends on the Server service which failed to start because of the following error: The

dependency service or group failed to start.
03/05/2010 19:49:37, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084"

attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F

-AC08-4F1F-BEB7-5C22C517CE39}
03/05/2010 19:49:35, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084"

attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D

-F52A-11D8-B9A5-505054503030}
03/05/2010 19:49:29, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068"

attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335

-FE2A-4927-A040-7C35AD3180EF}
03/05/2010 19:49:24, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084"

attempting to start the service EventSystem with arguments "" in order to run the server:

{1BE1F766-5536-11D1-B726-00C04FB926AF}
03/05/2010 19:49:14, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084"

attempting to start the service ShellHWDetection with arguments "" in order to run the server:

{DD522ACC-F821-461A-A407-50B198B896DC}
03/05/2010 19:48:22, Error: sptd [4] - Driver detected an internal error in its data structures

for .
03/05/2010 13:18:45, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1115"

attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-

2166-11D1-B1D0-00805FC1270E}
03/05/2010 13:18:15, Error: Service Control Manager [7043] - The Group Policy Client service

did not shut down properly after receiving a preshutdown control.
03/05/2010 13:16:29, Error: EventLog [6008] - The previous system shutdown at 13.14.31 on

03/05/2010 was unexpected.

==== End Of File ===========================



CKScanner - Additional Security Risks - These are not necessarily bad
c:\program files\image-line\hardcore\presets\i cracked my tube!.hdprg
c:\program files\image-line\sawer\presets\ambient\mc cracked.sawer
c:\users\lewis\documents\downloads\rosetta stone 3.4.5\crack\readme.txt
c:\users\lewis\documents\downloads\rosetta stone 3.4.5\crack\win\rosettastoneversion3.exe
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_01.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_02.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_03.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_04.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_05.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_06.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_07.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_08.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_09.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_10.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_11.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_12.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_13.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_14.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_15.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_01.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_02.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_03.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_04.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_05.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_06.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_07.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_08.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_09.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_10.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_11.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_12.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_13.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_14.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_15.mp4
c:\users\lewis\documents\stock elements\designer sound fx\designer sound fx\impacts (100)\evil crack 02.sfk
scanner sequence 3.ZZ.11
----- EOF -----



Thank you.
Westbound
Active Member
 
Posts: 13
Joined: May 4th, 2010, 12:39 pm

Re: HiJackThis Log

Unread postby melboy » May 8th, 2010, 11:24 am

Cracks, Keygens, Warez etc.

This is the main reason your computer is infected. Visiting crack sites/warez sites - and other questionable/illegal sites is always a risk. Even a single click on the site can drop multiple forms of very serious malware, many of which disable your onboard protection, System Restore etc.

If you install the cracked software, you are running executable files from these dubious, unknown sources. You are in effect giving these sources access to information on your hard disk, and potential control over the operation of your computer.

In 2006, a study revealed that 59% of keygens and crack tools downloaded from peer-to-peer networks contained malicious or "unwanted" software.

Additionally, The distribution and use of cracked copies is illegal in almost every developed country.
In using the crack, the 'cracker' has broken the 'End User Licence Agreement' (EULA) of the product concerned.


As the log(s) you've posted indicate, you've used one or more of the above, we will not provide you with any help unless they are removed.


May I draw your attention to the forum rules on the Use of "cracked" programmes

Please remove all forms of illegal software from your computer before we continue.

Please reply with a fresh CKScanner log after removing the items.
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK

Re: HiJackThis Log

Unread postby Westbound » May 9th, 2010, 3:13 pm

I removed anything "unofficial" heres the after log

CKScanner - Additional Security Risks - These are not necessarily bad
c:\program files\image-line\hardcore\presets\i cracked my tube!.hdprg
c:\program files\image-line\sawer\presets\ambient\mc cracked.sawer
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_01.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_02.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_03.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_04.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_05.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_06.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_07.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_08.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_09.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_10.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_11.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_12.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_13.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_14.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\16. sparks\firecracker_15.mov
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_01.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_02.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_03.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_04.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_05.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_06.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_07.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_08.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_09.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_10.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_11.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_12.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_13.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_14.mp4
c:\users\lewis\documents\stock elements\action movie essentials 2\video_thumbnails\16. sparks\firecracker_15.mp4
c:\users\lewis\documents\stock elements\designer sound fx\designer sound fx\impacts (100)\evil crack 02.sfk
scanner sequence 3.ZZ.11
----- EOF -----
Westbound
Active Member
 
Posts: 13
Joined: May 4th, 2010, 12:39 pm

Re: HiJackThis Log

Unread postby melboy » May 10th, 2010, 7:53 am

Hi


DeFogger

Download DeFogger from here and save it to your desktop.

Double click Defogger.exe to run the tool.
  • The application window will appear
  • Click the Disable button to disable your CD Emulation drivers
  • Click Yes to continue
  • A 'Finished!' message will appear
  • Click OK
  • DeFogger will now ask to reboot the machine - click OK
IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop.



Gmer

Download GMER Rootkit Scanner from here.

  • Double click the .exe file. If asked to allow gmer.sys driver to load, please consent
  • If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO
  • In the right panel, you will see several boxes that have been checked. Uncheck the following ...
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)
    See image below
    Image
  • Then click the Scan button & wait for it to finish
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file
  • Save it where you can easily find it, such as your desktop, and post it in your next reply
**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries


Note: Do not run any programs while Gmer is running.
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK

Re: HiJackThis Log

Unread postby Westbound » May 12th, 2010, 4:34 am

Hello, heres the gmer log, it should be noted for the first time ever on this pc, i had the blue screen of death twice while using the gmer, i booted the pc in safe mode and it worked fine.

Edit: I've had to upload the log as an attachment due to it being so big


GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-05-10 16:28:58
Windows 6.0.6002 Service Pack 2
Running: hr689k4l.exe; Driver: C:\Users\Lewis\AppData\Local\Temp\fwlcapod.sys


---- System - GMER 1.0.15 ----

INT 0x51 ? C3224A50
INT 0x52 ? C3D52A50
INT 0x61 ? C3D52CD0
INT 0x62 ? C32242D0
INT 0x71 ? C3224050
INT 0x72 ? C3224550
INT 0x73 ? C3D52550
INT 0x82 ? C32247D0
INT 0x83 ? C3D527D0
INT 0xB1 ? C3224CD0

---- Kernel code sections - GMER 1.0.15 ----

.rsrc C:\Windows\system32\DRIVERS\i8042prt.sys entry point in ".rsrc" section [0xC8525014]

---- User code sections - GMER 1.0.15 ----

.text C:\Windows\system32\svchost.exe[868] ntdll.dll!NtProtectVirtualMemory 77864D34 5 Bytes JMP 0020000A
.text C:\Windows\system32\svchost.exe[868] ntdll.dll!NtWriteVirtualMemory 77865674 5 Bytes JMP 0069000A
.text C:\Windows\system32\svchost.exe[868] ntdll.dll!KiUserExceptionDispatcher 77865DC8 5 Bytes JMP 001F000A
.text C:\Windows\Explorer.EXE[1728] ntdll.dll!NtProtectVirtualMemory 77864D34 5 Bytes JMP 016B000A
.text C:\Windows\Explorer.EXE[1728] ntdll.dll!NtWriteVirtualMemory 77865674 5 Bytes JMP 0170000A
.text C:\Windows\Explorer.EXE[1728] ntdll.dll!KiUserExceptionDispatcher 77865DC8 5 Bytes JMP 016A000A

---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\tdx \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\tdx \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\tdx \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

