Avatar billede egidiussen Nybegynder
02. oktober 2007 - 07:29 Der er 7 kommentarer og
1 løsning

Hjælp til at rense min log

Hejsa
Jeg håber at der er en som vil hjælpe med at rense min computer for utøj. Den er begyndt at køre langsomt på det sidste og jeg tror der ligger noget skjult som jeg skal have fjernet.
Jeg bruger F-secure antivirus/firewall, AdAware og Search and destroy - er der andet jeg bør køre?

Her er min hijackthis-log:

Logfile of HijackThis v1.99.1
Scan saved at 20:01:02, on 01-10-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Fælles filer\Acronis\Schedule2\schedul2.exe
C:\Programmer\Fælles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Programmer\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Programmer\F-Secure\Anti-Virus\fsgk32st.exe
C:\Programmer\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Programmer\F-Secure\Anti-Virus\FSGK32.EXE
C:\Programmer\F-Secure\Common\FSMA32.EXE
C:\Programmer\F-Secure\Anti-Virus\fssm32.exe
C:\Programmer\Fælles filer\LightScribe\LSSrvc.exe
C:\Programmer\F-Secure\Common\FSMB32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Programmer\F-Secure\Common\FCH32.EXE
C:\Programmer\F-Secure\Common\FAMEH32.EXE
C:\Programmer\F-Secure\Anti-Virus\fsqh.exe
C:\Programmer\F-Secure\Anti-Virus\fsrw.exe
C:\Programmer\F-Secure\Anti-Virus\fsav32.exe
C:\Programmer\F-Secure\Common\FNRB32.EXE
C:\Programmer\F-Secure\FWES\Program\fsdfwd.exe
C:\Programmer\F-Secure\Common\FIH32.EXE
C:\Programmer\iPod\bin\iPodService.exe
C:\Programmer\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Programmer\F-Secure\Common\FSM32.EXE
C:\Programmer\Google\Gmail Notifier\gnotify.exe
C:\Programmer\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Programmer\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Programmer\Fælles filer\Acronis\Schedule2\schedhlp.exe
C:\Programmer\Java\jre1.6.0_02\bin\jusched.exe
C:\Programmer\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\DAEMON Tools\daemon.exe
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\Programmer\F-Secure\FSGUI\fsguidll.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programmer\Mozilla Firefox\firefox.exe
C:\Programmer\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
C:\Programmer\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Programmer\SkoleKom\fcc32.exe
C:\Documents and Settings\Skipper\Skrivebord\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmer\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Programmer\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Programmer\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Programmer\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Programmer\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Programmer\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Programmer\Fælles filer\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmer\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmer\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SearchIndexer] rundll32.exe "C:\WINDOWS\system32\jkyfdjil.dll",sitypnow
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Programmer\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Programmer\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O8 - Extra context menu item: &Block this popup - C:\Programmer\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Programmer\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Programmer\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programmer\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programmer\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\programmer\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: c:\programmer\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: c:\programmer\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: c:\programmer\f-secure\fsps\program\fslsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {11818680-FCF6-11D0-9808-0800092A4865} (Adobe Form Control) - http://www.kps.dk/Codebase/FormCtl.cab
O16 - DPF: {1469FF24-47F6-11D2-8805-006008C537E3} (Adobe Mail Control) - http://www.kps.dk/codebase/ffmail.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by141fd.bay141.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://www.geograf.com/viewer/mgaxctrl.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.click4foto.dk/aurigma/ImageUploader4.cab
O16 - DPF: {CDDCFBB3-4D93-11D2-B1A9-00A0C9B742BE} (Adobe Script Object) - http://www.kps.dk/codebase/scriptobject.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.mittrykkeri.dk/Photo/XUpload.ocx
O16 - DPF: {EF2FB80F-0975-408E-A871-B00CC863478A} (Adobe Soft Font Installer) - http://www.kps.dk/codebase/fontinstaller.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: safeprint - {159A8CC0-E15B-11D3-A0FC-0050047FA13D} - C:\Programmer\SafePublish\sp.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programmer\Fælles filer\Acronis\Schedule2\schedul2.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Programmer\Fælles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Programmer\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Programmer\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Programmer\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Programmer\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Programmer\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Programmer\F-Secure\Common\FSMA32.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmer\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programmer\Fælles filer\LightScribe\LSSrvc.exe
02. oktober 2007 - 07:37 #1
(Jeg ser på den...)
02. oktober 2007 - 07:40 #2
Jooooo - der er også et par mere end mistænkelige Uønskede elementer ifølge din log *S*

Gennemfør proceduren herfra ->
http://www.eksperten.dk/artikler/1123
Avatar billede egidiussen Nybegynder
03. oktober 2007 - 18:19 #3
Hej igen
Nu er jeg næsten færdig med at gennemgå proceduren, men jeg kan ikke finde den 4 logil fra SuperAntispy?
Avatar billede egidiussen Nybegynder
03. oktober 2007 - 18:45 #4
Nu fandt jeg den sidste log, og det er jo så her at jeg på mine blødende knæ spørger om der er en venlig sjæl som vil kigge dem igennem - be om ;-)
Jeg ved ikke hvor stort arbejde det er at kigge det igennem, men hvis jeg har været for nærrig med point, så sig det lige...

_________________
ComboFix 07-10-02.2 - Skipper 2007-10-03 17:57:17.1 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.1252.1.1030.18.564 [GMT 2:00]
Running from: C:\Documents and Settings\Skipper\Skrivebord\PC cleaning\ComboFix.exe
* Created a new restore point
.

(((((((((((((((((((((((((((((((((((((((  Other Deletions  )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\check_LSA7.txt
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\_000111_.tmp.dll
C:\WINDOWS\system32\_000115_.tmp.dll
C:\WINDOWS\system32\flwqlwen.ini
C:\WINDOWS\system32\hadkjxcv.dll
C:\WINDOWS\system32\hyvoegpy.dll
C:\WINDOWS\system32\newlqwlf.dll
C:\WINDOWS\system32\pooqntnr.dll
C:\WINDOWS\system32\rntnqoop.ini
C:\WINDOWS\system32\ypgeovyh.ini

.
(((((((((((((((((((((((((  Files Created from 2007-09-03 to 2007-10-03  )))))))))))))))))))))))))))))))
.

2007-10-03 17:33    51,200    --a------    C:\WINDOWS\NirCmd.exe
2007-10-03 11:41    6,465    ---hs----    C:\WINDOWS\system32\wvvwa.bak1
2007-10-03 08:52    6,465    ---hs----    C:\WINDOWS\system32\qqstv.bak1
2007-10-03 06:58    6,465    ---hs----    C:\WINDOWS\system32\ayadd.bak1
2007-10-02 20:49    <DIR>    d--------    C:\Documents and Settings\Skipper\Application Data\SUPERAntiSpyware.com
2007-10-02 20:49    <DIR>    d--------    C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2007-10-02 19:49    <DIR>    d--------    C:\Programmer\Sikkerhed
2007-10-02 18:29    617,264    ---hs----    C:\WINDOWS\system32\mmllm.bak2
2007-10-01 13:36    6,414    ---hs----    C:\WINDOWS\system32\mmllm.bak1
2007-10-01 09:19    6,454    ---hs----    C:\WINDOWS\system32\vvvwa.bak1
2007-09-29 19:44    6,414    ---hs----    C:\WINDOWS\system32\rstwa.bak1
2007-09-29 19:30    6,465    ---hs----    C:\WINDOWS\system32\pstwa.bak2
2007-09-29 16:51    7,190    ---hs----    C:\WINDOWS\system32\pstwa.ini2
2007-09-29 11:40    <DIR>    d--------    C:\Documents and Settings\Ulla\Application Data\F-Secure
2007-09-29 09:20    6,414    ---hs----    C:\WINDOWS\system32\pstwa.bak1
2007-09-28 18:51    <DIR>    d--------    C:\Programmer\Smart Projects
2007-09-20 19:25    <DIR>    d--------    C:\Documents and Settings\Ulla\Application Data\vlc
2007-09-19 21:38    <DIR>    d--------    C:\Documents and Settings\Skipper\Application Data\vlc
2007-09-19 21:09    <DIR>    d--------    C:\Programmer\VideoLAN
2007-09-09 21:11    <DIR>    d--------    C:\Documents and Settings\Skipper\Application Data\U3

.
((((((((((((((((((((((((((((((((((((((((  Find3M Report  ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-02 21:19    ---------    d--------    C:\Programmer\mIRC
2007-10-02 20:46    ---------    d--------    C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-10-01 17:12    ---------    d--------    C:\Documents and Settings\All Users\Application Data\DVD Shrink
2007-09-30 21:16    ---------    d--------    C:\Documents and Settings\Skipper\Application Data\F-Secure
2007-09-29 17:00    ---------    d--------    C:\Programmer\Nero
2007-09-24 09:34    ---------    d--------    C:\Documents and Settings\Skipper\Application Data\Vso
2007-09-19 21:16    ---------    d--------    C:\Programmer\PartyGaming
2007-09-14 07:54    ---------    d--------    C:\Programmer\SkoleKom
2007-09-02 19:28    87608    --a------    C:\Documents and Settings\Skipper\Application Data\ezpinst.exe
2007-09-02 19:28    47360    --a------    C:\WINDOWS\system32\drivers\pcouffin.sys
2007-09-02 19:28    47360    --a------    C:\Documents and Settings\Skipper\Application Data\pcouffin.sys
2007-09-02 19:28    ---------    d--------    C:\Programmer\vso
2007-08-29 12:50    ---------    d--------    C:\Documents and Settings\Ulla\Application Data\Ahead
2007-08-24 21:07    ---------    d--------    C:\Documents and Settings\Skipper\Application Data\Joost
2007-08-24 20:26    ---------    d--------    C:\Documents and Settings\All Users\Application Data\Microsoft Help
2007-08-20 19:44    ---------    d--------    C:\Programmer\QuickTime
2007-08-20 19:44    ---------    d--------    C:\Programmer\iTunes
2007-08-20 19:44    ---------    d--------    C:\Programmer\iPod
2007-08-20 19:44    ---------    d--------    C:\Documents and Settings\Skipper\Application Data\Apple Computer
2007-08-20 19:44    ---------    d--------    C:\Documents and Settings\All Users\Application Data\Apple Computer
2007-08-20 19:43    ---------    d--------    C:\Programmer\Apple Software Update
2007-08-20 19:42    ---------    d--------    C:\Documents and Settings\All Users\Application Data\Apple
2007-08-15 21:41    ---------    d--------    C:\Documents and Settings\Skipper\Application Data\Azureus
2007-08-15 19:48    ---------    d--------    C:\Documents and Settings\All Users\Application Data\Azureus
    ---------        C:\Programmer\Fælles filer\Wise Installation Wizard
    ---------        C:\Programmer\Fælles filer\Microsoft Shared
    ---------        C:\Programmer\Fælles filer\Apple
    ---------        C:\Programmer\Fælles filer\Ahead
    ---------        C:\Programmer\Fælles filer
.

