Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Google Redirection and 'My Security Shield'


  • This topic is locked This topic is locked
3 replies to this topic

#1 NoMatches

NoMatches

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:07:14 AM

Posted 31 December 2010 - 04:11 AM

We managed to get the 'My Security Shield' malware which produced repeated popups and started redirecting google searches from firefox (though not, surprisingly, from IE). I followed the instructions on this forum which has meant that the 'My Security Shield' popups and process no longer run but the irritating google redirects are still there (using the google cache is my current workaround).

I ran a spybot scan which picked things up and supposedly fixed them but nothing relevant it seems. I removed AVG and used MBAM which also found things and 'fixed' them but the redirects are still present.

I thought the issue might be to do with the hosts file so I replaced it with a fresh copy but still no success. I also set firefox back to 'no proxy' but the problem remains.

I get the impression that this mythical 'combofix' might do the job the stern and insistent warnings all over the internet have prevented me from trying this so far. Also, combofix, if I try to run it, claims that AVG is still installed (I have removed it and deleted any registry keys that might let it know that AVG is still installed).

I recognise that there is a very similar issue to mine a few posts below but, true to the warnings, I dare not run combofix unless I am "specifically asked to by a helper".

My DDS and gmer logs are below.

Thanks in advance for any help.

[[DDS]]

DDS (Ver_10-12-12.02) - NTFSx86
Run by [Username] at 14:14:46.68 on Fri 31/12/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_18
Microsoft Windows XP Home Edition 5.1.2600.3.1252.61.1033.18.1015.382 [GMT 11:00]

FW: COMODO Firewall Pro *Disabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\LxrSII1s.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\[Username]\My Documents\Downloads\dds.scr

============== Pseudo HJT Report ===============

BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {515AB855-A175-436A-BC5C-0E4F50A023A5} - No File
uRun: [ModemOnHold] c:\program files\netwaiting\netWaiting.exe
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [IntelWireless] c:\program files\intel\wireless\bin\ifrmewrk.exe /tf Intel PROSet/Wireless
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon
mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\servic~1.lnk - c:\program files\microsoft sql server\80\tools\binn\sqlmangr.exe
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1139624425468
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1139626782062
DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - hxxp://download.shockwave.com/pub/otoy/OTOYAX.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_07-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} - hxxp://www.shockwave.com/content/feedingfrenzy/sis/SproutLauncher.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} - hxxp://h30155.www3.hp.com/ediags/hpfix/sj/en/check/qdiagh.cab?326
Notify: igfxcui - igfxdev.dll
Notify: IntelWireless - c:\program files\intel\wireless\bin\LgNotify.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\[Username]\applic~1\mozilla\firefox\profiles\k9p8tkj4.default\
FF - prefs.js: browser.startup.homepage - www.google.com.au
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
FF - plugin: c:\program files\canon\easy-photoprint ex\NPEZFFPI.DLL
FF - plugin: c:\program files\mozilla firefox\plugins\npcnc32.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npigl.dll
FF - plugin: c:\program files\mozilla firefox\plugins\NPMGWRAP.DLL
FF - plugin: c:\program files\musicnotes\npmusicn.dll
FF - plugin: c:\program files\musicnotes\NPSibelius.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

============= SERVICES / DRIVERS ===============

R2 LxrSII1d;Secure II Driver;c:\windows\system32\drivers\LxrSII1d.sys [2007-1-18 70016]
S0 ntcdrdrv;ntcdrdrv;c:\windows\system32\drivers\ntcdrdrv.sys --> c:\windows\system32\drivers\ntcdrdrv.sys [?]
S3 hp4200c;%usbscan.SvcDesc%;c:\windows\system32\drivers\HP4200C.SYS [2006-12-11 9312]
S3 kndisuio;kndisuio;\??\c:\docume~1\[Username]\locals~1\temp\kndisuio.sys --> c:\docume~1\[Username]\locals~1\temp\kndisuio.sys [?]
S3 oUltraf;oUltraf;\??\c:\docume~1\[Username]\locals~1\temp\oultraf.sys --> c:\docume~1\[Username]\locals~1\temp\oUltraf.sys [?]
S3 PVUSB;CESG502 USB Driver;c:\windows\system32\drivers\CESG502.SYS [2009-1-29 40672]
S3 qsmclib;qsmclib;\??\c:\docume~1\[Username]\locals~1\temp\qsmclib.sys --> c:\docume~1\[Username]\locals~1\temp\qsmclib.sys [?]

=============== Created Last 30 ================

2067-05-21 11:35:22 106496 ----a-w- c:\program files\microsoft games\impossible creatures\Filesystem.dll
2010-12-30 22:58:49 -------- d-----w- c:\docume~1\[Username]\applic~1\Malwarebytes
2010-12-30 22:58:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-30 22:58:38 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-12-30 22:58:33 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-30 22:58:33 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-12-30 21:21:33 388096 ----a-r- c:\docume~1\[username]\applic~1\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2010-12-30 21:21:32 -------- d-----w- c:\program files\Trend Micro
2010-12-30 12:03:33 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-12-30 12:03:33 -------- d-----w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2010-12-16 06:33:37 40960 ------w- c:\windows\system32\dllcache\ndproxy.sys
2010-12-16 06:32:02 45568 ------w- c:\windows\system32\dllcache\wab.exe
2010-12-11 02:31:39 -------- d--h--w- c:\docume~1\alluse~1\applic~1\CanonIJEGV
2010-12-11 01:41:35 -------- d-----w- c:\program files\common files\CANON
2010-12-11 01:10:30 -------- d-----w- c:\docume~1\alluse~1\applic~1\CanonIJSetup000
2010-12-11 01:09:37 303104 ----a-w- c:\windows\system32\CNC250L.dll
2010-12-11 01:09:36 1310720 ----a-w- c:\windows\system32\CNC250C.dll
2010-12-11 01:09:36 110592 ----a-w- c:\windows\system32\CNC250I.dll
2010-12-11 01:09:35 70656 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\CNMPP9W.DLL
2010-12-11 01:09:35 15872 ----a-w- c:\windows\system32\CNHMCA.dll
2010-12-11 01:09:35 106496 ----a-w- c:\windows\system32\CNC250U.dll
2010-12-11 01:09:34 27648 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\CNMPD9W.DLL
2010-12-11 01:09:32 272384 ----a-w- c:\windows\system32\CNMLM9W.DLL
2010-12-11 01:08:05 178176 ----a-w- c:\windows\system32\CNMIU9W.DLL

==================== Find3M ====================

2010-11-29 06:38:30 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 06:38:30 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-11-18 18:12:44 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-06 00:26:58 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26:58 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26:58 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25:54 385024 ----a-w- c:\windows\system32\html.iec
2010-10-28 13:13:22 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:25:00 1853312 ----a-w- c:\windows\system32\win32k.sys

============= FINISH: 14:16:24.51 ===============

[[GMER]]

GMER 1.0.15.15530 - http://www.gmer.net
Rootkit scan 2010-12-31 20:01:08
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 Hitachi_HTS541080G9AT00 rev.MB4OA61A
Running: gmer.exe; Driver: C:\DOCUME~1\[Username]\LOCALS~1\Temp\fxtdapob.sys


---- Kernel code sections - GMER 1.0.15 ----

? C:\DOCUME~1\[Username]\LOCALS~1\Temp\mbr.sys The system cannot find the file specified. !

---- User code sections - GMER 1.0.15 ----

.text C:\WINDOWS\Explorer.EXE[172] Explorer.EXE 01002583 2 Bytes [AC, 18]
.text C:\WINDOWS\Explorer.EXE[172] Explorer.EXE 01002597 14 Bytes [8B, FF, 55, 8B, EC, 56, 57, ...]
.text C:\WINDOWS\Explorer.EXE[172] kernel32.dll!CreateProcessInternalW 7C8197B0 5 Bytes JMP 00B47247
.text C:\Program Files\Mozilla Firefox\firefox.exe[432] ntdll.dll!LdrLoadDll 7C9163C3 5 Bytes JMP 004013F0 C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[432] WS2_32.dll!closesocket 71AB3E2B 5 Bytes JMP 00156126
.text C:\Program Files\Mozilla Firefox\firefox.exe[432] WS2_32.dll!send 71AB4C27 5 Bytes JMP 00155CAE
.text C:\Program Files\Mozilla Firefox\firefox.exe[432] WS2_32.dll!WSARecv 71AB4CB5 5 Bytes JMP 00155EAB
.text C:\Program Files\Mozilla Firefox\firefox.exe[432] WS2_32.dll!gethostbyname 71AB5355 5 Bytes JMP 00156407
.text C:\Program Files\Mozilla Firefox\firefox.exe[432] WS2_32.dll!recv 71AB676F 5 Bytes JMP 00155D21
.text C:\Program Files\Mozilla Firefox\firefox.exe[432] WS2_32.dll!WSASend 71AB68FA 5 Bytes JMP 00155DFC
.text C:\WINDOWS\system32\SearchIndexer.exe[1072] kernel32.dll!WriteFile 7C810E27 7 Bytes JMP 00585C0C C:\WINDOWS\system32\MSSRCH.DLL (mssrch.dll/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

Device \FileSystem\Cdfs \Cdfs tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)

---- Registry - GMER 1.0.15 ----

Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@AppInit_DLLs
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@DeviceNotSelectedTimeout 15
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@GDIProcessHandleQuota 10000
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@Spooler yes
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@swapdisk
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@TransmissionRetryTimeout 90
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@USERProcessHandleQuota 10000
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@LoadAppInit_DLLs 1
Reg HKLM\SOFTWARE\Classes\.acp@ RealJukebox.ACP.1
Reg HKLM\SOFTWARE\Classes\.acp@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.acp@Content Type audio/x-mei-aac
Reg HKLM\SOFTWARE\Classes\.acp@Office.ActorPreview
Reg HKLM\SOFTWARE\Classes\.acp\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.acp\OpenWithProgIds@RealJukebox.ACP.1
Reg HKLM\SOFTWARE\Classes\.awb@ RealPlayer.AMR_WB.10
Reg HKLM\SOFTWARE\Classes\.awb@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.awb\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.awb\OpenWithProgIds@RealPlayer.AMR_WB.10
Reg HKLM\SOFTWARE\Classes\.divx@ RealPlayer.DIVX.6
Reg HKLM\SOFTWARE\Classes\.divx@PerceivedType video
Reg HKLM\SOFTWARE\Classes\.divx@Content Type ICM.DIV6
Reg HKLM\SOFTWARE\Classes\.divx\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.divx\OpenWithProgIds@RealPlayer.DIVX.6
Reg HKLM\SOFTWARE\Classes\.EVR@ RealPlayer.EVRC.10
Reg HKLM\SOFTWARE\Classes\.EVR@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.EVR@Content Type audio/evrc-qcp
Reg HKLM\SOFTWARE\Classes\.EVR\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.EVR\OpenWithProgIds@RealPlayer.EVRC.10
Reg HKLM\SOFTWARE\Classes\.EVRC@ RealPlayer.EVRC.10
Reg HKLM\SOFTWARE\Classes\.EVRC@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.EVRC@Content Type audio/evrc-qcp
Reg HKLM\SOFTWARE\Classes\.EVRC\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.EVRC\OpenWithProgIds@RealPlayer.EVRC.10
Reg HKLM\SOFTWARE\Classes\.flv@ RealPlayer.FLV.6
Reg HKLM\SOFTWARE\Classes\.flv@PerceivedType video
Reg HKLM\SOFTWARE\Classes\.flv@Content Type video/x-flv
Reg HKLM\SOFTWARE\Classes\.flv\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.flv\OpenWithProgIds@RealPlayer.FLV.6
Reg HKLM\SOFTWARE\Classes\.ivr@ RealPlayer.IVR.6
Reg HKLM\SOFTWARE\Classes\.ivr@PerceivedType video
Reg HKLM\SOFTWARE\Classes\.ivr\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.ivr\OpenWithProgIds@RealPlayer.IVR.6
Reg HKLM\SOFTWARE\Classes\.m4e@ RealPlayer.MP4.6
Reg HKLM\SOFTWARE\Classes\.m4e@PerceivedType video
Reg HKLM\SOFTWARE\Classes\.m4e@Content Type video/mpeg4
Reg HKLM\SOFTWARE\Classes\.m4e\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.m4e\OpenWithProgIds@RealPlayer.MP4.6
Reg HKLM\SOFTWARE\Classes\.mp1\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.mp1\OpenWithProgIds@RealPlayer.MP1.6
Reg HKLM\SOFTWARE\Classes\.mpga@ RealPlayer.MPGA.6
Reg HKLM\SOFTWARE\Classes\.mpga@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.mpga@Content Type audio/rn-mpeg
Reg HKLM\SOFTWARE\Classes\.mpga\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.mpga\OpenWithProgIds@RealPlayer.MPGA.6
Reg HKLM\SOFTWARE\Classes\.mps@ RealPlayer.MPEG.6
Reg HKLM\SOFTWARE\Classes\.mps@PerceivedType video
Reg HKLM\SOFTWARE\Classes\.mps@Content Type video/x-mpeg
Reg HKLM\SOFTWARE\Classes\.mps\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.mps\OpenWithProgIds@RealPlayer.MPEG.6
Reg HKLM\SOFTWARE\Classes\.odp#@ odp#_auto_file
Reg HKLM\SOFTWARE\Classes\.ra@ RealPlayer.RA.6
Reg HKLM\SOFTWARE\Classes\.ra@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.ra@Content Type audio/vnd.rn-realaudio
Reg HKLM\SOFTWARE\Classes\.ra\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.ra\OpenWithProgIds@RealPlayer.RA.6
Reg HKLM\SOFTWARE\Classes\.ram@ RealPlayer.RAM.6
Reg HKLM\SOFTWARE\Classes\.ram@PerceivedType video
Reg HKLM\SOFTWARE\Classes\.ram@Content Type audio/x-pn-realaudio
Reg HKLM\SOFTWARE\Classes\.ram\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.ram\OpenWithProgIds@RealPlayer.RAM.6
Reg HKLM\SOFTWARE\Classes\.rax@ RealPlayer.RAX.6
Reg HKLM\SOFTWARE\Classes\.rax@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.rax\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rax\OpenWithProgIds@RealPlayer.RAX.6
Reg HKLM\SOFTWARE\Classes\.rjt@ RealJukebox.RJT.1
Reg HKLM\SOFTWARE\Classes\.rjt@Content Type application/vnd.rn-realsystem-rjt
Reg HKLM\SOFTWARE\Classes\.rjt\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rjt\OpenWithProgIds@RealJukebox.RJT.1
Reg HKLM\SOFTWARE\Classes\.rm@ RealPlayer.RM.6
Reg HKLM\SOFTWARE\Classes\.rm@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.rm@Content Type application/vnd.rn-realmedia
Reg HKLM\SOFTWARE\Classes\.rm\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rm\OpenWithProgIds@RealPlayer.RM.6
Reg HKLM\SOFTWARE\Classes\.rmj@ RealJukebox.RMJ.1
Reg HKLM\SOFTWARE\Classes\.rmj@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.rmj@Content Type application/vnd.rn-realsystem-rmj
Reg HKLM\SOFTWARE\Classes\.rmj\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rmj\OpenWithProgIds@RealJukebox.RMJ.1
Reg HKLM\SOFTWARE\Classes\.rmm@ RealPlayer.RAM.6
Reg HKLM\SOFTWARE\Classes\.rmm@PerceivedType video
Reg HKLM\SOFTWARE\Classes\.rmm@Content Type audio/x-pn-realaudio
Reg HKLM\SOFTWARE\Classes\.rmm\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rmm\OpenWithProgIds@RealPlayer.RAM.6
Reg HKLM\SOFTWARE\Classes\.rms@ RealPlayer.RMS.6
Reg HKLM\SOFTWARE\Classes\.rms@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.rms@Content Type application/vnd.rn-realmedia-secure
Reg HKLM\SOFTWARE\Classes\.rms\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rms\OpenWithProgIds@RealPlayer.RMS.6
Reg HKLM\SOFTWARE\Classes\.rmvb@ RealPlayer.RMVB.6
Reg HKLM\SOFTWARE\Classes\.rmvb@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.rmvb@Content Type application/vnd.rn-realmedia-vbr
Reg HKLM\SOFTWARE\Classes\.rmvb\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rmvb\OpenWithProgIds@RealPlayer.RMVB.6
Reg HKLM\SOFTWARE\Classes\.rmx@ RealJukebox.RMX.1
Reg HKLM\SOFTWARE\Classes\.rmx@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.rmx@Content Type application/vnd.rn-realsystem-rmx
Reg HKLM\SOFTWARE\Classes\.rmx\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rmx\OpenWithProgIds@RealJukebox.RMX.1
Reg HKLM\SOFTWARE\Classes\.rnx@ RealPlayer.RP.6
Reg HKLM\SOFTWARE\Classes\.rnx@Content Type application/vnd.rn-realplayer
Reg HKLM\SOFTWARE\Classes\.rnx\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rnx\OpenWithProgIds@RealPlayer.RP.6
Reg HKLM\SOFTWARE\Classes\.rp@ RealPlayer.PIX.6
Reg HKLM\SOFTWARE\Classes\.rp@Content Type image/vnd.rn-realpix
Reg HKLM\SOFTWARE\Classes\.rp\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rp\OpenWithProgIds@RealPlayer.PIX.6
Reg HKLM\SOFTWARE\Classes\.rpm@Content Type audio/x-pn-realaudio-plugin
Reg HKLM\SOFTWARE\Classes\.rpm@CLSID {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}
Reg HKLM\SOFTWARE\Classes\.rsml@ RealPlayer.RSML.6
Reg HKLM\SOFTWARE\Classes\.rsml@PerceivedType video
Reg HKLM\SOFTWARE\Classes\.rsml@Content Type application/vnd.rn-rsml
Reg HKLM\SOFTWARE\Classes\.rsml\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rsml\OpenWithProgIds@RealPlayer.RSML.6
Reg HKLM\SOFTWARE\Classes\.rt@ RealPlayer.RT.6
Reg HKLM\SOFTWARE\Classes\.rt@Content Type text/vnd.rn-realtext
Reg HKLM\SOFTWARE\Classes\.rt\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rt\OpenWithProgIds@RealPlayer.RT.6
Reg HKLM\SOFTWARE\Classes\.rv@ RealPlayer.RV.6
Reg HKLM\SOFTWARE\Classes\.rv@PerceivedType video
Reg HKLM\SOFTWARE\Classes\.rv@Content Type video/vnd.rn-realvideo
Reg HKLM\SOFTWARE\Classes\.rv\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rv\OpenWithProgIds@RealPlayer.RV.6
Reg HKLM\SOFTWARE\Classes\.rvx@ RealPlayer.RVX.6
Reg HKLM\SOFTWARE\Classes\.rvx@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.rvx\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.rvx\OpenWithProgIds@RealPlayer.RVX.6
Reg HKLM\SOFTWARE\Classes\.sol@Content Type text/plain
Reg HKLM\SOFTWARE\Classes\.sol\PersistentHandler
Reg HKLM\SOFTWARE\Classes\.sol\PersistentHandler@ {5e941d80-bf96-11cd-b579-08002b30bfeb}
Reg HKLM\SOFTWARE\Classes\.sor@Content Type text/plain
Reg HKLM\SOFTWARE\Classes\.sor\PersistentHandler
Reg HKLM\SOFTWARE\Classes\.sor\PersistentHandler@ {eec97550-47a9-11cf-b952-00aa0051fe20}
Reg HKLM\SOFTWARE\Classes\.ssm@ SSM
Reg HKLM\SOFTWARE\Classes\.ssm@PerceivedType video
Reg HKLM\SOFTWARE\Classes\.ssm@Content Type application/streamingmedia
Reg HKLM\SOFTWARE\Classes\.ssm\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.ssm\OpenWithProgIds@SSM
Reg HKLM\SOFTWARE\Classes\.xpl@ RealPlayer.PLSPL.6
Reg HKLM\SOFTWARE\Classes\.xpl@PerceivedType audio
Reg HKLM\SOFTWARE\Classes\.xpl@Content Type audio/scpls
Reg HKLM\SOFTWARE\Classes\.xpl\OpenWithProgIds
Reg HKLM\SOFTWARE\Classes\.xpl\OpenWithProgIds@RealPlayer.PLSPL.6
Reg HKLM\SOFTWARE\Classes\AutoProto.AutoProto@ AutoProto Class
Reg HKLM\SOFTWARE\Classes\AutoProto.AutoProto\CurVer
Reg HKLM\SOFTWARE\Classes\AutoProto.AutoProto\CurVer@ AutoProto.AutoProto.1
Reg HKLM\SOFTWARE\Classes\AutoProto.AutoProto.1@ AutoProto Class
Reg HKLM\SOFTWARE\Classes\AutoProto.AutoProto.1\CLSID
Reg HKLM\SOFTWARE\Classes\AutoProto.AutoProto.1\CLSID@ {D24C7F41-2F44-11D3-92EF-00C0F01F77C1}
Reg HKLM\SOFTWARE\Classes\AutoStream.AutoStream@ AutoStream Class
Reg HKLM\SOFTWARE\Classes\AutoStream.AutoStream\CurVer
Reg HKLM\SOFTWARE\Classes\AutoStream.AutoStream\CurVer@ AutoStream.AutoStream.1
Reg HKLM\SOFTWARE\Classes\AutoStream.AutoStream.1@ AutoStream Class
Reg HKLM\SOFTWARE\Classes\AutoStream.AutoStream.1\CLSID
Reg HKLM\SOFTWARE\Classes\AutoStream.AutoStream.1\CLSID@ {405DE7C0-E7DD-11D2-92C5-00C0F01F77C1}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCacheManager@ CddbCacheManager Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCacheManager\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCacheManager\CLSID@ {FB9B3E2A-CCD4-434E-92DD-8703698B5E11}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCacheManager\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCacheManager\CurVer@ CDDBControl.CddbCacheManager.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCacheManager.1@ CddbCacheManager Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCacheManager.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCacheManager.1\CLSID@ {FB9B3E2A-CCD4-434E-92DD-8703698B5E11}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl@ CDDBControl Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl\CLSID@ {F4BAFF02-F907-11D2-8F8F-00C04F4C3B9F}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl\CurVer@ CDDBControl.CDDBControl.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl.1@ CDDBControl Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl.1\CLSID@ {F4BAFF02-F907-11D2-8F8F-00C04F4C3B9F}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl.1\Insertable
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl2@ CDDBControl2 Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl2\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl2\CLSID@ {69E9B473-22E6-471D-8683-84BD1E4BECE1}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl2.1@ CDDBControl2 Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl2.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CDDBControl2.1\CLSID@ {69E9B473-22E6-471D-8683-84BD1E4BECE1}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCredit@ CddbCredit Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCredit\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCredit\CLSID@ {BBF37BA4-2F4F-11D3-B02F-00C04F4C0826}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCredit\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCredit\CurVer@ CDDBControl.CddbCredit.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCredit.1@ CddbCredit Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCredit.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbCredit.1\CLSID@ {BBF37BA4-2F4F-11D3-B02F-00C04F4C0826}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbDisc@ CddbDisc Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbDisc\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbDisc\CLSID@ {B0528CE4-F67E-11D2-8F8E-00C04F4C3B9F}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbDisc\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbDisc\CurVer@ CDDBControl.CddbDisc.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbDisc.1@ CddbDisc Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbDisc.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbDisc.1\CLSID@ {B0528CE4-F67E-11D2-8F8E-00C04F4C3B9F}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbExtData@ CddbExtData Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbExtData\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbExtData\CLSID@ {F196D33B-FC9F-420B-8C9F-A7F51F8F69A7}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbExtData\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbExtData\CurVer@ CDDBControl.CddbExtData.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbExtData.1@ CddbExtData Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbExtData.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbExtData.1\CLSID@ {F196D33B-FC9F-420B-8C9F-A7F51F8F69A7}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbFullName.1@ CddbFullName Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbFullName.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbFullName.1\CLSID@ {BBF37BA2-2F4F-11D3-B02F-00C04F4C0826}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3Tag@ CddbID3Tag Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3Tag\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3Tag\CLSID@ {D734EAE8-0810-4513-99B6-DDAC4BC30E29}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3Tag\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3Tag\CurVer@ CDDBControl.CddbID3Tag.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3Tag.1@ CddbID3Tag Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3Tag.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3Tag.1\CLSID@ {D734EAE8-0810-4513-99B6-DDAC4BC30E29}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3TagManager@ CddbID3TagManager Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3TagManager\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3TagManager\CLSID@ {DFEF3E96-F1D4-47CE-A429-2CC8C10DFDB6}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3TagManager\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3TagManager\CurVer@ CDDBControl.CddbID3TagManager.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3TagManager.1@ CddbID3TagManager Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3TagManager.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbID3TagManager.1\CLSID@ {DFEF3E96-F1D4-47CE-A429-2CC8C10DFDB6}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbInfoWindow@ CddbInfoWindow Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbInfoWindow\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbInfoWindow\CLSID@ {C073A662-A344-4611-8632-06452280EBB0}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbInfoWindow\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbInfoWindow\CurVer@ CDDBControl.CddbInfoWindow.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbInfoWindow.1@ CddbInfoWindow Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbInfoWindow.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbInfoWindow.1\CLSID@ {C073A662-A344-4611-8632-06452280EBB0}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbListManager@ CddbListManager Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbListManager\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbListManager\CLSID@ {45CCD308-F7E1-477e-A14C-CBFBB3DC07E4}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbListManager\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbListManager\CurVer@ CDDBControl.CddbListManager.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbListManager.1@ CddbListManager Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbListManager.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbListManager.1\CLSID@ {45CCD308-F7E1-477e-A14C-CBFBB3DC07E4}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbSegment@ CddbSegment Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbSegment\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbSegment\CLSID@ {BBF37B9E-2F4F-11D3-B02F-00C04F4C0826}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbSegment\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbSegment\CurVer@ CDDBControl.CddbSegment.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbSegment.1@ CddbSegment Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbSegment.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbSegment.1\CLSID@ {BBF37B9E-2F4F-11D3-B02F-00C04F4C0826}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbUIOptions@ CddbUIOptions Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbUIOptions\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbUIOptions\CLSID@ {3836A5BF-51B3-4B37-8E96-9D429C22183C}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbUIOptions\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbUIOptions\CurVer@ CDDBControl.CddbUIOptions.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbUIOptions.1@ CddbUIOptions Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbUIOptions.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbUIOptions.1\CLSID@ {3836A5BF-51B3-4B37-8E96-9D429C22183C}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURL@ CddbURL Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURL\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURL\CLSID@ {BBF37BA0-2F4F-11D3-B02F-00C04F4C0826}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURL\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURL\CurVer@ CDDBControl.CddbURL.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURL.1@ CddbURL Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURL.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURL.1\CLSID@ {BBF37BA0-2F4F-11D3-B02F-00C04F4C0826}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURLManager@ CddbURLManager Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURLManager\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURLManager\CLSID@ {AF1A9404-6CA9-11D3-B053-00C04F4C0826}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURLManager\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURLManager\CurVer@ CDDBControl.CddbURLManager.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURLManager.1@ CddbURLManager Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURLManager.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbURLManager.1\CLSID@ {AF1A9404-6CA9-11D3-B053-00C04F4C0826}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbWMATag@ CddbWMATag Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbWMATag\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbWMATag\CLSID@ {8FCA01DA-D48C-4B1C-9DD3-6C01F9D3D4AF}
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbWMATag\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbWMATag\CurVer@ CDDBControl.CddbWMATag.1
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbWMATag.1@ CddbWMATag Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbWMATag.1\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.CddbWMATag.1\CLSID@ {8FCA01DA-D48C-4B1C-9DD3-6C01F9D3D4AF}
Reg HKLM\SOFTWARE\Classes\CDDBControl.FullName@ CddbFullName Class
Reg HKLM\SOFTWARE\Classes\CDDBControl.FullName\CLSID
Reg HKLM\SOFTWARE\Classes\CDDBControl.FullName\CLSID@ {BBF37BA2-2F4F-11D3-B02F-00C04F4C0826}
Reg HKLM\SOFTWARE\Classes\CDDBControl.FullName\CurVer
Reg HKLM\SOFTWARE\Classes\CDDBControl.FullName\CurVer@ CDDBControl.CddbFullName.1
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1@ MPEG Video
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\DefaultIcon
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\shell
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\shell\open
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\shell\open\command
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\shellex
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\DBC.MPEG.1\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\DMO.HXAudioDeviceHook@ CHXAudioDeviceHook Class
Reg HKLM\SOFTWARE\Classes\DMO.HXAudioDeviceHook\CLSID
Reg HKLM\SOFTWARE\Classes\DMO.HXAudioDeviceHook\CLSID@ {2cfa30da-118b-4ca3-aaf3-f474162302e5}
Reg HKLM\SOFTWARE\Classes\DMO.HXAudioDeviceHook\CurVer
Reg HKLM\SOFTWARE\Classes\DMO.HXAudioDeviceHook\CurVer@ DMO.HXAudioDeviceHook.1
Reg HKLM\SOFTWARE\Classes\DMO.HXAudioDeviceHook.1@ CHXAudioDeviceHook Class
Reg HKLM\SOFTWARE\Classes\DMO.HXAudioDeviceHook.1\CLSID
Reg HKLM\SOFTWARE\Classes\DMO.HXAudioDeviceHook.1\CLSID@ {2cfa30da-118b-4ca3-aaf3-f474162302e5}
Reg HKLM\SOFTWARE\Classes\FlashProp.FlashProp@ FlashProp Class
Reg HKLM\SOFTWARE\Classes\FlashProp.FlashProp\CurVer
Reg HKLM\SOFTWARE\Classes\FlashProp.FlashProp\CurVer@ FlashProp.FlashProp.1
Reg HKLM\SOFTWARE\Classes\FlashProp.FlashProp.1@ FlashProp Class
Reg HKLM\SOFTWARE\Classes\FlashProp.FlashProp.1\CLSID
Reg HKLM\SOFTWARE\Classes\FlashProp.FlashProp.1\CLSID@ {1171A62F-05D2-11D1-83FC-00A0C9089C5A}
Reg HKLM\SOFTWARE\Classes\IERJCtl.IERJCtl@ IERJCtl Class
Reg HKLM\SOFTWARE\Classes\IERJCtl.IERJCtl\CurVer
Reg HKLM\SOFTWARE\Classes\IERJCtl.IERJCtl\CurVer@ IERJCtl.IERJCtl.1
Reg HKLM\SOFTWARE\Classes\IERJCtl.IERJCtl.1@ IERJCtl Class
Reg HKLM\SOFTWARE\Classes\IERJCtl.IERJCtl.1\CLSID
Reg HKLM\SOFTWARE\Classes\IERJCtl.IERJCtl.1\CLSID@ {00CEDC01-864D-11D3-908D-00C0F03B3EDC}
Reg HKLM\SOFTWARE\Classes\IERPCtl.IERPCtl@ IERPCtl Class
Reg HKLM\SOFTWARE\Classes\IERPCtl.IERPCtl\CLSID
Reg HKLM\SOFTWARE\Classes\IERPCtl.IERPCtl\CLSID@ {FDC7A535-4070-4B92-A0EA-D9994BCC0DC5}
Reg HKLM\SOFTWARE\Classes\IERPCtl.IERPCtl\CurVer
Reg HKLM\SOFTWARE\Classes\IERPCtl.IERPCtl\CurVer@ IERPCtl.IERPCtl.1
Reg HKLM\SOFTWARE\Classes\IERPCtl.IERPCtl.1@ IERPCtl Class
Reg HKLM\SOFTWARE\Classes\IERPCtl.IERPCtl.1\CLSID
Reg HKLM\SOFTWARE\Classes\IERPCtl.IERPCtl.1\CLSID@ {FDC7A535-4070-4B92-A0EA-D9994BCC0DC5}
Reg HKLM\SOFTWARE\Classes\LiveUpdate.MIDI.6@ MIDI Audio
Reg HKLM\SOFTWARE\Classes\LiveUpdate.MIDI.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\LiveUpdate.MIDI.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\LiveUpdate.MIDI.6\shell
Reg HKLM\SOFTWARE\Classes\LiveUpdate.MIDI.6\shell\open
Reg HKLM\SOFTWARE\Classes\LiveUpdate.MIDI.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\LiveUpdate.MIDI.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\mailto@URL Protocol
Reg HKLM\SOFTWARE\Classes\mailto@ URL:MailTo Protocol
Reg HKLM\SOFTWARE\Classes\mailto\DefaultIcon
Reg HKLM\SOFTWARE\Classes\mailto\DefaultIcon@ "C:\PROGRA~1\MICROS~3\OFFICE11\OUTLOOK.EXE",7
Reg HKLM\SOFTWARE\Classes\mailto\shell
Reg HKLM\SOFTWARE\Classes\mailto\shell\open
Reg HKLM\SOFTWARE\Classes\mailto\shell\open\command
Reg HKLM\SOFTWARE\Classes\mailto\shell\open\command@ "C:\PROGRA~1\MICROS~3\OFFICE11\OUTLOOK.EXE" -c IPM.Note /m "%1"
Reg HKLM\SOFTWARE\Classes\MPNavigatorEX30.AutoplayHandler\shell
Reg HKLM\SOFTWARE\Classes\MPNavigatorEX30.AutoplayHandler\shell\open
Reg HKLM\SOFTWARE\Classes\MPNavigatorEX30.AutoplayHandler\shell\open\command
Reg HKLM\SOFTWARE\Classes\MPNavigatorEX30.AutoplayHandler\shell\open\command@ C:\Program Files\Canon\MP Navigator EX 3.0\mpnex30.exe /AUTOPLAY %1
Reg HKLM\SOFTWARE\Classes\odp#_auto_file@
Reg HKLM\SOFTWARE\Classes\odp#_auto_file\shell
Reg HKLM\SOFTWARE\Classes\odp#_auto_file\shell@ open
Reg HKLM\SOFTWARE\Classes\odp#_auto_file\shell\open
Reg HKLM\SOFTWARE\Classes\odp#_auto_file\shell\open\command
Reg HKLM\SOFTWARE\Classes\odp#_auto_file\shell\open\command@ "C:\Program Files\OpenOffice.org 3\program\simpress.exe" -o "%1"
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1@ AAC for SD
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\shell
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\shell\open
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\shellex
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealJukebox.ACP.1\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1@ CD Audio
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\shell
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\shell\open
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\shellex
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealJukebox.CDA.1\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealJukebox.wma.1@ Windows Media™ Audio Track
Reg HKLM\SOFTWARE\Classes\RealJukebox.wma.1\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealJukebox.wma.1\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealJukebox.wma.1\shell
Reg HKLM\SOFTWARE\Classes\RealJukebox.wma.1\shell\open
Reg HKLM\SOFTWARE\Classes\RealJukebox.wma.1\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealJukebox.wma.1\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP2.10@ 3GPP2 Content
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP2.10\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP2.10\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP2.10\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP2.10\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP2.10\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP2.10\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP2.10\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP2.10\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP2.10\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP2.10\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP_AMR.10@ 3GPP Content
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP_AMR.10\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP_AMR.10\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP_AMR.10\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP_AMR.10\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP_AMR.10\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP_AMR.10\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP_AMR.10\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP_AMR.10\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP_AMR.10\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.3GPP_AMR.10\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6@ AAC Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.AAC.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.AIFF.6@ AIFF Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.AIFF.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.AIFF.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.AIFF.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.AIFF.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.AIFF.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.AIFF.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.AU.6@ AU Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.AU.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.AU.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.AU.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.AU.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.AU.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.AU.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6@ AVI Video
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.AVI.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6@ RealPlayer AutoPlay for Blank DVD
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6@URL Protocol
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" /burndvd "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.DVDBurn.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10@ Qualcomm Enhanced Variable Rate
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.EVRC.10\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.HWEventHandler@ RealNetworks Scheduler
Reg HKLM\SOFTWARE\Classes\RealPlayer.HWEventHandler\CLSID
Reg HKLM\SOFTWARE\Classes\RealPlayer.HWEventHandler\CLSID@ {67E76F1D-BDE2-4052-913C-2752366192D2}
Reg HKLM\SOFTWARE\Classes\RealPlayer.HWEventHandler\CurVer
Reg HKLM\SOFTWARE\Classes\RealPlayer.HWEventHandler\CurVer@ RealPlayer.HWEventHandler.1
Reg HKLM\SOFTWARE\Classes\RealPlayer.HWEventHandler.1@ RealNetworks Scheduler
Reg HKLM\SOFTWARE\Classes\RealPlayer.HWEventHandler.1\CLSID
Reg HKLM\SOFTWARE\Classes\RealPlayer.HWEventHandler.1\CLSID@ {67E76F1D-BDE2-4052-913C-2752366192D2}
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6@ AAC Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.M4A.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP1.6@ MP1 Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP1.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP1.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP1.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP1.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP1.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP1.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6@ MP2 Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP2.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6@ MP3 Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6@ MP3 Audio PlayList
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP3PL.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP4.6@ MPEG-4 File
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP4.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP4.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP4.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP4.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP4.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP4.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP4.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP4.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP4.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.MP4.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6@ MPA Media
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPA.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPEG.6@ MPEG Media
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPEG.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPEG.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPEG.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPEG.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPEG.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPEG.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPEG.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPEG.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPEG.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPEG.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6@ MPEG Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.MPGA.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6@ Audio PlayList
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.PLSPL.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10@ Qualcomm PureVoice and Enhanced Variable Rate
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.QCP.10\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.WAV.6@ WAV Audio
Reg HKLM\SOFTWARE\Classes\RealPlayer.WAV.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.WAV.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.WAV.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.WAV.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.WAV.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.WAV.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6@ Windows Media™ Audio Shortcut
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.wax.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6@ Windows Media™ Audio/Video File
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.wm.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6@ Windows Media™ Audio File
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmf.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6@ Windows Media™ Video File
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\shellex
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\shellex\ContextMenuHandlers
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\shellex\ContextMenuHandlers\RealPlayerHandler
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmv.6\shellex\ContextMenuHandlers\RealPlayerHandler@ {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmx.6@ Windows Media™ Audio/Video Shortcut
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmx.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmx.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmx.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmx.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmx.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.wmx.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RealPlayer.wvx.6@ Windows Media™ Video Shortcut
Reg HKLM\SOFTWARE\Classes\RealPlayer.wvx.6\DefaultIcon
Reg HKLM\SOFTWARE\Classes\RealPlayer.wvx.6\DefaultIcon@ c:\program files\real\realplayer\\RealPlay.exe,1
Reg HKLM\SOFTWARE\Classes\RealPlayer.wvx.6\shell
Reg HKLM\SOFTWARE\Classes\RealPlayer.wvx.6\shell\open
Reg HKLM\SOFTWARE\Classes\RealPlayer.wvx.6\shell\open\command
Reg HKLM\SOFTWARE\Classes\RealPlayer.wvx.6\shell\open\command@ "c:\program files\real\realplayer\\RealPlay.exe" "%1"
Reg HKLM\SOFTWARE\Classes\RFXInstMgr.RFXInstMgr@ RFXInstMgr Class
Reg HKLM\SOFTWARE\Classes\RFXInstMgr.RFXInstMgr\CurVer
Reg HKLM\SOFTWARE\Classes\RFXInstMgr.RFXInstMgr\CurVer@ RFXInstMgr.RFXInstMgr.1
Reg HKLM\SOFTWARE\Classes\RFXInstMgr.RFXInstMgr.1@ RFXInstMgr Class
Reg HKLM\SOFTWARE\Classes\RFXInstMgr.RFXInstMgr.1\CLSID
Reg HKLM\SOFTWARE\Classes\RFXInstMgr.RFXInstMgr.1\CLSID@ {47f59200-8783-11d2-8343-00a0c945a819}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Download Handler@ RealPlayer Download Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Download Handler\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Download Handler\CLSID@ {0FDF6D6B-D672-463B-846E-C6FF49109662}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Download Handler\CurVer
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Download Handler\CurVer@ rmocx.RealPlayer Download Handler.1
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Download Handler.1@ RealPlayer Download Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Download Handler.1\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Download Handler.1\CLSID@ {0FDF6D6B-D672-463B-846E-C6FF49109662}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer G2 Control@ RealPlayer G2 Control
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer G2 Control\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer G2 Control\CLSID@ {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer G2 Control\CurVer
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer G2 Control\CurVer@ rmocx.RealPlayer G2 Control.1
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer G2 Control\Insertable
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer G2 Control.1@ RealPlayer G2 Control
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer G2 Control.1\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer G2 Control.1\CLSID@ {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Playback Handler@ RealPlayer Playback Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Playback Handler\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Playback Handler\CLSID@ {3B46067C-FD87-49B6-8DDD-12F0D687035F}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Playback Handler\CurVer
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Playback Handler\CurVer@ rmocx.RealPlayer Playback Handler.1
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Playback Handler.1@ RealPlayer Playback Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Playback Handler.1\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Playback Handler.1\CLSID@ {3B46067C-FD87-49B6-8DDD-12F0D687035F}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RAM Download Handler@ RealPlayer RAM Download Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RAM Download Handler\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RAM Download Handler\CLSID@ {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RAM Download Handler\CurVer
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RAM Download Handler\CurVer@ rmocx.RealPlayer RAM Download Handler.1
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RAM Download Handler.1@ RealPlayer RAM Download Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RAM Download Handler.1\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RAM Download Handler.1\CLSID@ {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RMP Download Handler@ RealPlayer RMP Download Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RMP Download Handler\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RMP Download Handler\CLSID@ {44CCBCEB-BA7E-4C99-A078-9F683832D493}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RMP Download Handler\CurVer
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RMP Download Handler\CurVer@ rmocx.RealPlayer RMP Download Handler.1
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RMP Download Handler.1@ RealPlayer RMP Download Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RMP Download Handler.1\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RMP Download Handler.1\CLSID@ {44CCBCEB-BA7E-4C99-A078-9F683832D493}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RNX Download Handler@ RealPlayer RNX Download Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RNX Download Handler\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RNX Download Handler\CLSID@ {3B5E0503-DE28-4BE8-919C-76E0E894A3C2}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RNX Download Handler\CurVer
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RNX Download Handler\CurVer@ rmocx.RealPlayer RNX Download Handler.1
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RNX Download Handler.1@ RealPlayer RNX Download Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RNX Download Handler.1\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer RNX Download Handler.1\CLSID@ {3B5E0503-DE28-4BE8-919C-76E0E894A3C2}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer SMIL Download Handler@ RealPlayer SMIL Download Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer SMIL Download Handler\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer SMIL Download Handler\CLSID@ {224E833B-2CC6-42D9-AE39-90B6A38A4FA2}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer SMIL Download Handler\CurVer
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer SMIL Download Handler\CurVer@ rmocx.RealPlayer SMIL Download Handler.1
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer SMIL Download Handler.1@ RealPlayer SMIL Download Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer SMIL Download Handler.1\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer SMIL Download Handler.1\CLSID@ {224E833B-2CC6-42D9-AE39-90B6A38A4FA2}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Stream Handler@ RealPlayer Stream Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Stream Handler\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Stream Handler\CLSID@ {A1A41E11-91DB-4461-95CD-0C02327FD934}
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Stream Handler\CurVer
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Stream Handler\CurVer@ rmocx.RealPlayer Stream Handler.1
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Stream Handler.1@ RealPlayer Stream Handler
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Stream Handler.1\CLSID
Reg HKLM\SOFTWARE\Classes\rmocx.RealPlayer Stream Handler.1\CLSID@ {A1A41E11-91DB-4461-95CD-0C02327FD934}
Reg HKLM\SOFTWARE\Classes\rpbrowserrecordplugin.CRPRecordBrowse.1@ RealPlayer Download and Record Plugin for Internet Explorer
Reg HKLM\SOFTWARE\Classes\rpbrowserrecordplugin.CRPRecordBrowse.1\CLSID
Reg HKLM\SOFTWARE\Classes\rpbrowserrecordplugin.CRPRecordBrowse.1\CLSID@ {3049C3E9-B461-4BC5-8870-4C09146192CA}
Reg HKLM\SOFTWARE\Classes\rpbrowserrecordplugin.CRPRecordBrowserH@ RealPlayer Download and Record Plugin for Internet Explorer
Reg HKLM\SOFTWARE\Classes\rpbrowserrecordplugin.CRPRecordBrowserH\CLSID
Reg HKLM\SOFTWARE\Classes\rpbrowserrecordplugin.CRPRecordBrowserH\CLSID@ {3049C3E9-B461-4BC5-8870-4C09146192CA}
Reg HKLM\SOFTWARE\Classes\rpbrowserrecordplugin.CRPRecordBrowserH\CurVer
Reg HKLM\SOFTWARE\Classes\rpbrowserrecordplugin.CRPRecordBrowserH\CurVer@ rpbrowserrecordplugin.CRPRecordBrowse.1
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPHttpPlugProt@ RPHttpPlugProt Class
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPHttpPlugProt\CLSID
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPHttpPlugProt\CLSID@ {4D50EBC1-F054-4110-8D92-700E630361A6}
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPHttpPlugProt\CurVer
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPHttpPlugProt\CurVer@ Rpplugprot.RPHttpPlugProt.1
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPHttpPlugProt.1@ RPHttpPlugProt Class
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPHttpPlugProt.1\CLSID
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPHttpPlugProt.1\CLSID@ {4D50EBC1-F054-4110-8D92-700E630361A6}
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPMimeFilter@ RPMimeFilter Class
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPMimeFilter\CLSID
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPMimeFilter\CLSID@ {C5838ED9-78F2-4c47-8B6B-2ACF9FA16F44}
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPMimeFilter\CurVer
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPMimeFilter\CurVer@ Rpplugprot.RPMimeFilter.1
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPMimeFilter.1@ RPMimeFilter Class
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPMimeFilter.1\CLSID
Reg HKLM\SOFTWARE\Classes\Rpplugprot.RPMimeFilter.1\CLSID@ {C5838ED9-78F2-4c47-8B6B-2ACF9FA16F44}
Reg HKLM\SOFTWARE\Classes\RPShellExtension.QTExtractImage@ CQTExtractImage Object
Reg HKLM\SOFTWARE\Classes\RPShellExtension.QTExtractImage\CLSID
Reg HKLM\SOFTWARE\Classes\RPShellExtension.QTExtractImage\CLSID@ {9BAF2374-771E-437b-A752-2B584A5B9200}
Reg HKLM\SOFTWARE\Classes\RPShellExtension.QTExtractImage\CurVer
Reg HKLM\SOFTWARE\Classes\RPShellExtension.QTExtractImage\CurVer@ RPShellExtension.QTExtractImage.1
Reg HKLM\SOFTWARE\Classes\RPShellExtension.QTExtractImage.1@ CQTExtractImage Object
Reg HKLM\SOFTWARE\Classes\RPShellExtension.QTExtractImage.1\CLSID
Reg HKLM\SOFTWARE\Classes\RPShellExtension.QTExtractImage.1\CLSID@ {9BAF2374-771E-437b-A752-2B584A5B9200}
Reg HKLM\SOFTWARE\Classes\RPShellExtension.RPExtractImage@ CRPExtractImage Object
Reg HKLM\SOFTWARE\Classes\RPShellExtension.RPExtractImage\CLSID
Reg HKLM\SOFTWARE\Classes\RPShellExtension.RPExtractImage\CLSID@ {F2DE7395-2AE7-4b40-A159-F7EF3C266D9C}
Reg HKLM\SOFTWARE\Classes\RPShellExtension.RPExtractImage\CurVer
Reg HKLM\SOFTWARE\Classes\RPShellExtension.RPExtractImage\CurVer@ RPShellExtension.RPExtractImage.1
Reg HKLM\SOFTWARE\Classes\RPShellExtension.RPExtractImage.1@ CRPExtractImage Object
Reg HKLM\SOFTWARE\Classes\RPShellExtension.RPExtractImage.1\CLSID
Reg HKLM\SOFTWARE\Classes\RPShellExtension.RPExtractImage.1\CLSID@ {F2DE7395-2AE7-4b40-A159-F7EF3C266D9C}
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3File2@ EncodeMP3File2 Class
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3File2\CLSID
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3File2\CLSID@ {A97BBEB0-2D4C-11D3-B244-444553540000}
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3File2\CurVer
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3File2\CurVer@ Xmencmp3.EncodeMP3File2.1
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3File2.1@ EncodeMP3File2 Class
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3File2.1\CLSID
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3File2.1\CLSID@ {A97BBEB0-2D4C-11D3-B244-444553540000}
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3Mem2@ EncodeMP3Mem2 Class
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3Mem2\CLSID
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3Mem2\CLSID@ {477A3783-2D4D-11D3-B244-444553540000}
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3Mem2\CurVer
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3Mem2\CurVer@ Xmencmp3.EncodeMP3Mem2.1
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3Mem2.1@ EncodeMP3Mem2 Class
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3Mem2.1\CLSID
Reg HKLM\SOFTWARE\Classes\Xmencmp3.EncodeMP3Mem2.1\CLSID@ {477A3783-2D4D-11D3-B244-444553540000}
Reg HKLM\SOFTWARE\Classes\Xmencmp3.MP3Encoder3@ MP3Encoder3 Class
Reg HKLM\SOFTWARE\Classes\Xmencmp3.MP3Encoder3\CLSID
Reg HKLM\SOFTWARE\Classes\Xmencmp3.MP3Encoder3\CLSID@ {477A3789-2D4D-11D3-B244-444553540000}
Reg HKLM\SOFTWARE\Classes\Xmencmp3.MP3Encoder3\CurVer
Reg HKLM\SOFTWARE\Classes\Xmencmp3.MP3Encoder3\CurVer@ Xmencmp3.MP3Encoder3.1
Reg HKLM\SOFTWARE\Classes\Xmencmp3.MP3Encoder3.1@ MP3Encoder3 Class
Reg HKLM\SOFTWARE\Classes\Xmencmp3.MP3Encoder3.1\CLSID
Reg HKLM\SOFTWARE\Classes\Xmencmp3.MP3Encoder3.1\CLSID@ {477A3789-2D4D-11D3-B244-444553540000}
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryMPEGAudioFile2@ QueryMPEGAudioFile2 Class
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryMPEGAudioFile2\CLSID
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryMPEGAudioFile2\CLSID@ {477A3787-2D4D-11D3-B244-444553540000}
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryMPEGAudioFile2\CurVer
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryMPEGAudioFile2\CurVer@ Xmencmp3.QueryMPEGAudioFile2.1
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryMPEGAudioFile2.1@ QueryMPEGAudioFile2 Class
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryMPEGAudioFile2.1\CLSID
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryMPEGAudioFile2.1\CLSID@ {477A3787-2D4D-11D3-B244-444553540000}
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryWavFile2@ QueryWavFile2 Class
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryWavFile2\CLSID
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryWavFile2\CLSID@ {477A3785-2D4D-11D3-B244-444553540000}
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryWavFile2\CurVer
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryWavFile2\CurVer@ Xmencmp3.QueryWavFile2.1
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryWavFile2.1@ QueryWavFile2 Class
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryWavFile2.1\CLSID
Reg HKLM\SOFTWARE\Classes\Xmencmp3.QueryWavFile2.1\CLSID@ {477A3785-2D4D-11D3-B244-444553540000}

---- EOF - GMER 1.0.15 ----

Edited by NoMatches, 31 December 2010 - 04:44 AM.


BC AdBot (Login to Remove)

 


#2 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:05:14 PM

Posted 06 January 2011 - 01:21 PM

Hello and Welcome to the forums!

My name is Gringo and I'll be glad to help you with your computer problems.

Somethings to remember while we are working together.

  • Do not run any other tool untill instructed to do so!
  • Please Do not Attach logs or put in code boxes.
  • Tell me about any problems that have occurred during the fix.
  • Tell me of any other symptoms you may be having as these can help also.
  • Do not run anything while running a fix.


We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.


In order for me to see the status of the infection I will need a new set of logs to start with.

Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

DeFogger:

  • Please download DeFogger to your desktop.

    Double click DeFogger to run the tool.
  • The application window will appear
  • Click the Disable button to disable your CD Emulation drivers
  • Click Yes to continue
  • A 'Finished!' message will appear
  • Click OK
  • DeFogger may ask you to reboot the machine, if it does - click OK
Do not re-enable these drivers until otherwise instructed.

Download DDS:

  • Please download DDS by sUBs from one of the links below and save it to your desktop:

    Posted Image
    Download DDS and save it to your desktop

    Link1
    Link2
    Link3

    Please disable any anti-malware program that will block scripts from running before running DDS.

    • Double-Click on dds.scr and a command window will appear. This is normal.
    • Shortly after two logs will appear:
    • DDS.txt
    • Attach.txt
  • A window will open instructing you save & post the logs
  • Save the logs to a convenient place such as your desktop
  • Copy the contents of both logs & post in your next reply





Scan With RKUnHooker

  • Please Download Rootkit Unhooker Save it to your desktop.
  • Now double-click on RKUnhookerLE.exe to run it.
  • Click the Report tab, then click Scan.
  • Check (Tick) Drivers, Stealth,. Uncheck the rest. then Click OK.
  • Wait till the scanner has finished and then click File, Save Report.
  • Save the report somewhere where you can find it. Click Close.
Copy the entire contents of the report and paste it in a reply here.

Note** you may get this warning it is ok, just ignore

"Rootkit Unhooker has detected a parasite inside itself!
It is recommended to remove parasite, okay?"


"just click on Cancel, then Accept".


information and logs:

  • In your next post I need the following

  • .logs from DDS
  • log from RKUnHooker
  • let me know of any problems you may have had

Gringo

I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#3 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:05:14 PM

Posted 08 January 2011 - 11:26 PM

Hello

three day bump

It has been Three days since my last post.

  • do you still need help with this?
  • do you need more time?
  • are you having problems following my instructions?
  • if after 48hrs you have not replied to this thread then it will have to be closed!

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#4 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:05:14 PM

Posted 12 January 2011 - 08:54 AM

Due to the lack of feedback, this topic is now closed.In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users