Device -> \Driver\nvstor32 \Device\Harddisk0\DR0 C3C80EE4

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x5F 0xC1 0xA5 0x20 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xAE 0xDA 0x60 0xC3 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0xD4 0xC3 0x97 0x02 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xFA 0x84 0x4A 0x2C ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x0B 0x04 0x80 0x46 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0x5F 0xC1 0xA5 0x20 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 1
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xAE 0xDA 0x60 0xC3 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0xD4 0xC3 0x97 0x02 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xFA 0x84 0x4A 0x2C ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x0B 0x04 0x80 0x46 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SOFTWARE\Classes\.8ba@ Photoshop.PlugIn
Reg HKLM\SOFTWARE\Classes\.8bc@ Photoshop.PlugIn
Reg HKLM\SOFTWARE\Classes\.8be@ Photoshop.PlugIn
Reg HKLM\SOFTWARE\Classes\.8bp@ Photoshop.PlugIn
Reg HKLM\SOFTWARE\Classes\.8bs@ Photoshop.PlugIn
Reg HKLM\SOFTWARE\Classes\.8bx@ Photoshop.PlugIn
Reg HKLM\SOFTWARE\Classes\.8by@ Photoshop.PlugIn
Reg HKLM\SOFTWARE\Classes\.8li@ Photoshop.PlugIn
Reg HKLM\SOFTWARE\Classes\.abr@ Photoshop.BrushesFile
Reg HKLM\SOFTWARE\Classes\.ac3@ QuickTime.ac3
Reg HKLM\SOFTWARE\Classes\.ac3@Content Type audio/ac3
Reg HKLM\SOFTWARE\Classes\.ac3@QuickTime.bak
Reg HKLM\SOFTWARE\Classes\.ac3\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.ac3\OpenWithProgIds@QuickTime.ac3
Reg HKLM\SOFTWARE\Classes\.acf@ Photoshop.CustomFilterKernel
Reg HKLM\SOFTWARE\Classes\.aco@ Photoshop.SwatchesFile
Reg HKLM\SOFTWARE\Classes\.act@ Photoshop.ColorTableFile
Reg HKLM\SOFTWARE\Classes\.acv@ Photoshop.CurvesFile
Reg HKLM\SOFTWARE\Classes\.ado@ Photoshop.DuotoneSettingsFile
Reg HKLM\SOFTWARE\Classes\.adobebridge@ Adobe.adobebridge
Reg HKLM\SOFTWARE\Classes\.adobebridge@Content Type application/x-bridge-url
Reg HKLM\SOFTWARE\Classes\.adobebridge@PerceivedType text
Reg HKLM\SOFTWARE\Classes\.adobebridge\OpenWithList
Reg HKLM\SOFTWARE\Classes\.adobebridge\OpenWithList@
Reg HKLM\SOFTWARE\Classes\.adobebridge\OpenWithList\Bridge.exe
Reg HKLM\SOFTWARE\Classes\.adobebridge\OpenWithList\Bridge.exe@
Reg HKLM\SOFTWARE\Classes\.adobebridge\OpenWithProgids
Reg HKLM\SOFTWARE\Classes\.adobebridge\OpenWithProgids@Adobe.adobebridge
Reg HKLM\SOFTWARE\Classes\.adpp@ DeviceCentral.adpp
Reg HKLM\SOFTWARE\Classes\.adpp\DeviceCentral.adpp
Reg HKLM\SOFTWARE\Classes\.adpp\DeviceCentral.adpp\ShellNew
Reg HKLM\SOFTWARE\Classes\.advs@ DeviceCentral.advs
Reg HKLM\SOFTWARE\Classes\.advs\DeviceCentral.advs
Reg HKLM\SOFTWARE\Classes\.advs\DeviceCentral.advs\ShellNew
Reg HKLM\SOFTWARE\Classes\.ahs@ Photoshop.HalftoneScreens
Reg HKLM\SOFTWARE\Classes\.ahu@ Photoshop.HueSatFile
Reg HKLM\SOFTWARE\Classes\.air@ AIR.InstallerPackage
Reg HKLM\SOFTWARE\Classes\.air@Content Type application/vnd.adobe.air-application-installer-package+zip
Reg HKLM\SOFTWARE\Classes\.air\OpenWithProgids
Reg HKLM\SOFTWARE\Classes\.air\OpenWithProgids@AIR.InstallerPackage
Reg HKLM\SOFTWARE\Classes\.alv@ Photoshop.LevelsFile
Reg HKLM\SOFTWARE\Classes\.amp@ Photoshop.ArbitraryMapFile
Reg HKLM\SOFTWARE\Classes\.ams@ Photoshop.MonitorSetupFile
Reg HKLM\SOFTWARE\Classes\.apl@ Photoshop.AdobePlugIn
Reg HKLM\SOFTWARE\Classes\.as\OpenWithList
Reg HKLM\SOFTWARE\Classes\.as\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.asax\OpenWithList
Reg HKLM\SOFTWARE\Classes\.asax\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.ase@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.ashx\OpenWithList
Reg HKLM\SOFTWARE\Classes\.ashx\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.asl@ Photoshop.Styles
Reg HKLM\SOFTWARE\Classes\.asr\DefaultIcon
Reg HKLM\SOFTWARE\Classes\.asr\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,41
Reg HKLM\SOFTWARE\Classes\.ast@ Photoshop.SepTablesFile
Reg HKLM\SOFTWARE\Classes\.asv@ Photoshop.ASVColAdjFile
Reg HKLM\SOFTWARE\Classes\.atf@ Photoshop.TransferFunctionsFile
Reg HKLM\SOFTWARE\Classes\.atn@ Photoshop.ActionsFile
Reg HKLM\SOFTWARE\Classes\.ava@ Photoshop.VariationsFile
Reg HKLM\SOFTWARE\Classes\.axd\OpenWithList
Reg HKLM\SOFTWARE\Classes\.axd\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.axt@ Photoshop.AXTAdjColFile
Reg HKLM\SOFTWARE\Classes\.blw@ Photoshop.BWPresets
Reg HKLM\SOFTWARE\Classes\.cfc\OpenWithList
Reg HKLM\SOFTWARE\Classes\.cfc\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.cfm\OpenWithList
Reg HKLM\SOFTWARE\Classes\.cfm\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.cha@ Photoshop.CHAFile
Reg HKLM\SOFTWARE\Classes\.cin@ Photoshop.CINFile.11
Reg HKLM\SOFTWARE\Classes\.cin@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.collection@ Bridge.Collection
Reg HKLM\SOFTWARE\Classes\.config\OpenWithList
Reg HKLM\SOFTWARE\Classes\.config\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.cr2@ Photoshop.CameraRawFileCanon2.11
Reg HKLM\SOFTWARE\Classes\.cr2@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.crw@ Photoshop.CameraRawFileCanon.11
Reg HKLM\SOFTWARE\Classes\.crw@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.csh@ Photoshop.CustomShapes
Reg HKLM\SOFTWARE\Classes\.dcp@ Photoshop.DNGCameraProfile.11
Reg HKLM\SOFTWARE\Classes\.dcp@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.dcpr@ Photoshop.DNGCameraProfileRecipe.11
Reg HKLM\SOFTWARE\Classes\.dcpr@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.dcr@ Photoshop.CameraRawFileKodak.11
Reg HKLM\SOFTWARE\Classes\.dcr@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.disco\OpenWithList
Reg HKLM\SOFTWARE\Classes\.disco\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.dng@ Photoshop.CameraRawFileDigital.11
Reg HKLM\SOFTWARE\Classes\.dng@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.eap@ Photoshop.ExposureAdjustment
Reg HKLM\SOFTWARE\Classes\.erf@ Photoshop.CameraRawFileEpson.11
Reg HKLM\SOFTWARE\Classes\.erf@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.exr@ Photoshop.OpenEXRFile.11
Reg HKLM\SOFTWARE\Classes\.exr@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.ffo@ Photoshop.FileInfo
Reg HKLM\SOFTWARE\Classes\.fxg@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.grd@ Photoshop.Gradients
Reg HKLM\SOFTWARE\Classes\.hdr@ Photoshop.PortableBitMapFile.11
Reg HKLM\SOFTWARE\Classes\.hdr@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.iros@ Photoshop.IRSettings
Reg HKLM\SOFTWARE\Classes\.irs@ Photoshop.IRSettings
Reg HKLM\SOFTWARE\Classes\.isa@ Photoshop.IRActions
Reg HKLM\SOFTWARE\Classes\.jdf\OpenWithList
Reg HKLM\SOFTWARE\Classes\.jdf\OpenWithList\Acrobat.exe
Reg HKLM\SOFTWARE\Classes\.jp2\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.jp2\OpenWithProgIds@QuickTime.jp2
Reg HKLM\SOFTWARE\Classes\.jsp\OpenWithList
Reg HKLM\SOFTWARE\Classes\.jsp\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.m4r@Content Type audio/x-m4r
Reg HKLM\SOFTWARE\Classes\.m4r@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.m4r@iTunes_back
Reg HKLM\SOFTWARE\Classes\.m4r@ iTunes.m4r
Reg HKLM\SOFTWARE\Classes\.m4r\OpenWithList
Reg HKLM\SOFTWARE\Classes\.m4r\OpenWithList@
Reg HKLM\SOFTWARE\Classes\.m4r\OpenWithList\iTunes.exe
Reg HKLM\SOFTWARE\Classes\.m4r\OpenWithList\iTunes.exe@
Reg HKLM\SOFTWARE\Classes\.m4r\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.m4r\OpenWithProgIds@
Reg HKLM\SOFTWARE\Classes\.m4r\OpenWithProgIds@iTunes.m4r
Reg HKLM\SOFTWARE\Classes\.mjd\OpenWithList
Reg HKLM\SOFTWARE\Classes\.mjd\OpenWithList\Acrobat.exe
Reg HKLM\SOFTWARE\Classes\.mno\OpenWithList
Reg HKLM\SOFTWARE\Classes\.mno\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.mnu@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.mos@ Photoshop.CameraRawFileLeaf.11
Reg HKLM\SOFTWARE\Classes\.mos@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.mrw@ Photoshop.CameraRawFileMinolta.11
Reg HKLM\SOFTWARE\Classes\.mrw@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.nef@ Photoshop.CameraRawFileNikon.11
Reg HKLM\SOFTWARE\Classes\.nef@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.orf@ Photoshop.CameraRawFileOlympus.11
Reg HKLM\SOFTWARE\Classes\.orf@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.pat@ Photoshop.Patterns
Reg HKLM\SOFTWARE\Classes\.pbm@ Photoshop.RadianceFile.11
Reg HKLM\SOFTWARE\Classes\.pbm@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.pcd@ Photoshop.PCDFile.11
Reg HKLM\SOFTWARE\Classes\.pcd@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.pcx@ Photoshop.PCXFile.11
Reg HKLM\SOFTWARE\Classes\.pcx@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.pdd@ Photoshop.PDDFile.11
Reg HKLM\SOFTWARE\Classes\.pdd@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.pdf@Content Type application/pdf
Reg HKLM\SOFTWARE\Classes\.pdf@ AcroExch.Document
Reg HKLM\SOFTWARE\Classes\.pdf\OpenWithList
Reg HKLM\SOFTWARE\Classes\.pdf\OpenWithList@
Reg HKLM\SOFTWARE\Classes\.pdf\OpenWithList\AcroRd32.exe
Reg HKLM\SOFTWARE\Classes\.pdf\OpenWithList\AcroRd32.exe@
Reg HKLM\SOFTWARE\Classes\.pdf\PersistentHandler
Reg HKLM\SOFTWARE\Classes\.pdf\PersistentHandler@ {F6594A6D-D57F-4EFD-B2C3-DCD9779E382E}
Reg HKLM\SOFTWARE\Classes\.pdf\ShellEx
Reg HKLM\SOFTWARE\Classes\.pdf\ShellEx\{8895b1c6-b41f-4c1c-a562-0d564250836f}
Reg HKLM\SOFTWARE\Classes\.pdf\ShellEx\{8895b1c6-b41f-4c1c-a562-0d564250836f}@ {DC6EFB56-9CFA-464D-8880-44885D7DC193}
Reg HKLM\SOFTWARE\Classes\.pdp@ Photoshop.PDPFile.11
Reg HKLM\SOFTWARE\Classes\.pdp@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.pef@ Photoshop.CameraRawFilePentax.11
Reg HKLM\SOFTWARE\Classes\.pef@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.php\OpenWithList
Reg HKLM\SOFTWARE\Classes\.php\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.php4\OpenWithList
Reg HKLM\SOFTWARE\Classes\.php4\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.pmg\DefaultIcon
Reg HKLM\SOFTWARE\Classes\.pmg\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,45
Reg HKLM\SOFTWARE\Classes\.png\OpenWithList
Reg HKLM\SOFTWARE\Classes\.png\OpenWithList\ois.exe
Reg HKLM\SOFTWARE\Classes\.png\OpenWithList\ois.exe@
Reg HKLM\SOFTWARE\Classes\.png\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.png\OpenWithProgIds@QuickTime.png
Reg HKLM\SOFTWARE\Classes\.png\PersistentHandler
Reg HKLM\SOFTWARE\Classes\.psb@ Photoshop.PSBFile.11
Reg HKLM\SOFTWARE\Classes\.psb@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.psf@ Photoshop.ProofSetup
Reg HKLM\SOFTWARE\Classes\.psp@ Photoshop.PreferencesFile
Reg HKLM\SOFTWARE\Classes\.pxr@ Photoshop.PXRFile.11
Reg HKLM\SOFTWARE\Classes\.pxr@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.raf@ Photoshop.CameraRawFileFujifilm.11
Reg HKLM\SOFTWARE\Classes\.raf@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.raw@ Photoshop.RAWFile.11
Reg HKLM\SOFTWARE\Classes\.raw@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.rem\OpenWithList
Reg HKLM\SOFTWARE\Classes\.rem\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.resx\OpenWithList
Reg HKLM\SOFTWARE\Classes\.resx\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.shc@ Photoshop.ShapeCurves
Reg HKLM\SOFTWARE\Classes\.shh@ Photoshop.SHHFile.11
Reg HKLM\SOFTWARE\Classes\.shh@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.soap\OpenWithList
Reg HKLM\SOFTWARE\Classes\.soap\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.sta@ Photoshop.STAFile.11
Reg HKLM\SOFTWARE\Classes\.sta@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\.tpl@ Photoshop.ToolPresets
Reg HKLM\SOFTWARE\Classes\.vb\OpenWithList
Reg HKLM\SOFTWARE\Classes\.vb\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.vst@ VisioViewer.Viewer
Reg HKLM\SOFTWARE\Classes\.vst@Content Type application/vnd.ms-visio.viewer
Reg HKLM\SOFTWARE\Classes\.vst\shellex
Reg HKLM\SOFTWARE\Classes\.vst\shellex\{8895b1c6-b41f-4c1c-a562-0d564250836f}
Reg HKLM\SOFTWARE\Classes\.vst\shellex\{8895b1c6-b41f-4c1c-a562-0d564250836f}@ {21E17C2F-AD3A-4b89-841F-09CFE02D16B7}
Reg HKLM\SOFTWARE\Classes\.web\OpenWithList
Reg HKLM\SOFTWARE\Classes\.web\OpenWithList\dreamweaver.exe
Reg HKLM\SOFTWARE\Classes\.x3f@ Photoshop.CameraRawFileFoveon.11
Reg HKLM\SOFTWARE\Classes\.x3f@PerceivedType Image
Reg HKLM\SOFTWARE\Classes\AcroExch.Document@ Adobe Acrobat Document
Reg HKLM\SOFTWARE\Classes\AcroExch.Document@BrowseInPlace 1
Reg HKLM\SOFTWARE\Classes\AcroExch.Document\CLSID