(((((((((((((((((((((((((((((((((((((  Reg Loading Points  ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-02-26 10:53 C:\WINDOWS\SOUNDMAN.EXE]
"F-Secure Manager"="C:\Programmer\F-Secure\Common\FSM32.exe" [2005-10-26 03:51]
"F-Secure TNB"="C:\Programmer\F-Secure\TNB\TNBUtil.exe" [2004-05-27 10:57]
"{0228e555-4f9c-4e35-a3ec-b109a192b4c2}"="C:\Programmer\Google\Gmail Notifier\gnotify.exe" [2005-07-15 23:48]
"TrueImageMonitor.exe"="C:\Programmer\Acronis\TrueImageHome\TrueImageMonitor.exe" [2006-10-16 21:12]
"AcronisTimounterMonitor"="C:\Programmer\Acronis\TrueImageHome\TimounterMonitor.exe" [2006-10-16 21:17]
"Acronis Scheduler2 Service"="C:\Programmer\Fælles filer\Acronis\Schedule2\schedhlp.exe" []
"SunJavaUpdateSched"="C:\Programmer\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]
"Adobe Reader Speed Launcher"="C:\Programmer\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06]
"QuickTime Task"="C:\Programmer\QuickTime\QTTask.exe" [2007-06-29 06:24]
"iTunesHelper"="C:\Programmer\iTunes\iTunesHelper.exe" [2007-08-15 20:15]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-26 18:53]
"DAEMON Tools"="C:\Programmer\DAEMON Tools\daemon.exe" [2006-11-12 12:48]
"MsnMsgr"="C:\Programmer\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55]
"SUPERAntiSpyware"="C:\Programmer\Sikkerhed\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-04-23 15:46]

C:\Documents and Settings\All Users\Menuen Start\Programmer\Start\
F-Secure Automatic Update.lnk - C:\Programmer\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe [2007-04-03 09:24:41]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Programmer\Sikkerhed\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Programmer\Sikkerhed\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Programmer\Sikkerhed\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 relog_ap

R0 FSFW;F-Secure Firewall Driver;C:\WINDOWS\system32\drivers\fsdfw.sys
R0 snapman;Acronis Snapshots Manager;C:\WINDOWS\system32\DRIVERS\snapman.sys
R0 timounter;Acronis True Image Backup Archive Explorer;C:\WINDOWS\system32\DRIVERS\timntr.sys
R0 viasraid;viasraid;C:\WINDOWS\system32\drivers\viasraid.sys
R2 BackWeb Plug-in - 7681197;F-Secure Automatic Update;C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
R2 F-Secure Filter;F-Secure File System Filter;\??\C:\Programmer\F-Secure\Anti-Virus\Win2K\FSfilter.sys
R2 F-Secure Gatekeeper;F-Secure Gatekeeper;\??\C:\Programmer\F-Secure\Anti-Virus\Win2K\FSgk.sys
R2 F-Secure Recognizer;F-Secure File System Recognizer;\??\C:\Programmer\F-Secure\Anti-Virus\Win2K\FSrec.sys
R2 tifsfilter;Acronis True Image FS Filter;C:\WINDOWS\system32\DRIVERS\tifsfilt.sys
S3 BTNetFilter;Bluetooth Network Filter;\??\C:\WINDOWS\system32\drivers\BTNetFilter.sys
S3 Point32;Microsoft IntelliPoint Filter Driver;C:\WINDOWS\system32\DRIVERS\point32.sys


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f7d88b94-5ec8-11dc-bad5-0011673697dc}]
AutoRun\command- H:\LaunchU3.exe -a


[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8D8BB7AA-34B8-4058-85C7-5F750A62BE2D}]
C:\WINDOWS\system32\msiexec.exe  /fup {8D8BB7AA-34B8-4058-85C7-5F750A62BE2D} /q
.
**************************************************************************

catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-03 18:03:48
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-10-03 18:04:58 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-10-03 18:04
.
    --- E O F ---
___________________

Logfile of HijackThis v1.99.1
Scan saved at 17:15:10, on 03-10-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Fælles filer\Acronis\Schedule2\schedul2.exe
C:\Programmer\Fælles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Programmer\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Programmer\F-Secure\Anti-Virus\fsgk32st.exe
C:\Programmer\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Programmer\F-Secure\Anti-Virus\FSGK32.EXE
C:\Programmer\F-Secure\Common\FSMA32.EXE
C:\Programmer\F-Secure\Anti-Virus\fssm32.exe
C:\Programmer\Fælles filer\LightScribe\LSSrvc.exe
C:\Programmer\F-Secure\Common\FSMB32.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\Programmer\F-Secure\Common\FCH32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Programmer\F-Secure\Common\FAMEH32.EXE
C:\Programmer\F-Secure\Anti-Virus\fsqh.exe
C:\Programmer\F-Secure\Anti-Virus\fsrw.exe
C:\Programmer\F-Secure\Common\FNRB32.EXE
C:\Programmer\F-Secure\FWES\Program\fsdfwd.exe
C:\Programmer\F-Secure\Common\FIH32.EXE
C:\Programmer\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Programmer\F-Secure\Common\FSM32.EXE
C:\Programmer\Google\Gmail Notifier\gnotify.exe
C:\Programmer\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Programmer\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Programmer\Fælles filer\Acronis\Schedule2\schedhlp.exe
C:\Programmer\Java\jre1.6.0_02\bin\jusched.exe
C:\Programmer\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmer\DAEMON Tools\daemon.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\Programmer\Sikkerhed\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Programmer\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Programmer\F-Secure\FSGUI\fsguidll.exe
C:\Programmer\iPod\bin\iPodService.exe
C:\Programmer\MSN Messenger\usnsvc.exe
C:\Documents and Settings\Skipper\Skrivebord\PC cleaning\alternativ.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O2 - BHO: (no name) - {80F52B11-B980-4FCF-9B66-5B733054D190} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmer\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Programmer\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Programmer\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Programmer\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Programmer\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Programmer\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Programmer\Fælles filer\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmer\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmer\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Programmer\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programmer\Sikkerhed\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Programmer\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O8 - Extra context menu item: &Block this popup - C:\Programmer\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmer\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Programmer\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Programmer\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programmer\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programmer\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmer\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\programmer\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: c:\programmer\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: c:\programmer\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: c:\programmer\f-secure\fsps\program\fslsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {11818680-FCF6-11D0-9808-0800092A4865} (Adobe Form Control) - http://www.kps.dk/Codebase/FormCtl.cab
O16 - DPF: {1469FF24-47F6-11D2-8805-006008C537E3} (Adobe Mail Control) - http://www.kps.dk/codebase/ffmail.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by141fd.bay141.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://www.geograf.com/viewer/mgaxctrl.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.click4foto.dk/aurigma/ImageUploader4.cab
O16 - DPF: {CDDCFBB3-4D93-11D2-B1A9-00A0C9B742BE} (Adobe Script Object) - http://www.kps.dk/codebase/scriptobject.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.mittrykkeri.dk/Photo/XUpload.ocx
O16 - DPF: {EF2FB80F-0975-408E-A871-B00CC863478A} (Adobe Soft Font Installer) - http://www.kps.dk/codebase/fontinstaller.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: safeprint - {159A8CC0-E15B-11D3-A0FC-0050047FA13D} - C:\Programmer\SafePublish\sp.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Programmer\Sikkerhed\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programmer\Fælles filer\Acronis\Schedule2\schedul2.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Programmer\Fælles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Programmer\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Programmer\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Programmer\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Programmer\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Programmer\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Programmer\F-Secure\Common\FSMA32.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmer\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programmer\Fælles filer\LightScribe\LSSrvc.exe
________________________________

********************************* ROOTCHK-(21-09-07)-LOG, by ejvindh
03-10-2007 17:16:13,46

The rootkits that are detected by this tool were not found.

********************************* ROOTCHK-LOG-end


catchme 0.3.1160 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-03 17:16:14
Windows 5.1.2600 Service Pack 2
scanning hidden processes ...

scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:62d7cbac
"s2"=dword:3ef75773
"h0"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Programmer\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:47,69,78,3b,a4,c8,cf,6e,52,27,dc,52,ba,28,4a,09,93,b4,1e,92,68,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,eb,2e,f2,a0,40,3b,2d,0b,a7,77,0c,5b,ed,93,96,3f,3d,..
"khjeh"=hex:b7,6d,90,4b,7f,89,74,be,f4,50,61,16,70,ab,0e,00,78,89,bf,a7,8e,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:56,a2,11,3c,10,8c,e1,1f,8e,da,be,e5,12,56,34,85,91,a3,e4,dd,41,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Programmer\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:47,69,78,3b,a4,c8,cf,6e,52,27,dc,52,ba,28,4a,09,93,b4,1e,92,68,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,eb,2e,f2,a0,40,3b,2d,0b,a7,77,0c,5b,ed,93,96,3f,3d,..
"khjeh"=hex:b7,6d,90,4b,7f,89,74,be,f4,50,61,16,70,ab,0e,00,78,89,bf,a7,8e,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:56,a2,11,3c,10,8c,e1,1f,8e,da,be,e5,12,56,34,85,91,a3,e4,dd,41,..

scanning hidden registry entries ...

scanning hidden files ...

hidden processes: 0
hidden services: 0
hidden files: 0
____________________

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 10/03/2007 at 04:10 PM

Application Version : 3.7.1018

Core Rules Database Version : 3318
Trace Rules Database Version: 1319

Scan type      : Complete Scan
Total Scan Time : 00:18:45

Memory items scanned      : 167
Memory threats detected  : 1
Registry items scanned    : 5822
Registry threats detected : 4012
File items scanned        : 28173
File threats detected    : 103

Adware.Vundo Variant/Resident
    C:\WINDOWS\SYSTEM32\IIFCDCC.DLL
    C:\WINDOWS\SYSTEM32\IIFCDCC.DLL

Adware.Vundo Variant
    HKLM\Software\Classes\CLSID\{000FA543-0F63-48C5-9C82-1A1F9EADA5F9}
    HKCR\CLSID\{000FA543-0F63-48C5-9C82-1A1F9EADA5F9}
    HKCR\CLSID\{000FA543-0F63-48C5-9C82-1A1F9EADA5F9}\InprocServer32
    HKCR\CLSID\{000FA543-0F63-48C5-9C82-1A1F9EADA5F9}\InprocServer32#ThreadingModel
    C:\WINDOWS\SYSTEM32\AWVVW.DLL
    HKLM\Software\Classes\CLSID\{0017D6D5-A987-4876-A380-A1FDD10548E5}
    HKCR\CLSID\{0017D6D5-A987-4876-A380-A1FDD10548E5}
    HKCR\CLSID\{0017D6D5-A987-4876-A380-A1FDD10548E5}\InprocServer32
    HKCR\CLSID\{0017D6D5-A987-4876-A380-A1FDD10548E5}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0092C079-6DAA-4075-BF05-B769C2055356}
    HKCR\CLSID\{0092C079-6DAA-4075-BF05-B769C2055356}
    HKCR\CLSID\{0092C079-6DAA-4075-BF05-B769C2055356}\InprocServer32
    HKCR\CLSID\{0092C079-6DAA-4075-BF05-B769C2055356}\InprocServer32#ThreadingModel
    C:\WINDOWS\SYSTEM32\VTSQQ.DLL
    HKLM\Software\Classes\CLSID\{00CC4DB3-03C0-4C7E-8FF1-5FC6DBEBD699}
    HKCR\CLSID\{00CC4DB3-03C0-4C7E-8FF1-5FC6DBEBD699}
    HKCR\CLSID\{00CC4DB3-03C0-4C7E-8FF1-5FC6DBEBD699}\InprocServer32
    HKCR\CLSID\{00CC4DB3-03C0-4C7E-8FF1-5FC6DBEBD699}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0148270E-2670-4B0A-BE61-B4A3626CDB2D}
    HKCR\CLSID\{0148270E-2670-4B0A-BE61-B4A3626CDB2D}
    HKCR\CLSID\{0148270E-2670-4B0A-BE61-B4A3626CDB2D}\InprocServer32
    HKCR\CLSID\{0148270E-2670-4B0A-BE61-B4A3626CDB2D}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{015319A5-5E5F-4051-AE9D-F8BE20C4BD83}
    HKCR\CLSID\{015319A5-5E5F-4051-AE9D-F8BE20C4BD83}
    HKCR\CLSID\{015319A5-5E5F-4051-AE9D-F8BE20C4BD83}\InprocServer32
    HKCR\CLSID\{015319A5-5E5F-4051-AE9D-F8BE20C4BD83}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{01779450-8C73-45C3-A75E-33A21DCADA65}
    HKCR\CLSID\{01779450-8C73-45C3-A75E-33A21DCADA65}
    HKCR\CLSID\{01779450-8C73-45C3-A75E-33A21DCADA65}\InprocServer32
    HKCR\CLSID\{01779450-8C73-45C3-A75E-33A21DCADA65}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{01D59390-6284-4FE2-AE2E-0D368F0DD4AD}
    HKCR\CLSID\{01D59390-6284-4FE2-AE2E-0D368F0DD4AD}
    HKCR\CLSID\{01D59390-6284-4FE2-AE2E-0D368F0DD4AD}\InprocServer32
    HKCR\CLSID\{01D59390-6284-4FE2-AE2E-0D368F0DD4AD}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{01E02F0E-2F70-4B51-B95C-BF987602D37C}
    HKCR\CLSID\{01E02F0E-2F70-4B51-B95C-BF987602D37C}
    HKCR\CLSID\{01E02F0E-2F70-4B51-B95C-BF987602D37C}\InprocServer32
    HKCR\CLSID\{01E02F0E-2F70-4B51-B95C-BF987602D37C}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0213EE2A-272B-40FC-818B-15F65630A0A1}
    HKCR\CLSID\{0213EE2A-272B-40FC-818B-15F65630A0A1}
    HKCR\CLSID\{0213EE2A-272B-40FC-818B-15F65630A0A1}\InprocServer32
    HKCR\CLSID\{0213EE2A-272B-40FC-818B-15F65630A0A1}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{022FF0C3-FD8D-44DA-BC8C-469FCD291C72}
    HKCR\CLSID\{022FF0C3-FD8D-44DA-BC8C-469FCD291C72}
    HKCR\CLSID\{022FF0C3-FD8D-44DA-BC8C-469FCD291C72}\InprocServer32
    HKCR\CLSID\{022FF0C3-FD8D-44DA-BC8C-469FCD291C72}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0239DC19-9669-414E-9730-021BA662A8BB}
    HKCR\CLSID\{0239DC19-9669-414E-9730-021BA662A8BB}
    HKCR\CLSID\{0239DC19-9669-414E-9730-021BA662A8BB}\InprocServer32
    HKCR\CLSID\{0239DC19-9669-414E-9730-021BA662A8BB}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{029CD85F-9078-4B3C-9B44-488B30BADE2F}
    HKCR\CLSID\{029CD85F-9078-4B3C-9B44-488B30BADE2F}
    HKCR\CLSID\{029CD85F-9078-4B3C-9B44-488B30BADE2F}\InprocServer32
    HKCR\CLSID\{029CD85F-9078-4B3C-9B44-488B30BADE2F}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{02A2C616-2138-4A85-9B24-800E6B45F00D}
    HKCR\CLSID\{02A2C616-2138-4A85-9B24-800E6B45F00D}
    HKCR\CLSID\{02A2C616-2138-4A85-9B24-800E6B45F00D}\InprocServer32
    HKCR\CLSID\{02A2C616-2138-4A85-9B24-800E6B45F00D}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{02A4992A-951E-4A7F-AC2C-7078EB4F3089}
    HKCR\CLSID\{02A4992A-951E-4A7F-AC2C-7078EB4F3089}
    HKCR\CLSID\{02A4992A-951E-4A7F-AC2C-7078EB4F3089}\InprocServer32
    HKCR\CLSID\{02A4992A-951E-4A7F-AC2C-7078EB4F3089}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{02BE9C08-6DE2-40C1-BC79-1CC7C4FE68BF}
    HKCR\CLSID\{02BE9C08-6DE2-40C1-BC79-1CC7C4FE68BF}
    HKCR\CLSID\{02BE9C08-6DE2-40C1-BC79-1CC7C4FE68BF}\InprocServer32
    HKCR\CLSID\{02BE9C08-6DE2-40C1-BC79-1CC7C4FE68BF}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{036CBD56-5D0F-4420-8310-2AC76E7D61AD}
    HKCR\CLSID\{036CBD56-5D0F-4420-8310-2AC76E7D61AD}
    HKCR\CLSID\{036CBD56-5D0F-4420-8310-2AC76E7D61AD}\InprocServer32
    HKCR\CLSID\{036CBD56-5D0F-4420-8310-2AC76E7D61AD}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{036F7E83-4625-4823-8D18-D7D849424FDF}
    HKCR\CLSID\{036F7E83-4625-4823-8D18-D7D849424FDF}
    HKCR\CLSID\{036F7E83-4625-4823-8D18-D7D849424FDF}\InprocServer32
    HKCR\CLSID\{036F7E83-4625-4823-8D18-D7D849424FDF}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{041C6EFB-7273-4679-9EE1-17D0E0A3067E}
    HKCR\CLSID\{041C6EFB-7273-4679-9EE1-17D0E0A3067E}
    HKCR\CLSID\{041C6EFB-7273-4679-9EE1-17D0E0A3067E}\InprocServer32
    HKCR\CLSID\{041C6EFB-7273-4679-9EE1-17D0E0A3067E}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{041EC88F-1611-4385-9972-5685DCC4C241}
    HKCR\CLSID\{041EC88F-1611-4385-9972-5685DCC4C241}
    HKCR\CLSID\{041EC88F-1611-4385-9972-5685DCC4C241}\InprocServer32
    HKCR\CLSID\{041EC88F-1611-4385-9972-5685DCC4C241}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{042F5296-7838-40DA-A4CC-65379B80984C}
    HKCR\CLSID\{042F5296-7838-40DA-A4CC-65379B80984C}
    HKCR\CLSID\{042F5296-7838-40DA-A4CC-65379B80984C}\InprocServer32
    HKCR\CLSID\{042F5296-7838-40DA-A4CC-65379B80984C}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{047D2733-FB7B-4F6B-BA1C-64A05FC42BD9}
    HKCR\CLSID\{047D2733-FB7B-4F6B-BA1C-64A05FC42BD9}
    HKCR\CLSID\{047D2733-FB7B-4F6B-BA1C-64A05FC42BD9}\InprocServer32
    HKCR\CLSID\{047D2733-FB7B-4F6B-BA1C-64A05FC42BD9}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{04A5F3EE-FADE-4EAE-8747-91FA259BAF44}
    HKCR\CLSID\{04A5F3EE-FADE-4EAE-8747-91FA259BAF44}
    HKCR\CLSID\{04A5F3EE-FADE-4EAE-8747-91FA259BAF44}\InprocServer32
    HKCR\CLSID\{04A5F3EE-FADE-4EAE-8747-91FA259BAF44}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{04C9F547-5707-42C7-B3B6-006B46C2C363}
    HKCR\CLSID\{04C9F547-5707-42C7-B3B6-006B46C2C363}
    HKCR\CLSID\{04C9F547-5707-42C7-B3B6-006B46C2C363}\InprocServer32
    HKCR\CLSID\{04C9F547-5707-42C7-B3B6-006B46C2C363}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{04ED6E22-AE69-4B1C-850A-7543B2FCAFAA}
    HKCR\CLSID\{04ED6E22-AE69-4B1C-850A-7543B2FCAFAA}
    HKCR\CLSID\{04ED6E22-AE69-4B1C-850A-7543B2FCAFAA}\InprocServer32
    HKCR\CLSID\{04ED6E22-AE69-4B1C-850A-7543B2FCAFAA}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{05283EB2-022E-432F-9D1C-A2684589D326}
    HKCR\CLSID\{05283EB2-022E-432F-9D1C-A2684589D326}
    HKCR\CLSID\{05283EB2-022E-432F-9D1C-A2684589D326}\InprocServer32
    HKCR\CLSID\{05283EB2-022E-432F-9D1C-A2684589D326}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{053C6CE6-5D0D-47A9-B2EB-E02B979725F4}
    HKCR\CLSID\{053C6CE6-5D0D-47A9-B2EB-E02B979725F4}
    HKCR\CLSID\{053C6CE6-5D0D-47A9-B2EB-E02B979725F4}\InprocServer32
    HKCR\CLSID\{053C6CE6-5D0D-47A9-B2EB-E02B979725F4}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{055EC15B-D698-4F3E-BB14-90BD06BAC0A4}
    HKCR\CLSID\{055EC15B-D698-4F3E-BB14-90BD06BAC0A4}
    HKCR\CLSID\{055EC15B-D698-4F3E-BB14-90BD06BAC0A4}\InprocServer32
    HKCR\CLSID\{055EC15B-D698-4F3E-BB14-90BD06BAC0A4}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{056DAD08-4704-4AEA-A86F-DBA32BE7013F}
    HKCR\CLSID\{056DAD08-4704-4AEA-A86F-DBA32BE7013F}
    HKCR\CLSID\{056DAD08-4704-4AEA-A86F-DBA32BE7013F}\InprocServer32
    HKCR\CLSID\{056DAD08-4704-4AEA-A86F-DBA32BE7013F}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0576F531-DC98-47E7-9EF4-325F3D57CF07}
    HKCR\CLSID\{0576F531-DC98-47E7-9EF4-325F3D57CF07}
    HKCR\CLSID\{0576F531-DC98-47E7-9EF4-325F3D57CF07}\InprocServer32
    HKCR\CLSID\{0576F531-DC98-47E7-9EF4-325F3D57CF07}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{05AF79B1-A276-4482-AB57-5F1476A7E5EA}
    HKCR\CLSID\{05AF79B1-A276-4482-AB57-5F1476A7E5EA}
    HKCR\CLSID\{05AF79B1-A276-4482-AB57-5F1476A7E5EA}\InprocServer32
    HKCR\CLSID\{05AF79B1-A276-4482-AB57-5F1476A7E5EA}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{05E84683-FDB8-4B69-81B2-FDA5DAF7B84C}
    HKCR\CLSID\{05E84683-FDB8-4B69-81B2-FDA5DAF7B84C}
    HKCR\CLSID\{05E84683-FDB8-4B69-81B2-FDA5DAF7B84C}\InprocServer32
    HKCR\CLSID\{05E84683-FDB8-4B69-81B2-FDA5DAF7B84C}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{068F4125-0D22-41A2-A003-CA702C5C8C8A}
    HKCR\CLSID\{068F4125-0D22-41A2-A003-CA702C5C8C8A}
    HKCR\CLSID\{068F4125-0D22-41A2-A003-CA702C5C8C8A}\InprocServer32
    HKCR\CLSID\{068F4125-0D22-41A2-A003-CA702C5C8C8A}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{06C7DE75-4DEE-4DDE-BE36-B9D1ADD6FC41}
    HKCR\CLSID\{06C7DE75-4DEE-4DDE-BE36-B9D1ADD6FC41}
    HKCR\CLSID\{06C7DE75-4DEE-4DDE-BE36-B9D1ADD6FC41}\InprocServer32
    HKCR\CLSID\{06C7DE75-4DEE-4DDE-BE36-B9D1ADD6FC41}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{06DC14DE-63E8-4957-9774-1307D49182B0}
    HKCR\CLSID\{06DC14DE-63E8-4957-9774-1307D49182B0}
    HKCR\CLSID\{06DC14DE-63E8-4957-9774-1307D49182B0}\InprocServer32
    HKCR\CLSID\{06DC14DE-63E8-4957-9774-1307D49182B0}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0750AE85-56EA-4971-9F8F-61A0D00DAF9A}
    HKCR\CLSID\{0750AE85-56EA-4971-9F8F-61A0D00DAF9A}
    HKCR\CLSID\{0750AE85-56EA-4971-9F8F-61A0D00DAF9A}\InprocServer32
    HKCR\CLSID\{0750AE85-56EA-4971-9F8F-61A0D00DAF9A}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{07703262-0900-4FA7-A8E9-9CBCABF273F3}
    HKCR\CLSID\{07703262-0900-4FA7-A8E9-9CBCABF273F3}
    HKCR\CLSID\{07703262-0900-4FA7-A8E9-9CBCABF273F3}\InprocServer32
    HKCR\CLSID\{07703262-0900-4FA7-A8E9-9CBCABF273F3}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{078732BF-B57E-4DB9-8E53-5E8A04B93F63}
    HKCR\CLSID\{078732BF-B57E-4DB9-8E53-5E8A04B93F63}
    HKCR\CLSID\{078732BF-B57E-4DB9-8E53-5E8A04B93F63}\InprocServer32
    HKCR\CLSID\{078732BF-B57E-4DB9-8E53-5E8A04B93F63}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{07B0EDD5-220D-4431-9014-C867844DE0FD}
    HKCR\CLSID\{07B0EDD5-220D-4431-9014-C867844DE0FD}
    HKCR\CLSID\{07B0EDD5-220D-4431-9014-C867844DE0FD}\InprocServer32
    HKCR\CLSID\{07B0EDD5-220D-4431-9014-C867844DE0FD}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{07D715C2-FD27-404A-83DC-C3A234F8FF04}
    HKCR\CLSID\{07D715C2-FD27-404A-83DC-C3A234F8FF04}
    HKCR\CLSID\{07D715C2-FD27-404A-83DC-C3A234F8FF04}\InprocServer32
    HKCR\CLSID\{07D715C2-FD27-404A-83DC-C3A234F8FF04}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{07EFBF4B-6A07-41AC-A1B1-F2F0AB32FA01}
    HKCR\CLSID\{07EFBF4B-6A07-41AC-A1B1-F2F0AB32FA01}
    HKCR\CLSID\{07EFBF4B-6A07-41AC-A1B1-F2F0AB32FA01}\InprocServer32
    HKCR\CLSID\{07EFBF4B-6A07-41AC-A1B1-F2F0AB32FA01}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{08559A9A-FBB7-4206-9C4C-FDB11B29E170}
    HKCR\CLSID\{08559A9A-FBB7-4206-9C4C-FDB11B29E170}
    HKCR\CLSID\{08559A9A-FBB7-4206-9C4C-FDB11B29E170}\InprocServer32
    HKCR\CLSID\{08559A9A-FBB7-4206-9C4C-FDB11B29E170}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{085BE5D7-EC4F-4AD9-86E7-F53F49688450}
    HKCR\CLSID\{085BE5D7-EC4F-4AD9-86E7-F53F49688450}
    HKCR\CLSID\{085BE5D7-EC4F-4AD9-86E7-F53F49688450}\InprocServer32
    HKCR\CLSID\{085BE5D7-EC4F-4AD9-86E7-F53F49688450}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{08DBABD8-E529-4C11-A7E0-4333AF57481F}
    HKCR\CLSID\{08DBABD8-E529-4C11-A7E0-4333AF57481F}
    HKCR\CLSID\{08DBABD8-E529-4C11-A7E0-4333AF57481F}\InprocServer32
    HKCR\CLSID\{08DBABD8-E529-4C11-A7E0-4333AF57481F}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{095A9ABF-C01F-42BB-99E0-5999AC3A2271}
    HKCR\CLSID\{095A9ABF-C01F-42BB-99E0-5999AC3A2271}
    HKCR\CLSID\{095A9ABF-C01F-42BB-99E0-5999AC3A2271}\InprocServer32
    HKCR\CLSID\{095A9ABF-C01F-42BB-99E0-5999AC3A2271}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{09D7BD82-F317-4CDB-B9B3-7041F8AD38AA}
    HKCR\CLSID\{09D7BD82-F317-4CDB-B9B3-7041F8AD38AA}
    HKCR\CLSID\{09D7BD82-F317-4CDB-B9B3-7041F8AD38AA}\InprocServer32
    HKCR\CLSID\{09D7BD82-F317-4CDB-B9B3-7041F8AD38AA}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{09DA0E17-501C-45FF-95C9-3B56F4FEA582}
    HKCR\CLSID\{09DA0E17-501C-45FF-95C9-3B56F4FEA582}
    HKCR\CLSID\{09DA0E17-501C-45FF-95C9-3B56F4FEA582}\InprocServer32
    HKCR\CLSID\{09DA0E17-501C-45FF-95C9-3B56F4FEA582}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0A25ACE0-DA07-47BB-BB71-4B78FF3E46CD}
    HKCR\CLSID\{0A25ACE0-DA07-47BB-BB71-4B78FF3E46CD}
    HKCR\CLSID\{0A25ACE0-DA07-47BB-BB71-4B78FF3E46CD}\InprocServer32
    HKCR\CLSID\{0A25ACE0-DA07-47BB-BB71-4B78FF3E46CD}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0A7ABBDA-0752-4550-9E90-71896632EA1E}
    HKCR\CLSID\{0A7ABBDA-0752-4550-9E90-71896632EA1E}
    HKCR\CLSID\{0A7ABBDA-0752-4550-9E90-71896632EA1E}\InprocServer32
    HKCR\CLSID\{0A7ABBDA-0752-4550-9E90-71896632EA1E}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0AC4141F-3988-4A8B-AEE4-CCE5E79752D4}
    HKCR\CLSID\{0AC4141F-3988-4A8B-AEE4-CCE5E79752D4}
    HKCR\CLSID\{0AC4141F-3988-4A8B-AEE4-CCE5E79752D4}\InprocServer32
    HKCR\CLSID\{0AC4141F-3988-4A8B-AEE4-CCE5E79752D4}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0AF25303-B1A2-4F58-A0DA-3724A193C6B2}
    HKCR\CLSID\{0AF25303-B1A2-4F58-A0DA-3724A193C6B2}
    HKCR\CLSID\{0AF25303-B1A2-4F58-A0DA-3724A193C6B2}\InprocServer32
    HKCR\CLSID\{0AF25303-B1A2-4F58-A0DA-3724A193C6B2}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0B0BF78C-4C97-40B2-B107-38676C40F846}
    HKCR\CLSID\{0B0BF78C-4C97-40B2-B107-38676C40F846}
    HKCR\CLSID\{0B0BF78C-4C97-40B2-B107-38676C40F846}\InprocServer32
    HKCR\CLSID\{0B0BF78C-4C97-40B2-B107-38676C40F846}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0B3BE6AB-A5D9-4A24-9FAD-BB28605A8EEB}
    HKCR\CLSID\{0B3BE6AB-A5D9-4A24-9FAD-BB28605A8EEB}
    HKCR\CLSID\{0B3BE6AB-A5D9-4A24-9FAD-BB28605A8EEB}\InprocServer32
    HKCR\CLSID\{0B3BE6AB-A5D9-4A24-9FAD-BB28605A8EEB}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0BC70FDF-DDC3-4C68-93CE-33392733D803}
    HKCR\CLSID\{0BC70FDF-DDC3-4C68-93CE-33392733D803}
    HKCR\CLSID\{0BC70FDF-DDC3-4C68-93CE-33392733D803}\InprocServer32
    HKCR\CLSID\{0BC70FDF-DDC3-4C68-93CE-33392733D803}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0C556CF9-2AE1-4893-891F-E457768072D1}
    HKCR\CLSID\{0C556CF9-2AE1-4893-891F-E457768072D1}
    HKCR\CLSID\{0C556CF9-2AE1-4893-891F-E457768072D1}\InprocServer32
    HKCR\CLSID\{0C556CF9-2AE1-4893-891F-E457768072D1}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0CA5AFD3-9AD1-4023-82F7-4B790146CDD1}
    HKCR\CLSID\{0CA5AFD3-9AD1-4023-82F7-4B790146CDD1}
    HKCR\CLSID\{0CA5AFD3-9AD1-4023-82F7-4B790146CDD1}\InprocServer32
    HKCR\CLSID\{0CA5AFD3-9AD1-4023-82F7-4B790146CDD1}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0D0DA286-7BC5-42FB-8998-9F54B21A7F25}
    HKCR\CLSID\{0D0DA286-7BC5-42FB-8998-9F54B21A7F25}
    HKCR\CLSID\{0D0DA286-7BC5-42FB-8998-9F54B21A7F25}\InprocServer32
    HKCR\CLSID\{0D0DA286-7BC5-42FB-8998-9F54B21A7F25}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0D231522-0E52-4D61-B33E-A26B7913A0AF}
    HKCR\CLSID\{0D231522-0E52-4D61-B33E-A26B7913A0AF}
    HKCR\CLSID\{0D231522-0E52-4D61-B33E-A26B7913A0AF}\InprocServer32
    HKCR\CLSID\{0D231522-0E52-4D61-B33E-A26B7913A0AF}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0D83EC01-9970-4BBC-B3FE-161073D77F4D}
    HKCR\CLSID\{0D83EC01-9970-4BBC-B3FE-161073D77F4D}
    HKCR\CLSID\{0D83EC01-9970-4BBC-B3FE-161073D77F4D}\InprocServer32
    HKCR\CLSID\{0D83EC01-9970-4BBC-B3FE-161073D77F4D}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0DD310B4-51FC-4269-87F0-8A5912840898}
    HKCR\CLSID\{0DD310B4-51FC-4269-87F0-8A5912840898}
    HKCR\CLSID\{0DD310B4-51FC-4269-87F0-8A5912840898}\InprocServer32
    HKCR\CLSID\{0DD310B4-51FC-4269-87F0-8A5912840898}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0DD78359-C7A3-46C3-8C56-2CB196503163}
    HKCR\CLSID\{0DD78359-C7A3-46C3-8C56-2CB196503163}
    HKCR\CLSID\{0DD78359-C7A3-46C3-8C56-2CB196503163}\InprocServer32
    HKCR\CLSID\{0DD78359-C7A3-46C3-8C56-2CB196503163}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0E35A96D-332A-4336-9DAA-EB61CA2202B5}
    HKCR\CLSID\{0E35A96D-332A-4336-9DAA-EB61CA2202B5}
    HKCR\CLSID\{0E35A96D-332A-4336-9DAA-EB61CA2202B5}\InprocServer32
    HKCR\CLSID\{0E35A96D-332A-4336-9DAA-EB61CA2202B5}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0E8DDB7A-468E-47C5-BEA0-762C9F708AEE}
    HKCR\CLSID\{0E8DDB7A-468E-47C5-BEA0-762C9F708AEE}
    HKCR\CLSID\{0E8DDB7A-468E-47C5-BEA0-762C9F708AEE}\InprocServer32
    HKCR\CLSID\{0E8DDB7A-468E-47C5-BEA0-762C9F708AEE}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0EC2D3C5-4F41-4C99-8E1F-42ABBFDA6182}
    HKCR\CLSID\{0EC2D3C5-4F41-4C99-8E1F-42ABBFDA6182}
    HKCR\CLSID\{0EC2D3C5-4F41-4C99-8E1F-42ABBFDA6182}\InprocServer32
    HKCR\CLSID\{0EC2D3C5-4F41-4C99-8E1F-42ABBFDA6182}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0ECC2CE8-55EB-46F0-ACF8-FC7B354A55C3}
    HKCR\CLSID\{0ECC2CE8-55EB-46F0-ACF8-FC7B354A55C3}
    HKCR\CLSID\{0ECC2CE8-55EB-46F0-ACF8-FC7B354A55C3}\InprocServer32
    HKCR\CLSID\{0ECC2CE8-55EB-46F0-ACF8-FC7B354A55C3}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0F1C9C77-8D75-464F-8C8E-CCDCD0815A94}
    HKCR\CLSID\{0F1C9C77-8D75-464F-8C8E-CCDCD0815A94}
    HKCR\CLSID\{0F1C9C77-8D75-464F-8C8E-CCDCD0815A94}\InprocServer32
    HKCR\CLSID\{0F1C9C77-8D75-464F-8C8E-CCDCD0815A94}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0F58D352-17C0-4626-9E85-CB626C5F8934}
    HKCR\CLSID\{0F58D352-17C0-4626-9E85-CB626C5F8934}
    HKCR\CLSID\{0F58D352-17C0-4626-9E85-CB626C5F8934}\InprocServer32
    HKCR\CLSID\{0F58D352-17C0-4626-9E85-CB626C5F8934}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0F857A27-E9BE-4A38-8CA0-F9A6405B3F33}
    HKCR\CLSID\{0F857A27-E9BE-4A38-8CA0-F9A6405B3F33}
    HKCR\CLSID\{0F857A27-E9BE-4A38-8CA0-F9A6405B3F33}\InprocServer32
    HKCR\CLSID\{0F857A27-E9BE-4A38-8CA0-F9A6405B3F33}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{0FA4DFE3-E792-4A02-BF42-C6CB271C064F}
    HKCR\CLSID\{0FA4DFE3-E792-4A02-BF42-C6CB271C064F}
    HKCR\CLSID\{0FA4DFE3-E792-4A02-BF42-C6CB271C064F}\InprocServer32
    HKCR\CLSID\{0FA4DFE3-E792-4A02-BF42-C6CB271C064F}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{106F948B-9F12-4934-9028-97055F0A5027}
    HKCR\CLSID\{106F948B-9F12-4934-9028-97055F0A5027}
    HKCR\CLSID\{106F948B-9F12-4934-9028-97055F0A5027}\InprocServer32
    HKCR\CLSID\{106F948B-9F12-4934-9028-97055F0A5027}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1073AD5B-20D8-483C-9E94-509B0302D78A}
    HKCR\CLSID\{1073AD5B-20D8-483C-9E94-509B0302D78A}
    HKCR\CLSID\{1073AD5B-20D8-483C-9E94-509B0302D78A}\InprocServer32
    HKCR\CLSID\{1073AD5B-20D8-483C-9E94-509B0302D78A}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{107980F0-DBCC-4DB6-B3CF-5C6FFB4FA59B}
    HKCR\CLSID\{107980F0-DBCC-4DB6-B3CF-5C6FFB4FA59B}
    HKCR\CLSID\{107980F0-DBCC-4DB6-B3CF-5C6FFB4FA59B}\InprocServer32
    HKCR\CLSID\{107980F0-DBCC-4DB6-B3CF-5C6FFB4FA59B}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{10D7BD5B-1AFE-471A-868E-51C1553981D2}
    HKCR\CLSID\{10D7BD5B-1AFE-471A-868E-51C1553981D2}
    HKCR\CLSID\{10D7BD5B-1AFE-471A-868E-51C1553981D2}\InprocServer32
    HKCR\CLSID\{10D7BD5B-1AFE-471A-868E-51C1553981D2}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1124467A-54D6-4A35-9370-08EC426A7C8E}
    HKCR\CLSID\{1124467A-54D6-4A35-9370-08EC426A7C8E}
    HKCR\CLSID\{1124467A-54D6-4A35-9370-08EC426A7C8E}\InprocServer32
    HKCR\CLSID\{1124467A-54D6-4A35-9370-08EC426A7C8E}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1131FCE4-CD3B-4969-BEE5-0A8E609E03E8}
    HKCR\CLSID\{1131FCE4-CD3B-4969-BEE5-0A8E609E03E8}
    HKCR\CLSID\{1131FCE4-CD3B-4969-BEE5-0A8E609E03E8}\InprocServer32
    HKCR\CLSID\{1131FCE4-CD3B-4969-BEE5-0A8E609E03E8}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{11551649-562F-4221-A01E-92C046A49868}
    HKCR\CLSID\{11551649-562F-4221-A01E-92C046A49868}
    HKCR\CLSID\{11551649-562F-4221-A01E-92C046A49868}\InprocServer32
    HKCR\CLSID\{11551649-562F-4221-A01E-92C046A49868}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1168A12F-DDD3-4230-A1EF-482101F3C1EF}
    HKCR\CLSID\{1168A12F-DDD3-4230-A1EF-482101F3C1EF}
    HKCR\CLSID\{1168A12F-DDD3-4230-A1EF-482101F3C1EF}\InprocServer32
    HKCR\CLSID\{1168A12F-DDD3-4230-A1EF-482101F3C1EF}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{119C2EDE-95B0-402C-8397-3B4DA4F7A88A}
    HKCR\CLSID\{119C2EDE-95B0-402C-8397-3B4DA4F7A88A}
    HKCR\CLSID\{119C2EDE-95B0-402C-8397-3B4DA4F7A88A}\InprocServer32
    HKCR\CLSID\{119C2EDE-95B0-402C-8397-3B4DA4F7A88A}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{11B15DBA-FA95-4894-8533-BFA8531C460C}
    HKCR\CLSID\{11B15DBA-FA95-4894-8533-BFA8531C460C}
    HKCR\CLSID\{11B15DBA-FA95-4894-8533-BFA8531C460C}\InprocServer32
    HKLM\Software\Classes\CLSID\{11E379D4-ACFB-494B-97DC-D6C66F225DBE}
    HKCR\CLSID\{11E379D4-ACFB-494B-97DC-D6C66F225DBE}
    HKCR\CLSID\{11E379D4-ACFB-494B-97DC-D6C66F225DBE}\InprocServer32
    HKCR\CLSID\{11E379D4-ACFB-494B-97DC-D6C66F225DBE}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{11F41E71-AC25-42F5-A441-0444B7E03C91}
    HKCR\CLSID\{11F41E71-AC25-42F5-A441-0444B7E03C91}
    HKCR\CLSID\{11F41E71-AC25-42F5-A441-0444B7E03C91}\InprocServer32
    HKCR\CLSID\{11F41E71-AC25-42F5-A441-0444B7E03C91}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{12319416-1A70-4A70-A443-43D4DD4BE365}
    HKCR\CLSID\{12319416-1A70-4A70-A443-43D4DD4BE365}
    HKCR\CLSID\{12319416-1A70-4A70-A443-43D4DD4BE365}\InprocServer32
    HKCR\CLSID\{12319416-1A70-4A70-A443-43D4DD4BE365}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{126AB591-C8C8-4B08-A4E7-E1D6C1507BD1}
    HKCR\CLSID\{126AB591-C8C8-4B08-A4E7-E1D6C1507BD1}
    HKCR\CLSID\{126AB591-C8C8-4B08-A4E7-E1D6C1507BD1}\InprocServer32
    HKCR\CLSID\{126AB591-C8C8-4B08-A4E7-E1D6C1507BD1}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{12EB1C1D-FA36-4ECC-B94E-2A35C06A2527}
    HKCR\CLSID\{12EB1C1D-FA36-4ECC-B94E-2A35C06A2527}
    HKCR\CLSID\{12EB1C1D-FA36-4ECC-B94E-2A35C06A2527}\InprocServer32
    HKCR\CLSID\{12EB1C1D-FA36-4ECC-B94E-2A35C06A2527}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{131196F8-EFFC-4043-A638-9B416DFB4413}
    HKCR\CLSID\{131196F8-EFFC-4043-A638-9B416DFB4413}
    HKCR\CLSID\{131196F8-EFFC-4043-A638-9B416DFB4413}\InprocServer32
    HKCR\CLSID\{131196F8-EFFC-4043-A638-9B416DFB4413}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{134B7448-B529-42B7-9640-E9DC5A10A90D}
    HKCR\CLSID\{134B7448-B529-42B7-9640-E9DC5A10A90D}
    HKCR\CLSID\{134B7448-B529-42B7-9640-E9DC5A10A90D}\InprocServer32
    HKCR\CLSID\{134B7448-B529-42B7-9640-E9DC5A10A90D}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1370C6C7-DED9-487B-936C-0F7CD5083019}
    HKCR\CLSID\{1370C6C7-DED9-487B-936C-0F7CD5083019}
    HKCR\CLSID\{1370C6C7-DED9-487B-936C-0F7CD5083019}\InprocServer32
    HKCR\CLSID\{1370C6C7-DED9-487B-936C-0F7CD5083019}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{13BC21F6-AC78-452E-8736-A41AD0D3CA14}
    HKCR\CLSID\{13BC21F6-AC78-452E-8736-A41AD0D3CA14}
    HKCR\CLSID\{13BC21F6-AC78-452E-8736-A41AD0D3CA14}\InprocServer32
    HKCR\CLSID\{13BC21F6-AC78-452E-8736-A41AD0D3CA14}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{13E05114-A2B9-4A42-A531-16824C7DE405}
    HKCR\CLSID\{13E05114-A2B9-4A42-A531-16824C7DE405}
    HKCR\CLSID\{13E05114-A2B9-4A42-A531-16824C7DE405}\InprocServer32
    HKCR\CLSID\{13E05114-A2B9-4A42-A531-16824C7DE405}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{13ED3947-048A-4078-8885-F1253634DA17}
    HKCR\CLSID\{13ED3947-048A-4078-8885-F1253634DA17}
    HKCR\CLSID\{13ED3947-048A-4078-8885-F1253634DA17}\InprocServer32
    HKCR\CLSID\{13ED3947-048A-4078-8885-F1253634DA17}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{145A2F45-B305-4BBC-8C7B-9EF7F6C720CF}
    HKCR\CLSID\{145A2F45-B305-4BBC-8C7B-9EF7F6C720CF}
    HKCR\CLSID\{145A2F45-B305-4BBC-8C7B-9EF7F6C720CF}\InprocServer32
    HKCR\CLSID\{145A2F45-B305-4BBC-8C7B-9EF7F6C720CF}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{145A5AC5-BBC0-47CC-8492-2A953425D8B0}
    HKCR\CLSID\{145A5AC5-BBC0-47CC-8492-2A953425D8B0}
    HKCR\CLSID\{145A5AC5-BBC0-47CC-8492-2A953425D8B0}\InprocServer32
    HKCR\CLSID\{145A5AC5-BBC0-47CC-8492-2A953425D8B0}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1480AE1C-D4D9-4768-A390-398306FB5941}
    HKCR\CLSID\{1480AE1C-D4D9-4768-A390-398306FB5941}
    HKCR\CLSID\{1480AE1C-D4D9-4768-A390-398306FB5941}\InprocServer32
    HKCR\CLSID\{1480AE1C-D4D9-4768-A390-398306FB5941}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{14827022-0A80-4774-91C2-C64C82FA7671}
    HKCR\CLSID\{14827022-0A80-4774-91C2-C64C82FA7671}
    HKCR\CLSID\{14827022-0A80-4774-91C2-C64C82FA7671}\InprocServer32
    HKCR\CLSID\{14827022-0A80-4774-91C2-C64C82FA7671}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{14D9639F-0858-46C7-8473-159060153A81}
    HKCR\CLSID\{14D9639F-0858-46C7-8473-159060153A81}
    HKCR\CLSID\{14D9639F-0858-46C7-8473-159060153A81}\InprocServer32
    HKCR\CLSID\{14D9639F-0858-46C7-8473-159060153A81}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{14F36875-43F7-40ED-8493-41F546FF5BB3}
    HKCR\CLSID\{14F36875-43F7-40ED-8493-41F546FF5BB3}
    HKCR\CLSID\{14F36875-43F7-40ED-8493-41F546FF5BB3}\InprocServer32
    HKCR\CLSID\{14F36875-43F7-40ED-8493-41F546FF5BB3}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{15215692-0AF5-4995-8855-CCCE39909084}
    HKCR\CLSID\{15215692-0AF5-4995-8855-CCCE39909084}
    HKCR\CLSID\{15215692-0AF5-4995-8855-CCCE39909084}\InprocServer32
    HKCR\CLSID\{15215692-0AF5-4995-8855-CCCE39909084}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{15ADD203-1268-402F-8A5F-1D55BADE6734}
    HKCR\CLSID\{15ADD203-1268-402F-8A5F-1D55BADE6734}
    HKCR\CLSID\{15ADD203-1268-402F-8A5F-1D55BADE6734}\InprocServer32
    HKCR\CLSID\{15ADD203-1268-402F-8A5F-1D55BADE6734}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1675ADB9-1686-4F15-9A99-B4338B1C311D}
    HKCR\CLSID\{1675ADB9-1686-4F15-9A99-B4338B1C311D}
    HKCR\CLSID\{1675ADB9-1686-4F15-9A99-B4338B1C311D}\InprocServer32
    HKCR\CLSID\{1675ADB9-1686-4F15-9A99-B4338B1C311D}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1679DEC0-E0F6-4BF2-A511-EA6AE08A8A2D}
    HKCR\CLSID\{1679DEC0-E0F6-4BF2-A511-EA6AE08A8A2D}
    HKCR\CLSID\{1679DEC0-E0F6-4BF2-A511-EA6AE08A8A2D}\InprocServer32
    HKCR\CLSID\{1679DEC0-E0F6-4BF2-A511-EA6AE08A8A2D}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{16EB4BF7-FC1D-4E77-8C00-CF403B4E2D4C}
    HKCR\CLSID\{16EB4BF7-FC1D-4E77-8C00-CF403B4E2D4C}
    HKCR\CLSID\{16EB4BF7-FC1D-4E77-8C00-CF403B4E2D4C}\InprocServer32
    HKCR\CLSID\{16EB4BF7-FC1D-4E77-8C00-CF403B4E2D4C}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{18038920-04EB-4081-B283-95BAF9B2404B}
    HKCR\CLSID\{18038920-04EB-4081-B283-95BAF9B2404B}
    HKCR\CLSID\{18038920-04EB-4081-B283-95BAF9B2404B}\InprocServer32
    HKCR\CLSID\{18038920-04EB-4081-B283-95BAF9B2404B}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1807A270-945E-4E64-99A2-84B24B40657C}
    HKCR\CLSID\{1807A270-945E-4E64-99A2-84B24B40657C}
    HKCR\CLSID\{1807A270-945E-4E64-99A2-84B24B40657C}\InprocServer32
    HKCR\CLSID\{1807A270-945E-4E64-99A2-84B24B40657C}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1819490D-5B65-4DCA-893F-2E2B20845EEE}
    HKCR\CLSID\{1819490D-5B65-4DCA-893F-2E2B20845EEE}
    HKCR\CLSID\{1819490D-5B65-4DCA-893F-2E2B20845EEE}\InprocServer32
    HKCR\CLSID\{1819490D-5B65-4DCA-893F-2E2B20845EEE}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1843C9A8-84F9-4C98-80CA-7955C74F2AA1}
    HKCR\CLSID\{1843C9A8-84F9-4C98-80CA-7955C74F2AA1}
    HKCR\CLSID\{1843C9A8-84F9-4C98-80CA-7955C74F2AA1}\InprocServer32
    HKCR\CLSID\{1843C9A8-84F9-4C98-80CA-7955C74F2AA1}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{18935E94-3FEB-4CCD-ACFC-85878F55FB8B}
    HKCR\CLSID\{18935E94-3FEB-4CCD-ACFC-85878F55FB8B}
    HKCR\CLSID\{18935E94-3FEB-4CCD-ACFC-85878F55FB8B}\InprocServer32
    HKCR\CLSID\{18935E94-3FEB-4CCD-ACFC-85878F55FB8B}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1893E0BF-BA68-4E0F-8752-B477AA35B9A3}
    HKCR\CLSID\{1893E0BF-BA68-4E0F-8752-B477AA35B9A3}
    HKCR\CLSID\{1893E0BF-BA68-4E0F-8752-B477AA35B9A3}\InprocServer32
    HKCR\CLSID\{1893E0BF-BA68-4E0F-8752-B477AA35B9A3}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{198771EE-916A-4473-A819-4CAF85285ED4}
    HKCR\CLSID\{198771EE-916A-4473-A819-4CAF85285ED4}
    HKCR\CLSID\{198771EE-916A-4473-A819-4CAF85285ED4}\InprocServer32
    HKCR\CLSID\{198771EE-916A-4473-A819-4CAF85285ED4}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1995DA0A-FA4C-4886-984A-9F3039C6E4D4}
    HKCR\CLSID\{1995DA0A-FA4C-4886-984A-9F3039C6E4D4}
    HKCR\CLSID\{1995DA0A-FA4C-4886-984A-9F3039C6E4D4}\InprocServer32
    HKCR\CLSID\{1995DA0A-FA4C-4886-984A-9F3039C6E4D4}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1A342C18-8C18-4F8F-8A40-2922039259DD}
    HKCR\CLSID\{1A342C18-8C18-4F8F-8A40-2922039259DD}
    HKCR\CLSID\{1A342C18-8C18-4F8F-8A40-2922039259DD}\InprocServer32
    HKCR\CLSID\{1A342C18-8C18-4F8F-8A40-2922039259DD}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1A5E5F33-B9CF-449D-96B9-987274751432}
    HKCR\CLSID\{1A5E5F33-B9CF-449D-96B9-987274751432}
    HKCR\CLSID\{1A5E5F33-B9CF-449D-96B9-987274751432}\InprocServer32
    HKCR\CLSID\{1A5E5F33-B9CF-449D-96B9-987274751432}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1A636B34-78CD-4177-A746-B0326816B1AC}
    HKCR\CLSID\{1A636B34-78CD-4177-A746-B0326816B1AC}
    HKCR\CLSID\{1A636B34-78CD-4177-A746-B0326816B1AC}\InprocServer32
    HKCR\CLSID\{1A636B34-78CD-4177-A746-B0326816B1AC}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1A76116F-E564-47C2-A17D-4A0C1251EC9E}
    HKCR\CLSID\{1A76116F-E564-47C2-A17D-4A0C1251EC9E}
    HKCR\CLSID\{1A76116F-E564-47C2-A17D-4A0C1251EC9E}\InprocServer32
    HKCR\CLSID\{1A76116F-E564-47C2-A17D-4A0C1251EC9E}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1A926B39-0EFF-486C-86CE-199E1B2279D8}
    HKCR\CLSID\{1A926B39-0EFF-486C-86CE-199E1B2279D8}
    HKCR\CLSID\{1A926B39-0EFF-486C-86CE-199E1B2279D8}\InprocServer32
    HKCR\CLSID\{1A926B39-0EFF-486C-86CE-199E1B2279D8}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1ABA048D-F581-468D-A0FC-6843975B5E99}
    HKCR\CLSID\{1ABA048D-F581-468D-A0FC-6843975B5E99}
    HKCR\CLSID\{1ABA048D-F581-468D-A0FC-6843975B5E99}\InprocServer32
    HKCR\CLSID\{1ABA048D-F581-468D-A0FC-6843975B5E99}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1AE61A49-F8CD-49B8-BFB9-E6E863F108A5}
    HKCR\CLSID\{1AE61A49-F8CD-49B8-BFB9-E6E863F108A5}
    HKCR\CLSID\{1AE61A49-F8CD-49B8-BFB9-E6E863F108A5}\InprocServer32
    HKCR\CLSID\{1AE61A49-F8CD-49B8-BFB9-E6E863F108A5}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1AFDFFBA-5DE6-4338-AEB5-1CC977F4E413}
    HKCR\CLSID\{1AFDFFBA-5DE6-4338-AEB5-1CC977F4E413}
    HKCR\CLSID\{1AFDFFBA-5DE6-4338-AEB5-1CC977F4E413}\InprocServer32
    HKCR\CLSID\{1AFDFFBA-5DE6-4338-AEB5-1CC977F4E413}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1B492199-A875-4B0A-A318-C56ADCE8F180}
    HKCR\CLSID\{1B492199-A875-4B0A-A318-C56ADCE8F180}
    HKCR\CLSID\{1B492199-A875-4B0A-A318-C56ADCE8F180}\InprocServer32
    HKCR\CLSID\{1B492199-A875-4B0A-A318-C56ADCE8F180}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1B66965B-7B3C-405F-8CC8-B128D33FF06D}
    HKCR\CLSID\{1B66965B-7B3C-405F-8CC8-B128D33FF06D}
    HKCR\CLSID\{1B66965B-7B3C-405F-8CC8-B128D33FF06D}\InprocServer32
    HKCR\CLSID\{1B66965B-7B3C-405F-8CC8-B128D33FF06D}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1B683342-7C83-4AAB-A4B9-FB32B385EB8B}
    HKCR\CLSID\{1B683342-7C83-4AAB-A4B9-FB32B385EB8B}
    HKCR\CLSID\{1B683342-7C83-4AAB-A4B9-FB32B385EB8B}\InprocServer32
    HKCR\CLSID\{1B683342-7C83-4AAB-A4B9-FB32B385EB8B}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1B6E6939-1682-4FE3-846C-2272BDFC9383}
    HKCR\CLSID\{1B6E6939-1682-4FE3-846C-2272BDFC9383}
    HKCR\CLSID\{1B6E6939-1682-4FE3-846C-2272BDFC9383}\InprocServer32
    HKCR\CLSID\{1B6E6939-1682-4FE3-846C-2272BDFC9383}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1B9B5A0C-AD2D-4F06-9121-671FFB58EF17}
    HKCR\CLSID\{1B9B5A0C-AD2D-4F06-9121-671FFB58EF17}
    HKCR\CLSID\{1B9B5A0C-AD2D-4F06-9121-671FFB58EF17}\InprocServer32
    HKCR\CLSID\{1B9B5A0C-AD2D-4F06-9121-671FFB58EF17}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1BB8C746-BED3-484A-8D5F-564ADF8F4747}
    HKCR\CLSID\{1BB8C746-BED3-484A-8D5F-564ADF8F4747}
    HKCR\CLSID\{1BB8C746-BED3-484A-8D5F-564ADF8F4747}\InprocServer32
    HKCR\CLSID\{1BB8C746-BED3-484A-8D5F-564ADF8F4747}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1C3A2F2C-16D7-4EF0-82DE-BA1FC0EFA523}
    HKCR\CLSID\{1C3A2F2C-16D7-4EF0-82DE-BA1FC0EFA523}
    HKCR\CLSID\{1C3A2F2C-16D7-4EF0-82DE-BA1FC0EFA523}\InprocServer32
    HKCR\CLSID\{1C3A2F2C-16D7-4EF0-82DE-BA1FC0EFA523}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1CA91911-CEE8-4A04-9A99-C2B3341AA01F}
    HKCR\CLSID\{1CA91911-CEE8-4A04-9A99-C2B3341AA01F}
    HKCR\CLSID\{1CA91911-CEE8-4A04-9A99-C2B3341AA01F}\InprocServer32
    HKCR\CLSID\{1CA91911-CEE8-4A04-9A99-C2B3341AA01F}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1CB8EDFE-D1E9-4303-9A9A-ADCE386EE53C}
    HKCR\CLSID\{1CB8EDFE-D1E9-4303-9A9A-ADCE386EE53C}
    HKCR\CLSID\{1CB8EDFE-D1E9-4303-9A9A-ADCE386EE53C}\InprocServer32
    HKCR\CLSID\{1CB8EDFE-D1E9-4303-9A9A-ADCE386EE53C}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1D26C619-574D-43A7-A431-B89076DB2394}
    HKCR\CLSID\{1D26C619-574D-43A7-A431-B89076DB2394}
    HKCR\CLSID\{1D26C619-574D-43A7-A431-B89076DB2394}\InprocServer32
    HKCR\CLSID\{1D26C619-574D-43A7-A431-B89076DB2394}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1D2F3DDB-14CF-4528-9CA4-E70239BC1D52}
    HKCR\CLSID\{1D2F3DDB-14CF-4528-9CA4-E70239BC1D52}
    HKCR\CLSID\{1D2F3DDB-14CF-4528-9CA4-E70239BC1D52}\InprocServer32
    HKCR\CLSID\{1D2F3DDB-14CF-4528-9CA4-E70239BC1D52}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1D43FD57-4B88-43F2-8C8C-8F33355E84BF}
    HKCR\CLSID\{1D43FD57-4B88-43F2-8C8C-8F33355E84BF}
    HKCR\CLSID\{1D43FD57-4B88-43F2-8C8C-8F33355E84BF}\InprocServer32
    HKCR\CLSID\{1D43FD57-4B88-43F2-8C8C-8F33355E84BF}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1D45F4CF-0B86-45AD-8D23-435D207E324A}
    HKCR\CLSID\{1D45F4CF-0B86-45AD-8D23-435D207E324A}
    HKCR\CLSID\{1D45F4CF-0B86-45AD-8D23-435D207E324A}\InprocServer32
    HKCR\CLSID\{1D45F4CF-0B86-45AD-8D23-435D207E324A}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1D4B19C2-E6F2-4F37-9C27-9D54DFF96A97}
    HKCR\CLSID\{1D4B19C2-E6F2-4F37-9C27-9D54DFF96A97}
    HKCR\CLSID\{1D4B19C2-E6F2-4F37-9C27-9D54DFF96A97}\InprocServer32
    HKCR\CLSID\{1D4B19C2-E6F2-4F37-9C27-9D54DFF96A97}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1D5D2CC5-C75D-4DBE-AA75-BF378B0D2E51}
    HKCR\CLSID\{1D5D2CC5-C75D-4DBE-AA75-BF378B0D2E51}
    HKCR\CLSID\{1D5D2CC5-C75D-4DBE-AA75-BF378B0D2E51}\InprocServer32
    HKCR\CLSID\{1D5D2CC5-C75D-4DBE-AA75-BF378B0D2E51}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1E2DA6AB-A79E-4EA1-A5F0-1D3EF523B95D}
    HKCR\CLSID\{1E2DA6AB-A79E-4EA1-A5F0-1D3EF523B95D}
    HKCR\CLSID\{1E2DA6AB-A79E-4EA1-A5F0-1D3EF523B95D}\InprocServer32
    HKCR\CLSID\{1E2DA6AB-A79E-4EA1-A5F0-1D3EF523B95D}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1EB6AB47-C97D-4F79-9DDB-1373DFD90BF8}
    HKCR\CLSID\{1EB6AB47-C97D-4F79-9DDB-1373DFD90BF8}
    HKCR\CLSID\{1EB6AB47-C97D-4F79-9DDB-1373DFD90BF8}\InprocServer32
    HKCR\CLSID\{1EB6AB47-C97D-4F79-9DDB-1373DFD90BF8}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1EBA9433-0899-4FD5-B483-E986548D35F5}
    HKCR\CLSID\{1EBA9433-0899-4FD5-B483-E986548D35F5}
    HKCR\CLSID\{1EBA9433-0899-4FD5-B483-E986548D35F5}\InprocServer32
    HKCR\CLSID\{1EBA9433-0899-4FD5-B483-E986548D35F5}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1EF38493-CA7D-4402-B0C9-8E24F2383A4E}
    HKCR\CLSID\{1EF38493-CA7D-4402-B0C9-8E24F2383A4E}
    HKCR\CLSID\{1EF38493-CA7D-4402-B0C9-8E24F2383A4E}\InprocServer32
    HKCR\CLSID\{1EF38493-CA7D-4402-B0C9-8E24F2383A4E}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1EFB11C3-3878-45CC-A79C-00925B193784}
    HKCR\CLSID\{1EFB11C3-3878-45CC-A79C-00925B193784}
    HKCR\CLSID\{1EFB11C3-3878-45CC-A79C-00925B193784}\InprocServer32
    HKCR\CLSID\{1EFB11C3-3878-45CC-A79C-00925B193784}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1F0E11FE-6104-468C-ADAF-02891E4C122D}
    HKCR\CLSID\{1F0E11FE-6104-468C-ADAF-02891E4C122D}
    HKCR\CLSID\{1F0E11FE-6104-468C-ADAF-02891E4C122D}\InprocServer32
    HKCR\CLSID\{1F0E11FE-6104-468C-ADAF-02891E4C122D}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1F131525-9C12-4E98-9CE3-12F30C658767}
    HKCR\CLSID\{1F131525-9C12-4E98-9CE3-12F30C658767}
    HKCR\CLSID\{1F131525-9C12-4E98-9CE3-12F30C658767}\InprocServer32
    HKCR\CLSID\{1F131525-9C12-4E98-9CE3-12F30C658767}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1F46A2AA-A787-4D9C-817C-2A08B78B81CB}
    HKCR\CLSID\{1F46A2AA-A787-4D9C-817C-2A08B78B81CB}
    HKCR\CLSID\{1F46A2AA-A787-4D9C-817C-2A08B78B81CB}\InprocServer32
    HKCR\CLSID\{1F46A2AA-A787-4D9C-817C-2A08B78B81CB}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1F7F854B-14E9-4862-8CA9-C462F91C253C}
    HKCR\CLSID\{1F7F854B-14E9-4862-8CA9-C462F91C253C}
    HKCR\CLSID\{1F7F854B-14E9-4862-8CA9-C462F91C253C}\InprocServer32
    HKCR\CLSID\{1F7F854B-14E9-4862-8CA9-C462F91C253C}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1F963EC2-E5F8-482A-87CE-A1084EA419CA}
    HKCR\CLSID\{1F963EC2-E5F8-482A-87CE-A1084EA419CA}
    HKCR\CLSID\{1F963EC2-E5F8-482A-87CE-A1084EA419CA}\InprocServer32
    HKCR\CLSID\{1F963EC2-E5F8-482A-87CE-A1084EA419CA}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1FBE41A9-A648-4BD2-9431-064E76B87985}
    HKCR\CLSID\{1FBE41A9-A648-4BD2-9431-064E76B87985}
    HKCR\CLSID\{1FBE41A9-A648-4BD2-9431-064E76B87985}\InprocServer32
    HKCR\CLSID\{1FBE41A9-A648-4BD2-9431-064E76B87985}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{1FE48317-CB0B-4096-95B8-F4235970612C}
    HKCR\CLSID\{1FE48317-CB0B-4096-95B8-F4235970612C}
    HKCR\CLSID\{1FE48317-CB0B-4096-95B8-F4235970612C}\InprocServer32
    HKCR\CLSID\{1FE48317-CB0B-4096-95B8-F4235970612C}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{2023A260-B994-4F02-AA78-5F85E6455D6C}
    HKCR\CLSID\{2023A260-B994-4F02-AA78-5F85E6455D6C}
    HKCR\CLSID\{2023A260-B994-4F02-AA78-5F85E6455D6C}\InprocServer32
    HKCR\CLSID\{2023A260-B994-4F02-AA78-5F85E6455D6C}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{207792EB-3143-4338-9C4B-63F3306469EF}
    HKCR\CLSID\{207792EB-3143-4338-9C4B-63F3306469EF}
    HKCR\CLSID\{207792EB-3143-4338-9C4B-63F3306469EF}\InprocServer32
    HKCR\CLSID\{207792EB-3143-4338-9C4B-63F3306469EF}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{20AE837D-B2E4-42C9-A61C-836006A6FEB6}
    HKCR\CLSID\{20AE837D-B2E4-42C9-A61C-836006A6FEB6}
    HKCR\CLSID\{20AE837D-B2E4-42C9-A61C-836006A6FEB6}\InprocServer32
    HKCR\CLSID\{20AE837D-B2E4-42C9-A61C-836006A6FEB6}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{219C192F-6F5C-4FBB-84EB-4F68D82A3B7B}
    HKCR\CLSID\{219C192F-6F5C-4FBB-84EB-4F68D82A3B7B}
    HKCR\CLSID\{219C192F-6F5C-4FBB-84EB-4F68D82A3B7B}\InprocServer32
    HKCR\CLSID\{219C192F-6F5C-4FBB-84EB-4F68D82A3B7B}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{21A3101F-F6F5-431E-B3FD-F27B71092F6B}
    HKCR\CLSID\{21A3101F-F6F5-431E-B3FD-F27B71092F6B}
    HKCR\CLSID\{21A3101F-F6F5-431E-B3FD-F27B71092F6B}\InprocServer32
    HKCR\CLSID\{21A3101F-F6F5-431E-B3FD-F27B71092F6B}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{21C93E4C-179B-47AC-B6EF-73240864C335}
    HKCR\CLSID\{21C93E4C-179B-47AC-B6EF-73240864C335}
    HKCR\CLSID\{21C93E4C-179B-47AC-B6EF-73240864C335}\InprocServer32
    HKCR\CLSID\{21C93E4C-179B-47AC-B6EF-73240864C335}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{21DAFD83-F821-456E-A772-B52220F31530}
    HKCR\CLSID\{21DAFD83-F821-456E-A772-B52220F31530}
    HKCR\CLSID\{21DAFD83-F821-456E-A772-B52220F31530}\InprocServer32
    HKCR\CLSID\{21DAFD83-F821-456E-A772-B52220F31530}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{21E243E7-BAAF-42A5-AE11-40CBDFE488D1}
    HKCR\CLSID\{21E243E7-BAAF-42A5-AE11-40CBDFE488D1}
    HKCR\CLSID\{21E243E7-BAAF-42A5-AE11-40CBDFE488D1}\InprocServer32
    HKCR\CLSID\{21E243E7-BAAF-42A5-AE11-40CBDFE488D1}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{2205F6A5-094F-4FD4-A5B1-F436BB95D9B8}
    HKCR\CLSID\{2205F6A5-094F-4FD4-A5B1-F436BB95D9B8}
    HKCR\CLSID\{2205F6A5-094F-4FD4-A5B1-F436BB95D9B8}\InprocServer32
    HKCR\CLSID\{2205F6A5-094F-4FD4-A5B1-F436BB95D9B8}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{22747255-3789-42B8-98FF-EE16F1C8D528}
    HKCR\CLSID\{22747255-3789-42B8-98FF-EE16F1C8D528}
    HKCR\CLSID\{22747255-3789-42B8-98FF-EE16F1C8D528}\InprocServer32
    HKCR\CLSID\{22747255-3789-42B8-98FF-EE16F1C8D528}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{22E563C3-2F67-4F45-8BEA-26F463E9F61F}
    HKCR\CLSID\{22E563C3-2F67-4F45-8BEA-26F463E9F61F}
    HKCR\CLSID\{22E563C3-2F67-4F45-8BEA-26F463E9F61F}\InprocServer32
    HKCR\CLSID\{22E563C3-2F67-4F45-8BEA-26F463E9F61F}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{23102BD7-A642-45B5-93FB-1AE262C72254}
    HKCR\CLSID\{23102BD7-A642-45B5-93FB-1AE262C72254}
    HKCR\CLSID\{23102BD7-A642-45B5-93FB-1AE262C72254}\InprocServer32
    HKCR\CLSID\{23102BD7-A642-45B5-93FB-1AE262C72254}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{239A4D9B-544F-493D-8B18-1CBD4D7E9806}
    HKCR\CLSID\{239A4D9B-544F-493D-8B18-1CBD4D7E9806}
    HKCR\CLSID\{239A4D9B-544F-493D-8B18-1CBD4D7E9806}\InprocServer32
    HKCR\CLSID\{239A4D9B-544F-493D-8B18-1CBD4D7E9806}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{239E9DD0-F3F2-425D-97E2-C9A70F70C7A5}
    HKCR\CLSID\{239E9DD0-F3F2-425D-97E2-C9A70F70C7A5}
    HKCR\CLSID\{239E9DD0-F3F2-425D-97E2-C9A70F70C7A5}\InprocServer32
    HKCR\CLSID\{239E9DD0-F3F2-425D-97E2-C9A70F70C7A5}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{23A2C68E-E53C-4D6B-B0CE-1875464B0FE0}
    HKCR\CLSID\{23A2C68E-E53C-4D6B-B0CE-1875464B0FE0}
    HKCR\CLSID\{23A2C68E-E53C-4D6B-B0CE-1875464B0FE0}\InprocServer32
    HKCR\CLSID\{23A2C68E-E53C-4D6B-B0CE-1875464B0FE0}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{23A7842B-FD22-4B36-8F0B-95A3338E9BF3}
    HKCR\CLSID\{23A7842B-FD22-4B36-8F0B-95A3338E9BF3}
    HKCR\CLSID\{23A7842B-FD22-4B36-8F0B-95A3338E9BF3}\InprocServer32
    HKCR\CLSID\{23A7842B-FD22-4B36-8F0B-95A3338E9BF3}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{23BFF239-D4B3-4F1B-9F59-AD332BC3FABB}
    HKCR\CLSID\{23BFF239-D4B3-4F1B-9F59-AD332BC3FABB}
    HKCR\CLSID\{23BFF239-D4B3-4F1B-9F59-AD332BC3FABB}\InprocServer32
    HKCR\CLSID\{23BFF239-D4B3-4F1B-9F59-AD332BC3FABB}\InprocServer32#ThreadingModel
    HKLM\Software\Classes\CLSID\{23D0E2B9-401F-42EF-8D43-A32D81B9EE3D}
    HKCR\CLSID\{23D0E2B9-401F-42EF-8D43-A32D
05. maj 2008 - 19:59 #5
((Denne har jeg vist glemt/overset - øhhh.. er det stadig aktuelt ?))
Avatar billede egidiussen Nybegynder
05. maj 2008 - 20:05 #6
tjaa - jeg har ikke foretaget mig yderligere siden.
05. maj 2008 - 20:13 #7
Afinstaller
* Azereus
http://www.spywarefri.dk/forum/topic.asp?TOPIC_ID=40284
via
[Start][Indstilninger][Kontrolpanel][Tilføj/fjern programmer]

Genstart for at fuldføre afinstalationen...

---------------------------------------

Og en frisk HiJackThis Log
PS: Brug denne version af HJT -> http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe
Avatar billede egidiussen Nybegynder
06. december 2009 - 12:30 #8
Lukker
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester