Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

impossible de telecharger Hitjackthis

Pascal62

Par Pascal62
dans Analyses et éradication malwares

 Partager

Messages recommandés

oGu Godlike Member

oGu

Posté(e)
Posté(e)
il n'y figure pas !!!! :P

 

Bon...Tant mieux!

 

1-Cacher les dossiers:

  • Menu "Outils" d'une fenêtre quelconque .
  • " Option des dossiers"
  • Onglet "Affichage"
  • Décoche la case "Afficher les fichiers et dossiers cachés".
  • Décoche la case "Masquer les extensions des fichiers dont le type est connu".
  • Décoche la case "Masquer les fichiers protégés du système d'exploitation".
  • Clique sur "Appliquer à tous les dossiers".

 

 

2-CCleaner:

  • Installe-le, lance-le et clique sur l'onglet : "Registre"
  • Clique sur "Rechercher des erreurs" puis "Corriger les erreurs"
  • Répond "oui" à la demande de sauvegarde proposéeet enregistre-la dans tes documents
  • Clique sur l'onglet "nettoyeur" puis "lancer le nettoyage"

 

A priori tout doit être propre maintenant: notes-tu encore des dysfonctionnements??

 

On poursuivra ensuite avec des scans anti-malwares, quelques réglages supplémentaires et une sécurisation de ta machine.

Pascal62 Member

Pascal62

Posté(e)
  • Auteur
Posté(e)
Bon...Tant mieux!

 

1-Cacher les dossiers:

  • Menu "Outils" d'une fenêtre quelconque .
  • " Option des dossiers"
  • Onglet "Affichage"
  • Décoche la case "Afficher les fichiers et dossiers cachés".
  • Décoche la case "Masquer les extensions des fichiers dont le type est connu".
  • Décoche la case "Masquer les fichiers protégés du système d'exploitation".
  • Clique sur "Appliquer à tous les dossiers".

 

 

2-CCleaner:

  • Installe-le, lance-le et clique sur l'onglet : "Registre"
  • Clique sur "Rechercher des erreurs" puis "Corriger les erreurs"
  • Répond "oui" à la demande de sauvegarde proposéeet enregistre-la dans tes documents
  • Clique sur l'onglet "nettoyeur" puis "lancer le nettoyage"

 

A priori tout doit être propre maintenant: notes-tu encore des dysfonctionnements??

 

On poursuivra ensuite avec des scans anti-malwares, quelques réglages supplémentaires et une sécurisation de ta machine.

 

 

Disfonctionnement reperé : impossibilité de noter une adresse dans la barre de firefox....

c'est la seule chose que je vois pour l'instant.

oGu Godlike Member

oGu

Posté(e)
Posté(e) (modifié)

Mouais, peut-être à cause des toolbars qui pourrissent le navigateur. On y reviendra en fin de procédure si cela persiste.

 

En attendant:

 

EWIDO

 

Télécharge ewido anti-spyware micro scanner sur ton bureau.

  • Double-clique sur le fichier ewido_micro.exe pour l'exécuter.
  • Le programme va demander dès son lancement un accès internet pour se mettre à jour, accepte.
  • Puis, un nouvel écran apparaît, assure toi que toutes les cases soient cochées.
  • Clique sur Start Scan et laisse l'outil travailler.
  • Quand l'outil à fini, clique sur save report et sauvegarde le rapport sur ton bureau.
  • Poste le dans ta prochaine réponse.

  • Nb, ne clique pas tout de suite sur Remove infections; nous devons nous assurer que toutes les détections soient infectieuses car certains utilitaires légitimes pourraient apparaître dans le rapport.

 

 

 

MALWAREBYTES ANTIMALWARE (MBAM)

 

Télécharge Malwarebytes Antimalware

  • Installe-le puis lance-le
  • Dans l'onglet "Recherche", sélectionne "Exécuter un examen complet"
  • Clique sur "Rechercher"
  • Le scan se lance: arme-toi de patience en cliquant ici
  • A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur "OK" pour poursuivre.
  • Si des malwares ont été détectés, leur liste s'affiche.
    En cliquant sur Suppression (ou équivalent) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
  • MBAM va ouvrir le bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport et poste-le

 

 

KASPERSKY

 

Fais un scan en ligne Kaspersky en suivant ce tuto de Malekal, puis poste le rapport qu'il te fournira.

http://www.malekal.com/scan_Av_en_ligne.php#mozTocId291566

 

EDIT: changement de procédure: abandon de eScan au profit de kaspersky On-Line (because le log eScan est vraiment inexploitable...)

Modifié par oGu
Pascal62 Member

Pascal62

Posté(e)
  • Auteur
Posté(e)
Mouais, peut-être à cause des toolbars qui pourrissent le navigateur. On y reviendra en fin de procédure si cela persiste.

 

En attendant:

 

EWIDO

 

Télécharge ewido anti-spyware micro scanner sur ton bureau.

  • Double-clique sur le fichier ewido_micro.exe pour l'exécuter.
  • Le programme va demander dès son lancement un accès internet pour se mettre à jour, accepte.
  • Puis, un nouvel écran apparaît, assure toi que toutes les cases soient cochées.
  • Clique sur Start Scan et laisse l'outil travailler.
  • Quand l'outil à fini, clique sur save report et sauvegarde le rapport sur ton bureau.
  • Poste le dans ta prochaine réponse.

  • Nb, ne clique pas tout de suite sur Remove infections; nous devons nous assurer que toutes les détections soient infectieuses car certains utilitaires légitimes pourraient apparaître dans le rapport.

 

 

 

MALWAREBYTES ANTIMALWARE (MBAM)

 

Télécharge Malwarebytes Antimalware

  • Installe-le puis lance-le
  • Dans l'onglet "Recherche", sélectionne "Exécuter un examen complet"
  • Clique sur "Rechercher"
  • Le scan se lance: arme-toi de patience en cliquant ici
  • A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur "OK" pour poursuivre.
  • Si des malwares ont été détectés, leur liste s'affiche.
    En cliquant sur Suppression (ou équivalent) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
  • MBAM va ouvrir le bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport et poste-le

 

 

KASPERSKY

 

Fais un scan en ligne Kaspersky en suivant ce tuto de Malekal, puis poste le rapport qu'il te fournira.

http://www.malekal.com/scan_Av_en_ligne.php#mozTocId291566

 

EDIT: changement de procédure: abandon de eScan au profit de kaspersky On-Line (because le log eScan est vraiment inexploitable...)

Bon c'est en cours, je fais tout ça puis te donne des news plus tard car je dois m'absenter , merci pour ton aide!

Pascal62 Member

Pascal62

Posté(e)
  • Auteur
Posté(e)
Bon c'est en cours, je fais tout ça puis te donne des news plus tard car je dois m'absenter , merci pour ton aide!

 

Bonjour !

Voici avec bien des difficultés les seuls rapports que j'ai pu avoir.

le dernier concernant Kapersky en mode sans échec n'a pas été possible car il me dit que la mise à jour n'est pas récente alors il ne se passe plus rien.

 

les rapports obtenus sont:

 

CCcleaner

Windows Registry Editor Version 5.00

 

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\NewTech Infosystems\\NTI CD & DVD-Maker 7\\FileCDDefault\\resFileCD.dll"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\NewTech Infosystems\\NTI CD & DVD-Maker 7\\Default\\resCdmkr.dll"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Fichiers communs\\NewTech Infosystems\\LiveUpdate\\Default\\ResLiveUpdtEN.dll"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\NewTech Infosystems\\NTI CD & DVD-Maker 7\\DFDefault\\resNDVD9To5.dll"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Fichiers communs\\Microsoft Shared\\VBA\\VEENOB3.HLP"=dword:00000000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Fichiers communs\\Microsoft Shared\\VBA\\VBA332.DLL"=dword:00000000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Fichiers communs\\Microsoft Shared\\VBA\\MSO97RT.DLL"=dword:00000000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Fichiers communs\\Microsoft Shared\\VBA\\VBEEXT1.OLB"=dword:00000000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Fichiers communs\\Microsoft Shared\\VBA\\VBE.DLL"=dword:00000000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\WINDOWS\\system32\\pxwma.dll"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\WINDOWS\\system32\\pxinsi64.exe"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\WINDOWS\\system32\\pxcpyi64.exe"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.Windows.Forms.tlb"=dword:00001000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.EnterpriseServices.tlb"=dword:00001000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\Microsoft.JScript.tlb"=dword:00001000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\Microsoft.Vsa.tlb"=dword:00001000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.Drawing.tlb"=dword:00001000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\mscoree.tlb"=dword:00001000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\mscorlib.tlb"=dword:00001000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\System.tlb"=dword:00001000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\WINDOWS\\Microsoft.NET\\Framework\\v1.0.3705\\Microsoft.Vsa.Vb.CodeDOMProcessor.tlb"=dword:00001000

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\de.locale\\compasstop.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\de.locale\\license.txt"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\de.locale\\releasenotes.txt"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\de.locale\\ring_active.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\de.locale\\ring_hover.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\de.locale\\ring_norm.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\de.locale\\ring_n_active.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\de.locale\\ring_n_hover.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\en.locale\\compasstop.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\en.locale\\license.txt"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\en.locale\\releasenotes.txt"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\en.locale\\ring_active.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\en.locale\\ring_hover.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\en.locale\\ring_norm.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\en.locale\\ring_n_active.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\en.locale\\ring_n_hover.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\es.locale\\compasstop.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\es.locale\\license.txt"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\es.locale\\releasenotes.txt"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\es.locale\\ring_active.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\es.locale\\ring_hover.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\es.locale\\ring_norm.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\es.locale\\ring_n_active.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\es.locale\\ring_n_hover.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\fr.locale\\compasstop.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\fr.locale\\license.txt"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\fr.locale\\releasenotes.txt"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\fr.locale\\ring_active.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\fr.locale\\ring_hover.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\fr.locale\\ring_norm.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\fr.locale\\ring_n_active.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\fr.locale\\ring_n_hover.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\it.locale\\compasstop.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\it.locale\\license.txt"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\it.locale\\releasenotes.txt"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\it.locale\\ring_active.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\it.locale\\ring_hover.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\it.locale\\ring_norm.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\it.locale\\ring_n_active.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\it.locale\\ring_n_hover.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\ja.locale\\compasstop.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\ja.locale\\license.txt"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\ja.locale\\licensepro.txt"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\ja.locale\\releasenotes.txt"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\ja.locale\\ring_active.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\ja.locale\\ring_hover.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\ja.locale\\ring_norm.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\ja.locale\\ring_n_active.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\ja.locale\\ring_n_hover.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon0.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon1.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon10.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon11.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon12.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon13.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon14.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon15.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon16.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon17.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon18.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon19.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon2.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon20.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon21.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon22.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon23.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon24.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon25.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon26.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon27.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon28.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon29.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon3.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon30.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon31.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon32.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon33.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon34.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon35.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon36.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon37.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon38.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon39.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon4.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon40.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon41.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon42.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon43.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon44.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon45.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon46.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon47.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon48.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon49.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon5.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon50.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon51.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon52.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon53.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon54.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon55.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon56.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon57.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon58.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon59.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon6.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon60.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon61.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon62.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon63.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon7.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon8.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal2\\icon9.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon0.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon0l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon1.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon10.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon10l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon11.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon11l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon12.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon12l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon13.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon13l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon14.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon14l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon15.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon15l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon16.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon16l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon17.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon17l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon18.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon19.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon1l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon2.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon20.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon21.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon22.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon23.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon24.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon24l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon25.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon25l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon26.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon27.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon28.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon29.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon2l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon3.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon30.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon31.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon32.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon33.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon34.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon35.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon36.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon37.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon38.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon39.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon3l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon4.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon40.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon41.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon42.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon43.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon44.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon45.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon46.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon47.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon48.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon49.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon4l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon5.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon50.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon51.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon52.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon53.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon54.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon55.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon56.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon57.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon58.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon59.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon5l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon6.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon60.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon61.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon62.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon63.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon6l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon7.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon7l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon8.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon8l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon9.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal3\\icon9l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon0.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon1.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon10.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon11.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon12.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon13.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon14.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon15.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon16.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon17.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon18.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon19.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon2.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon20.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon21.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon22.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon23.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon24.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon25.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon26.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon27.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon28.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon29.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon3.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon30.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon31.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon32.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon33.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon34.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon35.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon36.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon37.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon38.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon39.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon4.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon40.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon41.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon42.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon43.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon44.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon45.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon46.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon47.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon48.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon49.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon5.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon50.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon51.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon52.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon53.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon54.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon55.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon56.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon57.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon58.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon59.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon6.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon60.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon61.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon62.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon63.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon7.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon8.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal4\\icon9.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon0.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon0l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon1.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon10.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon11.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon12.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon13.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon14.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon15.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon16.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon16l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon17.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon17l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon18.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon18l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon19.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon19l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon1l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon2.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon20.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon20l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon21.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon21l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon22.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon22l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon23.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon23l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon24.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon24l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon25.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon25l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon26.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon26l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon27.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon27l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon28.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon28l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon29.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon29l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon3.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon30.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon30l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon31.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon31l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon32.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon32l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon33.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon33l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon34.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon34l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon35.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon35l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon36.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon36l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon37.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon37l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon38.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon38l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon39.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon39l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon4.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon40.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon40l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon41.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon41l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon42.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon42l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon43.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon43l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon44.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon44l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon45.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon45l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon46.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon46l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon47.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon47l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon48.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon48l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon49.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon49l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon5.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon50.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon50l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon51.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon51l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon52.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon52l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon53.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon53l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon54.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon54l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon55.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon55l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon56.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon56l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon57.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon57l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon58.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon58l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon59.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon59l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon6.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon60.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon60l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon61.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon61l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon62.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon62l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon63.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon63l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon7.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon8.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon8l.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon9.png"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]

"C:\\Program Files\\Google\\Google Earth\\res\\pal5\\icon9l.png"=dword:00000001

 

[HKEY_CLASSES_ROOT\.b4s]

 

[HKEY_CLASSES_ROOT\.bpl]

 

[HKEY_CLASSES_ROOT\.pls]

 

[HKEY_CLASSES_ROOT\.wpz]

 

[HKEY_CLASSES_ROOT\idcfile]

@=""

 

[HKEY_CLASSES_ROOT\PocketPC]

 

[HKEY_CLASSES_ROOT\SysmonLogManager.Snapin]

 

[HKEY_CLASSES_ROOT\WMPCD]

 

[HKEY_CLASSES_ROOT\{]

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k]

@=""

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2]

@=""

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc]

@=""

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nds]

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nds\OpenWithList]

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx]

@=""

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sav]

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sav\OpenWithList]

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmp]

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmp\OpenWithList]

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm]

@=""

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\OpenWithList]

 

[HKEY_CLASSES_ROOT\ADCS]

@="Conteneur de classe Annuaire"

 

[HKEY_CLASSES_ROOT\ADCS\CLSID]

@="{89E30300-764D-11d0-B282-00A0C90F56FC}"

 

[HKEY_CLASSES_ROOT\bwpfile\shell\open]

 

[HKEY_CLASSES_ROOT\bwpfile\shell\open\command]

@="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\8.1.1.50-8876480SL\\Program\\PrvCnt.exe \"%1\""

 

[HKEY_CLASSES_ROOT\callto\DefaultIcon]

@="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\",0"

 

[HKEY_CLASSES_ROOT\callto\shell\open]

 

[HKEY_CLASSES_ROOT\callto\shell\open\command]

@="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" \"/callto:\"%l\"\""

 

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost]

 

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost\CLSID]

@="{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}"

 

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost.2]

@="Microsoft COM+ Runtime Meta Data"

 

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost.2\CLSID]

@="{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}"

 

[HKEY_CLASSES_ROOT\Connection Manager Profile\DefaultIcon]

@="C:\\WINDOWS\\system32\\CMMGR32.EXE,1"

 

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\open]

 

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\open\command]

@="C:\\WINDOWS\\system32\\CMMGR32.EXE \"%1\""

 

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\Settings...]

 

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\Settings...\command]

@="C:\\WINDOWS\\system32\\CMMGR32.EXE /settings \"%1\""

 

[HKEY_CLASSES_ROOT\DirectAnimation.PathControl]

@="Microsoft DirectAnimation Path"

 

[HKEY_CLASSES_ROOT\DirectAnimation.PathControl\CLSID]

@="{D7A7D7C3-D47F-11D0-89D3-00A0C90833E6}"

 

[HKEY_CLASSES_ROOT\DirectAnimation.Sequence]

@="Microsoft DirectAnimation Sequence"

 

[HKEY_CLASSES_ROOT\DirectAnimation.Sequence\CLSID]

@="{4F241DB1-EE9F-11D0-9824-006097C99E51}"

 

[HKEY_CLASSES_ROOT\DirectAnimation.SequencerControl]

@="Microsoft DirectAnimation Sequencer"

 

[HKEY_CLASSES_ROOT\DirectAnimation.SequencerControl\CLSID]

@="{B0A6BAE2-AAF0-11D0-A152-00A0C908DB96}"

 

[HKEY_CLASSES_ROOT\DirectAnimation.SpriteControl]

@="Microsoft DirectAnimation Sprite"

 

[HKEY_CLASSES_ROOT\DirectAnimation.SpriteControl\CLSID]

@="{FD179533-D86E-11D0-89D6-00A0C90833E6}"

 

[HKEY_CLASSES_ROOT\DirectAnimation.StructuredGraphicsControl]

@="Microsoft DirectAnimation Structured Graphics"

 

[HKEY_CLASSES_ROOT\DirectAnimation.StructuredGraphicsControl\CLSID]

@="{369303C2-D7AC-11D0-89D5-00A0C90833E6}"

 

[HKEY_CLASSES_ROOT\maxtv\shell\open]

 

[HKEY_CLASSES_ROOT\maxtv\shell\open\command]

@="C:\\Program Files\\MaxTV\\maxtv.exe -%1-"

 

[HKEY_CLASSES_ROOT\msbackupfile\DefaultIcon]

@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\

00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6e,00,74,00,\

62,00,61,00,63,00,6b,00,75,00,70,00,2e,00,65,00,78,00,65,00,2c,00,31,00,30,\

00,00,00

 

[HKEY_CLASSES_ROOT\msbackupfile\shell\Open]

@="&Ouvrir"

 

[HKEY_CLASSES_ROOT\msbackupfile\shell\Open\Command]

@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\

00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6e,00,74,00,\

62,00,61,00,63,00,6b,00,75,00,70,00,2e,00,65,00,78,00,65,00,00,00

 

[HKEY_CLASSES_ROOT\Msxml2.XSLPatternFactory]

@="XSL Pattern Factory"

 

[HKEY_CLASSES_ROOT\Msxml2.XSLPatternFactory\CLSID]

@="%CLSID_XSLPatternFactory"

 

[HKEY_CLASSES_ROOT\Msxml2.XSLPatternFactory\CurVer]

@="Msxml2.XSLPatternFactory.4.0"

 

[HKEY_CLASSES_ROOT\RavenShieldMap\shell\open]

 

[HKEY_CLASSES_ROOT\RavenShieldMap\shell\open\command]

@="\"C:\\Program Files\\Red Storm Entertainment\\RavenShield\\systemUnrealEd.exe\" \"%1\""

 

[HKEY_CLASSES_ROOT\SymWriter.pdb]

@="Pdb based SymWriter"

 

[HKEY_CLASSES_ROOT\SymWriter.pdb\CLSID]

@="{520DC67A-752E-11D3-8D56-00C04F680B2B}"

 

[HKEY_CLASSES_ROOT\vanBasco.MIDI\DefaultIcon]

@="C:\\Program Files\\vanBasco's Karaoke Player\\vmidi.exe,1"

 

[HKEY_CLASSES_ROOT\vanBasco.MIDI\shell\open]

@="&Open"

 

[HKEY_CLASSES_ROOT\vanBasco.MIDI\shell\open\command]

@="\"C:\\Program Files\\vanBasco's Karaoke Player\\vmidi.exe\""

 

[HKEY_CLASSES_ROOT\vanBasco.MIDI\shell\open\ddeexec]

@="[load(\"%1\")]"

 

[HKEY_CLASSES_ROOT\vanBasco.MIDI\shell\play]

@="&Play"

 

[HKEY_CLASSES_ROOT\vanBasco.MIDI\shell\play\command]

@="\"C:\\Program Files\\vanBasco's Karaoke Player\\vmidi.exe\""

 

[HKEY_CLASSES_ROOT\vanBasco.MIDI\shell\play\ddeexec]

@="[load(\"%1\")][play]"

 

[HKEY_CLASSES_ROOT\zapfile\DefaultIcon]

@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\

00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,61,00,70,00,\

70,00,6d,00,67,00,72,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,32,00,31,00,38,\

00,00,00

 

[HKEY_CLASSES_ROOT\CLSID\{04C3AD62-C14C-44E9-9550-96E07ADDABE7}]

@="PSCookieDetectedEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{04C3AD62-C14C-44E9-9550-96E07ADDABE7}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{04C3AD62-C14C-44E9-9550-96E07ADDABE7}\ProgID]

@="MpsEventHandler.PSCookieDetectedEvent.1"

 

[HKEY_CLASSES_ROOT\CLSID\{04C3AD62-C14C-44E9-9550-96E07ADDABE7}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{04C3AD62-C14C-44E9-9550-96E07ADDABE7}\VersionIndependentProgID]

@="MpsEventHandler.PSCookieDetectedEventHa"

 

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}]

@="ActiveXPlugin Object"

 

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Control]

 

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Implemented Categories]

 

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

 

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]

 

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\InprocServer32]

@="C:\\WINDOWS\\system32\\plugin.ocx"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\MiscStatus]

@="0"

 

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\MiscStatus\1]

@="131473"

 

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\ProgID]

@="Microsoft.ActiveXPlugin.1"

 

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\ToolboxBitmap32]

@="C:\\WINDOWS\\system32\\plugin.ocx, 1"

 

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\TypeLib]

@="{06DD38D0-D187-11CF-A80D-00C04FD74AD8}"

 

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\VersionIndependentProgID]

@="Microsoft.ActiveXPlugin"

 

[HKEY_CLASSES_ROOT\CLSID\{09DBB645-8A30-4141-9ABE-826C1BBDFB10}]

@="UserEvents Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{09DBB645-8A30-4141-9ABE-826C1BBDFB10}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{09DBB645-8A30-4141-9ABE-826C1BBDFB10}\ProgID]

@="MpsEventHandler.UserEvents.1"

 

[HKEY_CLASSES_ROOT\CLSID\{09DBB645-8A30-4141-9ABE-826C1BBDFB10}\TypeLib]

@="{}"

 

[HKEY_CLASSES_ROOT\CLSID\{09DBB645-8A30-4141-9ABE-826C1BBDFB10}\VersionIndependentProgID]

@="MpsEventHandler.UserEvents"

 

[HKEY_CLASSES_ROOT\CLSID\{0A8E9E0A-10F6-4BB4-A076-D89D1C446CFF}]

 

[HKEY_CLASSES_ROOT\CLSID\{0A8E9E0A-10F6-4BB4-A076-D89D1C446CFF}\InprocServer32]

@="C:\\PROGRA~1\\MSNMES~1\\MSGSC8~1.DLL"

 

[HKEY_CLASSES_ROOT\CLSID\{0C146D72-9229-49D8-B2C9-D805EF5C69A9}]

@="PSFactoryBuffer"

 

[HKEY_CLASSES_ROOT\CLSID\{0C146D72-9229-49D8-B2C9-D805EF5C69A9}\InProcServer32]

@="c:\\PROGRA~1\\mcafee\\VIRUSS~1\\mcodsps.dll"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{0D81DFEC-5610-4A2B-9B57-FC33D21366F0}]

 

[HKEY_CLASSES_ROOT\CLSID\{0D81DFEC-5610-4A2B-9B57-FC33D21366F0}\LocalServer32]

@="C:\\PROGRA~1\\MSNMES~1\\msnmsgr.exe"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{0D81DFEC-5610-4A2B-9B57-FC33D21366F0}\ProgID]

@="MSNMessenger.MsgrSessionManager"

 

[HKEY_CLASSES_ROOT\CLSID\{0D81DFEC-5610-4A2B-9B57-FC33D21366F0}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{0D81DFEC-5610-4A2B-9B57-FC33D21366F0}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{0D81DFEC-5610-4A2B-9B57-FC33D21366F0}\VersionIndependentProgID]

@="MSNMessenger.MsgrSessionManager.1"

 

[HKEY_CLASSES_ROOT\CLSID\{0dabacb1-1a16-4082-a610-3d0b3a2a94fc}]

@="CddbWinamp5UI Class"

 

[HKEY_CLASSES_ROOT\CLSID\{0dabacb1-1a16-4082-a610-3d0b3a2a94fc}\InprocServer32]

@="C:\\Program Files\\Winamp\\Plugins\\cddbuiwinamp.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{0dabacb1-1a16-4082-a610-3d0b3a2a94fc}\ProgID]

@="CDDBUIControlWinamp5.CddbWinamp5UI.1"

 

[HKEY_CLASSES_ROOT\CLSID\{0dabacb1-1a16-4082-a610-3d0b3a2a94fc}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{0dabacb1-1a16-4082-a610-3d0b3a2a94fc}\TypeLib]

@="{70891d64-b465-4e35-bbfa-6772bb37c966}"

 

[HKEY_CLASSES_ROOT\CLSID\{0dabacb1-1a16-4082-a610-3d0b3a2a94fc}\VersionIndependentProgID]

@="CDDBUIControlWinamp5.CddbWinamp5UI"

 

[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}]

 

[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}\InprocServer32]

@="\"C:\\PROGRA~1\\MSNMES~1\\msgsc.dll\""

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}\LocalServer32]

@="\"C:\\PROGRA~1\\MSNMES~1\\msnmsgr.exe\""

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}\ProgID]

@="MSNMessenger.ContactsPicker"

 

[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}\Programmable]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{111C85E9-BB62-4528-A806-F0BE908E02F0}\VersionIndependentProgID]

@="MSNMessenger.ContactsPicker.1"

 

[HKEY_CLASSES_ROOT\CLSID\{11BF9882-396B-4B8C-87D3-B5E7812080CC}]

@="PSFactoryBuffer"

 

[HKEY_CLASSES_ROOT\CLSID\{11BF9882-396B-4B8C-87D3-B5E7812080CC}\InProcServer32]

@="c:\\PROGRA~1\\FICHIE~1\\mcafee\\redirsvc\\redirps.dll"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{11C534D6-2D12-419F-B2D5-210100C8495F}]

@="PSImageBlockedEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{11C534D6-2D12-419F-B2D5-210100C8495F}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{11C534D6-2D12-419F-B2D5-210100C8495F}\ProgID]

@="MpsEventHandler.PSImageBlockedEventHa.1"

 

[HKEY_CLASSES_ROOT\CLSID\{11C534D6-2D12-419F-B2D5-210100C8495F}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{11C534D6-2D12-419F-B2D5-210100C8495F}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{11C534D6-2D12-419F-B2D5-210100C8495F}\VersionIndependentProgID]

@="MpsEventHandler.PSImageBlockedEventHand"

 

[HKEY_CLASSES_ROOT\CLSID\{17BE27FE-0B6C-4234-B487-FFC6E3DCA2D6}]

 

[HKEY_CLASSES_ROOT\CLSID\{17BE27FE-0B6C-4234-B487-FFC6E3DCA2D6}\LocalServer32]

@="C:\\PROGRA~1\\MSNMES~1\\msnmsgr.exe"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{17BE27FE-0B6C-4234-B487-FFC6E3DCA2D6}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{1B02BDDF-F6D2-4B36-ABBA-AD49EBC876A5}]

 

[HKEY_CLASSES_ROOT\CLSID\{1B02BDDF-F6D2-4B36-ABBA-AD49EBC876A5}\InprocServer32]

@="C:\\PROGRA~1\\MSNMES~1\\MSGSC8~1.DLL"

 

[HKEY_CLASSES_ROOT\CLSID\{2B05BC74-FFC7-4792-85CF-DA6E17950480}]

@="ElevatedHelperClass Class"

"AppID"="{73E3EA38-DBAA-414F-AE10-9CB33B6E9FDF}"

"LocalizedString"="@C:\\Program Files\\Softwin\\BitDefender10\\bdelev.dll,-1000"

 

[HKEY_CLASSES_ROOT\CLSID\{2B05BC74-FFC7-4792-85CF-DA6E17950480}\Elevation]

"Enabled"=dword:00000001

 

[HKEY_CLASSES_ROOT\CLSID\{2B05BC74-FFC7-4792-85CF-DA6E17950480}\InprocServer32]

@="C:\\Program Files\\Softwin\\BitDefender10\\bdelev.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{2B05BC74-FFC7-4792-85CF-DA6E17950480}\ProgID]

@="BDElevatedHelper.ElevatedHelperClass.1"

 

[HKEY_CLASSES_ROOT\CLSID\{2B05BC74-FFC7-4792-85CF-DA6E17950480}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{2B05BC74-FFC7-4792-85CF-DA6E17950480}\TypeLib]

@="{48E8254D-A519-402B-AB11-7DFDD5CE0E74}"

 

[HKEY_CLASSES_ROOT\CLSID\{2B05BC74-FFC7-4792-85CF-DA6E17950480}\VersionIndependentProgID]

@="BDElevatedHelper.ElevatedHelperClass"

 

[HKEY_CLASSES_ROOT\CLSID\{323C0F99-820A-4E0B-B714-57942C6D9678}]

 

[HKEY_CLASSES_ROOT\CLSID\{323C0F99-820A-4E0B-B714-57942C6D9678}\InprocServer32]

@="C:\\PROGRA~1\\MSNMES~1\\MSGSC8~1.DLL"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{323C0F99-820A-4E0B-B714-57942C6D9678}\LocalServer32]

@="C:\\PROGRA~1\\MSNMES~1\\msnmsgr.exe"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{323C0F99-820A-4E0B-B714-57942C6D9678}\ProgID]

@="MSNMessengerPrivate.MessengerPriv"

 

[HKEY_CLASSES_ROOT\CLSID\{323C0F99-820A-4E0B-B714-57942C6D9678}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{323C0F99-820A-4E0B-B714-57942C6D9678}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{323C0F99-820A-4E0B-B714-57942C6D9678}\VersionIndependentProgID]

@="MSNMessengerPrivate.MessengerPriv.1"

 

[HKEY_CLASSES_ROOT\CLSID\{395D2485-540E-4111-B9C7-CE3FC4E9AFE2}]

@="PSSignOutEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{395D2485-540E-4111-B9C7-CE3FC4E9AFE2}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{395D2485-540E-4111-B9C7-CE3FC4E9AFE2}\ProgID]

@="MpsEventHandler.PSSignOutEventHandler.1"

 

[HKEY_CLASSES_ROOT\CLSID\{395D2485-540E-4111-B9C7-CE3FC4E9AFE2}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{395D2485-540E-4111-B9C7-CE3FC4E9AFE2}\VersionIndependentProgID]

@="MpsEventHandler.PSSignOutEventHandler"

 

[HKEY_CLASSES_ROOT\CLSID\{4F07F79F-087F-42CF-8B36-7A88D06088E9}]

 

[HKEY_CLASSES_ROOT\CLSID\{4F07F79F-087F-42CF-8B36-7A88D06088E9}\InprocServer32]

@="C:\\PROGRA~1\\MSNMES~1\\MSGSC8~1.DLL"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{4F07F79F-087F-42CF-8B36-7A88D06088E9}\ProgID]

@="MSNMessenger.HotmailControl"

 

[HKEY_CLASSES_ROOT\CLSID\{4F07F79F-087F-42CF-8B36-7A88D06088E9}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{4F07F79F-087F-42CF-8B36-7A88D06088E9}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{4F07F79F-087F-42CF-8B36-7A88D06088E9}\VersionIndependentProgID]

@="MSNMessenger.HotmailControl.1"

 

[HKEY_CLASSES_ROOT\CLSID\{575774BF-73CA-4DCC-88E4-48D04E930F91}]

@="PSAdBlockedEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{575774BF-73CA-4DCC-88E4-48D04E930F91}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{575774BF-73CA-4DCC-88E4-48D04E930F91}\ProgID]

@="MpsEventHandler.PSAdBlockedEventHandl.1"

 

[HKEY_CLASSES_ROOT\CLSID\{575774BF-73CA-4DCC-88E4-48D04E930F91}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{575774BF-73CA-4DCC-88E4-48D04E930F91}\VersionIndependentProgID]

@="MpsEventHandler.PSAdBlockedEventHandler"

 

[HKEY_CLASSES_ROOT\CLSID\{5C90092E-A90F-40F3-8155-49F087A3B752}]

@="PSSignInEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{5C90092E-A90F-40F3-8155-49F087A3B752}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{5C90092E-A90F-40F3-8155-49F087A3B752}\ProgID]

@="MpsEventHandler.PSSignInEventHandler.1"

 

[HKEY_CLASSES_ROOT\CLSID\{5C90092E-A90F-40F3-8155-49F087A3B752}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{5C90092E-A90F-40F3-8155-49F087A3B752}\VersionIndependentProgID]

@="MpsEventHandler.PSSignInEventHandler"

 

[HKEY_CLASSES_ROOT\CLSID\{63D7FB68-6898-4380-9EBC-BDAB6F5705F4}]

@="SubscriptionEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{63D7FB68-6898-4380-9EBC-BDAB6F5705F4}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{63D7FB68-6898-4380-9EBC-BDAB6F5705F4}\ProgID]

@="MpsEventHandler.SubscriptionEventHand.1"

 

[HKEY_CLASSES_ROOT\CLSID\{63D7FB68-6898-4380-9EBC-BDAB6F5705F4}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{63D7FB68-6898-4380-9EBC-BDAB6F5705F4}\VersionIndependentProgID]

@="MpsEventHandler.SubscriptionEventHandler"

 

[HKEY_CLASSES_ROOT\CLSID\{683C7EA1-3A4B-4764-A8E6-768C4F38BBA6}]

@="PSFactoryBuffer"

 

[HKEY_CLASSES_ROOT\CLSID\{683C7EA1-3A4B-4764-A8E6-768C4F38BBA6}\InProcServer32]

@="c:\\PROGRA~1\\mcafee\\msc\\mcmispps.dll"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{69E9B473-22E6-471D-8683-84BD1E4BECE1}]

@="CDDBControl2 Class"

 

[HKEY_CLASSES_ROOT\CLSID\{69E9B473-22E6-471D-8683-84BD1E4BECE1}\InprocServer32]

@="C:\\Program Files\\Winamp\\Plugins\\cddbcontrolwinamp.dll"

"ThreadingModel"="both"

 

[HKEY_CLASSES_ROOT\CLSID\{69E9B473-22E6-471D-8683-84BD1E4BECE1}\ProgID]

@="CDDBControl.CDDBControl2.1"

 

[HKEY_CLASSES_ROOT\CLSID\{69E9B473-22E6-471D-8683-84BD1E4BECE1}\VersionIndependentProgID]

@="CDDBControl.CDDBControl2"

 

[HKEY_CLASSES_ROOT\CLSID\{6FBF8DD5-9E03-4AF5-B779-FEBEF6754712}]

 

[HKEY_CLASSES_ROOT\CLSID\{6FBF8DD5-9E03-4AF5-B779-FEBEF6754712}\InprocServer32]

@="C:\\PROGRA~1\\MSNMES~1\\MSGSC8~1.DLL"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{6FBF8DD5-9E03-4AF5-B779-FEBEF6754712}\LocalServer32]

@="C:\\PROGRA~1\\MSNMES~1\\msnmsgr.exe"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{6FBF8DD5-9E03-4AF5-B779-FEBEF6754712}\ProgID]

@="MSNMessenger.ToastManager"

 

[HKEY_CLASSES_ROOT\CLSID\{6FBF8DD5-9E03-4AF5-B779-FEBEF6754712}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{6FBF8DD5-9E03-4AF5-B779-FEBEF6754712}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{6FBF8DD5-9E03-4AF5-B779-FEBEF6754712}\VersionIndependentProgID]

@="MSNMessenger.ToastManager.1"

 

[HKEY_CLASSES_ROOT\CLSID\{7F72DD4F-F9DB-40B1-A248-1F77F3C3B132}]

 

[HKEY_CLASSES_ROOT\CLSID\{7F72DD4F-F9DB-40B1-A248-1F77F3C3B132}\LocalServer32]

@="C:\\PROGRA~1\\MSNMES~1\\msnmsgr.exe"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{7F72DD4F-F9DB-40B1-A248-1F77F3C3B132}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{8025781B-7405-42F4-B6FC-C1FB826A11F2}]

@="VideoCD Property Page"

 

[HKEY_CLASSES_ROOT\CLSID\{8025781B-7405-42F4-B6FC-C1FB826A11F2}\InprocServer32]

@="C:\\WINDOWS\\system32\\htvcdsvcd.ax"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{80274203-490D-40FF-95A0-917F5EB5A3BF}]

@="PSFactoryBuffer"

 

[HKEY_CLASSES_ROOT\CLSID\{80274203-490D-40FF-95A0-917F5EB5A3BF}\InProcServer32]

@="c:\\PROGRA~1\\FICHIE~1\\mcafee\\mna\\MCNASV~1.DLL"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{825F2E3B-565A-4195-AA90-D535F6E31D36}]

@="PSFactoryBuffer"

 

[HKEY_CLASSES_ROOT\CLSID\{825F2E3B-565A-4195-AA90-D535F6E31D36}\InProcServer32]

@="c:\\PROGRA~1\\FICHIE~1\\mcafee\\HACKER~1\\hwapips.dll"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{828030A1-22C1-4009-854F-8E305202313F}]

 

[HKEY_CLASSES_ROOT\CLSID\{828030A1-22C1-4009-854F-8E305202313F}\InprocServer32]

@="C:\\PROGRA~1\\MSNMES~1\\MSGRAP~1.DLL"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{828030A1-22C1-4009-854F-8E305202313F}\ProgID]

@="IMAPP.IMAPP.1"

 

[HKEY_CLASSES_ROOT\CLSID\{828030A1-22C1-4009-854F-8E305202313F}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{828030A1-22C1-4009-854F-8E305202313F}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{828030A1-22C1-4009-854F-8E305202313F}\VersionIndependentProgID]

@="IMAPP.IMAPP"

 

[HKEY_CLASSES_ROOT\CLSID\{83748E14-8F60-4AB3-8A81-7CECBE2B1CBE}]

@="MpsMISPImpl Class"

"AppID"="{267BBEBC-C05C-489E-823B-026E6EA456BE}"

 

[HKEY_CLASSES_ROOT\CLSID\{83748E14-8F60-4AB3-8A81-7CECBE2B1CBE}\InprocServer32]

@="c:\\PROGRA~1\\mcafee\\mps\\mpsmisp.dll"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{83748E14-8F60-4AB3-8A81-7CECBE2B1CBE}\ProgID]

@="MpsMISP.MpsMISPImpl.1"

 

[HKEY_CLASSES_ROOT\CLSID\{83748E14-8F60-4AB3-8A81-7CECBE2B1CBE}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{83748E14-8F60-4AB3-8A81-7CECBE2B1CBE}\TypeLib]

@="{EAD6E826-2F75-4030-92E4-7064B727E1A2}"

 

[HKEY_CLASSES_ROOT\CLSID\{83748E14-8F60-4AB3-8A81-7CECBE2B1CBE}\VersionIndependentProgID]

@="MpsMISP.MpsMISPImpl"

 

[HKEY_CLASSES_ROOT\CLSID\{884C860E-C24E-4E3D-9A4D-77A32707C6A6}]

@="PSFactoryBuffer"

 

[HKEY_CLASSES_ROOT\CLSID\{884C860E-C24E-4E3D-9A4D-77A32707C6A6}\InProcServer32]

@="c:\\PROGRA~1\\mcafee\\msc\\mcnmcsps.dll"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{94478404-6236-40C4-8850-DF09CE6D95BC}]

@="PSFactoryBuffer"

 

[HKEY_CLASSES_ROOT\CLSID\{94478404-6236-40C4-8850-DF09CE6D95BC}\InProcServer32]

@="c:\\PROGRA~1\\mcafee\\VIRUSS~1\\mcvsps.dll"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{94807D76-62F1-4C85-B794-D0B29E29DAAE}]

@="MpsConfig Class"

"AppID"="{267BBEBC-C05C-489E-823B-026E6EA456BE}"

 

[HKEY_CLASSES_ROOT\CLSID\{94807D76-62F1-4C85-B794-D0B29E29DAAE}\Control]

 

[HKEY_CLASSES_ROOT\CLSID\{94807D76-62F1-4C85-B794-D0B29E29DAAE}\Implemented Categories]

 

[HKEY_CLASSES_ROOT\CLSID\{94807D76-62F1-4C85-B794-D0B29E29DAAE}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

 

[HKEY_CLASSES_ROOT\CLSID\{94807D76-62F1-4C85-B794-D0B29E29DAAE}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]

 

[HKEY_CLASSES_ROOT\CLSID\{94807D76-62F1-4C85-B794-D0B29E29DAAE}\InprocServer32]

@="c:\\PROGRA~1\\mcafee\\mps\\mpsmisp.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{94807D76-62F1-4C85-B794-D0B29E29DAAE}\ProgID]

@="MpsMISP.MpsConfig.1"

 

[HKEY_CLASSES_ROOT\CLSID\{94807D76-62F1-4C85-B794-D0B29E29DAAE}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{94807D76-62F1-4C85-B794-D0B29E29DAAE}\ToolboxBitmap32]

@="c:\\PROGRA~1\\mcafee\\mps\\mpsmisp.dll, 102"

 

[HKEY_CLASSES_ROOT\CLSID\{94807D76-62F1-4C85-B794-D0B29E29DAAE}\TypeLib]

@="{EAD6E826-2F75-4030-92E4-7064B727E1A2}"

 

[HKEY_CLASSES_ROOT\CLSID\{94807D76-62F1-4C85-B794-D0B29E29DAAE}\VersionIndependentProgID]

@="MpsMISP.MpsConfig"

 

[HKEY_CLASSES_ROOT\CLSID\{94F5EA4D-7E59-4388-9B8D-151501CF480B}]

@="McAfee Proxy Service"

"AppID"="{70AE37AD-5507-4fe0-9691-563A55D71F18}"

 

[HKEY_CLASSES_ROOT\CLSID\{94F5EA4D-7E59-4388-9B8D-151501CF480B}\LocalServer32]

@="C:\\PROGRA~1\\FICHIE~1\\mcafee\\mcproxy\\mcproxy.exe"

 

[HKEY_CLASSES_ROOT\CLSID\{98AC5C33-EE18-4EC2-BE25-3B16EE8F75F1}]

"AppID"="{7178B45D-568D-4024-95FC-BC564C34542E}"

@="MSN USNSVC"

 

[HKEY_CLASSES_ROOT\CLSID\{98AC5C33-EE18-4EC2-BE25-3B16EE8F75F1}\LocalServer32]

@="C:\\PROGRA~1\\MSNMES~1\\usnsvc.exe"

 

[HKEY_CLASSES_ROOT\CLSID\{98AC5C33-EE18-4EC2-BE25-3B16EE8F75F1}\ProgID]

@="Microsoft.MSN.MCC.USNJSVC.1"

 

[HKEY_CLASSES_ROOT\CLSID\{99E69691-3266-4EA2-97FF-DFC40CF90DDC}]

@="MpsLogger Class"

"AppID"="{267BBEBC-C05C-489E-823B-026E6EA456BE}"

 

[HKEY_CLASSES_ROOT\CLSID\{99E69691-3266-4EA2-97FF-DFC40CF90DDC}\InprocServer32]

@="c:\\PROGRA~1\\mcafee\\mps\\mpsmisp.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{99E69691-3266-4EA2-97FF-DFC40CF90DDC}\ProgID]

@="MpsMISP.MpsLogger.1"

 

[HKEY_CLASSES_ROOT\CLSID\{99E69691-3266-4EA2-97FF-DFC40CF90DDC}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{99E69691-3266-4EA2-97FF-DFC40CF90DDC}\TypeLib]

@="{EAD6E826-2F75-4030-92E4-7064B727E1A2}"

 

[HKEY_CLASSES_ROOT\CLSID\{99E69691-3266-4EA2-97FF-DFC40CF90DDC}\VersionIndependentProgID]

@="MpsMISP.MpsLogger"

 

[HKEY_CLASSES_ROOT\CLSID\{AB92D412-E57E-473b-B9A2-3BAE647D9C8C}]

@="McReportLog Class"

"AppID"="{DEFCCD2D-5B05-4841-A53E-C46AF9A2BDD5}"

 

[HKEY_CLASSES_ROOT\CLSID\{AB92D412-E57E-473b-B9A2-3BAE647D9C8C}\LocalServer32]

@="\"c:\\program files\\mcafee\\msc\\mclogsrv.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{AD97990E-D79A-4CC0-BCA1-341ED2F1C24E}]

@="PSPopupBlockedEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{AD97990E-D79A-4CC0-BCA1-341ED2F1C24E}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{AD97990E-D79A-4CC0-BCA1-341ED2F1C24E}\ProgID]

@="MpsEventHandler.PSPopupBlockedEventHa.1"

 

[HKEY_CLASSES_ROOT\CLSID\{AD97990E-D79A-4CC0-BCA1-341ED2F1C24E}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{AD97990E-D79A-4CC0-BCA1-341ED2F1C24E}\VersionIndependentProgID]

@="MpsEventHandler.PSPopupBlockedEventHand"

 

[HKEY_CLASSES_ROOT\CLSID\{AE9F578D-E062-499F-BA30-1ACEFA76F34E}]

@="PSAccessDeniedEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{AE9F578D-E062-499F-BA30-1ACEFA76F34E}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{AE9F578D-E062-499F-BA30-1ACEFA76F34E}\ProgID]

@="MpsEventHandler.PSAccessDeniedEventHa.1"

 

[HKEY_CLASSES_ROOT\CLSID\{AE9F578D-E062-499F-BA30-1ACEFA76F34E}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{AE9F578D-E062-499F-BA30-1ACEFA76F34E}\VersionIndependentProgID]

@="MpsEventHandler.PSAccessDeniedEventHand"

 

[HKEY_CLASSES_ROOT\CLSID\{B1E52F24-060D-45F5-8697-991F8D7AC83B}]

@="PSPIIDetectedEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{B1E52F24-060D-45F5-8697-991F8D7AC83B}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{B1E52F24-060D-45F5-8697-991F8D7AC83B}\ProgID]

@="MpsEventHandler.PSPIIDetectedEventHan.1"

 

[HKEY_CLASSES_ROOT\CLSID\{B1E52F24-060D-45F5-8697-991F8D7AC83B}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{B1E52F24-060D-45F5-8697-991F8D7AC83B}\VersionIndependentProgID]

@="MpsEventHandler.PSPIIDetectedEventHandl"

 

[HKEY_CLASSES_ROOT\CLSID\{B2C86B23-DE6A-4B0E-A4C2-0EF039A0392A}]

@="PSFactoryBuffer"

 

[HKEY_CLASSES_ROOT\CLSID\{B2C86B23-DE6A-4B0E-A4C2-0EF039A0392A}\InProcServer32]

@="c:\\PROGRA~1\\FICHIE~1\\mcafee\\core\\mccoreps.dll"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{B5BAD031-12CB-465E-82D6-11B5C536BCD9}]

@="PSFactoryBuffer"

 

[HKEY_CLASSES_ROOT\CLSID\{B5BAD031-12CB-465E-82D6-11B5C536BCD9}\InProcServer32]

@="c:\\PROGRA~1\\mcafee\\msc\\mcshllps.dll"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{BD28FB5B-B2D0-4BA8-9755-618B29A95785}]

@="UserHelper Class"

"AppID"="{267BBEBC-C05C-489E-823B-026E6EA456BE}"

 

[HKEY_CLASSES_ROOT\CLSID\{BD28FB5B-B2D0-4BA8-9755-618B29A95785}\InprocServer32]

@="c:\\PROGRA~1\\mcafee\\mps\\mpsmisp.dll"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{BD28FB5B-B2D0-4BA8-9755-618B29A95785}\ProgID]

@="MpsMISP.UserHelper.1"

 

[HKEY_CLASSES_ROOT\CLSID\{BD28FB5B-B2D0-4BA8-9755-618B29A95785}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{BD28FB5B-B2D0-4BA8-9755-618B29A95785}\TypeLib]

@="{EAD6E826-2F75-4030-92E4-7064B727E1A2}"

 

[HKEY_CLASSES_ROOT\CLSID\{BD28FB5B-B2D0-4BA8-9755-618B29A95785}\VersionIndependentProgID]

@="MpsMISP.UserHelper"

 

[HKEY_CLASSES_ROOT\CLSID\{bfe639ee-762e-46c4-ae7c-3c34ccc317ff}]

@="CddbCredit Class"

 

[HKEY_CLASSES_ROOT\CLSID\{bfe639ee-762e-46c4-ae7c-3c34ccc317ff}\InprocServer32]

@="C:\\Program Files\\Winamp\\Plugins\\cddbcontrolwinamp.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{bfe639ee-762e-46c4-ae7c-3c34ccc317ff}\ProgID]

@="CDDBControlWinamp5.CddbCredit.1"

 

[HKEY_CLASSES_ROOT\CLSID\{bfe639ee-762e-46c4-ae7c-3c34ccc317ff}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{bfe639ee-762e-46c4-ae7c-3c34ccc317ff}\TypeLib]

@="{092c84ce-ce92-439f-9c12-997beea855d2}"

 

[HKEY_CLASSES_ROOT\CLSID\{bfe639ee-762e-46c4-ae7c-3c34ccc317ff}\VersionIndependentProgID]

@="CDDBControlWinamp5.CddbCredit"

 

[HKEY_CLASSES_ROOT\CLSID\{C05729E9-54C0-4846-8A7A-B5FE2742862C}]

@="PSSignInRequiredEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{C05729E9-54C0-4846-8A7A-B5FE2742862C}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{C05729E9-54C0-4846-8A7A-B5FE2742862C}\ProgID]

@="MpsEventHandler.PSSignInRequiredEvent.1"

 

[HKEY_CLASSES_ROOT\CLSID\{C05729E9-54C0-4846-8A7A-B5FE2742862C}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{C05729E9-54C0-4846-8A7A-B5FE2742862C}\VersionIndependentProgID]

@="MpsEventHandler.PSSignInRequiredEventHa"

 

[HKEY_CLASSES_ROOT\CLSID\{c2e21ac1-675c-4cae-ba0c-98d25a5e5b84}]

@="CddbDisc Class"

 

[HKEY_CLASSES_ROOT\CLSID\{c2e21ac1-675c-4cae-ba0c-98d25a5e5b84}\InprocServer32]

@="C:\\Program Files\\Winamp\\Plugins\\cddbcontrolwinamp.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{c2e21ac1-675c-4cae-ba0c-98d25a5e5b84}\ProgID]

@="CDDBControlWinamp5.CddbDisc.1"

 

[HKEY_CLASSES_ROOT\CLSID\{c2e21ac1-675c-4cae-ba0c-98d25a5e5b84}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{c2e21ac1-675c-4cae-ba0c-98d25a5e5b84}\TypeLib]

@="{092c84ce-ce92-439f-9c12-997beea855d2}"

 

[HKEY_CLASSES_ROOT\CLSID\{c2e21ac1-675c-4cae-ba0c-98d25a5e5b84}\VersionIndependentProgID]

@="CDDBControlWinamp5.CddbDisc"

 

[HKEY_CLASSES_ROOT\CLSID\{C5F86999-8022-476E-89A2-58D07DC5A5F8}]

@="PSUrlVisitedEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{C5F86999-8022-476E-89A2-58D07DC5A5F8}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{C5F86999-8022-476E-89A2-58D07DC5A5F8}\ProgID]

@="MpsEventHandler.PSUrlVisitedEventHand.1"

 

[HKEY_CLASSES_ROOT\CLSID\{C5F86999-8022-476E-89A2-58D07DC5A5F8}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{C5F86999-8022-476E-89A2-58D07DC5A5F8}\VersionIndependentProgID]

@="MpsEventHandler.PSUrlVisitedEventHandle"

 

[HKEY_CLASSES_ROOT\CLSID\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53}]

@="CPub Object"

"AppID"=""

 

[HKEY_CLASSES_ROOT\CLSID\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53}\InprocServer32]

@="c:\\PROGRA~1\\mcafee\\mps\\mcpopup.dll"

"ThreadingModel"="apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53}\ProgID]

@="McAfee.PopupBlocker.1"

 

[HKEY_CLASSES_ROOT\CLSID\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53}\TypeLib]

@="{90A52F08-64AC-4DC6-9D7D-4516670275D3}"

 

[HKEY_CLASSES_ROOT\CLSID\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53}\VersionIndependentProgID]

@="McAfee.PopupBlocker"

 

[HKEY_CLASSES_ROOT\CLSID\{C78AA488-7868-4005-914C-F74678B49CFF}]

@="PSCookieBlockedEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{C78AA488-7868-4005-914C-F74678B49CFF}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{C78AA488-7868-4005-914C-F74678B49CFF}\ProgID]

@="MpsEventHandler.PSCookieBlockedEventH.1"

 

[HKEY_CLASSES_ROOT\CLSID\{C78AA488-7868-4005-914C-F74678B49CFF}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{C78AA488-7868-4005-914C-F74678B49CFF}\VersionIndependentProgID]

@="MpsEventHandler.PSCookieBlockedEventHan"

 

[HKEY_CLASSES_ROOT\CLSID\{C9109C64-0A3B-4CDF-A60A-5ECCD659D44E}]

@="PSKeywordBlockedEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{C9109C64-0A3B-4CDF-A60A-5ECCD659D44E}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{C9109C64-0A3B-4CDF-A60A-5ECCD659D44E}\ProgID]

@="MpsEventHandler.PSKeywordDetec.1"

 

[HKEY_CLASSES_ROOT\CLSID\{C9109C64-0A3B-4CDF-A60A-5ECCD659D44E}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{C9109C64-0A3B-4CDF-A60A-5ECCD659D44E}\VersionIndependentProgID]

@="MpsEventHandler.PSKeywordDetecti"

 

[HKEY_CLASSES_ROOT\CLSID\{C9738C6A-123E-4CD7-95F6-923C5E8B3658}]

@="PSFactoryBuffer"

 

[HKEY_CLASSES_ROOT\CLSID\{C9738C6A-123E-4CD7-95F6-923C5E8B3658}\InProcServer32]

@="C:\\Program Files\\Softwin\\BitDefender10\\bdelev.dll"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]

@="Java Plug-in 1.6.0_04"

 

[HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\InprocServer32]

@="C:\\Program Files\\Java\\jre1.6.0_05\\bin\\ssv.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]

@="Java Plug-in 1.6.0_04"

 

[HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}\InprocServer32]

@="C:\\Program Files\\Java\\jre1.6.0_05\\bin\\ssv.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]

@="Java Plug-in 1.6.0_04"

 

[HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}\InprocServer32]

@="C:\\Program Files\\Java\\jre1.6.0_05\\bin\\ssv.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]

@="Java Plug-in 1.6.0_05"

 

[HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\InprocServer32]

@="C:\\Program Files\\Java\\jre1.6.0_05\\bin\\ssv.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]

@="Java Plug-in 1.6.0_05"

 

[HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}\InprocServer32]

@="C:\\Program Files\\Java\\jre1.6.0_05\\bin\\ssv.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]

@="Java Plug-in 1.6.0_05"

 

[HKEY_CLASSES_ROOT\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}\InprocServer32]

@="C:\\Program Files\\Java\\jre1.6.0_05\\bin\\ssv.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{CDC11E15-A6D9-43D2-9518-F043287D32B1}]

@="PSWebBugBlockedEventHandler Class"

"AppID"="{4825782D-C87D-4B1F-8659-E807325CA99E}"

 

[HKEY_CLASSES_ROOT\CLSID\{CDC11E15-A6D9-43D2-9518-F043287D32B1}\LocalServer32]

@="\"C:\\Program Files\\McAfee\\MPS\\mpsevh.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{CDC11E15-A6D9-43D2-9518-F043287D32B1}\ProgID]

@="MpsEventHandler.PSWebBugBlockedEventH.1"

 

[HKEY_CLASSES_ROOT\CLSID\{CDC11E15-A6D9-43D2-9518-F043287D32B1}\TypeLib]

@="{38CAF31C-7235-44E1-9E9A-4FA92717E522}"

 

[HKEY_CLASSES_ROOT\CLSID\{CDC11E15-A6D9-43D2-9518-F043287D32B1}\VersionIndependentProgID]

@="MpsEventHandler.PSWebBugBlockedEventHan"

 

[HKEY_CLASSES_ROOT\CLSID\{D360501E-DC73-4de6-A61C-21925AED7835}]

@="CWindowEventHandler Object"

"AppID"=""

 

[HKEY_CLASSES_ROOT\CLSID\{D360501E-DC73-4de6-A61C-21925AED7835}\InprocServer32]

@="c:\\PROGRA~1\\mcafee\\mps\\mcpopup.dll"

"ThreadingModel"="apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{D360501E-DC73-4de6-A61C-21925AED7835}\ProgID]

@="McAfee.PubWindowEventHandler.1"

 

[HKEY_CLASSES_ROOT\CLSID\{D360501E-DC73-4de6-A61C-21925AED7835}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{D360501E-DC73-4de6-A61C-21925AED7835}\TypeLib]

@="{90A52F08-64AC-4DC6-9D7D-4516670275D3}"

 

[HKEY_CLASSES_ROOT\CLSID\{D360501E-DC73-4de6-A61C-21925AED7835}\VersionIndependentProgID]

@="McAfee.PubWindowEventHandler"

 

[HKEY_CLASSES_ROOT\CLSID\{D74C0C0E-14F3-402C-9379-3E2BD0BF5D06}]

"AppID"="{D74C0C0E-14F3-402C-9379-3E2BD0BF5D07}"

@="WL Hardware Device Manager"

 

[HKEY_CLASSES_ROOT\CLSID\{D74C0C0E-14F3-402C-9379-3E2BD0BF5D06}\LocalServer32]

@="C:\\PROGRA~1\\MSNMES~1\\DEVICE~1\\msgrdvmn.exe"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{D74C0C0E-14F3-402C-9379-3E2BD0BF5D06}\ProgID]

@="MSN.V2SDeviceHandler.1"

 

[HKEY_CLASSES_ROOT\CLSID\{D74C0C0E-14F3-402C-9379-3E2BD0BF5D06}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{D74C0C0E-14F3-402C-9379-3E2BD0BF5D06}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{D74C0C0E-14F3-402C-9379-3E2BD0BF5D06}\VersionIndependentProgID]

@="MSN.V2SDeviceHandler"

 

[HKEY_CLASSES_ROOT\CLSID\{DDA1154C-204B-41D7-BFE7-7907C6BA9D56}]

@="McReportRecentEvent Class"

"AppID"="{DEFCCD2D-5B05-4841-A53E-C46AF9A2BDD5}"

 

[HKEY_CLASSES_ROOT\CLSID\{DDA1154C-204B-41D7-BFE7-7907C6BA9D56}\LocalServer32]

@="\"c:\\program files\\mcafee\\msc\\mclogsrv.exe\""

 

[HKEY_CLASSES_ROOT\CLSID\{E13AAC70-70AE-4988-808C-B267F2C20E79}]

 

[HKEY_CLASSES_ROOT\CLSID\{E13AAC70-70AE-4988-808C-B267F2C20E79}\LocalServer32]

@="C:\\PROGRA~1\\MSNMES~1\\msnmsgr.exe"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{E13AAC70-70AE-4988-808C-B267F2C20E79}\ProgID]

@="MSNMessenger.P4QuickLaunch"

 

[HKEY_CLASSES_ROOT\CLSID\{E13AAC70-70AE-4988-808C-B267F2C20E79}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{E13AAC70-70AE-4988-808C-B267F2C20E79}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{E13AAC70-70AE-4988-808C-B267F2C20E79}\VersionIndependentProgID]

@="MSNMessenger.P4QuickLaunch.1"

 

[HKEY_CLASSES_ROOT\CLSID\{E1771B7F-98BE-407F-BA67-AA16ADA5D0C5}]

 

[HKEY_CLASSES_ROOT\CLSID\{E1771B7F-98BE-407F-BA67-AA16ADA5D0C5}\InprocServer32]

@="C:\\PROGRA~1\\MSNMES~1\\MSGSC8~1.DLL"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{E1771B7F-98BE-407F-BA67-AA16ADA5D0C5}\ProgID]

@="MSNMessenger.Hotmail2Control"

 

[HKEY_CLASSES_ROOT\CLSID\{E1771B7F-98BE-407F-BA67-AA16ADA5D0C5}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{E1771B7F-98BE-407F-BA67-AA16ADA5D0C5}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{E1771B7F-98BE-407F-BA67-AA16ADA5D0C5}\VersionIndependentProgID]

@="MSNMessenger.Hotmail2Control.1"

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}]

@="VideoLAN VLC ActiveX Plugin"

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\Control]

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\Implemented Categories]

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\Implemented Categories\{0DE86A57-2BAA-11CF-A229-00AA003D7352}]

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\Implemented Categories\{40FC6ED4-2438-11CF-A3DB-080036F12502}]

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\InprocServer32]

@="C:\\Program Files\\MaxSoftware\\axvlc.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\MiscStatus]

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\MiscStatus\1]

@="131473"

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\ProgID]

@="VideoLAN.VLCPlugin.1"

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\ToolboxBitmap32]

@="C:\\Program Files\\MaxSoftware\\axvlc.dll,1"

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\TypeLib]

@="{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\VersionIndependentProgID]

@="VideoLAN.VLCPlugin"

 

[HKEY_CLASSES_ROOT\CLSID\{EB045914-CB36-4731-82D6-0BA9644E264B}]

@="PSFactoryBuffer"

 

[HKEY_CLASSES_ROOT\CLSID\{EB045914-CB36-4731-82D6-0BA9644E264B}\InProcServer32]

@="c:\\PROGRA~1\\mcafee\\msc\\mcnmcsps.dll"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{efe52f1e-1427-4ce9-acfe-0e050e498e63}]

@="CddbCacheManager Class"

 

[HKEY_CLASSES_ROOT\CLSID\{efe52f1e-1427-4ce9-acfe-0e050e498e63}\InprocServer32]

@="C:\\Program Files\\Winamp\\Plugins\\cddbcontrolwinamp.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{efe52f1e-1427-4ce9-acfe-0e050e498e63}\ProgID]

@="CDDBControlWinamp5.CddbCacheManager.1"

 

[HKEY_CLASSES_ROOT\CLSID\{efe52f1e-1427-4ce9-acfe-0e050e498e63}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{efe52f1e-1427-4ce9-acfe-0e050e498e63}\TypeLib]

@="{092c84ce-ce92-439f-9c12-997beea855d2}"

 

[HKEY_CLASSES_ROOT\CLSID\{efe52f1e-1427-4ce9-acfe-0e050e498e63}\VersionIndependentProgID]

@="CDDBControlWinamp5.CddbCacheManager"

 

[HKEY_CLASSES_ROOT\CLSID\{F06608C7-1874-4EEA-B3B2-DF99EBB144B8}]

 

[HKEY_CLASSES_ROOT\CLSID\{F06608C7-1874-4EEA-B3B2-DF99EBB144B8}\InprocServer32]

@="C:\\PROGRA~1\\MSNMES~1\\MSGSC8~1.DLL"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{F06608C7-1874-4EEA-B3B2-DF99EBB144B8}\LocalServer32]

@="C:\\PROGRA~1\\MSNMES~1\\msnmsgr.exe"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{F06608C7-1874-4EEA-B3B2-DF99EBB144B8}\ProgID]

@="MSNMessenger.MessengerContentInstaller"

 

[HKEY_CLASSES_ROOT\CLSID\{F06608C7-1874-4EEA-B3B2-DF99EBB144B8}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{F06608C7-1874-4EEA-B3B2-DF99EBB144B8}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{F06608C7-1874-4EEA-B3B2-DF99EBB144B8}\VersionIndependentProgID]

@="MSNMessenger.MessengerContentInstaller.1"

 

[HKEY_CLASSES_ROOT\CLSID\{f1110c60-736a-4d58-8e2a-4935dfcf9ac7}]

@="CddbFullName Class"

 

[HKEY_CLASSES_ROOT\CLSID\{f1110c60-736a-4d58-8e2a-4935dfcf9ac7}\InprocServer32]

@="C:\\Program Files\\Winamp\\Plugins\\cddbcontrolwinamp.dll"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{f1110c60-736a-4d58-8e2a-4935dfcf9ac7}\ProgID]

@="CDDBControlWinamp5.CddbFullName.1"

 

[HKEY_CLASSES_ROOT\CLSID\{f1110c60-736a-4d58-8e2a-4935dfcf9ac7}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{f1110c60-736a-4d58-8e2a-4935dfcf9ac7}\TypeLib]

@="{092c84ce-ce92-439f-9c12-997beea855d2}"

 

[HKEY_CLASSES_ROOT\CLSID\{f1110c60-736a-4d58-8e2a-4935dfcf9ac7}\VersionIndependentProgID]

@="CDDBControlWinamp5.CddbFullName"

 

[HKEY_CLASSES_ROOT\CLSID\{f2e9891e-0ce2-40bc-a6df-ed87c817b83d}]

@="CDDBWinamp5Control Class"

 

[HKEY_CLASSES_ROOT\CLSID\{f2e9891e-0ce2-40bc-a6df-ed87c817b83d}\Control]

 

[HKEY_CLASSES_ROOT\CLSID\{f2e9891e-0ce2-40bc-a6df-ed87c817b83d}\InprocServer32]

@="C:\\Program Files\\Winamp\\Plugins\\cddbcontrolwinamp.dll"

"ThreadingModel"="Both"

 

[HKEY_CLASSES_ROOT\CLSID\{f2e9891e-0ce2-40bc-a6df-ed87c817b83d}\Insertable]

 

[HKEY_CLASSES_ROOT\CLSID\{f2e9891e-0ce2-40bc-a6df-ed87c817b83d}\MiscStatus]

@="0"

 

[HKEY_CLASSES_ROOT\CLSID\{f2e9891e-0ce2-40bc-a6df-ed87c817b83d}\MiscStatus\1]

@="135569"

 

[HKEY_CLASSES_ROOT\CLSID\{f2e9891e-0ce2-40bc-a6df-ed87c817b83d}\ProgID]

@="CDDBControlWinamp5.CDDBWinamp5Control.1"

 

[HKEY_CLASSES_ROOT\CLSID\{f2e9891e-0ce2-40bc-a6df-ed87c817b83d}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{f2e9891e-0ce2-40bc-a6df-ed87c817b83d}\ToolboxBitmap32]

@="C:\\Program Files\\Winamp\\Plugins\\cddbcontrolwinamp.dll, 104"

 

[HKEY_CLASSES_ROOT\CLSID\{f2e9891e-0ce2-40bc-a6df-ed87c817b83d}\TypeLib]

@="{092c84ce-ce92-439f-9c12-997beea855d2}"

 

[HKEY_CLASSES_ROOT\CLSID\{f2e9891e-0ce2-40bc-a6df-ed87c817b83d}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{f2e9891e-0ce2-40bc-a6df-ed87c817b83d}\VersionIndependentProgID]

@="CDDBControlWinamp5.CDDBWinamp5Control"

 

[HKEY_CLASSES_ROOT\CLSID\{F4C30BB5-D7FC-4D60-9D49-7C6B67C3592D}]

 

[HKEY_CLASSES_ROOT\CLSID\{F4C30BB5-D7FC-4D60-9D49-7C6B67C3592D}\InprocServer32]

@="C:\\PROGRA~1\\MSNMES~1\\MSGSC8~1.DLL"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{F4C30BB5-D7FC-4D60-9D49-7C6B67C3592D}\LocalServer32]

@="C:\\PROGRA~1\\MSNMES~1\\msnmsgr.exe"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{F4C30BB5-D7FC-4D60-9D49-7C6B67C3592D}\ProgID]

@="MSNMessenger.MessengerApp"

 

[HKEY_CLASSES_ROOT\CLSID\{F4C30BB5-D7FC-4D60-9D49-7C6B67C3592D}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{F4C30BB5-D7FC-4D60-9D49-7C6B67C3592D}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{F4C30BB5-D7FC-4D60-9D49-7C6B67C3592D}\VersionIndependentProgID]

@="MSNMessenger.MessengerApp.1"

 

[HKEY_CLASSES_ROOT\CLSID\{F5F545A6-39C4-40B5-814D-B45040A89FB5}]

 

[HKEY_CLASSES_ROOT\CLSID\{F5F545A6-39C4-40B5-814D-B45040A89FB5}\InprocServer32]

@="C:\\PROGRA~1\\MSNMES~1\\MSGSC8~1.DLL"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{F5F545A6-39C4-40B5-814D-B45040A89FB5}\LocalServer32]

@="C:\\PROGRA~1\\MSNMES~1\\msnmsgr.exe"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{F5F545A6-39C4-40B5-814D-B45040A89FB5}\ProgID]

@="MSNMessenger.MsgrObject"

 

[HKEY_CLASSES_ROOT\CLSID\{F5F545A6-39C4-40B5-814D-B45040A89FB5}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{F5F545A6-39C4-40B5-814D-B45040A89FB5}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{F5F545A6-39C4-40B5-814D-B45040A89FB5}\VersionIndependentProgID]

@="MSNMessenger.MsgrObject.1"

 

[HKEY_CLASSES_ROOT\CLSID\{F81CD990-910B-4bbf-9CB3-6A77F3D697B3}]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{F81CD990-910B-4bbf-9CB3-6A77F3D697B3}\InprocServer32]

@="C:\\PROGRA~1\\MSNMES~1\\MSGSC8~1.DLL"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{F81CD990-910B-4bbf-9CB3-6A77F3D697B3}\LocalServer32]

@="C:\\Program Files\\MSN Messenger\\msnmsgr.exe"

"ThreadingModel"="Apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{F81CD990-910B-4bbf-9CB3-6A77F3D697B3}\ProgID]

@="MSNMessenger.UIAutomation"

 

[HKEY_CLASSES_ROOT\CLSID\{F81CD990-910B-4bbf-9CB3-6A77F3D697B3}\Programmable]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{F81CD990-910B-4bbf-9CB3-6A77F3D697B3}\TypeLib]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{F81CD990-910B-4bbf-9CB3-6A77F3D697B3}\Version]

@="1.0"

 

[HKEY_CLASSES_ROOT\CLSID\{F81CD990-910B-4bbf-9CB3-6A77F3D697B3}\VersionIndependentProgID]

@="MSNMessenger.UIAutomation.1"

 

[HKEY_CLASSES_ROOT\CLSID\{F9668ADA-FC6B-47F4-8381-DE861DBA5115}]

@="CDocEventHandler Object"

"AppID"=""

 

[HKEY_CLASSES_ROOT\CLSID\{F9668ADA-FC6B-47F4-8381-DE861DBA5115}\InprocServer32]

@="c:\\PROGRA~1\\mcafee\\mps\\mcpopup.dll"

"ThreadingModel"="apartment"

 

[HKEY_CLASSES_ROOT\CLSID\{F9668ADA-FC6B-47F4-8381-DE861DBA5115}\ProgID]

@="McAfee.PubDocEventHandler.1"

 

[HKEY_CLASSES_ROOT\CLSID\{F9668ADA-FC6B-47F4-8381-DE861DBA5115}\Programmable]

 

[HKEY_CLASSES_ROOT\CLSID\{F9668ADA-FC6B-47F4-8381-DE861DBA5115}\TypeLib]

@="{90A52F08-64AC-4DC6-9D7D-4516670275D3}"

 

[HKEY_CLASSES_ROOT\CLSID\{F9668ADA-FC6B-47F4-8381-DE861DBA5115}\VersionIndependentProgID]

@="McAfee.PubDocEventHandler"

 

[HKEY_CLASSES_ROOT\Applications\FIREFOX.EXE\shell\open]

 

[HKEY_CLASSES_ROOT\Applications\FIREFOX.EXE\shell\open\command]

@="C:\\PROGRA~1\\MOZILL~1\\FIREFOX.EXE -requestPending -osint -url \"%1\""

 

[HKEY_CLASSES_ROOT\Applications\FIREFOX.EXE\shell\open\ddeexec]

@="\"%1\",,0,0,,,,"

"NoActivateHandler"=""

 

[HKEY_CLASSES_ROOT\Applications\FIREFOX.EXE\shell\open\ddeexec\Application]

@="Firefox"

 

[HKEY_CLASSES_ROOT\Applications\FIREFOX.EXE\shell\open\ddeexec\Topic]

@="WWW_OpenURL"

 

[HKEY_CLASSES_ROOT\Applications\moviemk.exe]

 

[HKEY_CLASSES_ROOT\Applications\moviemk.exe\shell]

"FriendlyCache"="Movie Maker"

 

[HKEY_CLASSES_ROOT\Applications\vmidi.exe\shell\open]

@="&Open"

 

[HKEY_CLASSES_ROOT\Applications\vmidi.exe\shell\open\command]

@="\"C:\\Program Files\\vanBasco's Karaoke Player\\vmidi.exe\""

 

[HKEY_CLASSES_ROOT\Applications\vmidi.exe\shell\open\ddeexec]

@="[load(\"%1\")]"

 

[HKEY_CLASSES_ROOT\Applications\vmidi.exe\shell\play]

@="&Play"

 

[HKEY_CLASSES_ROOT\Applications\vmidi.exe\shell\play\command]

@="\"C:\\Program Files\\vanBasco's Karaoke Player\\vmidi.exe\""

 

[HKEY_CLASSES_ROOT\Applications\vmidi.exe\shell\play\ddeexec]

@="[load(\"%1\")][play]"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\cmmgr32.exe]

@="C:\\WINDOWS\\system32\\cmmgr32.exe"

"Path"="C:\\WINDOWS\\system32"

"CmstpExtensionDll"="C:\\WINDOWS\\system32\\cmcfg32.dll"

"CMInternalVersion"="1.2"

"CmNative"=dword:00000001

"ProfilesUpgraded"=dword:00000001

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\ldm.exe]

"Path"="C:\\Program Files\\Logitech\\Desktop Messenger"

@="C:\\Program Files\\Logitech\\Desktop Messenger\\ldm.exe"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\Net Blitz II.exe]

@="C:\\Documents and Settings\\LOUTE\\Mes documents\\Mes jeux\\Echecs _2\\Net Blitz II\\Net Blitz II.exe"

"Path"="c:\\documents and settings\\loute\\mes documents\\mes jeux\\echecs _2\\net blitz ii"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\PL-2303 DriverInstaller.exe]

"Path"="C:\\WINDOWS\\"

@="C:\\WINDOWS\\PL-2303 DriverInstaller.exe"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\QuickCam.exe]

@="C:\\Program Files\\Logitech\\Video\\QuickCam.exe"

"Path"="C:\\Program Files\\Logitech\\Video"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\VMidi.exe]

@="C:\\Program Files\\vanBasco's Karaoke Player\\VMidi.exe"

"Path"="C:\\Program Files\\vanBasco's Karaoke Player"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\YourApp.exe]

"Path"="C:\\Program Files\\Gemtek 11Mbps WMonitor"

@="C:\\Program Files\\Gemtek 11Mbps WMonitor\\YourApp.exe"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]

"en.hlp"="C:\\WINDOWS\\ime\\Shared\\imepad"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]

"EQNEDT32.cnt"="C:\\Program Files\\Fichiers communs\\Microsoft Shared\\Equation\\"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]

"nwind9.cnt"="C:\\Program Files\\Microsoft Office\\Office10\\Samples\\"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]

"nwind9.hlp"="C:\\Program Files\\Microsoft Office\\Office10\\Samples\\"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]

"nwindcs9.cnt"="C:\\Program Files\\Microsoft Office\\Office10\\Samples\\"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]

"nwindcs9.hlp"="C:\\Program Files\\Microsoft Office\\Office10\\Samples\\"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]

"fpmmcglo.hlp"="C:\\Program Files\\Fichiers communs\\Microsoft Shared\\Web Server Extensions\\50\\bin\\1036\\"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]

"VEENOB3.HLP"="C:\\Program Files\\Fichiers communs\\Microsoft Shared\\VBA"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Help]

"VEENOB3.CNT"="C:\\Program Files\\Fichiers communs\\Microsoft Shared\\VBA"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\HTML Help]

"CHTPADEN.CHM"="Folder:IMEPADEN.CHM"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\\Program Files\\NewTech Infosystems\\NTI CD & DVD-Maker 7\\FileCDDefault\\"=""

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\\Program Files\\NewTech Infosystems\\NTI CD & DVD-Maker 7\\Default\\"=""

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\\Program Files\\Fichiers communs\\NewTech Infosystems\\LiveUpdate\\Default\\"=""

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\\Program Files\\NewTech Infosystems\\NTI CD & DVD-Maker 7\\JCMDefault\\"=""

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\\Program Files\\NewTech Infosystems\\NTI CD & DVD-Maker 7\\WEDefault\\"=""

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\\Program Files\\NewTech Infosystems\\NTI CD & DVD-Maker 7\\DFDefault\\"=""

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\\Program Files\\NewTech Infosystems\\NTI Backup NOW! 4\\Default\\"=""

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\\WINDOWS\\winsxs\\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.91_x-ww_0de56c07\\"=""

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\\Program Files\\McAfee Wireless Security\\"="1"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\\Program Files\\Microsoft Games\\Age of Empires III\\"="1"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]

"C:\\Program Files\\Microsoft Games\\"="1"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TchecMeet]

"DisplayName"="TchecMeet"

"UninstallString"="C:\\Documents and Settings\\LOUTE\\Mes documents\\Uninstal.exe"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Windows Mobile Device Handbook]

"DisplayName"="Manuel de l'appareil Windows Mobile®"

"DisplayVersion"="1.0"

"Publisher"="Microsoft Corporation"

"RegisterPath"="Software\\Microsoft\\Windows Mobile Getting Started Disc\\Device Handbook"

"ProductName"="Manuel de l'appareil Windows Mobile®"

"UninstallString"="C:\\Program Files\\Windows Mobile Device Handbook\\Windows Mobile Device Handbook\\Bin\\DHUninstall.exe"

"DHBWindowTitle"="Manuel de l'appareil Windows Mobile®"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Dofus 1.20.0]

"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,80,08,25,00,00,00,00,00,f0,3a,\

92,f6,09,c8,01,01,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\

61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,44,00,6f,00,66,00,75,\

00,73,00,5c,00,44,00,6f,00,66,00,75,00,73,00,2e,00,65,00,78,00,65,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\KB917283.T1_1ToU93_1]

"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,\

00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\KB922770.T1_1ToU168_1]

"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,\

00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\LimeWire]

"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,80,61,01,00,00,00,00,00,70,79,\

4b,5b,d4,c6,01,00,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\

61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,4c,00,69,00,6d,00,65,\

00,57,00,69,00,72,00,65,00,5c,00,4c,00,69,00,6d,00,65,00,57,00,69,00,72,00,\

65,00,2e,00,65,00,78,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\M928366]

"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,\

00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MaxTV Online2006]

"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,00,00,75,01,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mozilla Firefox (3.0b1)]

"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,80,a6,01,00,00,00,00,00,d8,9b,\

39,b7,3a,c8,01,10,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\

61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,4d,00,6f,00,7a,00,69,\

00,6c,00,6c,00,61,00,20,00,46,00,69,00,72,00,65,00,66,00,6f,00,78,00,20,00,\

33,00,20,00,42,00,65,00,74,00,61,00,20,00,31,00,5c,00,66,00,69,00,72,00,65,\

00,66,00,6f,00,78,00,2e,00,65,00,78,00,65,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mozilla Firefox (3.0b2)]

"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,80,a6,01,00,00,00,00,00,d8,90,\

36,25,44,c8,01,2a,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\

61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,4d,00,6f,00,7a,00,69,\

00,6c,00,6c,00,61,00,20,00,46,00,69,00,72,00,65,00,66,00,6f,00,78,00,20,00,\

33,00,20,00,42,00,65,00,74,00,61,00,20,00,31,00,5c,00,66,00,69,00,72,00,65,\

00,66,00,6f,00,78,00,2e,00,65,00,78,00,65,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Winamp]

"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,00,de,02,00,00,00,00,00,f0,d2,\

40,5c,f5,c6,01,00,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\

61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,57,00,69,00,6e,00,61,\

00,6d,00,70,00,5c,00,77,00,69,00,6e,00,61,00,6d,00,70,00,61,00,2e,00,65,00,\

78,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{0496D9E8-224B-4AFA-8F37-23B98D52F1EB}]

"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}]

"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,80,63,03,00,00,00,00,00,70,71,\

02,ab,b6,c7,01,00,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\

61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,47,00,6f,00,6f,00,67,\

00,6c,00,65,00,5c,00,47,00,6f,00,6f,00,67,00,6c,00,65,00,20,00,45,00,61,00,\

72,00,74,00,68,00,5c,00,67,00,6f,00,6f,00,67,00,6c,00,65,00,65,00,61,00,72,\

00,74,00,68,00,2e,00,65,00,78,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}]

"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,00,ac,77,02,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E22885AB-B503-46E2-8437-73BBC6BC5487}]

"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,74,cd,01,00,00,00,00,00,f0,d2,\

40,5c,f5,c6,01,00,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\

61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,4d,00,65,00,73,00,73,\

00,65,00,6e,00,67,00,65,00,72,00,5c,00,6d,00,73,00,6d,00,73,00,67,00,73,00,\

2e,00,65,00,78,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{F9FFD19E-B9BA-4C0C-B088-A385F9E9A15B}]

"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,24,d8,03,00,00,00,00,00,58,90,\

97,ff,1f,c8,01,08,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\

61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,53,00,6f,00,66,00,74,\

00,77,00,69,00,6e,00,5c,00,42,00,69,00,74,00,44,00,65,00,66,00,65,00,6e,00,\

64,00,65,00,72,00,31,00,30,00,5c,00,62,00,64,00,6d,00,63,00,6f,00,6e,00,2e,\

00,65,00,78,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00

"Changed"=dword:00000000

 

[HKEY_CURRENT_USER\Software\3ivx]

 

[HKEY_CURRENT_USER\Software\epk_extr]

 

 

EWIDO:

__________________________________________________

ewido anti-spyware online scanner

http://www.ewido.net

__________________________________________________

 

 

Name: TrackingCookie.Tradedoubler

Path: C:\Documents and Settings\LOULOUTE\Cookies\louloute@tradedoubler[1].txt

Risk: Medium

 

Name: TrackingCookie.Serving-sys

Path: C:\Documents and Settings\LOULOUTE\Cookies\louloute@serving-sys[2].txt

Risk: Medium

 

Name: TrackingCookie.Serving-sys

Path: C:\Documents and Settings\LOULOUTE\Cookies\louloute@bs.serving-sys[2].txt

Risk: Medium

 

Name: TrackingCookie.Doubleclick

Path: C:\Documents and Settings\LOULOUTE\Cookies\louloute@doubleclick[1].txt

Risk: Medium

 

Name: TrackingCookie.Adviva

Path: C:\Documents and Settings\LOULOUTE\Cookies\louloute@adviva[2].txt

Risk: Medium

 

Name: TrackingCookie.Smartadserver

Path: C:\Documents and Settings\LOULOUTE\Cookies\louloute@smartadserver[2].txt

Risk: Medium

 

Name: TrackingCookie.Webtrends

Path: C:\Documents and Settings\LOULOUTE\Cookies\louloute@m.webtrends[1].txt

Risk: Medium

 

Name: TrackingCookie.Bluestreak

Path: C:\Documents and Settings\LOULOUTE\Cookies\louloute@bluestreak[2].txt

Risk: Medium

 

Name: TrackingCookie.Skype

Path: C:\WINDOWS\system32\config\systemprofile\Cookies\system@skype[1].txt

Risk: Medium

 

Name: TrackingCookie.Smartadserver

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@smartadserver[1].txt

Risk: Medium

 

Name: TrackingCookie.Doubleclick

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@doubleclick[1].txt

Risk: Medium

 

Name: TrackingCookie.Serving-sys

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@serving-sys[2].txt

Risk: Medium

 

Name: TrackingCookie.Mediaplex

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@mediaplex[1].txt

Risk: Medium

 

Name: TrackingCookie.Estat

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@estat[1].txt

Risk: Medium

 

Name: TrackingCookie.Hitbox

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@hitbox[2].txt

Risk: Medium

 

Name: TrackingCookie.Tradedoubler

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@tradedoubler[1].txt

Risk: Medium

 

Name: TrackingCookie.Hitbox

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@ehg-telecomitalia.hitbox[2].txt

Risk: Medium

 

Name: TrackingCookie.Serving-sys

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@bs.serving-sys[1].txt

Risk: Medium

 

Name: TrackingCookie.Atdmt

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@atdmt[2].txt

Risk: Medium

 

Name: TrackingCookie.Casinotropez

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@www.casinotropez[1].txt

Risk: Medium

 

Name: TrackingCookie.Webtrends

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@m.webtrends[2].txt

Risk: Medium

 

Name: TrackingCookie.2o7

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@2o7[2].txt

Risk: Medium

 

Name: TrackingCookie.Bluestreak

Path: C:\Documents and Settings\LOU.LOU_LOUTE\Cookies\lou@bluestreak[1].txt

Risk: Medium

 

Name: Dropper.Agent.dkn

Path: C:\Documents and Settings\LOULOUTE\Mes documents\Downloads\_PANTHEON_ anglais test SVCD (Album).zip/Setup.exe

Risk: High

 

Name: Dropper.Agent.dkn

Path: C:\Documents and Settings\LOULOUTE\Mes documents\Downloads\(Better Version) dofus 1 21 by TNT [Mix].zip/Setup.exe

Risk: High

 

Name: Dropper.Agent.dkn

Path: C:\Documents and Settings\LOULOUTE\Mes documents\Downloads\www.torrent.to dofus 1 21 by DONE (Full).zip/Setup.exe

Risk: High

 

Name: Not-A-Virus.Hoax.Win32.Agent.o

Path: C:\Documents and Settings\LOULOUTE\Bureau\LOU2\Mes documents\Downloads\----- mypal ----- 2007.zip/Setup.exe

Risk: Low

 

Name: Dropper.Agent.dtk

Path: C:\Documents and Settings\LOULOUTE\Bureau\Web-MediaPlayer_setup.exe

Risk: High

 

Name: Dropper.Agent.dkn

Path: C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP207\A0053975.exe

Risk: High

 

Name: Downloader.Agent.fct

Path: C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP211\A0059355.exe

Risk: High

 

Name: Downloader.Agent.dwc

Path: C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP211\A0059356.exe

Risk: High

 

Name: Downloader.Agent.dwe

Path: C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP221\A0063586.exe

Risk: High

 

Name: Downloader.Agent.dwe

Path: C:\_OTMoveIt\MovedFiles\03222008_143526\Documents and Settings\LOULOUTE\Application Data\WinButler\WinBuninstaller.exe

Risk: High

 

 

[HKEY_LOCAL_MACHINE\Software\lameme]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ExtraFilmHemmaAgent"="\"C:\\Program Files\\WistitiSoft\\Agent.exe\""

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"WLanCfg.exe"="C:\\Program Files\\Gemtek 11Mbps WMonitor\\WLanCfg.exe"

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.2\\Apps\\apdproxy.exe\""

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\IrfanView]

"Order"=hex:08,00,00,00,02,00,00,00,f2,04,00,00,01,00,00,00,09,00,00,00,88,\

00,00,00,00,00,00,00,7a,00,00,00,41,75,67,4d,02,00,00,00,01,00,00,00,68,00,\

32,00,24,02,00,00,58,37,10,86,20,00,41,42,4f,55,54,49,7e,31,2e,4c,4e,4b,00,\

00,3e,00,03,00,04,00,ef,be,58,37,10,86,5a,37,00,b0,14,00,00,00,41,00,62,00,\

6f,00,75,00,74,00,20,00,49,00,72,00,66,00,61,00,6e,00,56,00,69,00,65,00,77,\

00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,0e,00,00,00,0a,00,ef,be,00,00,00,00,\

1c,00,00,00,00,00,00,00,00,00,90,00,00,00,01,00,00,00,82,00,00,00,41,75,67,\

4d,02,00,00,00,01,00,00,00,70,00,32,00,3a,02,00,00,58,37,10,86,20,00,41,56,\

41,49,4c,41,7e,32,2e,4c,4e,4b,00,00,46,00,03,00,04,00,ef,be,58,37,10,86,5a,\

37,00,b0,14,00,00,00,41,00,76,00,61,00,69,00,6c,00,61,00,62,00,6c,00,65,00,\

20,00,4c,00,61,00,6e,00,67,00,75,00,61,00,67,00,65,00,73,00,2e,00,6c,00,6e,\

00,6b,00,00,00,1c,00,0e,00,00,00,0a,00,ef,be,00,00,00,00,1c,00,00,00,00,00,\

00,00,00,00,8c,00,00,00,02,00,00,00,7e,00,00,00,41,75,67,4d,02,00,00,00,01,\

00,00,00,6c,00,32,00,30,02,00,00,58,37,10,86,20,00,41,56,41,49,4c,41,7e,31,\

2e,4c,4e,4b,00,00,42,00,03,00,04,00,ef,be,58,37,10,86,5a,37,00,b0,14,00,00,\

00,41,00,76,00,61,00,69,00,6c,00,61,00,62,00,6c,00,65,00,20,00,50,00,6c,00,\

75,00,67,00,49,00,6e,00,73,00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,0e,00,00,\

00,0a,00,ef,be,00,00,00,00,1c,00,00,00,00,00,00,00,00,00,92,00,00,00,03,00,\

00,00,84,00,00,00,41,75,67,4d,02,00,00,00,01,00,00,00,72,00,32,00,30,02,00,\

00,58,37,10,86,20,00,43,4f,4d,4d,41,4e,7e,31,2e,4c,4e,4b,00,00,48,00,03,00,\

04,00,ef,be,58,37,10,86,5a,37,00,b0,14,00,00,00,43,00,6f,00,6d,00,6d,00,61,\

00,6e,00,64,00,20,00,6c,00,69,00,6e,00,65,00,20,00,4f,00,70,00,74,00,69,00,\

6f,00,6e,00,73,00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,0e,00,00,00,0a,00,ef,\

be,00,00,00,00,1c,00,00,00,00,00,00,00,00,00,86,00,00,00,04,00,00,00,78,00,\

00,00,41,75,67,4d,02,00,00,00,01,00,00,00,66,00,32,00,2b,02,00,00,58,37,10,\

86,20,00,49,52,46,41,4e,56,7e,31,2e,4c,4e,4b,00,00,3c,00,03,00,04,00,ef,be,\

58,37,10,86,5a,37,00,b0,14,00,00,00,49,00,72,00,66,00,61,00,6e,00,56,00,69,\

00,65,00,77,00,20,00,34,00,2e,00,31,00,30,00,2e,00,6c,00,6e,00,6b,00,00,00,\

1c,00,0e,00,00,00,0a,00,ef,be,00,00,00,00,1c,00,00,00,00,00,00,00,00,00,96,\

00,00,00,05,00,00,00,88,00,00,00,41,75,67,4d,02,00,00,00,01,00,00,00,76,00,\

32,00,9f,05,00,00,58,37,10,86,20,00,49,52,46,41,4e,56,7e,32,2e,4c,4e,4b,00,\

00,4c,00,03,00,04,00,ef,be,58,37,10,86,5a,37,00,b0,14,00,00,00,49,00,72,00,\

66,00,61,00,6e,00,56,00,69,00,65,00,77,00,20,00,2d,00,20,00,54,00,68,00,75,\

00,6d,00,62,00,6e,00,61,00,69,00,6c,00,73,00,2e,00,6c,00,6e,00,6b,00,00,00,\

1c,00,0e,00,00,00,0a,00,ef,be,00,00,00,00,1c,00,00,00,00,00,00,00,00,00,86,\

00,00,00,06,00,00,00,78,00,00,00,41,75,67,4d,02,00,00,00,01,00,00,00,66,00,\

32,00,2b,02,00,00,58,37,10,86,20,00,49,52,46,41,4e,56,7e,33,2e,4c,4e,4b,00,\

00,3c,00,03,00,04,00,ef,be,58,37,10,86,5a,37,00,b0,14,00,00,00,49,00,72,00,\

66,00,61,00,6e,00,56,00,69,00,65,00,77,00,20,00,48,00,65,00,6c,00,70,00,2e,\

00,6c,00,6e,00,6b,00,00,00,1c,00,0e,00,00,00,0a,00,ef,be,00,00,00,00,1c,00,\

00,00,00,00,00,00,00,00,90,00,00,00,07,00,00,00,82,00,00,00,41,75,67,4d,02,\

00,00,00,01,00,00,00,70,00,32,00,3f,02,00,00,58,37,10,86,20,00,55,4e,49,4e,\

53,54,7e,31,2e,4c,4e,4b,00,00,46,00,03,00,04,00,ef,be,58,37,10,86,5a,37,00,\

b0,14,00,00,00,55,00,6e,00,69,00,6e,00,73,00,74,00,61,00,6c,00,6c,00,20,00,\

49,00,72,00,66,00,61,00,6e,00,56,00,69,00,65,00,77,00,2e,00,6c,00,6e,00,6b,\

00,00,00,1c,00,0e,00,00,00,0a,00,ef,be,00,00,00,00,1c,00,00,00,00,00,00,00,\

00,00,7e,00,00,00,08,00,00,00,70,00,00,00,41,75,67,4d,02,00,00,00,01,00,00,\

00,5e,00,32,00,30,02,00,00,58,37,10,86,20,00,57,48,41,54,27,53,7e,31,2e,4c,\

4e,4b,00,00,34,00,03,00,04,00,ef,be,58,37,10,86,5a,37,00,b0,14,00,00,00,57,\

00,68,00,61,00,74,00,27,00,73,00,20,00,4e,00,65,00,77,00,2e,00,6c,00,6e,00,\

6b,00,00,00,1c,00,0e,00,00,00,0a,00,ef,be,00,00,00,00,1c,00,00,00,00,00,00,\

00,00,00

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Microsoft Games]

"Order"=hex:08,00,00,00,02,00,00,00,8e,00,00,00,01,00,00,00,01,00,00,00,82,\

00,00,00,00,00,00,00,74,00,00,00,41,75,67,4d,02,00,00,00,01,00,00,00,62,00,\

31,00,00,00,00,00,04,37,1b,49,10,00,41,47,45,4f,46,45,7e,31,00,00,3c,00,03,\

00,04,00,ef,be,04,37,1b,49,03,37,00,b0,14,00,00,00,41,00,67,00,65,00,20,00,\

6f,00,66,00,20,00,45,00,6d,00,70,00,69,00,72,00,65,00,73,00,20,00,49,00,49,\

00,49,00,00,00,18,00,0e,00,00,00,0a,00,ef,be,00,00,00,00,18,00,00,00,00,00,\

00,00,00,00

 

 

Et Malawrebytes :

Malwarebytes' Anti-Malware 1.09

Version de la base de données: 521

 

Type de recherche: Examen complet (C:\|D:\|)

Eléments examinés: 101497

Temps écoulé: 21 minute(s), 37 second(s)

 

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 7

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 4

Fichier(s) infecté(s): 6

 

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Clé(s) du Registre infectée(s):

HKEY_CLASSES_ROOT\Interface\{6c51f7e9-8542-4f25-a30f-2060157752e1} (Trojan.Downloader) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{9d573d0e-663c-435f-bf31-2c4497373c41} (Trojan.Downloader) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{b1e68d42-02c4-465b-8368-5ed9b732e22d} (Trojan.Downloader) -> No action taken.

HKEY_CLASSES_ROOT\Typelib\{90a52f08-64ac-4dc6-9d7d-4516670275d3} (Trojan.Downloader) -> No action taken.

HKEY_CLASSES_ROOT\AppID\{90a52f08-64ac-4dc6-9d7d-4516670275d3} (Trojan.Downloader) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webmediaplayer (Adware.EGDAccess) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\WebMediaPlayer.exe (Adware.EGDAccess) -> No action taken.

 

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

 

Dossier(s) infecté(s):

C:\Program Files\WebMediaPlayer (Adware.EGDAccess) -> No action taken.

C:\Program Files\WebMediaPlayer\resources (Adware.EGDAccess) -> No action taken.

C:\Program Files\WebMediaPlayer\skins (Adware.EGDAccess) -> No action taken.

C:\Program Files\WebMediaPlayer\updates (Adware.EGDAccess) -> No action taken.

 

Fichier(s) infecté(s):

C:\Program Files\WebMediaPlayer\uninst.exe (Adware.EGDAccess) -> No action taken.

C:\Program Files\WebMediaPlayer\sqlite3.dll (Adware.EGDAccess) -> No action taken.

C:\Program Files\WebMediaPlayer\WebMediaPlayer.exe (Adware.EGDAccess) -> No action taken.

C:\WINDOWS\system32\iffhsp_navps.dat (Adware.EGDAccess) -> No action taken.

C:\WINDOWS\system32\nvs2.inf (Adware.EGDAccess) -> No action taken.

C:\Documents and Settings\All Users\Bureau\WebMediaPlayer.lnk (Adware.EGDAccess) -> No action taken.

 

 

Voilà tout ce que j'ai pour l'instant. Merci

oGu Godlike Member

oGu

Posté(e)
Posté(e) (modifié)

Re; c'est plus infecté que prévu, HijackThis n'a aps tout montré.

 

Tes rapports montrent des traces d'un gros rootkit (Egdaccess) car tu as installé un rogue du nom de WebMediaPlayer...

 

En attendant, essaie de faire un scan Kaspersky non pas en sans échec (dans ce mode-là, tu n'as pas accès au web, d'où les difficultés de mise à jour) mais en mode normal avec scan on-line, en suivant ce tuto:

 

http://www.malekal.com/scan_Av_en_ligne.php#mozTocId291566

 

 

Puis je te reprendrai dans la semaine, week-end pascal en province oblige !!

Modifié par oGu
Pascal62 Member

Pascal62

Posté(e)
  • Auteur
Posté(e)
Re; c'est plus infecté que prévu, HijackThis n'a aps tout montré.

 

Tes rapports montrent des traces d'un gros rootkit (Egdaccess) car tu as installé un rogue du nom de WebMediaPlayer...

 

En attendant, essaie de faire un scan Kaspersky non pas en sans échec (dans ce mode-là, tu n'as pas accès au web, d'où les difficultés de mise à jour) mais en mode normal avec scan on-line, en suivant ce tuto:

 

http://www.malekal.com/scan_Av_en_ligne.php#mozTocId291566

 

 

Puis je te reprendrai dans la semaine, week-end pascal en province oblige !!

 

OK je fais ça merci et bon voyage :P

Pascal62 Member

Pascal62

Posté(e)
  • Auteur
Posté(e)

Bonjour!

voici mon dernier avec Kapersky :

-------------------------------------------------------------------------------

KASPERSKY ON-LINE SCANNER REPORT

Monday, March 24, 2008 10:49:14 PM

Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)

Kaspersky On-line Scanner version : 5.0.83.0

Dernière mise à jour de la base antivirus Kaspersky : 24/03/2008

Enregistrements dans la base antivirus Kaspersky : 593625

-------------------------------------------------------------------------------

 

Paramètres d'analyse:

Analyser avec la base antivirus suivante: standard

Analyser les archives: vrai

Analyser les bases de messagerie: vrai

 

Cible de l'analyse - Poste de travail:

C:\

D:\

E:\

F:\

 

Statistiques de l'analyse:

Total d'objets analysés: 75599

Nombre de virus trouvés: 9

Nombre d'objets infectés: 25 / 0

Nombre d'objets suspects: 0

Durée de l'analyse: 01:40:24

 

Nom de l'objet infecté / Nom du virus / Dernière action

C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\Internet.evt L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\Antivirus.Evt L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\DEFAULT L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SOFTWARE L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SYSTEM L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré

C:\WINDOWS\system32\drivers\sptd.sys L'objet est verrouillé ignoré

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré

C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré

C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré

C:\WINDOWS\system32\CatRoot2\edbtmp.log L'objet est verrouillé ignoré

C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré

C:\WINDOWS\Temp\Perflib_Perfdata_644.dat L'objet est verrouillé ignoré

C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré

C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré

C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré

C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré

C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré

C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat L'objet est verrouillé ignoré

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat L'objet est verrouillé ignoré

C:\Documents and Settings\All Users\Application Data\McAfee.com\Agent\Logs\TaskScheduler\McTskshd000.log L'objet est verrouillé ignoré

C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Db\PrdMgr_LOU_LOUTE.log L'objet est verrouillé ignoré

C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Db\Agent_LOU_LOUTE.log L'objet est verrouillé ignoré

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré

C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré

C:\Documents and Settings\NetworkService\ntuser.dat L'objet est verrouillé ignoré

C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré

C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré

C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré

C:\Documents and Settings\LocalService\ntuser.dat L'objet est verrouillé ignoré

C:\Documents and Settings\LOULOUTE\ntuser.dat.LOG L'objet est verrouillé ignoré

C:\Documents and Settings\LOULOUTE\Local Settings\Temp\WCESLog.log L'objet est verrouillé ignoré

C:\Documents and Settings\LOULOUTE\Local Settings\Temp\Acr6760.tmp L'objet est verrouillé ignoré

C:\Documents and Settings\LOULOUTE\Local Settings\Temp\Acr67B0.tmp L'objet est verrouillé ignoré

C:\Documents and Settings\LOULOUTE\Local Settings\Temp\Acr6767.tmp L'objet est verrouillé ignoré

C:\Documents and Settings\LOULOUTE\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré

C:\Documents and Settings\LOULOUTE\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré

C:\Documents and Settings\LOULOUTE\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat L'objet est verrouillé ignoré

C:\Documents and Settings\LOULOUTE\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré

C:\Documents and Settings\LOULOUTE\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré

C:\Documents and Settings\LOULOUTE\Mes documents\Downloads\_PANTHEON_ anglais test SVCD (Album).zip/Setup.exe Infecté : Trojan-Dropper.Win32.Agent.dkn ignoré

C:\Documents and Settings\LOULOUTE\Mes documents\Downloads\_PANTHEON_ anglais test SVCD (Album).zip ZIP: infecté - 1 ignoré

C:\Documents and Settings\LOULOUTE\Bureau\LOU2\Mes documents\Downloads\----- mypal ----- 2007.zip/Setup.exe Infecté : not-virus:Hoax.Win32.Agent.o ignoré

C:\Documents and Settings\LOULOUTE\Bureau\LOU2\Mes documents\Downloads\----- mypal ----- 2007.zip ZIP: infecté - 1 ignoré

C:\Documents and Settings\LOULOUTE\Bureau\Web-MediaPlayer_setup.exe Infecté : Trojan-Dropper.Win32.Agent.dtk ignoré

C:\Documents and Settings\LOULOUTE\Cookies\index.dat L'objet est verrouillé ignoré

C:\Documents and Settings\LOULOUTE\Application Data\$_hpcst$.hpc L'objet est verrouillé ignoré

C:\Documents and Settings\LOULOUTE\ntuser.dat L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\chandir.idx L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\D0000000.FCS L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\chandir.dat L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\inuse.txt L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\main.log L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\storydb.dat L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\storydb.idx L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\chn.dat L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\chn.idx L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\prs_die.dat L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\prs_die.idx L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\prs_dnd.dat L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\prs_dnd.idx L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\prs_ext.dat L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\prs_ext.idx L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\prs_rcv.dat L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\prs_rcv.idx L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\prs.dat L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\prs.idx L'objet est verrouillé ignoré

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\L0000008.FCS L'objet est verrouillé ignoré

C:\Program Files\Alwil Software\Avast4\DATA\INTEG\avast.int L'objet est verrouillé ignoré

C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db L'objet est verrouillé ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP207\A0053975.exe Infecté : Trojan-Dropper.Win32.Agent.dkn ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP211\A0059355.exe Infecté : Trojan-Downloader.Win32.Agent.fct ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP211\A0059356.exe Infecté : Trojan-Downloader.Win32.Agent.fjg ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP221\A0063586.exe Infecté : Trojan-Downloader.Win32.Agent.dwe ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP234\A0067377.sys Infecté : Trojan-Downloader.Win32.Bagle.lm ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP234\A0067405.sys Infecté : Trojan-Downloader.Win32.Bagle.lm ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP234\A0067433.sys Infecté : Trojan-Downloader.Win32.Bagle.lm ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP234\A0068432.sys Infecté : Trojan-Downloader.Win32.Bagle.lm ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP234\A0068459.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP234\A0068460.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP234\A0069436.sys Infecté : Trojan-Downloader.Win32.Bagle.lm ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP234\A0069438.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP234\A0069439.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP234\A0069572.sys Infecté : Trojan-Downloader.Win32.Bagle.lm ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP234\A0069674.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP234\A0069675.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP235\A0070194.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP235\A0070200.exe Infecté : Trojan-Downloader.Win32.Bagle.ij ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP235\A0070201.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{0E53C2D2-603D-4B01-84F6-6DE602018BFB}\RP237\change.log L'objet est verrouillé ignoré

C:\_OTMoveIt\MovedFiles\03222008_143526\Documents and Settings\LOULOUTE\Application Data\WinButler\WinBuninstaller.exe Infecté : Trojan-Downloader.Win32.Agent.dwe ignoré

 

Analyse terminée.

 

 

Merci

oGu Godlike Member

oGu

Posté(e)
Posté(e) (modifié)

Re!

 

Merci pour les scans, on y reviendra en fin de procédure.

 

On va maintenant supprimer ton adware rootkité :

 

 

  • Désactive ton antivirus
  • Télécharge NaviLog1 de IL-MAFIOSO sur ton bureau
  • Installe-le en double-cliquant dessus.
  • Une fenêtre noire apparaît: tape F puis Entrée

  • Un avertissement s'affiche: clique sur n'importe quelle touche du clavier.
  • Le fix vérifie son installation: tape à nouveau sur une touche quelconque pour passer à l'autre étape
  • Le menu du fix s'ouvre: choisis l'option 1 en tapant sur la touche 1 du clavier, puis appuis sur la touche Entrée.
     

  • La vérification du système s'effectue alors: cela peut prendre plusieurs minutes (de 5 à 10min), sois patient et ne touche à rien.
  • Le rapport s'ouvre à la fin de la procédure: enregistre-le sur ton bureau
  • Copie le contenu du rapport et poste-le dans ta réponse

Modifié par oGu
Pascal62 Member

Pascal62

Posté(e)
  • Auteur
Posté(e)

Bonsoir bon voici le résultat de Navilog

 

Search Navipromo version 3.5.1 commencé le 27/03/2008 à 20:40:10,90

 

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!

!!! Postez ce rapport sur le forum pour le faire analyser !!!

!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

 

Outil exécuté depuis C:\Program Files\navilog1

Session actuelle : "LOULOUTE"

 

Mise à jour le 23.03.2008 à 22h00 par IL-MAFIOSO

 

 

Microsoft Windows XP [version 5.1.2600]

Internet Explorer : 7.0.5730.11

Système de fichiers : FAT32

 

Executé en mode normal

 

*** Recherche Programmes installés ***

 

 

WebMediaPlayer

 

 

*** Recherche dossiers dans C:\WINDOWS ***

 

 

 

*** Recherche dossiers dans C:\Program Files ***

 

C:\Program Files\WebMediaPlayer trouvé !

 

 

*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***

 

 

 

 

*** Recherche dossiers dans "C:\Documents and Settings\LOULOUTE\applic~1" ***

 

 

 

*** Recherche dossiers dans "C:\Documents and Settings\LOULOUTE\locals~1\applic~1" ***

 

 

 

*** Recherche dossiers dans "C:\Documents and Settings\LOULOUTE\menud+~1\progra~1" ***

 

 

*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUD?~1\PROGRA~1 ***

 

...\WebMediaPlayer trouvé !

 

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***

pour + d'infos : http://www.gmer.net

 

Fichier(s) caché(s) :

 

C:\WINDOWS\system32\zcwzxkjch_nav.dat 425984 bytes

C:\WINDOWS\system32\zcwzxkjch.exe 393216 bytes

C:\WINDOWS\system32\zcwzxkjch.dat 32768 bytes

C:\WINDOWS\system32\zcwzxkjch_navps.dat 32768 bytes

 

 

 

*** Recherche avec GenericNaviSearch ***

!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!

!!! A vérifier impérativement avant toute suppression manuelle !!!

 

* Recherche dans C:\WINDOWS\system32 *

 

Fichiers suspects :

 

C:\WINDOWS\system32\zcwzxkjch.exe trouvé !

 

* Recherche dans "C:\Documents and Settings\LOULOUTE\locals~1\applic~1" *

 

* Recherche dans "C:\docume~1\LOUTE\locals~1\applic~1" *

 

* Recherche dans "C:\docume~1\LOU\locals~1\applic~1" *

 

* Recherche dans "C:\docume~1\LOU.LOU_LOUTE\locals~1\applic~1" *

 

* Recherche dans "C:\docume~1\Administrateur\locals~1\applic~1" *

 

 

 

*** Recherche fichiers ***

 

 

C:\DOCUME~1\ALLUSE~1\BUREAU\WebMediaPlayer.lnk trouvé !

C:\WINDOWS\pack.epk trouvé !

C:\WINDOWS\system32\nvs2.inf trouvé !

 

 

*** Recherche clés spécifiques dans le Registre ***

 

HKEY_CURRENT_USER\Software\Lanconfig trouvé !

 

*** Module de Recherche complémentaire ***

(Recherche fichiers spécifiques)

 

1)Recherche nouveaux fichiers Instant Access :

 

 

2)Recherche Heuristique :

 

* Dans C:\WINDOWS\system32 :

 

iffhsp.dat trouvé !

zcwzxkjch.dat trouvé !

iffhsp_navps.dat trouvé !

zcwzxkjch_navps.dat trouvé !

 

* Dans "C:\Documents and Settings\LOULOUTE\locals~1\applic~1" :

 

 

* Dans "C:\docume~1\LOUTE\locals~1\applic~1" :

 

 

* Dans "C:\docume~1\LOU\locals~1\applic~1" :

 

 

* Dans "C:\docume~1\LOU.LOU_LOUTE\locals~1\applic~1" :

 

 

* Dans "C:\docume~1\Administrateur\locals~1\applic~1" :

 

 

3)Recherche Certificats :

 

Certificat Egroup trouvé !

Certificat Electronic-Group trouvé !

Certificat OOO-Favorit trouvé !

Certificat Sunny-Day-Design-Ltd absent !

 

4)Recherche fichiers connus :

 

 

 

*** Analyse terminée le 27/03/2008 à 20:42:03,90 ***

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...