Reg HKLM\SOFTWARE\Classes\AcroExch.Document\CLSID@ {B801CA65-A1FC-11D0-85AD-444553540000}
Reg HKLM\SOFTWARE\Classes\AcroExch.Document\CurVer
Reg HKLM\SOFTWARE\Classes\AcroExch.Document\CurVer@ AcroExch.Document.7
Reg HKLM\SOFTWARE\Classes\AcroExch.Document\Shell
Reg HKLM\SOFTWARE\Classes\AcroExch.Document\Shell\Open
Reg HKLM\SOFTWARE\Classes\AcroExch.Document\Shell\Open\Command
Reg HKLM\SOFTWARE\Classes\AcroExch.Document\Shell\Open\Command@ "C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridge@ Adobe Bridge URL
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridge\shell
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridge\shell@ open
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridge\shell\launch
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridge\shell\launch\command
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridge\shell\launch\command@ C:\Program Files\Adobe\Adobe Bridge CS3\bridgeproxy.exe -v %1
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridge\shell\open
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridge\shell\open@ &Open
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridge\shell\open\command
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridge\shell\open\command@ C:\Program Files\Adobe\Adobe Bridge CS3\Bridge.exe "%L"
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeCS4@ Adobe Bridge CS4
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeCS4\shell
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeCS4\shell@ open
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeCS4\shell\launch
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeCS4\shell\launch\command
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeCS4\shell\launch\command@ C:\Program Files\Adobe\Adobe Bridge CS4\bridgeproxy.exe -v %1
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeCS4\shell\open
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeCS4\shell\open@ &Open
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeMTP_1@ Adobe Bridge CS4
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeMTP_1\CLSID
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeMTP_1\CLSID@ {1E6C711B-6D70-4a65-8AB6-745DC19BE2A6}
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeMTP_1\CurVer
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeMTP_1\CurVer@ Adobe.adobebridgeMTP_1.1
Reg HKLM\SOFTWARE\Classes\Adobe.adobebridgeMTP_1.1@ Adobe Bridge CS4
Reg HKLM\SOFTWARE\Classes\Adobe.Illustrator.14\Insertable
Reg HKLM\SOFTWARE\Classes\Adobe.Illustrator.EPS\Insertable
Reg HKLM\SOFTWARE\Classes\adobebridge@ URL:Adobe Bridge Protocol
Reg HKLM\SOFTWARE\Classes\adobebridge@URL Protocol
Reg HKLM\SOFTWARE\Classes\adobebridge\DefaultIcon
Reg HKLM\SOFTWARE\Classes\adobebridge\DefaultIcon@ C:\Program Files\Adobe\Adobe Bridge CS3\bridge.exe
Reg HKLM\SOFTWARE\Classes\adobebridge\shell
Reg HKLM\SOFTWARE\Classes\adobebridge\shell@ open
Reg HKLM\SOFTWARE\Classes\adobebridge\shell\open
Reg HKLM\SOFTWARE\Classes\adobebridge\shell\open@ &Open
Reg HKLM\SOFTWARE\Classes\adobebridge\shell\open\command
Reg HKLM\SOFTWARE\Classes\adobebridge\shell\open\command@ C:\Program Files\Adobe\Adobe Bridge CS3\Bridge.exe "%L"
Reg HKLM\SOFTWARE\Classes\AgControl.AgControl@ Microsoft Silverlight
Reg HKLM\SOFTWARE\Classes\AgControl.AgControl\CLSID
Reg HKLM\SOFTWARE\Classes\AgControl.AgControl\CLSID@ {DFEAF541-F3E1-4c24-ACAC-99C30715084A}
Reg HKLM\SOFTWARE\Classes\AgControl.AgControl\CurVer
Reg HKLM\SOFTWARE\Classes\AgControl.AgControl\CurVer@ AgControl.AgControl.3.0
Reg HKLM\SOFTWARE\Classes\AgControl.AgControl.2.0@ Microsoft Silverlight
Reg HKLM\SOFTWARE\Classes\AgControl.AgControl.2.0\CLSID
Reg HKLM\SOFTWARE\Classes\AgControl.AgControl.2.0\CLSID@ {DFEAF541-F3E1-4c24-ACAC-99C30715084A}
Reg HKLM\SOFTWARE\Classes\AgControl.AgControl.3.0@ Microsoft Silverlight
Reg HKLM\SOFTWARE\Classes\AgControl.AgControl.3.0\CLSID
Reg HKLM\SOFTWARE\Classes\AgControl.AgControl.3.0\CLSID@ {DFEAF541-F3E1-4c24-ACAC-99C30715084A}
Reg HKLM\SOFTWARE\Classes\AIR.InstallerPackage@ Installer Package
Reg HKLM\SOFTWARE\Classes\AIR.InstallerPackage\DefaultIcon
Reg HKLM\SOFTWARE\Classes\AIR.InstallerPackage\DefaultIcon@ c:\PROGRA~1\COMMON~1\ADOBEA~1\Versions\1.0\ADOBEA~1.EXE,1
Reg HKLM\SOFTWARE\Classes\AIR.InstallerPackage\shell
Reg HKLM\SOFTWARE\Classes\AIR.InstallerPackage\shell\open
Reg HKLM\SOFTWARE\Classes\AIR.InstallerPackage\shell\open@ Install
Reg HKLM\SOFTWARE\Classes\AIR.InstallerPackage\shell\open\command
Reg HKLM\SOFTWARE\Classes\AIR.InstallerPackage\shell\open\command@ c:\PROGRA~1\COMMON~1\ADOBEA~1\Versions\1.0\ADOBEA~1.EXE "%1"
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdate.ASUInstallHost@ ASUInstallHost Class
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdate.ASUInstallHost\CLSID
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdate.ASUInstallHost\CLSID@ {91A9E6A9-3935-4A37-AFBA-F0904B166364}
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdate.ASUInstallHost\CurVer
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdate.ASUInstallHost\CurVer@ AppleSoftwareUpdate.ASUInstallHost.1
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdate.ASUInstallHost.1@ ASUInstallHost Class
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdate.ASUInstallHost.1\CLSID
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdate.ASUInstallHost.1\CLSID@ {91A9E6A9-3935-4A37-AFBA-F0904B166364}
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdateAdmin.ASUTaskSched.1@ ASUTaskScheduler Class
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdateAdmin.ASUTaskSched.1\CLSID
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdateAdmin.ASUTaskSched.1\CLSID@ {BB46F03E-7CD2-489F-8F95-BB950F395FDB}
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdateAdmin.ASUTaskSchedul@ ASUTaskScheduler Class
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdateAdmin.ASUTaskSchedul\CLSID
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdateAdmin.ASUTaskSchedul\CLSID@ {BB46F03E-7CD2-489F-8F95-BB950F395FDB}
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdateAdmin.ASUTaskSchedul\CurVer
Reg HKLM\SOFTWARE\Classes\AppleSoftwareUpdateAdmin.ASUTaskSchedul\CurVer@ AppleSoftwareUpdateAdmin.ASUTaskSched.1
Reg HKLM\SOFTWARE\Classes\Bridge.Collection@ Adobe Bridge Collection File
Reg HKLM\SOFTWARE\Classes\Bridge.Collection\defaultIcon
Reg HKLM\SOFTWARE\Classes\Bridge.Collection\defaultIcon@ C:\Program Files\Adobe\Adobe Bridge CS3\Bridge.exe,2
Reg HKLM\SOFTWARE\Classes\Bridge.Collection\shell
Reg HKLM\SOFTWARE\Classes\Bridge.Collection\shell@ open
Reg HKLM\SOFTWARE\Classes\Bridge.Collection\shell\open
Reg HKLM\SOFTWARE\Classes\Bridge.Collection\shell\open\Command
Reg HKLM\SOFTWARE\Classes\Bridge.Collection\shell\open\Command@ "C:\Program Files\Adobe\Adobe Bridge CS3\Bridge.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Class'\CLSID@ {3A7AD31E-F164-4861-928B-4FE44092F5B8}
Reg HKLM\SOFTWARE\Classes\Class'\CurVer@ PUMATECH.WinCEConnectorManager.1
Reg HKLM\SOFTWARE\Classes\CLSID\{BEB3C0C7-B648-4257-96D9-B5D024816E27}\Version
Reg HKLM\SOFTWARE\Classes\CLSID\{BEB3C0C7-B648-4257-96D9-B5D024816E27}\Version@Version 0x9D 0x3A 0x06 0xD5 ...
Reg HKLM\SOFTWARE\Classes\CXLServer.CXLServer\CurVer@ CXLServer.CXLServer.1
Reg HKLM\SOFTWARE\Classes\CXLServer.CXLServer.1\CLSID@ {8376CB5C-B66B-4678-AB07-03E5FDA2F04E}
Reg HKLM\SOFTWARE\Classes\DeviceCentral.adpp@ FileType_en_US_default
Reg HKLM\SOFTWARE\Classes\DeviceCentral.adpp\DefaultIcon
Reg HKLM\SOFTWARE\Classes\DeviceCentral.adpp\DefaultIcon@ C:\Windows\Installer\{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}\Adobe_ID0EYKJO,0
Reg HKLM\SOFTWARE\Classes\DeviceCentral.adpp\shell
Reg HKLM\SOFTWARE\Classes\DeviceCentral.adpp\shell\Open
Reg HKLM\SOFTWARE\Classes\DeviceCentral.adpp\shell\Open@ Adobe Device Profile Package
Reg HKLM\SOFTWARE\Classes\DeviceCentral.adpp\shell\Open\command
Reg HKLM\SOFTWARE\Classes\DeviceCentral.adpp\shell\Open\command@command On]GU{ANp=pht&wEY+DpProgramFiles_Feature>m.JgzIP'U9HL2L!)MZ,+ "%1"?
Reg HKLM\SOFTWARE\Classes\DeviceCentral.advs@ FileType_en_US_default
Reg HKLM\SOFTWARE\Classes\DeviceCentral.advs\DefaultIcon
Reg HKLM\SOFTWARE\Classes\DeviceCentral.advs\DefaultIcon@ C:\Windows\Installer\{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}\Adobe_ID0E3JJO,0
Reg HKLM\SOFTWARE\Classes\DeviceCentral.advs\shell
Reg HKLM\SOFTWARE\Classes\DeviceCentral.advs\shell\Open
Reg HKLM\SOFTWARE\Classes\DeviceCentral.advs\shell\Open@ Adobe Device Set
Reg HKLM\SOFTWARE\Classes\DeviceCentral.advs\shell\Open\command
Reg HKLM\SOFTWARE\Classes\DeviceCentral.advs\shell\Open\command@command On]GU{ANp=pht&wEY+DpProgramFiles_Feature>m.JgzIP'U9HL2L!)MZ,+ "%1"?
Reg HKLM\SOFTWARE\Classes\HPAiO_hpotscl1.scanner@ scanner Class
Reg HKLM\SOFTWARE\Classes\HPAiO_hpotscl1.scanner\CLSID
Reg HKLM\SOFTWARE\Classes\HPAiO_hpotscl1.scanner\CLSID@ {559963F2-3BFA-499d-AA1C-FDA99F8B9A59}
Reg HKLM\SOFTWARE\Classes\HPAiO_hpotscl1.scanner\CurVer
Reg HKLM\SOFTWARE\Classes\HPAiO_hpotscl1.scanner\CurVer@ HPAiO_hpotscl1.scanner.1
Reg HKLM\SOFTWARE\Classes\HPAiO_hpotscl1.scanner.1@ scanner Class
Reg HKLM\SOFTWARE\Classes\HPAiO_hpotscl1.scanner.1\CLSID
Reg HKLM\SOFTWARE\Classes\HPAiO_hpotscl1.scanner.1\CLSID@ {559963F2-3BFA-499d-AA1C-FDA99F8B9A59}
Reg HKLM\SOFTWARE\Classes\hpowiav1.MiniDrv@ MiniDrv Class
Reg HKLM\SOFTWARE\Classes\hpowiav1.MiniDrv\CLSID
Reg HKLM\SOFTWARE\Classes\hpowiav1.MiniDrv\CLSID@ {FFB600C1-0C5D-4d07-B4B1-F97FCCD5674B}
Reg HKLM\SOFTWARE\Classes\hpowiav1.MiniDrv\CurVer
Reg HKLM\SOFTWARE\Classes\hpowiav1.MiniDrv\CurVer@ hpowiav1.MiniDrv.1
Reg HKLM\SOFTWARE\Classes\hpowiav1.MiniDrv.1@ MiniDrv Class
Reg HKLM\SOFTWARE\Classes\hpowiav1.MiniDrv.1\CLSID
Reg HKLM\SOFTWARE\Classes\hpowiav1.MiniDrv.1\CLSID@ {FFB600C1-0C5D-4d07-B4B1-F97FCCD5674B}
Reg HKLM\SOFTWARE\Classes\Illustrator.Artwork\NotInsertable
Reg HKLM\SOFTWARE\Classes\Ioko.C4.Vod.Client.C4Com@ Ioko.C4.Vod.Client.C4Com
Reg HKLM\SOFTWARE\Classes\Ioko.C4.Vod.Client.C4Com\CLSID
Reg HKLM\SOFTWARE\Classes\Ioko.C4.Vod.Client.C4Com\CLSID@ {F5EE565C-80DC-428B-9999-065D9383C10F}
Reg HKLM\SOFTWARE\Classes\ISInstallDriver.InstallDriver.1@ InstallShield InstallDriver
Reg HKLM\SOFTWARE\Classes\ISInstallDriver.InstallDriver.1\CLSID
Reg HKLM\SOFTWARE\Classes\ISInstallDriver.InstallDriver.1\CLSID@ {B3EDE298-AE75-4A1C-AB7E-1B9229B77BBE}
Reg HKLM\SOFTWARE\Classes\ISInstallDriver.StringTable.8@ InstallShield InstallDriver String Table
Reg HKLM\SOFTWARE\Classes\ISInstallDriver.StringTable.8\CLSID
Reg HKLM\SOFTWARE\Classes\ISInstallDriver.StringTable.8\CLSID@ {346355E1-7094-4321-BBE2-2EBE8BF08981}
Reg HKLM\SOFTWARE\Classes\KDX.Host@ Secure Delivery
Reg HKLM\SOFTWARE\Classes\KDX.Host\CLSID
Reg HKLM\SOFTWARE\Classes\KDX.Host\CLSID@ {7A4A795E-E9AC-4E2D-9EE9-935ED1030422}
Reg HKLM\SOFTWARE\Classes\KDX.Host\CurVer
Reg HKLM\SOFTWARE\Classes\KDX.Host\CurVer@ KDX.Host.1
Reg HKLM\SOFTWARE\Classes\KDX.Host.1@ Secure Delivery
Reg HKLM\SOFTWARE\Classes\KDX.Host.1\CLSID
Reg HKLM\SOFTWARE\Classes\KDX.Host.1\CLSID@ {7A4A795E-E9AC-4E2D-9EE9-935ED1030422}
Reg HKLM\SOFTWARE\Classes\KDX.SecureApi@ Secure Delivery
Reg HKLM\SOFTWARE\Classes\KDX.SecureApi\CLSID
Reg HKLM\SOFTWARE\Classes\KDX.SecureApi\CLSID@ {D1C9B084-BF92-4555-B187-E7B9BCF1928E}
Reg HKLM\SOFTWARE\Classes\KDX.SecureApi\CurVer
Reg HKLM\SOFTWARE\Classes\KDX.SecureApi\CurVer@ KDX.SecureApi.1
Reg HKLM\SOFTWARE\Classes\KDX.SecureApi.1@ Secure Delivery
Reg HKLM\SOFTWARE\Classes\KDX.SecureApi.1\CLSID
Reg HKLM\SOFTWARE\Classes\KDX.SecureApi.1\CLSID@ {D1C9B084-BF92-4555-B187-E7B9BCF1928E}
Reg HKLM\SOFTWARE\Classes\KDX.SecureFrame@ Secure Delivery
Reg HKLM\SOFTWARE\Classes\KDX.SecureFrame\CLSID
Reg HKLM\SOFTWARE\Classes\KDX.SecureFrame\CLSID@ {3E31FA99-FBFB-4CB7-A31D-493901BC0CCA}
Reg HKLM\SOFTWARE\Classes\KDX.SecureFrame\CurVer
Reg HKLM\SOFTWARE\Classes\KDX.SecureFrame\CurVer@ KDX.SecureFrame.1
Reg HKLM\SOFTWARE\Classes\KDX.SecureFrame.1@ Secure Delivery
Reg HKLM\SOFTWARE\Classes\KDX.SecureFrame.1\CLSID
Reg HKLM\SOFTWARE\Classes\KDX.SecureFrame.1\CLSID@ {3E31FA99-FBFB-4CB7-A31D-493901BC0CCA}
Reg HKLM\SOFTWARE\Classes\KDX.SecureInstall@ Secure Delivery
Reg HKLM\SOFTWARE\Classes\KDX.SecureInstall\CLSID
Reg HKLM\SOFTWARE\Classes\KDX.SecureInstall\CLSID@ {A7ECD556-D6F6-4F41-8C6B-14AB246801A0}
Reg HKLM\SOFTWARE\Classes\KDX.SecureInstall\CurVer
Reg HKLM\SOFTWARE\Classes\KDX.SecureInstall\CurVer@ KDX.SecureInstall.1
Reg HKLM\SOFTWARE\Classes\KDX.SecureInstall.1@ Secure Delivery
Reg HKLM\SOFTWARE\Classes\KDX.SecureInstall.1\CLSID
Reg HKLM\SOFTWARE\Classes\KDX.SecureInstall.1\CLSID@ {A7ECD556-D6F6-4F41-8C6B-14AB246801A0}
Reg HKLM\SOFTWARE\Classes\KDX.SecureUI@ Secure Delivery
Reg HKLM\SOFTWARE\Classes\KDX.SecureUI\CLSID
Reg HKLM\SOFTWARE\Classes\KDX.SecureUI\CLSID@ {5FB8530A-5A4B-45A5-9E38-B34244C54360}
Reg HKLM\SOFTWARE\Classes\KDX.SecureUI\CurVer
Reg HKLM\SOFTWARE\Classes\KDX.SecureUI\CurVer@ KDX.SecureUI.1
Reg HKLM\SOFTWARE\Classes\KDX.SecureUI.1@ Secure Delivery
Reg HKLM\SOFTWARE\Classes\KDX.SecureUI.1\CLSID
Reg HKLM\SOFTWARE\Classes\KDX.SecureUI.1\CLSID@ {5FB8530A-5A4B-45A5-9E38-B34244C54360}
Reg HKLM\SOFTWARE\Classes\KService.KDMPeerMonitorApi@ KDMPeerMonitorApi Object
Reg HKLM\SOFTWARE\Classes\KService.KDMPeerMonitorApi\CLSID
Reg HKLM\SOFTWARE\Classes\KService.KDMPeerMonitorApi\CLSID@ {4062161c-19e8-48f5-aaad-22b55435b1a5}
Reg HKLM\SOFTWARE\Classes\KService.KDMPeerMonitorApi\CurVer
Reg HKLM\SOFTWARE\Classes\KService.KDMPeerMonitorApi\CurVer@ KService.KDMPeerMonitorApi.1
Reg HKLM\SOFTWARE\Classes\KService.KDMPeerMonitorApi.1@ KDMPeerMonitorApi Object
Reg HKLM\SOFTWARE\Classes\KService.KDMPeerMonitorApi.1\CLSID
Reg HKLM\SOFTWARE\Classes\KService.KDMPeerMonitorApi.1\CLSID@ {4062161c-19e8-48f5-aaad-22b55435b1a5}
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderManagerApi@ KDMProviderManagerApi Object
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderManagerApi\CLSID
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderManagerApi\CLSID@ {8C9813D0-9FEA-4F37-AAF0-89D9C805B89F}
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderManagerApi\CurVer
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderManagerApi\CurVer@ KService.KDMProviderManagerApi.1
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderManagerApi.1@ KDMProviderManagerApi Object
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderManagerApi.1\CLSID
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderManagerApi.1\CLSID@ {8C9813D0-9FEA-4F37-AAF0-89D9C805B89F}
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderUserApi@ KDMProviderUserApi Object
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderUserApi\CLSID
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderUserApi\CLSID@ {83D70C88-12F2-4B69-B4E7-D2AF6DA1079B}
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderUserApi\CurVer
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderUserApi\CurVer@ KService.KDMProviderUserApi.1
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderUserApi.1@ KDMProviderUserApi Object
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderUserApi.1\CLSID
Reg HKLM\SOFTWARE\Classes\KService.KDMProviderUserApi.1\CLSID@ {83D70C88-12F2-4B69-B4E7-D2AF6DA1079B}
Reg HKLM\SOFTWARE\Classes\KService.KDMServiceApi@ CKDMServiceApi Object
Reg HKLM\SOFTWARE\Classes\KService.KDMServiceApi\CLSID
Reg HKLM\SOFTWARE\Classes\KService.KDMServiceApi\CLSID@ {F4524160-9145-49C9-8810-46CBC1EA0021}
Reg HKLM\SOFTWARE\Classes\KService.KDMServiceApi\CurVer
Reg HKLM\SOFTWARE\Classes\KService.KDMServiceApi\CurVer@ KService.KDMServiceApi.1
Reg HKLM\SOFTWARE\Classes\KService.KDMServiceApi.1@ CKDMServiceApi Object
Reg HKLM\SOFTWARE\Classes\KService.KDMServiceApi.1\CLSID
Reg HKLM\SOFTWARE\Classes\KService.KDMServiceApi.1\CLSID@ {F4524160-9145-49C9-8810-46CBC1EA0021}
Reg HKLM\SOFTWARE\Classes\Licenses\4F86BADF-9F77-11d1-B1B7-0000F8753F5D
Reg HKLM\SOFTWARE\Classes\Licenses\4F86BADF-9F77-11d1-B1B7-0000F8753F5D@ iplpwpnippopupiivjrioppisjsjlpiiokuj
Reg HKLM\SOFTWARE\Classes\Licenses\ED4B87C4-9F76-11d1-8BF7-0000F8754DA1
Reg HKLM\SOFTWARE\Classes\Licenses\ED4B87C4-9F76-11d1-8BF7-0000F8754DA1@ knlggnmntgggrninthpgmnngrhqhnnjnslsh
Reg HKLM\SOFTWARE\Classes\Msxml2.DOMDocument.4.0@ XML DOM Document 4.0
Reg HKLM\SOFTWARE\Classes\Msxml2.DOMDocument.4.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.DOMDocument.4.0\CLSID@ {88D969C0-F192-11D4-A65F-0040963251E5}
Reg HKLM\SOFTWARE\Classes\Msxml2.DSOControl.4.0@ XML Data Source Object 4.0
Reg HKLM\SOFTWARE\Classes\Msxml2.DSOControl.4.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.DSOControl.4.0\CLSID@ {88D969C4-F192-11D4-A65F-0040963251E5}
Reg HKLM\SOFTWARE\Classes\Msxml2.FreeThreadedDOMDocument.4.0@ Free Threaded XML DOM Document 4.0
Reg HKLM\SOFTWARE\Classes\Msxml2.FreeThreadedDOMDocument.4.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.FreeThreadedDOMDocument.4.0\CLSID@ {88D969C1-F192-11D4-A65F-0040963251E5}
Reg HKLM\SOFTWARE\Classes\Msxml2.MXHTMLWriter.4.0@ MXHTMLWriter 4.0
Reg HKLM\SOFTWARE\Classes\Msxml2.MXHTMLWriter.4.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.MXHTMLWriter.4.0\CLSID@ {88D969C9-F192-11D4-A65F-0040963251E5}
Reg HKLM\SOFTWARE\Classes\Msxml2.MXNamespaceManager.4.0@ MXNamespaceManager 4.0
Reg HKLM\SOFTWARE\Classes\Msxml2.MXNamespaceManager.4.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.MXNamespaceManager.4.0\CLSID@ {88D969D6-F192-11D4-A65F-0040963251E5}
Reg HKLM\SOFTWARE\Classes\Msxml2.MXXMLWriter.4.0@ MXXMLWriter 4.0
Reg HKLM\SOFTWARE\Classes\Msxml2.MXXMLWriter.4.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.MXXMLWriter.4.0\CLSID@ {88D969C8-F192-11D4-A65F-0040963251E5}
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXAttributes.4.0@ SAXAttributes 4.0
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXAttributes.4.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXAttributes.4.0\CLSID@ {88D969CA-F192-11D4-A65F-0040963251E5}
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXXMLReader.4.0@ SAX XML Reader 4.0
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXXMLReader.4.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.SAXXMLReader.4.0\CLSID@ {7C6E29BC-8B8B-4C3D-859E-AF6CD158BE0F}
Reg HKLM\SOFTWARE\Classes\Msxml2.ServerXMLHTTP.4.0@ Server XML HTTP 4.0
Reg HKLM\SOFTWARE\Classes\Msxml2.ServerXMLHTTP.4.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.ServerXMLHTTP.4.0\CLSID@ {88D969C6-F192-11D4-A65F-0040963251E5}
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLHTTP.4.0@ XML HTTP 4.0
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLHTTP.4.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLHTTP.4.0\CLSID@ {88D969C5-F192-11D4-A65F-0040963251E5}
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLSchemaCache.4.0@ XML Schema Cache 4.0
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLSchemaCache.4.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.XMLSchemaCache.4.0\CLSID@ {88D969C2-F192-11D4-A65F-0040963251E5}
Reg HKLM\SOFTWARE\Classes\Msxml2.XSLTemplate.4.0@ XSL Template 4.0
Reg HKLM\SOFTWARE\Classes\Msxml2.XSLTemplate.4.0\CLSID
Reg HKLM\SOFTWARE\Classes\Msxml2.XSLTemplate.4.0\CLSID@ {88D969C3-F192-11D4-A65F-0040963251E5}
Reg HKLM\SOFTWARE\Classes\OptPCEE3PropCplExt.OptPCEE3Prop@ OptPCEE3Prop Class
Reg HKLM\SOFTWARE\Classes\OptPCEE3PropCplExt.OptPCEE3Prop\CLSID
Reg HKLM\SOFTWARE\Classes\OptPCEE3PropCplExt.OptPCEE3Prop\CLSID@ {8E93A1B1-8EF0-42e9-AC76-D2CA4CF28681}
Reg HKLM\SOFTWARE\Classes\OptPCEE3PropCplExt.OptPCEE3Prop\CurVer
Reg HKLM\SOFTWARE\Classes\OptPCEE3PropCplExt.OptPCEE3Prop\CurVer@ OptPCEE3PropCplExt.OptPCEE3Prop.1
Reg HKLM\SOFTWARE\Classes\OptPCEE3PropCplExt.OptPCEE3Prop.1@ OptPCEE3Prop Class
Reg HKLM\SOFTWARE\Classes\OptPCEE3PropCplExt.OptPCEE3Prop.1\CLSID
Reg HKLM\SOFTWARE\Classes\OptPCEE3PropCplExt.OptPCEE3Prop.1\CLSID@ {8E93A1B1-8EF0-42e9-AC76-D2CA4CF28681}
Reg HKLM\SOFTWARE\Classes\PDAPI.Api\CLSID@ {E2159021-A507-48F9-9DF1-EC5AFDBA5066}
Reg HKLM\SOFTWARE\Classes\PDAPI.Api\CurVer@ PDAPI.Api.1
Reg HKLM\SOFTWARE\Classes\PDAPI.Api.1\CLSID@ {E2159021-A507-48F9-9DF1-EC5AFDBA5066}
Reg HKLM\SOFTWARE\Classes\Pdapi2.ApiImpl\CLSID@ {B776FDAF-2388-42D0-8A7C-386E1BC2E19E}
Reg HKLM\SOFTWARE\Classes\Pdapi2.ApiImpl.1\CLSID@ {B776FDAF-2388-42D0-8A7C-386E1BC2E19E}
Reg HKLM\SOFTWARE\Classes\PDXlator.ConnectorManager\CLSID@ {78496FD9-A9D7-4F59-8934-84A5DC5679D8}
Reg HKLM\SOFTWARE\Classes\PDXlator.ConnectorManager\CurVer@ PDXlator.ConnectorManager.1
Reg HKLM\SOFTWARE\Classes\PDXlator.ConnectorManager.1\CLSID@ {78496FD9-A9D7-4F59-8934-84A5DC5679D8}
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionDescriptor@ Photoshop ActionDescriptor
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionDescriptor\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionDescriptor\CLSID@ {45d7bf03-4d65-4f0f-ac0a-9c900495d73d}
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionDescriptor\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionDescriptor\CurVer@ Photoshop.ActionDescriptor.11
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionDescriptor.11@ Photoshop ActionDescriptor
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionDescriptor.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionDescriptor.11\CLSID@ {45d7bf03-4d65-4f0f-ac0a-9c900495d73d}
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionList@ Photoshop ActionList
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionList\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionList\CLSID@ {46cdd7c0-6250-448f-b745-4444fcbcb6ab}
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionList\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionList\CurVer@ Photoshop.ActionList.11
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionList.11@ Photoshop ActionList
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionList.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionList.11\CLSID@ {46cdd7c0-6250-448f-b745-4444fcbcb6ab}
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionReference@ Photoshop ActionReference
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionReference\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionReference\CLSID@ {040243f0-170a-42e3-bd55-c9ab9fe67147}
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionReference\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionReference\CurVer@ Photoshop.ActionReference.11
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionReference.11@ Photoshop ActionReference
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionReference.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionReference.11\CLSID@ {040243f0-170a-42e3-bd55-c9ab9fe67147}
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionsFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionsFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,31
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionsFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionsFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionsFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.ActionsFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.AdobePlugin\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.AdobePlugin\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,2
Reg HKLM\SOFTWARE\Classes\Photoshop.AdobePlugin\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.AdobePlugin\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.AdobePlugin\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.AdobePlugin\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.Application@ Photoshop Application
Reg HKLM\SOFTWARE\Classes\Photoshop.Application\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.Application\CLSID@ {6568e194-96d8-4035-9087-99e4f75e9abc}
Reg HKLM\SOFTWARE\Classes\Photoshop.Application\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.Application\CurVer@ Photoshop.Application.11
Reg HKLM\SOFTWARE\Classes\Photoshop.Application.11@ Photoshop Application
Reg HKLM\SOFTWARE\Classes\Photoshop.Application.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.Application.11\CLSID@ {6568e194-96d8-4035-9087-99e4f75e9abc}
Reg HKLM\SOFTWARE\Classes\Photoshop.Application.11.1@ Photoshop CS4 Application
Reg HKLM\SOFTWARE\Classes\Photoshop.Application.11.1\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.Application.11.1\CLSID@ {6DECC242-87EF-11cf-86B4-444553540000}
Reg HKLM\SOFTWARE\Classes\Photoshop.ArbitraryMapFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.ArbitraryMapFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,13
Reg HKLM\SOFTWARE\Classes\Photoshop.ArbitraryMapFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.ArbitraryMapFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.ArbitraryMapFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.ArbitraryMapFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
You do not have the required permissions to view the files attached to this post.
Westbound
Active Member
 
Posts: 13
Joined: May 4th, 2010, 12:39 pm

Re: HiJackThis Log

Unread postby Gary R » May 12th, 2010, 10:57 am

Reg HKLM\SOFTWARE\Classes\Photoshop.ASVColAdjFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.ASVColAdjFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,83
Reg HKLM\SOFTWARE\Classes\Photoshop.ASVColAdjFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.ASVColAdjFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.ASVColAdjFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.ASVColAdjFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.AXTAdjColFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.AXTAdjColFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,32
Reg HKLM\SOFTWARE\Classes\Photoshop.AXTAdjColFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.AXTAdjColFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.AXTAdjColFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.AXTAdjColFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.BatchOptions@ Photoshop BatchOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.BatchOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.BatchOptions\CLSID@ {3cd7ac09-3c5c-459e-ad37-8a9c8c761606}
Reg HKLM\SOFTWARE\Classes\Photoshop.BatchOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.BatchOptions\CurVer@ Photoshop.BatchOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.BatchOptions.11@ Photoshop BatchOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.BatchOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.BatchOptions.11\CLSID@ {3cd7ac09-3c5c-459e-ad37-8a9c8c761606}
Reg HKLM\SOFTWARE\Classes\Photoshop.BitmapConversionOptions@ Photoshop BitmapConversionOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.BitmapConversionOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.BitmapConversionOptions\CLSID@ {9930a681-1b84-4e0e-89d3-8aa28d6cded5}
Reg HKLM\SOFTWARE\Classes\Photoshop.BitmapConversionOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.BitmapConversionOptions\CurVer@ Photoshop.BitmapConversionOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.BitmapConversionOptions.11@ Photoshop BitmapConversionOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.BitmapConversionOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.BitmapConversionOptions.11\CLSID@ {9930a681-1b84-4e0e-89d3-8aa28d6cded5}
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,58
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\shell\print
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\shell\print\command
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPFile.11\shell\print\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" -p "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPSaveOptions@ Photoshop BMPSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPSaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPSaveOptions\CLSID@ {0a618928-3fa8-4aad-a2b4-70d956ff08d7}
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPSaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPSaveOptions\CurVer@ Photoshop.BMPSaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPSaveOptions.11@ Photoshop BMPSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPSaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.BMPSaveOptions.11\CLSID@ {0a618928-3fa8-4aad-a2b4-70d956ff08d7}
Reg HKLM\SOFTWARE\Classes\Photoshop.BrushesFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.BrushesFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,28
Reg HKLM\SOFTWARE\Classes\Photoshop.BrushesFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.BrushesFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.BrushesFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.BrushesFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.BWPresets\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.BWPresets\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,82
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,65
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon2.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon2.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,64
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon2.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon2.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon2.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon2.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon2.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon2.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon2.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon2.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon2.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileCanon2.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileDigital.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileDigital.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,67
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileDigital.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileDigital.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileDigital.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileDigital.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileDigital.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileDigital.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileDigital.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileDigital.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileDigital.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileDigital.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileEpson.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileEpson.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,68
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileEpson.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileEpson.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileEpson.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileEpson.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileEpson.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileEpson.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileEpson.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileEpson.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileEpson.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileEpson.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFoveon.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFoveon.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,76
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFoveon.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFoveon.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFoveon.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFoveon.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFoveon.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFoveon.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFoveon.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFoveon.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFoveon.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFoveon.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFujifilm.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFujifilm.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,74
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFujifilm.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFujifilm.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFujifilm.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFujifilm.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFujifilm.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFujifilm.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFujifilm.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFujifilm.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFujifilm.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileFujifilm.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileKodak.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileKodak.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,66
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileKodak.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileKodak.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileKodak.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileKodak.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileKodak.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileKodak.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileKodak.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileKodak.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileKodak.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileKodak.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileLeaf.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileLeaf.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,69
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileLeaf.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileLeaf.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileLeaf.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileLeaf.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileLeaf.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileLeaf.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileLeaf.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileLeaf.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileLeaf.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileLeaf.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileMinolta.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileMinolta.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,70
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileMinolta.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileMinolta.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileMinolta.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileMinolta.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileMinolta.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileMinolta.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileMinolta.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileMinolta.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileMinolta.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileMinolta.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileNikon.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileNikon.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,71
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileNikon.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileNikon.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileNikon.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileNikon.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileNikon.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileNikon.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileNikon.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileNikon.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileNikon.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileNikon.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileOlympus.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileOlympus.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,72
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileOlympus.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileOlympus.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileOlympus.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileOlympus.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileOlympus.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileOlympus.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileOlympus.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileOlympus.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileOlympus.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileOlympus.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFilePentax.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFilePentax.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,73
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFilePentax.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFilePentax.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFilePentax.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFilePentax.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFilePentax.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFilePentax.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFilePentax.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFilePentax.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFilePentax.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFilePentax.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileSony.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileSony.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,75
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileSony.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileSony.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileSony.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileSony.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileSony.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileSony.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileSony.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileSony.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileSony.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRawFileSony.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRAWOpenOptions@ Photoshop CameraRAWOpenOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRAWOpenOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRAWOpenOptions\CLSID@ {a7817e5a-00c7-4e25-a448-17dece00ba33}
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRAWOpenOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRAWOpenOptions\CurVer@ Photoshop.CameraRAWOpenOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRAWOpenOptions.11@ Photoshop CameraRAWOpenOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRAWOpenOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.CameraRAWOpenOptions.11\CLSID@ {a7817e5a-00c7-4e25-a448-17dece00ba33}
Reg HKLM\SOFTWARE\Classes\Photoshop.CHAFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CHAFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,39
Reg HKLM\SOFTWARE\Classes\Photoshop.CHAFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CHAFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CHAFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CHAFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CINFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CINFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,58
Reg HKLM\SOFTWARE\Classes\Photoshop.CINFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CINFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.CINFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CINFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CINFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CINFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CINFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CINFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.CINFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CINFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CMYKColor@ Photoshop CMYKColor
Reg HKLM\SOFTWARE\Classes\Photoshop.CMYKColor\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.CMYKColor\CLSID@ {e10824c6-98c2-40c6-b790-a957bc9a15d4}
Reg HKLM\SOFTWARE\Classes\Photoshop.CMYKColor\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.CMYKColor\CurVer@ Photoshop.CMYKColor.11
Reg HKLM\SOFTWARE\Classes\Photoshop.CMYKColor.11@ Photoshop CMYKColor
Reg HKLM\SOFTWARE\Classes\Photoshop.CMYKColor.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.CMYKColor.11\CLSID@ {e10824c6-98c2-40c6-b790-a957bc9a15d4}
Reg HKLM\SOFTWARE\Classes\Photoshop.ColorBooks\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.ColorBooks\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,49
Reg HKLM\SOFTWARE\Classes\Photoshop.ColorTableFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.ColorTableFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,12
Reg HKLM\SOFTWARE\Classes\Photoshop.ColorTableFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.ColorTableFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.ColorTableFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.ColorTableFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.ContactSheetOptions@ Photoshop ContactSheetOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.ContactSheetOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.ContactSheetOptions\CLSID@ {f724f588-3696-4eb0-b901-39792ed15d43}
Reg HKLM\SOFTWARE\Classes\Photoshop.ContactSheetOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.ContactSheetOptions\CurVer@ Photoshop.ContactSheetOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.ContactSheetOptions.11@ Photoshop ContactSheetOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.ContactSheetOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.ContactSheetOptions.11\CLSID@ {f724f588-3696-4eb0-b901-39792ed15d43}
Reg HKLM\SOFTWARE\Classes\Photoshop.CurvesFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CurvesFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,23
Reg HKLM\SOFTWARE\Classes\Photoshop.CurvesFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CurvesFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CurvesFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CurvesFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CustomFilterKernel\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CustomFilterKernel\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,14
Reg HKLM\SOFTWARE\Classes\Photoshop.CustomFilterKernel\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CustomFilterKernel\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CustomFilterKernel\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CustomFilterKernel\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.CustomShapes\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.CustomShapes\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,7
Reg HKLM\SOFTWARE\Classes\Photoshop.CustomShapes\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.CustomShapes\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.CustomShapes\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.CustomShapes\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS1_SaveOptions@ Photoshop DCS1_SaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS1_SaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS1_SaveOptions\CLSID@ {d6e00d82-7f66-484e-bd40-b21ff5312916}
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS1_SaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS1_SaveOptions\CurVer@ Photoshop.DCS1_SaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS1_SaveOptions.11@ Photoshop DCS1_SaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS1_SaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS1_SaveOptions.11\CLSID@ {d6e00d82-7f66-484e-bd40-b21ff5312916}
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS2_SaveOptions@ Photoshop DCS2_SaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS2_SaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS2_SaveOptions\CLSID@ {2c5ef7e9-bb64-4aaa-9265-59ba7c474ce0}
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS2_SaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS2_SaveOptions\CurVer@ Photoshop.DCS2_SaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS2_SaveOptions.11@ Photoshop DCS2_SaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS2_SaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.DCS2_SaveOptions.11\CLSID@ {2c5ef7e9-bb64-4aaa-9265-59ba7c474ce0}
Reg HKLM\SOFTWARE\Classes\Photoshop.DICOMOpenOptions@ Photoshop DICOMOpenOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.DICOMOpenOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.DICOMOpenOptions\CLSID@ {806b298d-5aa7-4535-bd50-00dc032aedcf}
Reg HKLM\SOFTWARE\Classes\Photoshop.DICOMOpenOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.DICOMOpenOptions\CurVer@ Photoshop.DICOMOpenOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.DICOMOpenOptions.11@ Photoshop DICOMOpenOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.DICOMOpenOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.DICOMOpenOptions.11\CLSID@ {806b298d-5aa7-4535-bd50-00dc032aedcf}
Reg HKLM\SOFTWARE\Classes\Photoshop.DNGCameraProfile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.DNGCameraProfile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,86
Reg HKLM\SOFTWARE\Classes\Photoshop.DNGCameraProfileRecipe.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.DNGCameraProfileRecipe.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,87
Reg HKLM\SOFTWARE\Classes\Photoshop.DuotoneSettingsFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.DuotoneSettingsFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,26
Reg HKLM\SOFTWARE\Classes\Photoshop.DuotoneSettingsFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.DuotoneSettingsFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.DuotoneSettingsFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.DuotoneSettingsFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,11
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSOpenOptions@ Photoshop EPSOpenOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSOpenOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSOpenOptions\CLSID@ {c1067d33-1947-404b-8efd-3ab10c6b3489}
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSOpenOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSOpenOptions\CurVer@ Photoshop.EPSOpenOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSOpenOptions.11@ Photoshop EPSOpenOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSOpenOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSOpenOptions.11\CLSID@ {c1067d33-1947-404b-8efd-3ab10c6b3489}
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSSaveOptions@ Photoshop EPSSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSSaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSSaveOptions\CLSID@ {226cc7b1-f735-4af0-8483-049b21e47c86}
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSSaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSSaveOptions\CurVer@ Photoshop.EPSSaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSSaveOptions.11@ Photoshop EPSSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSSaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.EPSSaveOptions.11\CLSID@ {226cc7b1-f735-4af0-8483-049b21e47c86}
Reg HKLM\SOFTWARE\Classes\Photoshop.ExchangeableSwatchFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.ExchangeableSwatchFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,77
Reg HKLM\SOFTWARE\Classes\Photoshop.ExchangeableSwatchFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.ExchangeableSwatchFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.ExchangeableSwatchFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.ExchangeableSwatchFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.ExchangeableSwatchFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.ExchangeableSwatchFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.ExchangeableSwatchFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.ExchangeableSwatchFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.ExchangeableSwatchFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.ExchangeableSwatchFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsIllustrator@ Photoshop ExportOptionsIllustrator
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsIllustrator\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsIllustrator\CLSID@ {702d818e-e916-42ae-8d46-138df63c94cd}
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsIllustrator\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsIllustrator\CurVer@ Photoshop.ExportOptionsIllustrator.11
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsIllustrator.11@ Photoshop ExportOptionsIllustrator
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsIllustrator.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsIllustrator.11\CLSID@ {702d818e-e916-42ae-8d46-138df63c94cd}
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsSaveForWeb@ Photoshop ExportOptionsSaveForWeb
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsSaveForWeb\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsSaveForWeb\CLSID@ {e07c5a00-8d66-482a-9faf-47f6878d394d}
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsSaveForWeb\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsSaveForWeb\CurVer@ Photoshop.ExportOptionsSaveForWeb.11
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsSaveForWeb.11@ Photoshop ExportOptionsSaveForWeb
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsSaveForWeb.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.ExportOptionsSaveForWeb.11\CLSID@ {e07c5a00-8d66-482a-9faf-47f6878d394d}
Reg HKLM\SOFTWARE\Classes\Photoshop.ExposureAdjustment\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.ExposureAdjustment\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,84
Reg HKLM\SOFTWARE\Classes\Photoshop.FileInfo\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.FileInfo\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,35
Reg HKLM\SOFTWARE\Classes\Photoshop.FileInfo\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.FileInfo\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.FileInfo\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.FileInfo\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.FXGFileType.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.FXGFileType.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,85
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryBannerOptions@ Photoshop GalleryBannerOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryBannerOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryBannerOptions\CLSID@ {ef2d6a69-bb01-48cf-adc6-33d82dcceb76}
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryBannerOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryBannerOptions\CurVer@ Photoshop.GalleryBannerOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryBannerOptions.11@ Photoshop GalleryBannerOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryBannerOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryBannerOptions.11\CLSID@ {ef2d6a69-bb01-48cf-adc6-33d82dcceb76}
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryCustomColorOptions@ Photoshop GalleryCustomColorOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryCustomColorOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryCustomColorOptions\CLSID@ {49395449-38af-4efe-b397-797f47bb9c98}
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryCustomColorOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryCustomColorOptions\CurVer@ Photoshop.GalleryCustomColorOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryCustomColorOptions.11@ Photoshop GalleryCustomColorOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryCustomColorOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryCustomColorOptions.11\CLSID@ {49395449-38af-4efe-b397-797f47bb9c98}
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryImagesOptions@ Photoshop GalleryImagesOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryImagesOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryImagesOptions\CLSID@ {ed94aa5f-8da6-41a2-a9a7-e2a85df45764}
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryImagesOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryImagesOptions\CurVer@ Photoshop.GalleryImagesOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryImagesOptions.11@ Photoshop GalleryImagesOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryImagesOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryImagesOptions.11\CLSID@ {ed94aa5f-8da6-41a2-a9a7-e2a85df45764}
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryOptions@ Photoshop GalleryOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryOptions\CLSID@ {c8083d3e-e107-42ce-a859-03cf10b153fa}
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryOptions\CurVer@ Photoshop.GalleryOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryOptions.11@ Photoshop GalleryOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryOptions.11\CLSID@ {c8083d3e-e107-42ce-a859-03cf10b153fa}
Reg HKLM\SOFTWARE\Classes\Photoshop.GallerySecurityOptions@ Photoshop GallerySecurityOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GallerySecurityOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GallerySecurityOptions\CLSID@ {53f225c8-63fa-4e7c-bfa7-553ac6b8e1a2}
Reg HKLM\SOFTWARE\Classes\Photoshop.GallerySecurityOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.GallerySecurityOptions\CurVer@ Photoshop.GallerySecurityOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.GallerySecurityOptions.11@ Photoshop GallerySecurityOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GallerySecurityOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GallerySecurityOptions.11\CLSID@ {53f225c8-63fa-4e7c-bfa7-553ac6b8e1a2}
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryThumbnailOptions@ Photoshop GalleryThumbnailOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryThumbnailOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryThumbnailOptions\CLSID@ {42cd57e5-90c9-4fbb-9c64-7851f6ce285d}
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryThumbnailOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryThumbnailOptions\CurVer@ Photoshop.GalleryThumbnailOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryThumbnailOptions.11@ Photoshop GalleryThumbnailOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryThumbnailOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GalleryThumbnailOptions.11\CLSID@ {42cd57e5-90c9-4fbb-9c64-7851f6ce285d}
Reg HKLM\SOFTWARE\Classes\Photoshop.GIFFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.GIFFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,6
Reg HKLM\SOFTWARE\Classes\Photoshop.GIFSaveOptions@ Photoshop GIFSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GIFSaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GIFSaveOptions\CLSID@ {4c751f5d-4d60-4c4e-8bdb-7776fe5da645}
Reg HKLM\SOFTWARE\Classes\Photoshop.GIFSaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.GIFSaveOptions\CurVer@ Photoshop.GIFSaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.GIFSaveOptions.11@ Photoshop GIFSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.GIFSaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GIFSaveOptions.11\CLSID@ {4c751f5d-4d60-4c4e-8bdb-7776fe5da645}
Reg HKLM\SOFTWARE\Classes\Photoshop.Gradients\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.Gradients\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,38
Reg HKLM\SOFTWARE\Classes\Photoshop.Gradients\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.Gradients\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.Gradients\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.Gradients\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.GrayColor@ Photoshop GrayColor
Reg HKLM\SOFTWARE\Classes\Photoshop.GrayColor\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GrayColor\CLSID@ {330e04da-0821-49e3-a87b-0300d4952d09}
Reg HKLM\SOFTWARE\Classes\Photoshop.GrayColor\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.GrayColor\CurVer@ Photoshop.GrayColor.11
Reg HKLM\SOFTWARE\Classes\Photoshop.GrayColor.11@ Photoshop GrayColor
Reg HKLM\SOFTWARE\Classes\Photoshop.GrayColor.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.GrayColor.11\CLSID@ {330e04da-0821-49e3-a87b-0300d4952d09}
Reg HKLM\SOFTWARE\Classes\Photoshop.HalftoneScreens\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.HalftoneScreens\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,17
Reg HKLM\SOFTWARE\Classes\Photoshop.HalftoneScreens\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.HalftoneScreens\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.HalftoneScreens\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.HalftoneScreens\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.HSBColor@ Photoshop HSBColor
Reg HKLM\SOFTWARE\Classes\Photoshop.HSBColor\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.HSBColor\CLSID@ {a99f905c-056f-4e88-bc05-408b847fb749}
Reg HKLM\SOFTWARE\Classes\Photoshop.HSBColor\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.HSBColor\CurVer@ Photoshop.HSBColor.11
Reg HKLM\SOFTWARE\Classes\Photoshop.HSBColor.11@ Photoshop HSBColor
Reg HKLM\SOFTWARE\Classes\Photoshop.HSBColor.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.HSBColor.11\CLSID@ {a99f905c-056f-4e88-bc05-408b847fb749}
Reg HKLM\SOFTWARE\Classes\Photoshop.HueSatFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.HueSatFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,25
Reg HKLM\SOFTWARE\Classes\Photoshop.HueSatFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.HueSatFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.HueSatFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.HueSatFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.Image@ Adobe Photoshop Image
Reg HKLM\SOFTWARE\Classes\Photoshop.Image\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.Image\CLSID@ {6A104E4C-74AB-4C4F-BC77-10FC0FD1B172}
Reg HKLM\SOFTWARE\Classes\Photoshop.Image\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.Image\CurVer@ Photoshop.Image.11
Reg HKLM\SOFTWARE\Classes\Photoshop.Image\NotInsertable
Reg HKLM\SOFTWARE\Classes\Photoshop.Image\NotInsertable@
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11@ Adobe Photoshop Image
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\CLSID@ {6A104E4C-74AB-4C4F-BC77-10FC0FD1B172}
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,1
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\Insertable
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\Insertable@
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\protocol
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\protocol\StdFileEditing
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\protocol\StdFileEditing\server
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\protocol\StdFileEditing\server@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\shell\print
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\shell\print\command
Reg HKLM\SOFTWARE\Classes\Photoshop.Image.11\shell\print\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" -p "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.IndexedConversionOptions@ Photoshop IndexedConversionOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.IndexedConversionOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.IndexedConversionOptions\CLSID@ {c639b125-03cb-4bf2-bacf-cdfb916f6a7c}
Reg HKLM\SOFTWARE\Classes\Photoshop.IndexedConversionOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.IndexedConversionOptions\CurVer@ Photoshop.IndexedConversionOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.IndexedConversionOptions.11@ Photoshop IndexedConversionOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.IndexedConversionOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.IndexedConversionOptions.11\CLSID@ {c639b125-03cb-4bf2-bacf-cdfb916f6a7c}
User avatar
Gary R
Administrator
Administrator
 
Posts: 21861
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire

Re: HiJackThis Log

Unread postby Gary R » May 12th, 2010, 10:58 am

Reg HKLM\SOFTWARE\Classes\Photoshop.IRSettings\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.IRSettings\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,7
Reg HKLM\SOFTWARE\Classes\Photoshop.JPEGFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.JPEGFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,30
Reg HKLM\SOFTWARE\Classes\Photoshop.JPEGSaveOptions@ Photoshop JPEGSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.JPEGSaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.JPEGSaveOptions\CLSID@ {65551269-49e0-4df6-8c0e-b13b24e8e302}
Reg HKLM\SOFTWARE\Classes\Photoshop.JPEGSaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.JPEGSaveOptions\CurVer@ Photoshop.JPEGSaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.JPEGSaveOptions.11@ Photoshop JPEGSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.JPEGSaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.JPEGSaveOptions.11\CLSID@ {65551269-49e0-4df6-8c0e-b13b24e8e302}
Reg HKLM\SOFTWARE\Classes\Photoshop.KYSFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.KYSFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,56
Reg HKLM\SOFTWARE\Classes\Photoshop.KYSFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.KYSFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.KYSFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.KYSFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.LabColor@ Photoshop LabColor
Reg HKLM\SOFTWARE\Classes\Photoshop.LabColor\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.LabColor\CLSID@ {8b486c90-0ae9-4641-b960-930d42772f42}
Reg HKLM\SOFTWARE\Classes\Photoshop.LabColor\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.LabColor\CurVer@ Photoshop.LabColor.11
Reg HKLM\SOFTWARE\Classes\Photoshop.LabColor.11@ Photoshop LabColor
Reg HKLM\SOFTWARE\Classes\Photoshop.LabColor.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.LabColor.11\CLSID@ {8b486c90-0ae9-4641-b960-930d42772f42}
Reg HKLM\SOFTWARE\Classes\Photoshop.LevelsFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.LevelsFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,24
Reg HKLM\SOFTWARE\Classes\Photoshop.LevelsFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.LevelsFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.LevelsFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.LevelsFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.MenuCustomizationFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.MenuCustomizationFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,63
Reg HKLM\SOFTWARE\Classes\Photoshop.MenuCustomizationFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.MenuCustomizationFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.MenuCustomizationFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.MenuCustomizationFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.MenuCustomizationFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.MenuCustomizationFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.MenuCustomizationFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.MenuCustomizationFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.MenuCustomizationFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.MenuCustomizationFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.MonitorSetupFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.MonitorSetupFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,9
Reg HKLM\SOFTWARE\Classes\Photoshop.MonitorSetupFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.MonitorSetupFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.MonitorSetupFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.MonitorSetupFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.NoColor@ Photoshop NoColor
Reg HKLM\SOFTWARE\Classes\Photoshop.NoColor\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.NoColor\CLSID@ {ce5ef3af-3d8c-4a36-92d8-9185b01b54ab}
Reg HKLM\SOFTWARE\Classes\Photoshop.NoColor\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.NoColor\CurVer@ Photoshop.NoColor.11
Reg HKLM\SOFTWARE\Classes\Photoshop.NoColor.11@ Photoshop NoColor
Reg HKLM\SOFTWARE\Classes\Photoshop.NoColor.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.NoColor.11\CLSID@ {ce5ef3af-3d8c-4a36-92d8-9185b01b54ab}
Reg HKLM\SOFTWARE\Classes\Photoshop.OpenEXRFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.OpenEXRFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,78
Reg HKLM\SOFTWARE\Classes\Photoshop.OpenEXRFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.OpenEXRFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.OpenEXRFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.OpenEXRFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.OpenEXRFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.OpenEXRFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.OpenEXRFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.OpenEXRFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.OpenEXRFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.OpenEXRFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PathPointInfo@ Photoshop PathPointInfo
Reg HKLM\SOFTWARE\Classes\Photoshop.PathPointInfo\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PathPointInfo\CLSID@ {daf90175-924c-419f-9873-3a3a54770196}
Reg HKLM\SOFTWARE\Classes\Photoshop.PathPointInfo\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.PathPointInfo\CurVer@ Photoshop.PathPointInfo.11
Reg HKLM\SOFTWARE\Classes\Photoshop.PathPointInfo.11@ Photoshop PathPointInfo
Reg HKLM\SOFTWARE\Classes\Photoshop.PathPointInfo.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PathPointInfo.11\CLSID@ {daf90175-924c-419f-9873-3a3a54770196}
Reg HKLM\SOFTWARE\Classes\Photoshop.Patterns\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.Patterns\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,42
Reg HKLM\SOFTWARE\Classes\Photoshop.Patterns\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.Patterns\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.Patterns\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.Patterns\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PCDFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.PCDFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,58
Reg HKLM\SOFTWARE\Classes\Photoshop.PCDFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.PCDFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.PCDFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PCDFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PCDFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.PCDFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PCDFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PCDFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.PCDFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PCDFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PCXFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.PCXFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,58
Reg HKLM\SOFTWARE\Classes\Photoshop.PCXFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.PCXFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.PCXFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PCXFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PCXFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.PCXFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PCXFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PCXFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.PCXFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PCXFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PDDFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.PDDFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,58
Reg HKLM\SOFTWARE\Classes\Photoshop.PDDFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.PDDFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.PDDFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PDDFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PDDFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.PDDFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PDDFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PDDFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.PDDFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PDDFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,50
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFOpenOptions@ Photoshop PDFOpenOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFOpenOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFOpenOptions\CLSID@ {a6381903-b7e6-48cb-ad53-836af9f2fc86}
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFOpenOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFOpenOptions\CurVer@ Photoshop.PDFOpenOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFOpenOptions.11@ Photoshop PDFOpenOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFOpenOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFOpenOptions.11\CLSID@ {a6381903-b7e6-48cb-ad53-836af9f2fc86}
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFSaveOptions@ Photoshop PDFSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFSaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFSaveOptions\CLSID@ {d21424f0-26ba-4aab-a6ba-2b72bbaaac22}
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFSaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFSaveOptions\CurVer@ Photoshop.PDFSaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFSaveOptions.11@ Photoshop PDFSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFSaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PDFSaveOptions.11\CLSID@ {d21424f0-26ba-4aab-a6ba-2b72bbaaac22}
Reg HKLM\SOFTWARE\Classes\Photoshop.PDPFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.PDPFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,58
Reg HKLM\SOFTWARE\Classes\Photoshop.PDPFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.PDPFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.PDPFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PDPFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PDPFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.PDPFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PDPFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PDPFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.PDPFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PDPFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoCDOpenOptions@ Photoshop PhotoCDOpenOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoCDOpenOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoCDOpenOptions\CLSID@ {2397156e-ce5c-434d-b20b-f2c711aa391c}
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoCDOpenOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoCDOpenOptions\CurVer@ Photoshop.PhotoCDOpenOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoCDOpenOptions.11@ Photoshop PhotoCDOpenOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoCDOpenOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoCDOpenOptions.11\CLSID@ {2397156e-ce5c-434d-b20b-f2c711aa391c}
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoshopSaveOptions@ Photoshop PhotoshopSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoshopSaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoshopSaveOptions\CLSID@ {2feb9fb8-0b8a-4b38-bef6-5b534552df57}
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoshopSaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoshopSaveOptions\CurVer@ Photoshop.PhotoshopSaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoshopSaveOptions.11@ Photoshop PhotoshopSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoshopSaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PhotoshopSaveOptions.11\CLSID@ {2feb9fb8-0b8a-4b38-bef6-5b534552df57}
Reg HKLM\SOFTWARE\Classes\Photoshop.PICTFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.PICTFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,3
Reg HKLM\SOFTWARE\Classes\Photoshop.PICTFileSaveOptions@ Photoshop PICTFileSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PICTFileSaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PICTFileSaveOptions\CLSID@ {32f529c0-e297-4891-add9-eb3703344e71}
Reg HKLM\SOFTWARE\Classes\Photoshop.PICTFileSaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.PICTFileSaveOptions\CurVer@ Photoshop.PICTFileSaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.PICTFileSaveOptions.11@ Photoshop PICTFileSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PICTFileSaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PICTFileSaveOptions.11\CLSID@ {32f529c0-e297-4891-add9-eb3703344e71}
Reg HKLM\SOFTWARE\Classes\Photoshop.PicturePackageOptions@ Photoshop PicturePackageOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PicturePackageOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PicturePackageOptions\CLSID@ {295fdd26-3ad2-4dc6-9495-307bda7e334d}
Reg HKLM\SOFTWARE\Classes\Photoshop.PicturePackageOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.PicturePackageOptions\CurVer@ Photoshop.PicturePackageOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.PicturePackageOptions.11@ Photoshop PicturePackageOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PicturePackageOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PicturePackageOptions.11\CLSID@ {295fdd26-3ad2-4dc6-9495-307bda7e334d}
Reg HKLM\SOFTWARE\Classes\Photoshop.PixarSaveOptions@ Photoshop PixarSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PixarSaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PixarSaveOptions\CLSID@ {31d2817f-5198-483a-9ebb-9ef38cad8857}
Reg HKLM\SOFTWARE\Classes\Photoshop.PixarSaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.PixarSaveOptions\CurVer@ Photoshop.PixarSaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.PixarSaveOptions.11@ Photoshop PixarSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PixarSaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PixarSaveOptions.11\CLSID@ {31d2817f-5198-483a-9ebb-9ef38cad8857}
Reg HKLM\SOFTWARE\Classes\Photoshop.PlugIn\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.PlugIn\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,2
Reg HKLM\SOFTWARE\Classes\Photoshop.PlugIn\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.PlugIn\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.PlugIn\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PlugIn\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PNGFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.PNGFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,36
Reg HKLM\SOFTWARE\Classes\Photoshop.PNGSaveOptions@ Photoshop PNGSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PNGSaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PNGSaveOptions\CLSID@ {75d67d80-1a88-4c15-ac88-e3e0061d8792}
Reg HKLM\SOFTWARE\Classes\Photoshop.PNGSaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.PNGSaveOptions\CurVer@ Photoshop.PNGSaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.PNGSaveOptions.11@ Photoshop PNGSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PNGSaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PNGSaveOptions.11\CLSID@ {75d67d80-1a88-4c15-ac88-e3e0061d8792}
Reg HKLM\SOFTWARE\Classes\Photoshop.PortableBitMapFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.PortableBitMapFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,79
Reg HKLM\SOFTWARE\Classes\Photoshop.PortableBitMapFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.PortableBitMapFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.PortableBitMapFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PortableBitMapFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PortableBitMapFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.PortableBitMapFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PortableBitMapFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PortableBitMapFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.PortableBitMapFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PortableBitMapFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PreferencesFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.PreferencesFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,10
Reg HKLM\SOFTWARE\Classes\Photoshop.PreferencesFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.PreferencesFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.PreferencesFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PreferencesFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PresentationOptions@ Photoshop PresentationOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PresentationOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PresentationOptions\CLSID@ {e1b94dc1-bd78-482d-8378-6ba2923edd39}
Reg HKLM\SOFTWARE\Classes\Photoshop.PresentationOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.PresentationOptions\CurVer@ Photoshop.PresentationOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.PresentationOptions.11@ Photoshop PresentationOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.PresentationOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.PresentationOptions.11\CLSID@ {e1b94dc1-bd78-482d-8378-6ba2923edd39}
Reg HKLM\SOFTWARE\Classes\Photoshop.PrintingInksFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.PrintingInksFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,22
Reg HKLM\SOFTWARE\Classes\Photoshop.PrintingInksFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.PrintingInksFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.PrintingInksFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PrintingInksFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.ProofSetup\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.ProofSetup\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,20
Reg HKLM\SOFTWARE\Classes\Photoshop.ProofSetup\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.ProofSetup\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.ProofSetup\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.ProofSetup\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,81
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\shell\print
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\shell\print\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PSBFile.11\shell\print\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" -p "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PXRFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.PXRFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,62
Reg HKLM\SOFTWARE\Classes\Photoshop.PXRFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.PXRFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.PXRFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PXRFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PXRFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.PXRFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PXRFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.PXRFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.PXRFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.PXRFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.RadianceFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.RadianceFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,80
Reg HKLM\SOFTWARE\Classes\Photoshop.RadianceFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.RadianceFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.RadianceFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.RadianceFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.RadianceFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.RadianceFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.RadianceFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.RadianceFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.RadianceFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.RadianceFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.RAWFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.RAWFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,58
Reg HKLM\SOFTWARE\Classes\Photoshop.RawFormatOpenOptions@ Photoshop RawFormatOpenOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.RawFormatOpenOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.RawFormatOpenOptions\CLSID@ {46e9f908-d29b-4d2e-9db0-ad22ba69525c}
Reg HKLM\SOFTWARE\Classes\Photoshop.RawFormatOpenOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.RawFormatOpenOptions\CurVer@ Photoshop.RawFormatOpenOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.RawFormatOpenOptions.11@ Photoshop RawFormatOpenOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.RawFormatOpenOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.RawFormatOpenOptions.11\CLSID@ {46e9f908-d29b-4d2e-9db0-ad22ba69525c}
Reg HKLM\SOFTWARE\Classes\Photoshop.RawSaveOptions@ Photoshop RawSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.RawSaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.RawSaveOptions\CLSID@ {72d9aa6b-854f-4482-b82c-e7de57b543bf}
Reg HKLM\SOFTWARE\Classes\Photoshop.RawSaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.RawSaveOptions\CurVer@ Photoshop.RawSaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.RawSaveOptions.11@ Photoshop RawSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.RawSaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.RawSaveOptions.11\CLSID@ {72d9aa6b-854f-4482-b82c-e7de57b543bf}
Reg HKLM\SOFTWARE\Classes\Photoshop.RGBColor@ Photoshop RGBColor
Reg HKLM\SOFTWARE\Classes\Photoshop.RGBColor\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.RGBColor\CLSID@ {0a99b043-3e96-47a8-a25e-e6584ff13b08}
Reg HKLM\SOFTWARE\Classes\Photoshop.RGBColor\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.RGBColor\CurVer@ Photoshop.RGBColor.11
Reg HKLM\SOFTWARE\Classes\Photoshop.RGBColor.11@ Photoshop RGBColor
Reg HKLM\SOFTWARE\Classes\Photoshop.RGBColor.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.RGBColor.11\CLSID@ {0a99b043-3e96-47a8-a25e-e6584ff13b08}
Reg HKLM\SOFTWARE\Classes\Photoshop.SCTFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.SCTFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,16
Reg HKLM\SOFTWARE\Classes\Photoshop.SCTFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.SCTFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.SCTFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.SCTFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.SCTFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.SCTFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.SCTFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.SCTFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.SCTFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.SCTFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.SepTablesFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.SepTablesFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,20
Reg HKLM\SOFTWARE\Classes\Photoshop.SepTablesFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.SepTablesFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.SepTablesFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.SepTablesFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.SGIRGBSaveOptions@ Photoshop SGIRGBSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.SGIRGBSaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.SGIRGBSaveOptions\CLSID@ {bc4d1a04-c221-45c5-a303-58e248dff5d8}
Reg HKLM\SOFTWARE\Classes\Photoshop.SGIRGBSaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.SGIRGBSaveOptions\CurVer@ Photoshop.SGIRGBSaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.SGIRGBSaveOptions.11@ Photoshop SGIRGBSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.SGIRGBSaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.SGIRGBSaveOptions.11\CLSID@ {bc4d1a04-c221-45c5-a303-58e248dff5d8}
Reg HKLM\SOFTWARE\Classes\Photoshop.ShapeCurves\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.ShapeCurves\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,8
Reg HKLM\SOFTWARE\Classes\Photoshop.ShapeCurves\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.ShapeCurves\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.ShapeCurves\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.ShapeCurves\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.SHHFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.SHHFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,59
Reg HKLM\SOFTWARE\Classes\Photoshop.SHHFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.SHHFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.SHHFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.SHHFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.SHHFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.SHHFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.SHHFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.SHHFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.SHHFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.SHHFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.SolidColor@ Photoshop SolidColor
Reg HKLM\SOFTWARE\Classes\Photoshop.SolidColor\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.SolidColor\CLSID@ {5d7b6715-edc5-47ca-9e51-449d631bb4f8}
Reg HKLM\SOFTWARE\Classes\Photoshop.SolidColor\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.SolidColor\CurVer@ Photoshop.SolidColor.11
Reg HKLM\SOFTWARE\Classes\Photoshop.SolidColor.11@ Photoshop SolidColor
Reg HKLM\SOFTWARE\Classes\Photoshop.SolidColor.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.SolidColor.11\CLSID@ {5d7b6715-edc5-47ca-9e51-449d631bb4f8}
Reg HKLM\SOFTWARE\Classes\Photoshop.STAFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.STAFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,60
Reg HKLM\SOFTWARE\Classes\Photoshop.STAFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.STAFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.STAFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.STAFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.STAFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.STAFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.STAFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.STAFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.STAFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.STAFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.Styles\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.Styles\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,43
Reg HKLM\SOFTWARE\Classes\Photoshop.Styles\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.Styles\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.Styles\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.Styles\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.SubPathInfo@ Photoshop SubPathInfo
Reg HKLM\SOFTWARE\Classes\Photoshop.SubPathInfo\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.SubPathInfo\CLSID@ {9885031c-3f72-40da-92ed-309714d95c20}
Reg HKLM\SOFTWARE\Classes\Photoshop.SubPathInfo\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.SubPathInfo\CurVer@ Photoshop.SubPathInfo.11
Reg HKLM\SOFTWARE\Classes\Photoshop.SubPathInfo.11@ Photoshop SubPathInfo
Reg HKLM\SOFTWARE\Classes\Photoshop.SubPathInfo.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.SubPathInfo.11\CLSID@ {9885031c-3f72-40da-92ed-309714d95c20}
Reg HKLM\SOFTWARE\Classes\Photoshop.SwatchesFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.SwatchesFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,27
Reg HKLM\SOFTWARE\Classes\Photoshop.SwatchesFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.SwatchesFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.SwatchesFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.SwatchesFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.TargaSaveOptions@ Photoshop TargaSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.TargaSaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.TargaSaveOptions\CLSID@ {62462e74-5d28-472d-a1f8-8a93b20ee17f}
Reg HKLM\SOFTWARE\Classes\Photoshop.TargaSaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.TargaSaveOptions\CurVer@ Photoshop.TargaSaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.TargaSaveOptions.11@ Photoshop TargaSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.TargaSaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.TargaSaveOptions.11\CLSID@ {62462e74-5d28-472d-a1f8-8a93b20ee17f}
Reg HKLM\SOFTWARE\Classes\Photoshop.TGAFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.TGAFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,19
Reg HKLM\SOFTWARE\Classes\Photoshop.TGAFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.TGAFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.TGAFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.TGAFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.TGAFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.TGAFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.TGAFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.TGAFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.TGAFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.TGAFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.TIFFFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.TIFFFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,5
Reg HKLM\SOFTWARE\Classes\Photoshop.TIFFFile.11\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.TIFFFile.11\shell\edit
Reg HKLM\SOFTWARE\Classes\Photoshop.TIFFFile.11\shell\edit\command
Reg HKLM\SOFTWARE\Classes\Photoshop.TIFFFile.11\shell\edit\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.TIFFFile.11\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.TIFFFile.11\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.TIFFFile.11\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.TIFFFile.11\shell\preview
Reg HKLM\SOFTWARE\Classes\Photoshop.TIFFFile.11\shell\preview\command
Reg HKLM\SOFTWARE\Classes\Photoshop.TIFFFile.11\shell\preview\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.TiffSaveOptions@ Photoshop TiffSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.TiffSaveOptions\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.TiffSaveOptions\CLSID@ {b200b57b-b3d5-4c1c-ad94-e8fbacb156ab}
Reg HKLM\SOFTWARE\Classes\Photoshop.TiffSaveOptions\CurVer
Reg HKLM\SOFTWARE\Classes\Photoshop.TiffSaveOptions\CurVer@ Photoshop.TiffSaveOptions.11
Reg HKLM\SOFTWARE\Classes\Photoshop.TiffSaveOptions.11@ Photoshop TiffSaveOptions
Reg HKLM\SOFTWARE\Classes\Photoshop.TiffSaveOptions.11\CLSID
Reg HKLM\SOFTWARE\Classes\Photoshop.TiffSaveOptions.11\CLSID@ {b200b57b-b3d5-4c1c-ad94-e8fbacb156ab}
Reg HKLM\SOFTWARE\Classes\Photoshop.ToolPresets\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.ToolPresets\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,47
Reg HKLM\SOFTWARE\Classes\Photoshop.TransferFunctionsFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.TransferFunctionsFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,18
Reg HKLM\SOFTWARE\Classes\Photoshop.TransferFunctionsFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.TransferFunctionsFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.TransferFunctionsFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.TransferFunctionsFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.VariationsFile\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.VariationsFile\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,29
Reg HKLM\SOFTWARE\Classes\Photoshop.VariationsFile\shell
Reg HKLM\SOFTWARE\Classes\Photoshop.VariationsFile\shell\open
Reg HKLM\SOFTWARE\Classes\Photoshop.VariationsFile\shell\open\command
Reg HKLM\SOFTWARE\Classes\Photoshop.VariationsFile\shell\open\command@ "C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe" "%1"
Reg HKLM\SOFTWARE\Classes\Photoshop.WBMFile.11\DefaultIcon
Reg HKLM\SOFTWARE\Classes\Photoshop.WBMFile.11\DefaultIcon@ C:\Program Files\Adobe\Adobe Photoshop CS4\Photoshop.exe,58
Reg HKLM\SOFTWARE\Classes\PicturePackageOptions\CLSID
Reg HKLM\SOFTWARE\Classes\PicturePackageOptions\CLSID@ {295fdd26-3ad2-4dc6-9495-307bda7e334d}
Reg HKLM\SOFTWARE\Classes\PicturePackageOptions\CurVer
Reg HKLM\SOFTWARE\Classes\PicturePackageOptions\CurVer@ Photoshop.PicturePackageOptions.11
Reg HKLM\SOFTWARE\Classes\PropPageExt.DtsS2PropPage@ DtsS2PropPage Class
Reg HKLM\SOFTWARE\Classes\PropPageExt.DtsS2PropPage\CLSID
Reg HKLM\SOFTWARE\Classes\PropPageExt.DtsS2PropPage\CLSID@ {E9A2EE74-9791-4dc6-9066-D7D908C6C613}
Reg HKLM\SOFTWARE\Classes\PropPageExt.DtsS2PropPage\CurVer
Reg HKLM\SOFTWARE\Classes\PropPageExt.DtsS2PropPage\CurVer@ PropPageExt.DtsS2PropPage.1
Reg HKLM\SOFTWARE\Classes\PropPageExt.DtsS2PropPage.1@ DtsS2PropPage Class
Reg HKLM\SOFTWARE\Classes\PropPageExt.DtsS2PropPage.1\CLSID
Reg HKLM\SOFTWARE\Classes\PropPageExt.DtsS2PropPage.1\CLSID@ {E9A2EE74-9791-4dc6-9066-D7D908C6C613}
Reg HKLM\SOFTWARE\Classes\PropPageExt.SrsApoPropPage@ SrsApoPropPage Class
Reg HKLM\SOFTWARE\Classes\PropPageExt.SrsApoPropPage\CLSID
Reg HKLM\SOFTWARE\Classes\PropPageExt.SrsApoPropPage\CLSID@ {8852ECE8-595D-427E-B5A0-F8D2E62FABBD}
Reg HKLM\SOFTWARE\Classes\PropPageExt.SrsApoPropPage\CurVer
Reg HKLM\SOFTWARE\Classes\PropPageExt.SrsApoPropPage\CurVer@ PropPageExt.SrsApoPropPage.1
Reg HKLM\SOFTWARE\Classes\PropPageExt.SrsApoPropPage.1@ SrsApoPropPage Class
Reg HKLM\SOFTWARE\Classes\PropPageExt.SrsApoPropPage.1\CLSID
Reg HKLM\SOFTWARE\Classes\PropPageExt.SrsApoPropPage.1\CLSID@ {8852ECE8-595D-427E-B5A0-F8D2E62FABBD}
Reg HKLM\SOFTWARE\Classes\PUMATECH.WinCEConnectorManager@ ?Windows
Reg HKLM\SOFTWARE\Classes\PUMATECH.WinCEConnectorManager.1\CLSID@ {3A7AD31E-F164-4861-928B-4FE44092F5B8}
Reg HKLM\SOFTWARE\Classes\RtkApoApi.DtsS2UltraPcApi@ DtsS2UltraPcApi Class
Reg HKLM\SOFTWARE\Classes\RtkApoApi.DtsS2UltraPcApi\CLSID
Reg HKLM\SOFTWARE\Classes\RtkApoApi.DtsS2UltraPcApi\CLSID@ {9C4B415C-B076-43F4-928D-98D8B465087A}
Reg HKLM\SOFTWARE\Classes\RtkApoApi.DtsS2UltraPcApi\CurVer
Reg HKLM\SOFTWARE\Classes\RtkApoApi.DtsS2UltraPcApi\CurVer@ RtkApoApi.DtsS2UltraPcApi.1
Reg HKLM\SOFTWARE\Classes\RtkApoApi.DtsS2UltraPcApi.1@ DtsS2UltraPcApi Class
Reg HKLM\SOFTWARE\Classes\RtkApoApi.DtsS2UltraPcApi.1\CLSID
Reg HKLM\SOFTWARE\Classes\RtkApoApi.DtsS2UltraPcApi.1\CLSID@ {9C4B415C-B076-43F4-928D-98D8B465087A}
Reg HKLM\SOFTWARE\Classes\RtkApoApi.MaxxAudioApi@ MaxxAudioApi Class
Reg HKLM\SOFTWARE\Classes\RtkApoApi.MaxxAudioApi\CLSID
Reg HKLM\SOFTWARE\Classes\RtkApoApi.MaxxAudioApi\CLSID@ {5B05A596-33CA-4D65-B6C8-42704CA9BE2A}
Reg HKLM\SOFTWARE\Classes\RtkApoApi.MaxxAudioApi\CurVer
Reg HKLM\SOFTWARE\Classes\RtkApoApi.MaxxAudioApi\CurVer@ RtkApoApi.MaxxAudioApi.1
Reg HKLM\SOFTWARE\Classes\RtkApoApi.MaxxAudioApi.1@ MaxxAudioApi Class
Reg HKLM\SOFTWARE\Classes\RtkApoApi.MaxxAudioApi.1\CLSID
Reg HKLM\SOFTWARE\Classes\RtkApoApi.MaxxAudioApi.1\CLSID@ {5B05A596-33CA-4D65-B6C8-42704CA9BE2A}
Reg HKLM\SOFTWARE\Classes\RtkApoApi.RtUpDownMixApi@ RtUpDownMixApi Class
Reg HKLM\SOFTWARE\Classes\RtkApoApi.RtUpDownMixApi\CLSID
Reg HKLM\SOFTWARE\Classes\RtkApoApi.RtUpDownMixApi\CLSID@ {A5A63314-41AC-484F-85B8-FC15335C24CF}
Reg HKLM\SOFTWARE\Classes\RtkApoApi.RtUpDownMixApi\CurVer
Reg HKLM\SOFTWARE\Classes\RtkApoApi.RtUpDownMixApi\CurVer@ RtkApoApi.RtUpDownMixApi.1
Reg HKLM\SOFTWARE\Classes\RtkApoApi.RtUpDownMixApi.1@ RtUpDownMixApi Class
Reg HKLM\SOFTWARE\Classes\RtkApoApi.RtUpDownMixApi.1\CLSID
Reg HKLM\SOFTWARE\Classes\RtkApoApi.RtUpDownMixApi.1\CLSID@ {A5A63314-41AC-484F-85B8-FC15335C24CF}
Reg HKLM\SOFTWARE\Classes\RtkCfg.RtkCfgApi@ RtkCfgApi Class
Reg HKLM\SOFTWARE\Classes\RtkCfg.RtkCfgApi\CLSID
Reg HKLM\SOFTWARE\Classes\RtkCfg.RtkCfgApi\CLSID@ {AF099A7C-45D2-4CE6-9327-EEAAB0395444}
Reg HKLM\SOFTWARE\Classes\RtkCfg.RtkCfgApi\CurVer
Reg HKLM\SOFTWARE\Classes\RtkCfg.RtkCfgApi\CurVer@ RtkCfg.RtkCfgApi.1
Reg HKLM\SOFTWARE\Classes\RtkCfg.RtkCfgApi.1@ RtkCfgApi Class
Reg HKLM\SOFTWARE\Classes\RtkCfg.RtkCfgApi.1\CLSID
Reg HKLM\SOFTWARE\Classes\RtkCfg.RtkCfgApi.1\CLSID@ {AF099A7C-45D2-4CE6-9327-EEAAB0395444}
Reg HKLM\SOFTWARE\Classes\SoftwareUpdate.ASUController@ ASUController Class
Reg HKLM\SOFTWARE\Classes\SoftwareUpdate.ASUController\CLSID
Reg HKLM\SOFTWARE\Classes\SoftwareUpdate.ASUController\CLSID@ {2692A9D5-61DF-46D5-A5A1-A6CCA921D578}
Reg HKLM\SOFTWARE\Classes\SoftwareUpdate.ASUController\CurVer
Reg HKLM\SOFTWARE\Classes\SoftwareUpdate.ASUController\CurVer@ SoftwareUpdate.ASUController.1
Reg HKLM\SOFTWARE\Classes\SoftwareUpdate.ASUController.1@ ASUController Class
Reg HKLM\SOFTWARE\Classes\SoftwareUpdate.ASUController.1\CLSID
Reg HKLM\SOFTWARE\Classes\SoftwareUpdate.ASUController.1\CLSID@ {2692A9D5-61DF-46D5-A5A1-A6CCA921D578}

---- Files - GMER 1.0.15 ----

File C:\Windows\Temp\pgob.tmp 0 bytes
File C:\Windows\Temp\cvvi.tmp 0 bytes
File C:\Windows\Temp\ktxb.tmp 0 bytes
File C:\Windows\Temp\kvix.tmp 0 bytes
File C:\Windows\system32\DRIVERS\i8042prt.sys suspicious modification
File C:\Windows\system32\drivers\nvstor32.sys suspicious modification

---- EOF - GMER 1.0.15 ----
User avatar
Gary R
Administrator
Administrator
 
Posts: 21861
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire

Re: HiJackThis Log

Unread postby Gary R » May 12th, 2010, 11:06 am

Do not post logs as attachments unless specifically asked to do so by your helper.

This is a training forum, and our students may be observing this topic, they need to be able to see all the information without having to download and open log files.

This is clearly spelled out in the forum posting rules which you should have read before starting this topic ........ viewtopic.php?p=491384#p491384

If you have a long log, break it up into shorter sections and post them separately as I have done.

I will not do this again, if you post another log as an attachment without being asked to do so, I will close this thread.
User avatar
Gary R
Administrator
Administrator
 
Posts: 21861
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire

Re: HiJackThis Log

Unread postby Westbound » May 12th, 2010, 11:15 am

Sorry about that.
Westbound
Active Member
 
Posts: 13
Joined: May 4th, 2010, 12:39 pm

Re: HiJackThis Log

Unread postby Gary R » May 12th, 2010, 11:32 am

No problem, your helper should have pointed out to you what to do in the event of having a log bigger than the forum post limiter will allow, but to be fair to Melboy GMER logs are not normally so long.
User avatar
Gary R
Administrator
Administrator
 
Posts: 21861
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire

Re: HiJackThis Log

Unread postby melboy » May 12th, 2010, 12:13 pm

(Thank you, GaryR. )

Hi


ComboFix (by sUBs)
Please visit this webpage for instructions for downloading and running ComboFix: Bleeping Computer ComboFix Tutorial

  • You must download it to and run it from your Desktop
  • Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
    For instructions on how to disable your security programs, please see this topic:
    How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

  • Double click combofix.exe & follow the prompts.
  • When finished, it will produce a log. Please save that log to post in your next reply
  • Re-enable all the programs that were disabled during the running of ComboFix..


A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own.
This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK

Re: HiJackThis Log

Unread postby Westbound » May 13th, 2010, 4:01 am

Hey melboy, I ran the combo fix, yet when it got to the end of its proceedings where it creates the log file, it stayed on that screen for a good 3 hours. What should I do now? Shall I give it another run?
Westbound
Active Member
 
Posts: 13
Joined: May 4th, 2010, 12:39 pm

Re: HiJackThis Log

Unread postby melboy » May 13th, 2010, 8:17 am

Hi

If there is a log present at C:\combofix.txt please post it - If not, please run combofix again (don't forget to temporarily disable AVG)
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK
Advertisement
Register to Remove

Next

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: random/random and 38 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware