Prosze o sprawdzenie loga

Dla specjalistów Bezpieczeństwo
#1
#2

W Dodaj/Usuń odinstaluj 180search Assistant

Usuń: (wszystko oczywiście robisz w trybie awaryjnym z wyłączonym przywracaniem systemu)

Poczytaj Usuwanie VX2.BetterInternet i daj log nr 1 z narzędzia L2Mfix

Uwaga: Jak wklejasz loga to obejmuj go znacznikiem (tagiem) CODE lub QUOTE

Proponuje poczytać TEN temat i zobacz jaka jest prośba do userów wklejających loga.

#3

L2mfix Beta 121605

Creating Account.

Polecenie zostao wykonane pomylnie.

Adding Administrative privleges.

Checking for L2MFix account(0=no 1=yes):

1

Granting SeDebugPrivilege to L2MFIX … successful

Running From:

D:\WINDOWS\system32

Killing Processes!

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03

Copyright© 2002-2003 Craig.Peacock@beyondlogic.org

Killing PID 592 ‘smss.exe’

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03

Copyright© 2002-2003 Craig.Peacock@beyondlogic.org

Killing PID 700 ‘winlogon.exe’

Killing PID 700 ‘winlogon.exe’

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03

Copyright© 2002-2003 Craig.Peacock@beyondlogic.org

Killing PID 1652 ‘explorer.exe’

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03

Copyright© 2002-2003 Craig.Peacock@beyondlogic.org

Killing PID 1276 ‘rundll32.exe’

Restoring Sedebugprivilege:

Granting SeDebugPrivilege to Administrators OpenPolicy:

***Error*** OpenPolicy -1073741790

Granting SeDebugPrivilege to Administrateurs OpenPolicy:

***Error*** OpenPolicy -1073741790

Granting SeDebugPrivilege to Administrat÷rer OpenPolicy:

***Error*** OpenPolicy -1073741790

Granting SeDebugPrivilege to Administradores OpenPolicy:

***Error*** OpenPolicy -1073741790

Granting SeDebugPrivilege to Amministratore OpenPolicy:

***Error*** OpenPolicy -1073741790

Granting SeDebugPrivilege to Administratoren OpenPolicy:

***Error*** OpenPolicy -1073741790

Scanning First Pass. Please Wait!

First Pass Completed

Second Pass Scanning

Second pass Completed!

moving: D:\WINDOWS\system32\aCaamon.dll

Successfully Moved: D:\WINDOWS\system32\aCaamon.dll

moving: D:\WINDOWS\system32\ahmpvcno.dll

Successfully Moved: D:\WINDOWS\system32\ahmpvcno.dll

moving: D:\WINDOWS\system32\aza209hoe.dll

Successfully Moved: D:\WINDOWS\system32\aza209hoe.dll

moving: D:\WINDOWS\system32\beowsewm.dll

Successfully Moved: D:\WINDOWS\system32\beowsewm.dll

moving: D:\WINDOWS\system32\bmackbox.dll

Successfully Moved: D:\WINDOWS\system32\bmackbox.dll

moving: D:\WINDOWS\system32\c2002cdmgf0a2.dll

Successfully Moved: D:\WINDOWS\system32\c2002cdmgf0a2.dll

moving: D:\WINDOWS\system32\cmmdlg32.dll

Successfully Moved: D:\WINDOWS\system32\cmmdlg32.dll

moving: D:\WINDOWS\system32\d00mlad11d0.dll

Successfully Moved: D:\WINDOWS\system32\d00mlad11d0.dll

moving: D:\WINDOWS\system32\dadmoprp.dll

Successfully Moved: D:\WINDOWS\system32\dadmoprp.dll

moving: D:\WINDOWS\system32\dargui.dll

Successfully Moved: D:\WINDOWS\system32\dargui.dll

moving: D:\WINDOWS\system32\ddmrtp.dll

Successfully Moved: D:\WINDOWS\system32\ddmrtp.dll

moving: D:\WINDOWS\system32\dhkquoui.dll

Successfully Moved: D:\WINDOWS\system32\dhkquoui.dll

moving: D:\WINDOWS\system32\dmmodemx.dll

Successfully Moved: D:\WINDOWS\system32\dmmodemx.dll

moving: D:\WINDOWS\system32\dmspex.dll

Successfully Moved: D:\WINDOWS\system32\dmspex.dll

moving: D:\WINDOWS\system32\e0jmla111d.dll

Successfully Moved: D:\WINDOWS\system32\e0jmla111d.dll

moving: D:\WINDOWS\system32\edpsrv.dll

Successfully Moved: D:\WINDOWS\system32\edpsrv.dll

moving: D:\WINDOWS\system32\ementprf.dll

Successfully Moved: D:\WINDOWS\system32\ementprf.dll

moving: D:\WINDOWS\system32\en26l1fs1.dll

Successfully Moved: D:\WINDOWS\system32\en26l1fs1.dll

moving: D:\WINDOWS\system32\en68l1ju1.dll

Successfully Moved: D:\WINDOWS\system32\en68l1ju1.dll

moving: D:\WINDOWS\system32\en84l1lq1.dll

Successfully Moved: D:\WINDOWS\system32\en84l1lq1.dll

moving: D:\WINDOWS\system32\enj4l11q1.dll

Successfully Moved: D:\WINDOWS\system32\enj4l11q1.dll

moving: D:\WINDOWS\system32\enl8l13u1.dll

Successfully Moved: D:\WINDOWS\system32\enl8l13u1.dll

moving: D:\WINDOWS\system32\ennsl1571.dll

Successfully Moved: D:\WINDOWS\system32\ennsl1571.dll

moving: D:\WINDOWS\system32\enpsl1771.dll

Successfully Moved: D:\WINDOWS\system32\enpsl1771.dll

moving: D:\WINDOWS\system32\enr6l19s1.dll

Successfully Moved: D:\WINDOWS\system32\enr6l19s1.dll

moving: D:\WINDOWS\system32\enr8l19u1.dll

Successfully Moved: D:\WINDOWS\system32\enr8l19u1.dll

moving: D:\WINDOWS\system32\g4040edqeh0e0.dll

Successfully Moved: D:\WINDOWS\system32\g4040edqeh0e0.dll

moving: D:\WINDOWS\system32\gpn2l35o1.dll

Successfully Moved: D:\WINDOWS\system32\gpn2l35o1.dll

moving: D:\WINDOWS\system32\h0l2la3o1d.dll

Successfully Moved: D:\WINDOWS\system32\h0l2la3o1d.dll

moving: D:\WINDOWS\system32\h2j40c1qef.dll

Successfully Moved: D:\WINDOWS\system32\h2j40c1qef.dll

moving: D:\WINDOWS\system32\ih50_qc.dll

Successfully Moved: D:\WINDOWS\system32\ih50_qc.dll

moving: D:\WINDOWS\system32\irp0l57m1.dll

Successfully Moved: D:\WINDOWS\system32\irp0l57m1.dll

moving: D:\WINDOWS\system32\irp4l57q1.dll

Successfully Moved: D:\WINDOWS\system32\irp4l57q1.dll

moving: D:\WINDOWS\system32\ispromon.dll

Successfully Moved: D:\WINDOWS\system32\ispromon.dll

moving: D:\WINDOWS\system32\iu50_qc.dll

Successfully Moved: D:\WINDOWS\system32\iu50_qc.dll

moving: D:\WINDOWS\system32\izfosoft.dll

Successfully Moved: D:\WINDOWS\system32\izfosoft.dll

moving: D:\WINDOWS\system32\j0j60a1sed.dll

Successfully Moved: D:\WINDOWS\system32\j0j60a1sed.dll

moving: D:\WINDOWS\system32\jt8207loe.dll

Successfully Moved: D:\WINDOWS\system32\jt8207loe.dll

moving: D:\WINDOWS\system32\jxt500.dll

Successfully Moved: D:\WINDOWS\system32\jxt500.dll

moving: D:\WINDOWS\system32\k8800ilme8qa0.dll

Successfully Moved: D:\WINDOWS\system32\k8800ilme8qa0.dll

moving: D:\WINDOWS\system32\kt6ul7j91.dll

Successfully Moved: D:\WINDOWS\system32\kt6ul7j91.dll

moving: D:\WINDOWS\system32\kydcz1.dll

Successfully Moved: D:\WINDOWS\system32\kydcz1.dll

moving: D:\WINDOWS\system32\l4j8le1u1h.dll

Successfully Moved: D:\WINDOWS\system32\l4j8le1u1h.dll

moving: D:\WINDOWS\system32\lv4209hoe.dll

Successfully Moved: D:\WINDOWS\system32\lv4209hoe.dll

moving: D:\WINDOWS\system32\lvp0097me.dll

Successfully Moved: D:\WINDOWS\system32\lvp0097me.dll

moving: D:\WINDOWS\system32\lvp4097qe.dll

Successfully Moved: D:\WINDOWS\system32\lvp4097qe.dll

moving: D:\WINDOWS\system32\MACTF.dll

Successfully Moved: D:\WINDOWS\system32\MACTF.dll

moving: D:\WINDOWS\system32\mbl_mtf.dll

Successfully Moved: D:\WINDOWS\system32\mbl_mtf.dll

moving: D:\WINDOWS\system32\mNg_hook.dll

Successfully Moved: D:\WINDOWS\system32\mNg_hook.dll

moving: D:\WINDOWS\system32\mv22l9fo1.dll

Successfully Moved: D:\WINDOWS\system32\mv22l9fo1.dll

moving: D:\WINDOWS\system32\nfoglnt.dll

Successfully Moved: D:\WINDOWS\system32\nfoglnt.dll

moving: D:\WINDOWS\system32\nxmsapi.dll

Successfully Moved: D:\WINDOWS\system32\nxmsapi.dll

moving: D:\WINDOWS\system32\nywrstr.dll

Successfully Moved: D:\WINDOWS\system32\nywrstr.dll

moving: D:\WINDOWS\system32\o0480ahued480.dll

Successfully Moved: D:\WINDOWS\system32\o0480ahued480.dll

moving: D:\WINDOWS\system32\o0660ajsedo60.dll

Successfully Moved: D:\WINDOWS\system32\o0660ajsedo60.dll

moving: D:\WINDOWS\system32\o0lu0a39ed.dll

Successfully Moved: D:\WINDOWS\system32\o0lu0a39ed.dll

moving: D:\WINDOWS\system32\pfustab.dll

Successfully Moved: D:\WINDOWS\system32\pfustab.dll

moving: D:\WINDOWS\system32\shvsvc.dll

Successfully Moved: D:\WINDOWS\system32\shvsvc.dll

moving: D:\WINDOWS\system32\sjtupapi.dll

Successfully Moved: D:\WINDOWS\system32\sjtupapi.dll

moving: D:\WINDOWS\system32\spndcmsg.dll

Successfully Moved: D:\WINDOWS\system32\spndcmsg.dll

moving: D:\WINDOWS\system32\sZfrdm.dll

Successfully Moved: D:\WINDOWS\system32\sZfrdm.dll

moving: D:\WINDOWS\system32\t68ulgl916q.dll

Successfully Moved: D:\WINDOWS\system32\t68ulgl916q.dll

moving: D:\WINDOWS\system32\toaffic.dll

Successfully Moved: D:\WINDOWS\system32\toaffic.dll

moving: D:\WINDOWS\system32\vspodbc.dll

Successfully Moved: D:\WINDOWS\system32\vspodbc.dll

moving: D:\WINDOWS\system32\weavusd.dll

Successfully Moved: D:\WINDOWS\system32\weavusd.dll

moving: D:\WINDOWS\system32\wonnls.dll

Successfully Moved: D:\WINDOWS\system32\wonnls.dll

moving: D:\WINDOWS\system32\wvashext.dll

Successfully Moved: D:\WINDOWS\system32\wvashext.dll

moving: D:\WINDOWS\system32\wvhatm.dll

Successfully Moved: D:\WINDOWS\system32\wvhatm.dll

moving: D:\WINDOWS\system32\wwnfax.dll

Successfully Moved: D:\WINDOWS\system32\wwnfax.dll

moving: D:\WINDOWS\system32\zdpfldr.dll

Successfully Moved: D:\WINDOWS\system32\zdpfldr.dll

Desktop.ini sucessfully removed

Restoring Windows Update Certificates.:

The following Is the Current Export of the Winlogon notify key:

****************************************************************************

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]

“Asynchronous”=dword:00000000

“Impersonate”=dword:00000000

“DllName”=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\

6c,00,00,00

“Logoff”=“ChainWlxLogoffEvent”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]

“Asynchronous”=dword:00000000

“Impersonate”=dword:00000000

“DllName”=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\

6c,00,6c,00,00,00

“Logoff”=“CryptnetWlxLogoffEvent”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]

“DLLName”=“cscdll.dll”

“Logon”=“WinlogonLogonEvent”

“Logoff”=“WinlogonLogoffEvent”

“ScreenSaver”=“WinlogonScreenSaverEvent”

“Startup”=“WinlogonStartupEvent”

“Shutdown”=“WinlogonShutdownEvent”

“StartShell”=“WinlogonStartShellEvent”

“Impersonate”=dword:00000000

“Asynchronous”=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]

“DLLName”=“wlnotify.dll”

“Logon”=“SCardStartCertProp”

“Logoff”=“SCardStopCertProp”

“Lock”=“SCardSuspendCertProp”

“Unlock”=“SCardResumeCertProp”

“Enabled”=dword:00000001

“Impersonate”=dword:00000001

“Asynchronous”=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]

“Asynchronous”=dword:00000000

“DllName”=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\

6c,00,6c,00,00,00

“Impersonate”=dword:00000000

“StartShell”=“SchedStartShell”

“Logoff”=“SchedEventLogOff”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]

“Logoff”=“WLEventLogoff”

“Impersonate”=dword:00000000

“Asynchronous”=dword:00000001

“DllName”=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\

6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]

“DLLName”=“WlNotify.dll”

“Lock”=“SensLockEvent”

“Logon”=“SensLogonEvent”

“Logoff”=“SensLogoffEvent”

“Safe”=dword:00000001

“MaxWait”=dword:00000258

“StartScreenSaver”=“SensStartScreenSaverEvent”

“StopScreenSaver”=“SensStopScreenSaverEvent”

“Startup”=“SensStartupEvent”

“Shutdown”=“SensShutdownEvent”

“StartShell”=“SensStartShellEvent”

“PostShell”=“SensPostShellEvent”

“Disconnect”=“SensDisconnectEvent”

“Reconnect”=“SensReconnectEvent”

“Unlock”=“SensUnlockEvent”

“Impersonate”=dword:00000001

“Asynchronous”=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ShellServiceObjectDelayLoad]

“Asynchronous”=dword:00000000

“DllName”=“D:\WINDOWS\system32\mv22l9fo1.dll”

“Impersonate”=dword:00000000

“Logon”=“WinLogon”

“Logoff”=“WinLogoff”

“Shutdown”=“WinShutdown”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]

“Asynchronous”=dword:00000000

“DllName”=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\

6c,00,6c,00,00,00

“Impersonate”=dword:00000000

“Logoff”=“TSEventLogoff”

“Logon”=“TSEventLogon”

“PostShell”=“TSEventPostShell”

“Shutdown”=“TSEventShutdown”

“StartShell”=“TSEventStartShell”

“Startup”=“TSEventStartup”

“MaxWait”=dword:00000258

“Reconnect”=“TSEventReconnect”

“Disconnect”=“TSEventDisconnect”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]

“DLLName”=“wlnotify.dll”

“Logon”=“RegisterTicketExpiredNotificationEvent”

“Logoff”=“UnregisterTicketExpiredNotificationEvent”

“Impersonate”=dword:00000001

“Asynchronous”=dword:00000001

The following are the files found:

****************************************************************************

D:\WINDOWS\system32\aCaamon.dll

D:\WINDOWS\system32\ahmpvcno.dll

D:\WINDOWS\system32\aza209hoe.dll

D:\WINDOWS\system32\beowsewm.dll

D:\WINDOWS\system32\bmackbox.dll

D:\WINDOWS\system32\c2002cdmgf0a2.dll

D:\WINDOWS\system32\cmmdlg32.dll

D:\WINDOWS\system32\d00mlad11d0.dll

D:\WINDOWS\system32\dadmoprp.dll

D:\WINDOWS\system32\dargui.dll

D:\WINDOWS\system32\ddmrtp.dll

D:\WINDOWS\system32\dhkquoui.dll

D:\WINDOWS\system32\dmmodemx.dll

D:\WINDOWS\system32\dmspex.dll

D:\WINDOWS\system32\e0jmla111d.dll

D:\WINDOWS\system32\edpsrv.dll

D:\WINDOWS\system32\ementprf.dll

D:\WINDOWS\system32\en26l1fs1.dll

D:\WINDOWS\system32\en68l1ju1.dll

D:\WINDOWS\system32\en84l1lq1.dll

D:\WINDOWS\system32\enj4l11q1.dll

D:\WINDOWS\system32\enl8l13u1.dll

D:\WINDOWS\system32\ennsl1571.dll

D:\WINDOWS\system32\enpsl1771.dll

D:\WINDOWS\system32\enr6l19s1.dll

D:\WINDOWS\system32\enr8l19u1.dll

D:\WINDOWS\system32\g4040edqeh0e0.dll

D:\WINDOWS\system32\gpn2l35o1.dll

D:\WINDOWS\system32\h0l2la3o1d.dll

D:\WINDOWS\system32\h2j40c1qef.dll

D:\WINDOWS\system32\ih50_qc.dll

D:\WINDOWS\system32\irp0l57m1.dll

D:\WINDOWS\system32\irp4l57q1.dll

D:\WINDOWS\system32\ispromon.dll

D:\WINDOWS\system32\iu50_qc.dll

D:\WINDOWS\system32\izfosoft.dll

D:\WINDOWS\system32\j0j60a1sed.dll

D:\WINDOWS\system32\jt8207loe.dll

D:\WINDOWS\system32\jxt500.dll

D:\WINDOWS\system32\k8800ilme8qa0.dll

D:\WINDOWS\system32\kt6ul7j91.dll

D:\WINDOWS\system32\kydcz1.dll

D:\WINDOWS\system32\l4j8le1u1h.dll

D:\WINDOWS\system32\lv4209hoe.dll

D:\WINDOWS\system32\lvp0097me.dll

D:\WINDOWS\system32\lvp4097qe.dll

D:\WINDOWS\system32\MACTF.dll

D:\WINDOWS\system32\mbl_mtf.dll

D:\WINDOWS\system32\mNg_hook.dll

D:\WINDOWS\system32\mv22l9fo1.dll

D:\WINDOWS\system32\nfoglnt.dll

D:\WINDOWS\system32\nxmsapi.dll

D:\WINDOWS\system32\nywrstr.dll

D:\WINDOWS\system32\o0480ahued480.dll

D:\WINDOWS\system32\o0660ajsedo60.dll

D:\WINDOWS\system32\o0lu0a39ed.dll

D:\WINDOWS\system32\pfustab.dll

D:\WINDOWS\system32\shvsvc.dll

D:\WINDOWS\system32\sjtupapi.dll

D:\WINDOWS\system32\spndcmsg.dll

D:\WINDOWS\system32\sZfrdm.dll

D:\WINDOWS\system32\t68ulgl916q.dll

D:\WINDOWS\system32\toaffic.dll

D:\WINDOWS\system32\vspodbc.dll

D:\WINDOWS\system32\weavusd.dll

D:\WINDOWS\system32\wonnls.dll

D:\WINDOWS\system32\wvashext.dll

D:\WINDOWS\system32\wvhatm.dll

D:\WINDOWS\system32\wwnfax.dll

D:\WINDOWS\system32\zdpfldr.dll

Registry Entries that were Deleted:

Please verify that the listing looks ok.

If there was something deleted wrongly there are backups in the backreg folder.

****************************************************************************

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{D60625F5-E40B-439F-A93D-B8622CBB631D}]

@=""

[HKEY_CLASSES_ROOT\CLSID{D60625F5-E40B-439F-A93D-B8622CBB631D}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{D60625F5-E40B-439F-A93D-B8622CBB631D}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{D60625F5-E40B-439F-A93D-B8622CBB631D}\InprocServer32]

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{B8A53659-07FF-4583-ABF1-03085AEA8E23}]

@=""

[HKEY_CLASSES_ROOT\CLSID{B8A53659-07FF-4583-ABF1-03085AEA8E23}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{B8A53659-07FF-4583-ABF1-03085AEA8E23}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{B8A53659-07FF-4583-ABF1-03085AEA8E23}\InprocServer32]

@=“D:\WINDOWS\system32\kydcz1.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{11A5EAFD-3498-48D1-9894-BC279AE23F57}]

@=""

[HKEY_CLASSES_ROOT\CLSID{11A5EAFD-3498-48D1-9894-BC279AE23F57}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{11A5EAFD-3498-48D1-9894-BC279AE23F57}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{11A5EAFD-3498-48D1-9894-BC279AE23F57}\InprocServer32]

@=“D:\WINDOWS\system32\mbl_mtf.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{5BC72CF9-24DD-4764-BFB5-84070B8F0230}]

@=""

[HKEY_CLASSES_ROOT\CLSID{5BC72CF9-24DD-4764-BFB5-84070B8F0230}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{5BC72CF9-24DD-4764-BFB5-84070B8F0230}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{5BC72CF9-24DD-4764-BFB5-84070B8F0230}\InprocServer32]

@=“D:\WINDOWS\system32\toaffic.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{647E9814-BEE2-4630-BC24-15FAB5D4FECF}]

@=""

[HKEY_CLASSES_ROOT\CLSID{647E9814-BEE2-4630-BC24-15FAB5D4FECF}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{647E9814-BEE2-4630-BC24-15FAB5D4FECF}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{647E9814-BEE2-4630-BC24-15FAB5D4FECF}\InprocServer32]

@=“D:\WINDOWS\system32\sZfrdm.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{ECF53433-87CE-42CB-AF1F-39226C0903A0}]

@=""

[HKEY_CLASSES_ROOT\CLSID{ECF53433-87CE-42CB-AF1F-39226C0903A0}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{ECF53433-87CE-42CB-AF1F-39226C0903A0}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{ECF53433-87CE-42CB-AF1F-39226C0903A0}\InprocServer32]

@=“D:\WINDOWS\system32\ispromon.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{5CF66DA2-2A39-4C85-A402-4B808CDB9BCB}]

@=""

[HKEY_CLASSES_ROOT\CLSID{5CF66DA2-2A39-4C85-A402-4B808CDB9BCB}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{5CF66DA2-2A39-4C85-A402-4B808CDB9BCB}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{5CF66DA2-2A39-4C85-A402-4B808CDB9BCB}\InprocServer32]

@=“D:\WINDOWS\system32\aCaamon.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{71250D23-0FD1-4AA4-B1FF-4556C43AAB25}]

@=""

[HKEY_CLASSES_ROOT\CLSID{71250D23-0FD1-4AA4-B1FF-4556C43AAB25}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{71250D23-0FD1-4AA4-B1FF-4556C43AAB25}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{71250D23-0FD1-4AA4-B1FF-4556C43AAB25}\InprocServer32]

@=“D:\WINDOWS\system32\ddmrtp.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{14F5C75D-1913-4EDD-9037-D8C08BF4342E}]

@=""

[HKEY_CLASSES_ROOT\CLSID{14F5C75D-1913-4EDD-9037-D8C08BF4342E}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{14F5C75D-1913-4EDD-9037-D8C08BF4342E}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{14F5C75D-1913-4EDD-9037-D8C08BF4342E}\InprocServer32]

@=“D:\WINDOWS\system32\nfoglnt.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{32DAC1F6-BB1F-45EF-884D-2BEFA68D8FBB}]

@=""

[HKEY_CLASSES_ROOT\CLSID{32DAC1F6-BB1F-45EF-884D-2BEFA68D8FBB}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{32DAC1F6-BB1F-45EF-884D-2BEFA68D8FBB}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{32DAC1F6-BB1F-45EF-884D-2BEFA68D8FBB}\InprocServer32]

@=“D:\WINDOWS\system32\iu50_qc.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{36DF5079-DF0F-48FB-A662-0D5D6EF8E74F}]

@=""

[HKEY_CLASSES_ROOT\CLSID{36DF5079-DF0F-48FB-A662-0D5D6EF8E74F}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{36DF5079-DF0F-48FB-A662-0D5D6EF8E74F}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{36DF5079-DF0F-48FB-A662-0D5D6EF8E74F}\InprocServer32]

@=“D:\WINDOWS\system32\mNg_hook.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{999BE244-3748-461C-9A48-77B4EC531E37}]

@=""

[HKEY_CLASSES_ROOT\CLSID{999BE244-3748-461C-9A48-77B4EC531E37}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{999BE244-3748-461C-9A48-77B4EC531E37}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{999BE244-3748-461C-9A48-77B4EC531E37}\InprocServer32]

@=“D:\WINDOWS\system32\sjtupapi.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{B3DDF6A9-E0B5-4080-B491-631F930DFBF7}]

@=""

[HKEY_CLASSES_ROOT\CLSID{B3DDF6A9-E0B5-4080-B491-631F930DFBF7}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{B3DDF6A9-E0B5-4080-B491-631F930DFBF7}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{B3DDF6A9-E0B5-4080-B491-631F930DFBF7}\InprocServer32]

@=“D:\WINDOWS\system32\dmspex.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{78786D1F-603F-4208-890D-BB6B5F90B477}]

@=""

[HKEY_CLASSES_ROOT\CLSID{78786D1F-603F-4208-890D-BB6B5F90B477}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{78786D1F-603F-4208-890D-BB6B5F90B477}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{78786D1F-603F-4208-890D-BB6B5F90B477}\InprocServer32]

@=“D:\WINDOWS\system32\shvsvc.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{78DEEEC5-AE39-4A43-8358-610E131A633C}]

@=""

[HKEY_CLASSES_ROOT\CLSID{78DEEEC5-AE39-4A43-8358-610E131A633C}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{78DEEEC5-AE39-4A43-8358-610E131A633C}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{78DEEEC5-AE39-4A43-8358-610E131A633C}\InprocServer32]

@=“D:\WINDOWS\system32\wonnls.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{EBC18BD7-30AE-4213-BDAD-334689A84948}]

@=""

[HKEY_CLASSES_ROOT\CLSID{EBC18BD7-30AE-4213-BDAD-334689A84948}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{EBC18BD7-30AE-4213-BDAD-334689A84948}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{EBC18BD7-30AE-4213-BDAD-334689A84948}\InprocServer32]

@=“D:\WINDOWS\system32\bmackbox.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{F84C2BEC-F3F6-4D23-98CF-25C5B26FB467}]

@=""

[HKEY_CLASSES_ROOT\CLSID{F84C2BEC-F3F6-4D23-98CF-25C5B26FB467}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{F84C2BEC-F3F6-4D23-98CF-25C5B26FB467}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{F84C2BEC-F3F6-4D23-98CF-25C5B26FB467}\InprocServer32]

@=“D:\WINDOWS\system32\wvashext.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{E02E4B38-FB10-4E13-8EBF-1DA4449121CF}]

@=""

[HKEY_CLASSES_ROOT\CLSID{E02E4B38-FB10-4E13-8EBF-1DA4449121CF}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{E02E4B38-FB10-4E13-8EBF-1DA4449121CF}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{E02E4B38-FB10-4E13-8EBF-1DA4449121CF}\InprocServer32]

@=“D:\WINDOWS\system32\zdpfldr.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{E163D344-7F2E-4303-A42D-003BB64519C4}]

@=""

[HKEY_CLASSES_ROOT\CLSID{E163D344-7F2E-4303-A42D-003BB64519C4}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{E163D344-7F2E-4303-A42D-003BB64519C4}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{E163D344-7F2E-4303-A42D-003BB64519C4}\InprocServer32]

@=“D:\WINDOWS\system32\dargui.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{385AF350-AC58-4D08-9B06-7A8CF38C268C}]

@=""

[HKEY_CLASSES_ROOT\CLSID{385AF350-AC58-4D08-9B06-7A8CF38C268C}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{385AF350-AC58-4D08-9B06-7A8CF38C268C}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{385AF350-AC58-4D08-9B06-7A8CF38C268C}\InprocServer32]

@=“D:\WINDOWS\system32\ementprf.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{CE24D759-B673-435C-B6C3-4C501F1A1930}]

@=""

[HKEY_CLASSES_ROOT\CLSID{CE24D759-B673-435C-B6C3-4C501F1A1930}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{CE24D759-B673-435C-B6C3-4C501F1A1930}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{CE24D759-B673-435C-B6C3-4C501F1A1930}\InprocServer32]

@=“D:\WINDOWS\system32\pfustab.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{BE3AF7C3-BFD5-4495-9FD1-03C352F12382}]

@=""

[HKEY_CLASSES_ROOT\CLSID{BE3AF7C3-BFD5-4495-9FD1-03C352F12382}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{BE3AF7C3-BFD5-4495-9FD1-03C352F12382}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{BE3AF7C3-BFD5-4495-9FD1-03C352F12382}\InprocServer32]

@=“D:\WINDOWS\system32\beowsewm.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{87BAC973-BC6A-4EED-9825-D6AF0FE5FCB0}]

@=""

[HKEY_CLASSES_ROOT\CLSID{87BAC973-BC6A-4EED-9825-D6AF0FE5FCB0}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{87BAC973-BC6A-4EED-9825-D6AF0FE5FCB0}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{87BAC973-BC6A-4EED-9825-D6AF0FE5FCB0}\InprocServer32]

@=“D:\WINDOWS\system32\weavusd.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{262DE97B-79D0-49C4-8BD8-85B4AB6A3C2D}]

@=""

[HKEY_CLASSES_ROOT\CLSID{262DE97B-79D0-49C4-8BD8-85B4AB6A3C2D}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{262DE97B-79D0-49C4-8BD8-85B4AB6A3C2D}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{262DE97B-79D0-49C4-8BD8-85B4AB6A3C2D}\InprocServer32]

@=“D:\WINDOWS\system32\nywrstr.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{C185DCFB-B30A-4551-AF64-F1536A145CC1}]

@=""

[HKEY_CLASSES_ROOT\CLSID{C185DCFB-B30A-4551-AF64-F1536A145CC1}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{C185DCFB-B30A-4551-AF64-F1536A145CC1}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{C185DCFB-B30A-4551-AF64-F1536A145CC1}\InprocServer32]

@=“D:\WINDOWS\system32\nxmsapi.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{2471C431-A7FD-4BC3-A19F-A7EF183E9B27}]

@=""

[HKEY_CLASSES_ROOT\CLSID{2471C431-A7FD-4BC3-A19F-A7EF183E9B27}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{2471C431-A7FD-4BC3-A19F-A7EF183E9B27}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{2471C431-A7FD-4BC3-A19F-A7EF183E9B27}\InprocServer32]

@=“D:\WINDOWS\system32\vspodbc.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{170FB37D-422A-4A0D-B37D-0195F534D5A3}]

@=""

[HKEY_CLASSES_ROOT\CLSID{170FB37D-422A-4A0D-B37D-0195F534D5A3}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{170FB37D-422A-4A0D-B37D-0195F534D5A3}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{170FB37D-422A-4A0D-B37D-0195F534D5A3}\InprocServer32]

@=“D:\WINDOWS\system32\ahmpvcno.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{9B000BC2-0246-4BEB-9F90-E171B26CD80C}]

@=""

[HKEY_CLASSES_ROOT\CLSID{9B000BC2-0246-4BEB-9F90-E171B26CD80C}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{9B000BC2-0246-4BEB-9F90-E171B26CD80C}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{9B000BC2-0246-4BEB-9F90-E171B26CD80C}\InprocServer32]

@=“D:\WINDOWS\system32\dhkquoui.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{1D50FAD8-595F-4D99-AC4A-B411580DB150}]

@=""

[HKEY_CLASSES_ROOT\CLSID{1D50FAD8-595F-4D99-AC4A-B411580DB150}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{1D50FAD8-595F-4D99-AC4A-B411580DB150}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{1D50FAD8-595F-4D99-AC4A-B411580DB150}\InprocServer32]

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{19337E51-E012-432E-AEB0-210B86B066E8}]

@=""

[HKEY_CLASSES_ROOT\CLSID{19337E51-E012-432E-AEB0-210B86B066E8}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{19337E51-E012-432E-AEB0-210B86B066E8}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{19337E51-E012-432E-AEB0-210B86B066E8}\InprocServer32]

@=“D:\WINDOWS\system32\ih50_qc.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{E94E64FA-5841-4C34-9841-5DE92435F813}]

@=""

[HKEY_CLASSES_ROOT\CLSID{E94E64FA-5841-4C34-9841-5DE92435F813}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{E94E64FA-5841-4C34-9841-5DE92435F813}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{E94E64FA-5841-4C34-9841-5DE92435F813}\InprocServer32]

@=“D:\WINDOWS\system32\cmmdlg32.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{F779E2A9-4B22-44F9-BDD5-2C8B81AAB0A3}]

@=""

[HKEY_CLASSES_ROOT\CLSID{F779E2A9-4B22-44F9-BDD5-2C8B81AAB0A3}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{F779E2A9-4B22-44F9-BDD5-2C8B81AAB0A3}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{F779E2A9-4B22-44F9-BDD5-2C8B81AAB0A3}\InprocServer32]

@=“D:\WINDOWS\system32\jxt500.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{877E63DE-BDA6-44C9-A492-D05BF13CD65C}]

@=""

[HKEY_CLASSES_ROOT\CLSID{877E63DE-BDA6-44C9-A492-D05BF13CD65C}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{877E63DE-BDA6-44C9-A492-D05BF13CD65C}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{877E63DE-BDA6-44C9-A492-D05BF13CD65C}\InprocServer32]

@=“D:\WINDOWS\system32\wvhatm.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{67D609B4-3F0A-467F-BF1A-D3ECB49FA6BA}]

@=""

[HKEY_CLASSES_ROOT\CLSID{67D609B4-3F0A-467F-BF1A-D3ECB49FA6BA}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{67D609B4-3F0A-467F-BF1A-D3ECB49FA6BA}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{67D609B4-3F0A-467F-BF1A-D3ECB49FA6BA}\InprocServer32]

@=“D:\WINDOWS\system32\dadmoprp.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{2B6632DC-5385-4452-B492-6A4A88065921}]

@=""

[HKEY_CLASSES_ROOT\CLSID{2B6632DC-5385-4452-B492-6A4A88065921}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{2B6632DC-5385-4452-B492-6A4A88065921}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{2B6632DC-5385-4452-B492-6A4A88065921}\InprocServer32]

@=“D:\WINDOWS\system32\dmmodemx.dll”

“ThreadingModel”=“Apartment”

REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]

“{D60625F5-E40B-439F-A93D-B8622CBB631D}”=-

“{B8A53659-07FF-4583-ABF1-03085AEA8E23}”=-

“{2C3685FC-F00E-49CE-A7EC-570E8F47E1B3}”=-

“{11A5EAFD-3498-48D1-9894-BC279AE23F57}”=-

“{5BC72CF9-24DD-4764-BFB5-84070B8F0230}”=-

“{647E9814-BEE2-4630-BC24-15FAB5D4FECF}”=-

“{ECF53433-87CE-42CB-AF1F-39226C0903A0}”=-

“{5CF66DA2-2A39-4C85-A402-4B808CDB9BCB}”=-

“{71250D23-0FD1-4AA4-B1FF-4556C43AAB25}”=-

“{D836A566-F458-49F8-B1A2-4D9B359CFC9F}”=-

“{14F5C75D-1913-4EDD-9037-D8C08BF4342E}”=-

“{32DAC1F6-BB1F-45EF-884D-2BEFA68D8FBB}”=-

“{36DF5079-DF0F-48FB-A662-0D5D6EF8E74F}”=-

“{999BE244-3748-461C-9A48-77B4EC531E37}”=-

“{B3DDF6A9-E0B5-4080-B491-631F930DFBF7}”=-

“{78786D1F-603F-4208-890D-BB6B5F90B477}”=-

“{78DEEEC5-AE39-4A43-8358-610E131A633C}”=-

“{EBC18BD7-30AE-4213-BDAD-334689A84948}”=-

“{F84C2BEC-F3F6-4D23-98CF-25C5B26FB467}”=-

“{E02E4B38-FB10-4E13-8EBF-1DA4449121CF}”=-

“{E163D344-7F2E-4303-A42D-003BB64519C4}”=-

“{385AF350-AC58-4D08-9B06-7A8CF38C268C}”=-

“{CE24D759-B673-435C-B6C3-4C501F1A1930}”=-

“{BE3AF7C3-BFD5-4495-9FD1-03C352F12382}”=-

“{87BAC973-BC6A-4EED-9825-D6AF0FE5FCB0}”=-

“{262DE97B-79D0-49C4-8BD8-85B4AB6A3C2D}”=-

“{C185DCFB-B30A-4551-AF64-F1536A145CC1}”=-

“{2471C431-A7FD-4BC3-A19F-A7EF183E9B27}”=-

“{170FB37D-422A-4A0D-B37D-0195F534D5A3}”=-

“{9B000BC2-0246-4BEB-9F90-E171B26CD80C}”=-

“{1D50FAD8-595F-4D99-AC4A-B411580DB150}”=-

“{19337E51-E012-432E-AEB0-210B86B066E8}”=-

“{E94E64FA-5841-4C34-9841-5DE92435F813}”=-

“{F779E2A9-4B22-44F9-BDD5-2C8B81AAB0A3}”=-

“{877E63DE-BDA6-44C9-A492-D05BF13CD65C}”=-

“{67D609B4-3F0A-467F-BF1A-D3ECB49FA6BA}”=-

“{2B6632DC-5385-4452-B492-6A4A88065921}”=-

[-HKEY_CLASSES_ROOT\CLSID{D60625F5-E40B-439F-A93D-B8622CBB631D}]

[-HKEY_CLASSES_ROOT\CLSID{B8A53659-07FF-4583-ABF1-03085AEA8E23}]

[-HKEY_CLASSES_ROOT\CLSID{2C3685FC-F00E-49CE-A7EC-570E8F47E1B3}]

[-HKEY_CLASSES_ROOT\CLSID{11A5EAFD-3498-48D1-9894-BC279AE23F57}]

[-HKEY_CLASSES_ROOT\CLSID{5BC72CF9-24DD-4764-BFB5-84070B8F0230}]

[-HKEY_CLASSES_ROOT\CLSID{647E9814-BEE2-4630-BC24-15FAB5D4FECF}]

[-HKEY_CLASSES_ROOT\CLSID{ECF53433-87CE-42CB-AF1F-39226C0903A0}]

[-HKEY_CLASSES_ROOT\CLSID{5CF66DA2-2A39-4C85-A402-4B808CDB9BCB}]

[-HKEY_CLASSES_ROOT\CLSID{71250D23-0FD1-4AA4-B1FF-4556C43AAB25}]

[-HKEY_CLASSES_ROOT\CLSID{D836A566-F458-49F8-B1A2-4D9B359CFC9F}]

[-HKEY_CLASSES_ROOT\CLSID{14F5C75D-1913-4EDD-9037-D8C08BF4342E}]

[-HKEY_CLASSES_ROOT\CLSID{32DAC1F6-BB1F-45EF-884D-2BEFA68D8FBB}]

[-HKEY_CLASSES_ROOT\CLSID{36DF5079-DF0F-48FB-A662-0D5D6EF8E74F}]

[-HKEY_CLASSES_ROOT\CLSID{999BE244-3748-461C-9A48-77B4EC531E37}]

[-HKEY_CLASSES_ROOT\CLSID{B3DDF6A9-E0B5-4080-B491-631F930DFBF7}]

[-HKEY_CLASSES_ROOT\CLSID{78786D1F-603F-4208-890D-BB6B5F90B477}]

[-HKEY_CLASSES_ROOT\CLSID{78DEEEC5-AE39-4A43-8358-610E131A633C}]

[-HKEY_CLASSES_ROOT\CLSID{EBC18BD7-30AE-4213-BDAD-334689A84948}]

[-HKEY_CLASSES_ROOT\CLSID{F84C2BEC-F3F6-4D23-98CF-25C5B26FB467}]

[-HKEY_CLASSES_ROOT\CLSID{E02E4B38-FB10-4E13-8EBF-1DA4449121CF}]

[-HKEY_CLASSES_ROOT\CLSID{E163D344-7F2E-4303-A42D-003BB64519C4}]

[-HKEY_CLASSES_ROOT\CLSID{385AF350-AC58-4D08-9B06-7A8CF38C268C}]

[-HKEY_CLASSES_ROOT\CLSID{CE24D759-B673-435C-B6C3-4C501F1A1930}]

[-HKEY_CLASSES_ROOT\CLSID{BE3AF7C3-BFD5-4495-9FD1-03C352F12382}]

[-HKEY_CLASSES_ROOT\CLSID{87BAC973-BC6A-4EED-9825-D6AF0FE5FCB0}]

[-HKEY_CLASSES_ROOT\CLSID{262DE97B-79D0-49C4-8BD8-85B4AB6A3C2D}]

[-HKEY_CLASSES_ROOT\CLSID{C185DCFB-B30A-4551-AF64-F1536A145CC1}]

[-HKEY_CLASSES_ROOT\CLSID{2471C431-A7FD-4BC3-A19F-A7EF183E9B27}]

[-HKEY_CLASSES_ROOT\CLSID{170FB37D-422A-4A0D-B37D-0195F534D5A3}]

[-HKEY_CLASSES_ROOT\CLSID{9B000BC2-0246-4BEB-9F90-E171B26CD80C}]

[-HKEY_CLASSES_ROOT\CLSID{1D50FAD8-595F-4D99-AC4A-B411580DB150}]

[-HKEY_CLASSES_ROOT\CLSID{19337E51-E012-432E-AEB0-210B86B066E8}]

[-HKEY_CLASSES_ROOT\CLSID{E94E64FA-5841-4C34-9841-5DE92435F813}]

[-HKEY_CLASSES_ROOT\CLSID{F779E2A9-4B22-44F9-BDD5-2C8B81AAB0A3}]

[-HKEY_CLASSES_ROOT\CLSID{877E63DE-BDA6-44C9-A492-D05BF13CD65C}]

[-HKEY_CLASSES_ROOT\CLSID{67D609B4-3F0A-467F-BF1A-D3ECB49FA6BA}]

[-HKEY_CLASSES_ROOT\CLSID{2B6632DC-5385-4452-B492-6A4A88065921}]

REGEDIT4

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]

****************************************************************************

Desktop.ini Contents:

****************************************************************************

[.ShellClassInfo]

CLSID={645FF040-5081-101B-9F08-00AA002F954E}

****************************************************************************

Checking for L2MFix account(0=no 1=yes):

0

adding: dlls/aCaamon.dll (deflated 5%)

adding: dlls/ahmpvcno.dll (deflated 6%)

adding: dlls/aza209hoe.dll (deflated 5%)

adding: dlls/beowsewm.dll (deflated 4%)

adding: dlls/bmackbox.dll (deflated 4%)

adding: dlls/c2002cdmgf0a2.dll (deflated 5%)

adding: dlls/cmmdlg32.dll (deflated 6%)

adding: dlls/d00mlad11d0.dll (deflated 5%)

adding: dlls/dadmoprp.dll (deflated 6%)

adding: dlls/dargui.dll (deflated 4%)

adding: dlls/ddmrtp.dll (deflated 4%)

adding: dlls/dhkquoui.dll (deflated 6%)

adding: dlls/dmmodemx.dll (deflated 6%)

adding: dlls/dmspex.dll (deflated 4%)

adding: dlls/e0jmla111d.dll (deflated 5%)

adding: dlls/edpsrv.dll (deflated 5%)

adding: dlls/ementprf.dll (deflated 5%)

adding: dlls/en26l1fs1.dll (deflated 4%)

adding: dlls/en68l1ju1.dll (deflated 5%)

adding: dlls/en84l1lq1.dll (deflated 4%)

adding: dlls/enj4l11q1.dll (deflated 4%)

adding: dlls/enl8l13u1.dll (deflated 6%)

adding: dlls/ennsl1571.dll (deflated 5%)

adding: dlls/enpsl1771.dll (deflated 5%)

adding: dlls/enr6l19s1.dll (deflated 5%)

adding: dlls/enr8l19u1.dll (deflated 5%)

adding: dlls/g4040edqeh0e0.dll (deflated 5%)

adding: dlls/gpn2l35o1.dll (deflated 5%)

adding: dlls/h0l2la3o1d.dll (deflated 5%)

adding: dlls/h2j40c1qef.dll (deflated 6%)

adding: dlls/ih50_qc.dll (deflated 4%)

adding: dlls/irp0l57m1.dll (deflated 6%)

adding: dlls/irp4l57q1.dll (deflated 6%)

adding: dlls/ispromon.dll (deflated 5%)

adding: dlls/iu50_qc.dll (deflated 5%)

adding: dlls/izfosoft.dll (deflated 4%)

adding: dlls/j0j60a1sed.dll (deflated 5%)

adding: dlls/jt8207loe.dll (deflated 5%)

adding: dlls/jxt500.dll (deflated 6%)

adding: dlls/k8800ilme8qa0.dll (deflated 4%)

adding: dlls/kt6ul7j91.dll (deflated 5%)

adding: dlls/kydcz1.dll (deflated 5%)

adding: dlls/l4j8le1u1h.dll (deflated 5%)

adding: dlls/lv4209hoe.dll (deflated 6%)

adding: dlls/lvp0097me.dll (deflated 5%)

adding: dlls/lvp4097qe.dll (deflated 6%)

adding: dlls/MACTF.dll (deflated 5%)

adding: dlls/mbl_mtf.dll (deflated 4%)

adding: dlls/mNg_hook.dll (deflated 6%)

adding: dlls/mv22l9fo1.dll (deflated 6%)

adding: dlls/nfoglnt.dll (deflated 5%)

adding: dlls/nxmsapi.dll (deflated 5%)

adding: dlls/nywrstr.dll (deflated 5%)

adding: dlls/o0480ahued480.dll (deflated 4%)

adding: dlls/o0660ajsedo60.dll (deflated 5%)

adding: dlls/o0lu0a39ed.dll (deflated 5%)

adding: dlls/pfustab.dll (deflated 4%)

adding: dlls/shvsvc.dll (deflated 4%)

adding: dlls/sjtupapi.dll (deflated 6%)

adding: dlls/spndcmsg.dll (deflated 5%)

adding: dlls/sZfrdm.dll (deflated 5%)

adding: dlls/t68ulgl916q.dll (deflated 5%)

adding: dlls/toaffic.dll (deflated 4%)

adding: dlls/vspodbc.dll (deflated 6%)

adding: dlls/weavusd.dll (deflated 5%)

adding: dlls/wonnls.dll (deflated 5%)

adding: dlls/wvashext.dll (deflated 5%)

adding: dlls/wvhatm.dll (deflated 6%)

adding: dlls/wwnfax.dll (deflated 5%)

adding: dlls/zdpfldr.dll (deflated 4%)

adding: backregs/notibac.reg (deflated 87%)

adding: backregs/shell.reg (deflated 72%)

adding: backregs/D60625F5-E40B-439F-A93D-B8622CBB631D.reg (deflated 71%)

adding: backregs/B8A53659-07FF-4583-ABF1-03085AEA8E23.reg (deflated 70%)

adding: backregs/11A5EAFD-3498-48D1-9894-BC279AE23F57.reg (deflated 70%)

adding: backregs/5BC72CF9-24DD-4764-BFB5-84070B8F0230.reg (deflated 70%)

adding: backregs/647E9814-BEE2-4630-BC24-15FAB5D4FECF.reg (deflated 70%)

adding: backregs/ECF53433-87CE-42CB-AF1F-39226C0903A0.reg (deflated 70%)

adding: backregs/5CF66DA2-2A39-4C85-A402-4B808CDB9BCB.reg (deflated 70%)

adding: backregs/71250D23-0FD1-4AA4-B1FF-4556C43AAB25.reg (deflated 70%)

adding: backregs/14F5C75D-1913-4EDD-9037-D8C08BF4342E.reg (deflated 70%)

adding: backregs/32DAC1F6-BB1F-45EF-884D-2BEFA68D8FBB.reg (deflated 70%)

adding: backregs/36DF5079-DF0F-48FB-A662-0D5D6EF8E74F.reg (deflated 70%)

adding: backregs/999BE244-3748-461C-9A48-77B4EC531E37.reg (deflated 70%)

adding: backregs/B3DDF6A9-E0B5-4080-B491-631F930DFBF7.reg (deflated 70%)

adding: backregs/78786D1F-603F-4208-890D-BB6B5F90B477.reg (deflated 70%)

adding: backregs/78DEEEC5-AE39-4A43-8358-610E131A633C.reg (deflated 70%)

adding: backregs/EBC18BD7-30AE-4213-BDAD-334689A84948.reg (deflated 70%)

adding: backregs/F84C2BEC-F3F6-4D23-98CF-25C5B26FB467.reg (deflated 70%)

adding: backregs/E02E4B38-FB10-4E13-8EBF-1DA4449121CF.reg (deflated 70%)

adding: backregs/E163D344-7F2E-4303-A42D-003BB64519C4.reg (deflated 70%)

adding: backregs/385AF350-AC58-4D08-9B06-7A8CF38C268C.reg (deflated 70%)

adding: backregs/CE24D759-B673-435C-B6C3-4C501F1A1930.reg (deflated 70%)

adding: backregs/BE3AF7C3-BFD5-4495-9FD1-03C352F12382.reg (deflated 70%)

adding: backregs/87BAC973-BC6A-4EED-9825-D6AF0FE5FCB0.reg (deflated 70%)

adding: backregs/262DE97B-79D0-49C4-8BD8-85B4AB6A3C2D.reg (deflated 70%)

adding: backregs/C185DCFB-B30A-4551-AF64-F1536A145CC1.reg (deflated 70%)

adding: backregs/2471C431-A7FD-4BC3-A19F-A7EF183E9B27.reg (deflated 70%)

adding: backregs/170FB37D-422A-4A0D-B37D-0195F534D5A3.reg (deflated 70%)

adding: backregs/9B000BC2-0246-4BEB-9F90-E171B26CD80C.reg (deflated 70%)

adding: backregs/1D50FAD8-595F-4D99-AC4A-B411580DB150.reg (deflated 71%)

adding: backregs/19337E51-E012-432E-AEB0-210B86B066E8.reg (deflated 70%)

adding: backregs/E94E64FA-5841-4C34-9841-5DE92435F813.reg (deflated 70%)

adding: backregs/F779E2A9-4B22-44F9-BDD5-2C8B81AAB0A3.reg (deflated 70%)

adding: backregs/877E63DE-BDA6-44C9-A492-D05BF13CD65C.reg (deflated 70%)

adding: backregs/67D609B4-3F0A-467F-BF1A-D3ECB49FA6BA.reg (deflated 70%)

adding: backregs/2B6632DC-5385-4452-B492-6A4A88065921.reg (deflated 70%)

#4

Daj mi log numer 1 co masz w instrukcji:

Jak masz

l2mfix.png

wybierasz opcję 1. Run Find Log = odpowiednik tworzenia loga w FindIt. Patrz dalej na LOG NUMER 1. ZAWSZE tego loga macie utworzyć by mi pokazać - czy tak trudno jest przeczytać?

#5

Czy to o to chodzi ??

L2MFIX find log 121605

These are the registry keys present

**********************************************************************************

Winlogon/notify:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]

“Asynchronous”=dword:00000000

“Impersonate”=dword:00000000

“DllName”=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\

6c,00,00,00

“Logoff”=“ChainWlxLogoffEvent”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]

“Asynchronous”=dword:00000000

“Impersonate”=dword:00000000

“DllName”=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\

6c,00,6c,00,00,00

“Logoff”=“CryptnetWlxLogoffEvent”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]

“DLLName”=“cscdll.dll”

“Logon”=“WinlogonLogonEvent”

“Logoff”=“WinlogonLogoffEvent”

“ScreenSaver”=“WinlogonScreenSaverEvent”

“Startup”=“WinlogonStartupEvent”

“Shutdown”=“WinlogonShutdownEvent”

“StartShell”=“WinlogonStartShellEvent”

“Impersonate”=dword:00000000

“Asynchronous”=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]

“DLLName”=“wlnotify.dll”

“Logon”=“SCardStartCertProp”

“Logoff”=“SCardStopCertProp”

“Lock”=“SCardSuspendCertProp”

“Unlock”=“SCardResumeCertProp”

“Enabled”=dword:00000001

“Impersonate”=dword:00000001

“Asynchronous”=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]

“Asynchronous”=dword:00000000

“DllName”=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\

6c,00,6c,00,00,00

“Impersonate”=dword:00000000

“StartShell”=“SchedStartShell”

“Logoff”=“SchedEventLogOff”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]

“Logoff”=“WLEventLogoff”

“Impersonate”=dword:00000000

“Asynchronous”=dword:00000001

“DllName”=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\

6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]

“DLLName”=“WlNotify.dll”

“Lock”=“SensLockEvent”

“Logon”=“SensLogonEvent”

“Logoff”=“SensLogoffEvent”

“Safe”=dword:00000001

“MaxWait”=dword:00000258

“StartScreenSaver”=“SensStartScreenSaverEvent”

“StopScreenSaver”=“SensStopScreenSaverEvent”

“Startup”=“SensStartupEvent”

“Shutdown”=“SensShutdownEvent”

“StartShell”=“SensStartShellEvent”

“PostShell”=“SensPostShellEvent”

“Disconnect”=“SensDisconnectEvent”

“Reconnect”=“SensReconnectEvent”

“Unlock”=“SensUnlockEvent”

“Impersonate”=dword:00000001

“Asynchronous”=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]

“Asynchronous”=dword:00000000

“DllName”=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\

6c,00,6c,00,00,00

“Impersonate”=dword:00000000

“Logoff”=“TSEventLogoff”

“Logon”=“TSEventLogon”

“PostShell”=“TSEventPostShell”

“Shutdown”=“TSEventShutdown”

“StartShell”=“TSEventStartShell”

“Startup”=“TSEventStartup”

“MaxWait”=dword:00000258

“Reconnect”=“TSEventReconnect”

“Disconnect”=“TSEventDisconnect”

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]

“DLLName”=“wlnotify.dll”

“Logon”=“RegisterTicketExpiredNotificationEvent”

“Logoff”=“UnregisterTicketExpiredNotificationEvent”

“Impersonate”=dword:00000001

“Asynchronous”=dword:00000001

**********************************************************************************

useragent:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]

“{BDBF7832-DA04-8148-D2C1-573E91C73B6C}”=""

**********************************************************************************

Shell Extension key:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]

“{00022613-0000-0000-C000-000000000046}”=“Karta waciwoci pliku multimedialnego”

“{176d6597-26d3-11d1-b350-080036a75b03}”=“ZarzĄdzanie skanerem ICM”

“{1F2E5C40-9550-11CE-99D2-00AA006E086C}”=“Strona zabezpieczeä NTFS”

“{3EA48300-8CF6-101B-84FB-666CCB9BCD32}”=“Strona waciwoci OLE Docfile”

“{40dd6e20-7c17-11ce-a804-00aa003ca9f6}”=“Rozszerzenia powoki dla udost©pniania zasob˘w”

“{41E300E0-78B6-11ce-849B-444553540000}”=“PlusPack CPL Extension”

“{42071712-76d4-11d1-8b24-00a0c9068ff3}”=“Rozszerzenie CPL karty graficznej”

“{42071713-76d4-11d1-8b24-00a0c9068ff3}”=“Rozszerzenie CPL monitora wywietlania”

“{42071714-76d4-11d1-8b24-00a0c9068ff3}”=“Rozszerzenie CPL kadrowania wywietlania”

“{4E40F770-369C-11d0-8922-00A024AB2DBB}”=“Strona zabezpieczeä usugi DS”

“{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}”=“Strona zgodnoci”

“{56117100-C0CD-101B-81E2-00AA004AE837}”=“Program obsugi danych wycinkowych powoki”

“{59099400-57FF-11CE-BD94-0020AF85B590}”=“Rozszerzenie Disc Copy”

“{59be4990-f85c-11ce-aff7-00aa003ca9f6}”=“Rozszerzenia powoki dla obiekt˘w Microsoft Windows Network”

“{5DB2625A-54DF-11D0-B6C4-0800091AA605}”=“ZarzĄdzanie monitorem ICM”

“{675F097E-4C4D-11D0-B6C1-0800091AA605}”=“ZarzĄdzanie drukarkĄ ICM”

“{764BF0E1-F219-11ce-972D-00AA00A14F56}”=“Rozszerzenia powoki dla kompresji plik˘w”

“{77597368-7b15-11d0-a0c2-080036af3f03}”=“Rozszerzenie powoki drukarek sieci Web”

“{7988B573-EC89-11cf-9C00-00AA00A14F56}”=“Disk Quota UI”

“{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}”=“Menu kontekstowe szyfrowania”

“{85BBD920-42A0-1069-A2E4-08002B30309D}”=“Akt˘wka”

“{88895560-9AA2-1069-930E-00AA0030EBC8}”=“Rozszerzenie ikony HyperTerminalu”

“{BD84B380-8CA2-1069-AB1D-08000948F534}”=“Fonts”

“{DBCE2480-C732-101B-BE72-BA78E9AD5B27}”=“Profil ICC”

“{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}”=“Strona zabezpieczeä drukarek”

“{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}”=“Rozszerzenia powoki dla udost©pniania zasob˘w”

“{f92e8c40-3d33-11d2-b1aa-080036a75b03}”=“Display TroubleShoot CPL Extension”

“{7444C717-39BF-11D1-8CD9-00C04FC29D45}”=“Rozszerzenie Crypto PKO”

“{7444C719-39BF-11D1-8CD9-00C04FC29D45}”=“Rozszerzenie Crypto Sign”

“{7007ACC7-3202-11D1-AAD2-00805FC1270E}”=“PoĄczenia sieciowe”

“{992CFFA0-F557-101A-88EC-00DD010CCC48}”=“PoĄczenia sieciowe”

“{E211B736-43FD-11D1-9EFB-0000F8757FCD}”="&Skanery i aparaty fotograficzne"

“{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}”="&Skanery i aparaty fotograficzne"

“{905667aa-acd6-11d2-8080-00805f6596d2}”="&Skanery i aparaty fotograficzne"

“{3F953603-1008-4f6e-A73A-04AAC7A992F1}”="&Skanery i aparaty fotograficzne"

“{83bbcbf3-b28a-4919-a5aa-73027445d672}”="&Skanery i aparaty fotograficzne"

“{F0152790-D56E-4445-850E-4F3117DB740C}”=“Remote Sessions CPL Extension”

“{5F327514-6C5E-4d60-8F16-D07FA08A78ED}”=“Auto Update Property Sheet Extension”

“{60254CA5-953B-11CF-8C96-00AA00B8708C}”=“Rozszerzenia powoki dla hosta skrypt˘w systemu Windows”

“{2206CDB2-19C1-11D1-89E0-00C04FD7A829}”=“Microsoft Data Link”

“{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}”=“Tasks Folder Icon Handler”

“{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}”=“Tasks Folder Shell Extension”

“{D6277990-4C6A-11CF-8D87-00AA0060F5BF}”=“Zaplanowane zadania”

“{0DF44EAA-FF21-4412-828E-260A8728E7F1}”=“Pasek zadaä i menu Start”

“{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}”=“Wyszukaj”

“{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}”=“Pomoc i obsuga techniczna”

“{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}”=“Pomoc i obsuga techniczna”

“{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}”=“Uruchom…”

“{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}”=“Internet”

“{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}”=“E-mail”

“{D20EA4E1-3957-11d2-A40B-0C5020524152}”=“Czcionki”

“{D20EA4E1-3957-11d2-A40B-0C5020524153}”=“Narz©dzia administracyjne”

“{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}”=“Audio Media Properties Handler”

“{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}”=“Video Media Properties Handler”

“{E4B29F9D-D390-480b-92FD-7DDB47101D71}”=“Wav Properties Handler”

“{87D62D94-71B3-4b9a-9489-5FE6850DC73E}”=“Avi Properties Handler”

“{A6FD9E45-6E44-43f9-8644-08598F5A74D9}”=“Midi Properties Handler”

“{c5a40261-cd64-4ccf-84cb-c394da41d590}”=“Video Thumbnail Extractor”

“{5E6AB780-7743-11CF-A12B-00AA004AE837}”=“Pasek narz©dzi programu Microsoft Internet”

“{22BF0C20-6DA7-11D0-B373-00A0C9034938}”=“Stan pobierania”

“{91EA3F8B-C99B-11d0-9815-00C04FD91972}”=“Folder powoki zwi©kszonej”

“{6413BA2C-B461-11d1-A18A-080036B11A03}”=“Folder powoki zwi©kszonej 2”

“{F61FFEC1-754F-11d0-80CA-00AA005B4383}”=“BandProxy”

“{7BA4C742-9E81-11CF-99D3-00AA004AE837}”=“Pasek przeglĄdarki Microsoft”

“{30D02401-6A81-11d0-8274-00C04FD5AE38}”=“Pasek wyszukiwania”

“{32683183-48a0-441b-a342-7c2a440a9478}”=“Pasek multimedi˘w”

“{169A0691-8DF9-11d1-A1C4-00C04FD75D13}”=“Wyszukiwanie w okienku”

“{07798131-AF23-11d1-9111-00A0C98BA67D}”=“Wyszukiwanie w sieci Web”

“{AF4F6510-F982-11d0-8595-00AA004CD6D8}”=“Narz©dzie opcji drzewa rejestru”

“{01E04581-4EEE-11d0-BFE9-00AA005B4383}”="&Adres"

“{A08C11D2-A228-11d0-825B-00AA005B4383}”=“Pole edycji adresu”

“{00BB2763-6A77-11D0-A535-00C04FD7D062}”=“Autouzupenianie Microsoft”

“{7376D660-C583-11d0-A3A5-00C04FD706EC}”=“Wyodr©bnianie obraz˘w Trident”

“{6756A641-DE71-11d0-831B-00AA005B4383}”=“Lista autouzupeniania MRU”

“{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}”=“Niestandardowa lista autouzupeniania MRU”

“{7e653215-fa25-46bd-a339-34a2790f3cb7}”=“Dost©pny”

“{acf35015-526e-4230-9596-becbe19f0ac9}”=“Pasek podr©czny ledzenia”

“{E0E11A09-5CB8-4B6C-8332-E00720A168F2}”=“Analizator paska adresu”

“{00BB2764-6A77-11D0-A535-00C04FD7D062}”=“Lista autouzupeniania historii Microsoft”

“{03C036F1-A186-11D0-824A-00AA005B4383}”=“Lista autouzupeniania folderu powoki Microsoft”

“{00BB2765-6A77-11D0-A535-00C04FD7D062}”=“Kontener wielu list autouzupeniania Microsoft”

“{ECD4FC4E-521C-11D0-B792-00A0C90312E1}”=“Menu witryny paska powoki”

“{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}”=“Shell DeskBarApp”

“{ECD4FC4C-521C-11D0-B792-00A0C90312E1}”=“Pasek pulpitu powoki”

“{ECD4FC4D-521C-11D0-B792-00A0C90312E1}”=“Shell Rebar BandSite”

“{DD313E04-FEFF-11d1-8ECD-0000F87A470C}”=“Pomoc dla uľytkownika”

“{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}”=“Globalne ustawienia folder˘w”

“{EFA24E61-B078-11d0-89E4-00C04FC9E26E}”=“Favorites Band”

“{0A89A860-D7B1-11CE-8350-444553540000}”=“Shell Automation Inproc Service”

“{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}”=“Shell DocObject Viewer”

“{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}”=“Microsoft Browser Architecture”

“{FBF23B40-E3F0-101B-8488-00AA003E56F8}”=“InternetShortcut”

“{3C374A40-BAE4-11CF-BF7D-00AA006946EE}”=“Microsoft Url History Service”

“{FF393560-C2A7-11CF-BFF4-444553540000}”=“Historia”

“{7BD29E00-76C1-11CF-9DD0-00A0C9034933}”=“Tymczasowe pliki internetowe”

“{7BD29E01-76C1-11CF-9DD0-00A0C9034933}”=“Tymczasowe pliki internetowe”

“{CFBFAE00-17A6-11D0-99CB-00C04FD64497}”=“Microsoft Url Search Hook”

“{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}”=“Ekran powitalny pakietu IE4”

“{67EA19A0-CCEF-11d0-8024-00C04FD75D13}”=“CDF Extension Copy Hook”

“{131A6951-7F78-11D0-A979-00C04FD705A2}”=“ISFBand OC”

“{9461b922-3c5a-11d2-bf8b-00c04fb93661}”=“Search Assistant OC”

“{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}”=“Internet”

“{871C5380-42A0-1069-A2EA-08002B30309D}”=“Internet Name Space”

“{EFA24E64-B078-11d0-89E4-00C04FC9E26E}”=“Pasek eksploratora”

“{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}”=“Sendmail service”

“{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}”=“Sendmail service”

“{88C6C381-2E85-11D0-94DE-444553540000}”=“Folder pami©ci podr©cznej ActiveX”

“{E6FB5E20-DE35-11CF-9C87-00AA005127ED}”=“WebCheck”

“{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}”=“Subscription Mgr”

“{F5175861-2688-11d0-9C5E-00AA00A45957}”=“Folder subskrypcji”

“{08165EA0-E946-11CF-9C87-00AA005127ED}”=“WebCheckWebCrawler”

“{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}”=“WebCheckChannelAgent”

“{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}”=“TrayAgent”

“{7D559C10-9FE9-11d0-93F7-00AA0059CE02}”=“Code Download Agent”

“{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}”=“ConnectionAgent”

“{D8BD2030-6FC9-11D0-864F-00AA006809D9}”=“PostAgent”

“{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}”=“WebCheck SyncMgr Handler”

“{352EC2B7-8B9A-11D1-B8AE-006008059382}”=“Menedľer aplikacji powoki”

“{0B124F8F-91F0-11D1-B8B5-006008059382}”=“Wyliczanie zainstalowanych aplikacji”

“{CFCCC7A0-A282-11D1-9082-006008059382}”=“Publikator aplikacji Darwin”

“{e84fda7c-1d6a-45f6-b725-cb260c236066}”=“Shell Image Verbs”

“{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}”=“Shell Image Data Factory”

“{3F30C968-480A-4C6C-862D-EFC0897BB84B}”=“GDI+program wyodr©bniajĄcy miniatury plik˘w”

“{9DBD2C50-62AD-11d0-B806-00C04FD706EC}”=“Informacje podsumowujĄce obsugi miniatur (DOCFILES)”

“{EAB841A0-9550-11cf-8C16-00805F1408F3}”=“Wyodr©bnianie miniatur HTML”

“{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}”=“Shell Image Property Handler”

“{CC6EEFFB-43F6-46c5-9619-51D571967F7D}”=“Kreator publikacji w sieci Web”

“{add36aa8-751a-4579-a266-d66f5202ccbb}”=“Zamawianie odbitek w sieci Web”

“{6b33163c-76a5-4b6c-bf21-45de9cd503a1}”=“Obiekt powoki kreatora publikacji”

“{58f1f272-9240-4f51-b6d4-fd63d1618591}”=“Kreator uzyskiwania profilu usugi Passport”

“{7A9D77BD-5403-11d2-8785-2E0420524153}”=“Konta uľytkownik˘w”

“{BD472F60-27FA-11cf-B8B4-444553540000}”=“Compressed (zipped) Folder Right Drag Handler”

“{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}”=“Compressed (zipped) Folder SendTo Target”

“{f39a0dc0-9cc8-11d0-a599-00c04fd64433}”=“Plik kanau”

“{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}”=“Skr˘t kanau”

“{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}”=“Obiekt obsugi kanau”

“{f3da0dc0-9cc8-11d0-a599-00c04fd64437}”=“Channel Menu”

“{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}”=“Channel Properties”

“{63da6ec0-2e98-11cf-8d82-444553540000}”=“FTP Folders Webview”

“{883373C3-BF89-11D1-BE35-080036B11A03}”=“Microsoft DocProp Shell Ext”

“{A9CF0EAE-901A-4739-A481-E35B73E47F6D}”=“Microsoft DocProp Inplace Edit Box Control”

“{8EE97210-FD1F-4B19-91DA-67914005F020}”=“Microsoft DocProp Inplace ML Edit Box Control”

“{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}”=“Microsoft DocProp Inplace Droplist Combo Control”

“{6A205B57-2567-4A2C-B881-F787FAB579A3}”=“Microsoft DocProp Inplace Calendar Control”

“{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}”=“Microsoft DocProp Inplace Time Control”

“{8A23E65E-31C2-11d0-891C-00A024AB2DBB}”=“Directory Query UI”

“{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}”=“Shell properties for a DS object”

“{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}”=“Directory Object Find”

“{F020E586-5264-11d1-A532-0000F8757D7E}”=“Directory Start/Search Find”

“{0D45D530-764B-11d0-A1CA-00AA00C16E65}”=“Directory Property UI”

“{62AE1F9A-126A-11D0-A14B-0800361B1103}”=“Directory Context Menu Verbs”

“{ECF03A33-103D-11d2-854D-006008059367}”=“MyDocs Copy Hook”

“{ECF03A32-103D-11d2-854D-006008059367}”=“MyDocs Drop Target”

“{4a7ded0a-ad25-11d0-98a8-0800361b1103}”=“MyDocs Properties”

“{750fdf0e-2a26-11d1-a3ea-080036587f03}”=“Offline Files Menu”

“{10CFC467-4392-11d2-8DB4-00C04FA31A66}”=“Offline Files Folder Options”

“{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}”=“Folder plik˘w trybu offline”

“{143A62C8-C33B-11D1-84FE-00C04FA34A14}”=“Microsoft Agent Character Property Sheet Handler”

“{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}”=“DfsShell”

“{60fd46de-f830-4894-a628-6fa81bc0190d}”="%DESC_PublishDropTarget%"

“{7A80E4A8-8005-11D2-BCF8-00C04F72C717}”=“MMC Icon Handler”

“{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}”=".CAB file viewer"

“{32714800-2E5F-11d0-8B85-00AA0044F941}”="&Do os˘b…"

“{8DD448E6-C188-4aed-AF92-44956194EB1F}”=“Windows Media Player Play as Playlist Context Menu Handler”

“{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}”=“Windows Media Player Burn Audio CD Context Menu Handler”

“{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}”=“Windows Media Player Add to Playlist Context Menu Handler”

“{1CDB2949-8F65-4355-8456-263E7C208A5D}”=“Eksplorator pulpit˘w”

“{1E9B04FB-F9E5-4718-997B-B8DA88302A47}”=“Desktop Explorer Menu”

“{0006F045-0000-0000-C000-000000000046}”=“Microsoft Outlook Custom Icon Handler”

“{32020A01-506E-484D-A2A8-BE3CF17601C3}”=“AlcoholShellEx”

“{5E2121EE-0300-11D4-8D3B-444553540000}”=“st”

“{D60625F5-E40B-439F-A93D-B8622CBB631D}”=""

“{B8A53659-07FF-4583-ABF1-03085AEA8E23}”=""

“{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}”=“Shell Extensions for RealOne Player”

“{2C3685FC-F00E-49CE-A7EC-570E8F47E1B3}”=""

“{11A5EAFD-3498-48D1-9894-BC279AE23F57}”=""

“{5BC72CF9-24DD-4764-BFB5-84070B8F0230}”=""

“{647E9814-BEE2-4630-BC24-15FAB5D4FECF}”=""

“{ECF53433-87CE-42CB-AF1F-39226C0903A0}”=""

“{5CF66DA2-2A39-4C85-A402-4B808CDB9BCB}”=""

“{71250D23-0FD1-4AA4-B1FF-4556C43AAB25}”=""

“{D836A566-F458-49F8-B1A2-4D9B359CFC9F}”=""

“{14F5C75D-1913-4EDD-9037-D8C08BF4342E}”=""

“{32DAC1F6-BB1F-45EF-884D-2BEFA68D8FBB}”=""

“{36DF5079-DF0F-48FB-A662-0D5D6EF8E74F}”=""

“{999BE244-3748-461C-9A48-77B4EC531E37}”=""

“{B3DDF6A9-E0B5-4080-B491-631F930DFBF7}”=""

“{78786D1F-603F-4208-890D-BB6B5F90B477}”=""

“{78DEEEC5-AE39-4A43-8358-610E131A633C}”=""

“{EBC18BD7-30AE-4213-BDAD-334689A84948}”=""

“{B41DB860-8EE4-11D2-9906-E49FADC173CA}”=“WinRAR shell extension”

“{F84C2BEC-F3F6-4D23-98CF-25C5B26FB467}”=""

“{E02E4B38-FB10-4E13-8EBF-1DA4449121CF}”=""

“{E163D344-7F2E-4303-A42D-003BB64519C4}”=""

“{385AF350-AC58-4D08-9B06-7A8CF38C268C}”=""

“{CE24D759-B673-435C-B6C3-4C501F1A1930}”=""

“{BE3AF7C3-BFD5-4495-9FD1-03C352F12382}”=""

“{87BAC973-BC6A-4EED-9825-D6AF0FE5FCB0}”=""

“{262DE97B-79D0-49C4-8BD8-85B4AB6A3C2D}”=""

“{C185DCFB-B30A-4551-AF64-F1536A145CC1}”=""

“{2471C431-A7FD-4BC3-A19F-A7EF183E9B27}”=""

“{170FB37D-422A-4A0D-B37D-0195F534D5A3}”=""

“{9B000BC2-0246-4BEB-9F90-E171B26CD80C}”=""

“{1D50FAD8-595F-4D99-AC4A-B411580DB150}”=""

“{19337E51-E012-432E-AEB0-210B86B066E8}”=""

“{E94E64FA-5841-4C34-9841-5DE92435F813}”=""

“{F779E2A9-4B22-44F9-BDD5-2C8B81AAB0A3}”=""

“{877E63DE-BDA6-44C9-A492-D05BF13CD65C}”=""

“{67D609B4-3F0A-467F-BF1A-D3ECB49FA6BA}”=""

“{2B6632DC-5385-4452-B492-6A4A88065921}”=""

**********************************************************************************

HKEY ROOT CLASSIDS:

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{D60625F5-E40B-439F-A93D-B8622CBB631D}]

@=""

[HKEY_CLASSES_ROOT\CLSID{D60625F5-E40B-439F-A93D-B8622CBB631D}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{D60625F5-E40B-439F-A93D-B8622CBB631D}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{D60625F5-E40B-439F-A93D-B8622CBB631D}\InprocServer32]

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{B8A53659-07FF-4583-ABF1-03085AEA8E23}]

@=""

[HKEY_CLASSES_ROOT\CLSID{B8A53659-07FF-4583-ABF1-03085AEA8E23}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{B8A53659-07FF-4583-ABF1-03085AEA8E23}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{B8A53659-07FF-4583-ABF1-03085AEA8E23}\InprocServer32]

@=“D:\WINDOWS\system32\kydcz1.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{11A5EAFD-3498-48D1-9894-BC279AE23F57}]

@=""

[HKEY_CLASSES_ROOT\CLSID{11A5EAFD-3498-48D1-9894-BC279AE23F57}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{11A5EAFD-3498-48D1-9894-BC279AE23F57}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{11A5EAFD-3498-48D1-9894-BC279AE23F57}\InprocServer32]

@=“D:\WINDOWS\system32\mbl_mtf.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{5BC72CF9-24DD-4764-BFB5-84070B8F0230}]

@=""

[HKEY_CLASSES_ROOT\CLSID{5BC72CF9-24DD-4764-BFB5-84070B8F0230}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{5BC72CF9-24DD-4764-BFB5-84070B8F0230}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{5BC72CF9-24DD-4764-BFB5-84070B8F0230}\InprocServer32]

@=“D:\WINDOWS\system32\toaffic.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{647E9814-BEE2-4630-BC24-15FAB5D4FECF}]

@=""

[HKEY_CLASSES_ROOT\CLSID{647E9814-BEE2-4630-BC24-15FAB5D4FECF}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{647E9814-BEE2-4630-BC24-15FAB5D4FECF}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{647E9814-BEE2-4630-BC24-15FAB5D4FECF}\InprocServer32]

@=“D:\WINDOWS\system32\sZfrdm.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{ECF53433-87CE-42CB-AF1F-39226C0903A0}]

@=""

[HKEY_CLASSES_ROOT\CLSID{ECF53433-87CE-42CB-AF1F-39226C0903A0}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{ECF53433-87CE-42CB-AF1F-39226C0903A0}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{ECF53433-87CE-42CB-AF1F-39226C0903A0}\InprocServer32]

@=“D:\WINDOWS\system32\ispromon.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{5CF66DA2-2A39-4C85-A402-4B808CDB9BCB}]

@=""

[HKEY_CLASSES_ROOT\CLSID{5CF66DA2-2A39-4C85-A402-4B808CDB9BCB}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{5CF66DA2-2A39-4C85-A402-4B808CDB9BCB}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{5CF66DA2-2A39-4C85-A402-4B808CDB9BCB}\InprocServer32]

@=“D:\WINDOWS\system32\aCaamon.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{71250D23-0FD1-4AA4-B1FF-4556C43AAB25}]

@=""

[HKEY_CLASSES_ROOT\CLSID{71250D23-0FD1-4AA4-B1FF-4556C43AAB25}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{71250D23-0FD1-4AA4-B1FF-4556C43AAB25}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{71250D23-0FD1-4AA4-B1FF-4556C43AAB25}\InprocServer32]

@=“D:\WINDOWS\system32\ddmrtp.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{14F5C75D-1913-4EDD-9037-D8C08BF4342E}]

@=""

[HKEY_CLASSES_ROOT\CLSID{14F5C75D-1913-4EDD-9037-D8C08BF4342E}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{14F5C75D-1913-4EDD-9037-D8C08BF4342E}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{14F5C75D-1913-4EDD-9037-D8C08BF4342E}\InprocServer32]

@=“D:\WINDOWS\system32\nfoglnt.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{32DAC1F6-BB1F-45EF-884D-2BEFA68D8FBB}]

@=""

[HKEY_CLASSES_ROOT\CLSID{32DAC1F6-BB1F-45EF-884D-2BEFA68D8FBB}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{32DAC1F6-BB1F-45EF-884D-2BEFA68D8FBB}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{32DAC1F6-BB1F-45EF-884D-2BEFA68D8FBB}\InprocServer32]

@=“D:\WINDOWS\system32\iu50_qc.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{36DF5079-DF0F-48FB-A662-0D5D6EF8E74F}]

@=""

[HKEY_CLASSES_ROOT\CLSID{36DF5079-DF0F-48FB-A662-0D5D6EF8E74F}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{36DF5079-DF0F-48FB-A662-0D5D6EF8E74F}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{36DF5079-DF0F-48FB-A662-0D5D6EF8E74F}\InprocServer32]

@=“D:\WINDOWS\system32\mNg_hook.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{999BE244-3748-461C-9A48-77B4EC531E37}]

@=""

[HKEY_CLASSES_ROOT\CLSID{999BE244-3748-461C-9A48-77B4EC531E37}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{999BE244-3748-461C-9A48-77B4EC531E37}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{999BE244-3748-461C-9A48-77B4EC531E37}\InprocServer32]

@=“D:\WINDOWS\system32\sjtupapi.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{B3DDF6A9-E0B5-4080-B491-631F930DFBF7}]

@=""

[HKEY_CLASSES_ROOT\CLSID{B3DDF6A9-E0B5-4080-B491-631F930DFBF7}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{B3DDF6A9-E0B5-4080-B491-631F930DFBF7}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{B3DDF6A9-E0B5-4080-B491-631F930DFBF7}\InprocServer32]

@=“D:\WINDOWS\system32\dmspex.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{78786D1F-603F-4208-890D-BB6B5F90B477}]

@=""

[HKEY_CLASSES_ROOT\CLSID{78786D1F-603F-4208-890D-BB6B5F90B477}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{78786D1F-603F-4208-890D-BB6B5F90B477}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{78786D1F-603F-4208-890D-BB6B5F90B477}\InprocServer32]

@=“D:\WINDOWS\system32\shvsvc.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{78DEEEC5-AE39-4A43-8358-610E131A633C}]

@=""

[HKEY_CLASSES_ROOT\CLSID{78DEEEC5-AE39-4A43-8358-610E131A633C}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{78DEEEC5-AE39-4A43-8358-610E131A633C}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{78DEEEC5-AE39-4A43-8358-610E131A633C}\InprocServer32]

@=“D:\WINDOWS\system32\wonnls.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{EBC18BD7-30AE-4213-BDAD-334689A84948}]

@=""

[HKEY_CLASSES_ROOT\CLSID{EBC18BD7-30AE-4213-BDAD-334689A84948}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{EBC18BD7-30AE-4213-BDAD-334689A84948}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{EBC18BD7-30AE-4213-BDAD-334689A84948}\InprocServer32]

@=“D:\WINDOWS\system32\bmackbox.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{F84C2BEC-F3F6-4D23-98CF-25C5B26FB467}]

@=""

[HKEY_CLASSES_ROOT\CLSID{F84C2BEC-F3F6-4D23-98CF-25C5B26FB467}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{F84C2BEC-F3F6-4D23-98CF-25C5B26FB467}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{F84C2BEC-F3F6-4D23-98CF-25C5B26FB467}\InprocServer32]

@=“D:\WINDOWS\system32\wvashext.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{E02E4B38-FB10-4E13-8EBF-1DA4449121CF}]

@=""

[HKEY_CLASSES_ROOT\CLSID{E02E4B38-FB10-4E13-8EBF-1DA4449121CF}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{E02E4B38-FB10-4E13-8EBF-1DA4449121CF}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{E02E4B38-FB10-4E13-8EBF-1DA4449121CF}\InprocServer32]

@=“D:\WINDOWS\system32\zdpfldr.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{E163D344-7F2E-4303-A42D-003BB64519C4}]

@=""

[HKEY_CLASSES_ROOT\CLSID{E163D344-7F2E-4303-A42D-003BB64519C4}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{E163D344-7F2E-4303-A42D-003BB64519C4}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{E163D344-7F2E-4303-A42D-003BB64519C4}\InprocServer32]

@=“D:\WINDOWS\system32\dargui.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{385AF350-AC58-4D08-9B06-7A8CF38C268C}]

@=""

[HKEY_CLASSES_ROOT\CLSID{385AF350-AC58-4D08-9B06-7A8CF38C268C}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{385AF350-AC58-4D08-9B06-7A8CF38C268C}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{385AF350-AC58-4D08-9B06-7A8CF38C268C}\InprocServer32]

@=“D:\WINDOWS\system32\ementprf.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{CE24D759-B673-435C-B6C3-4C501F1A1930}]

@=""

[HKEY_CLASSES_ROOT\CLSID{CE24D759-B673-435C-B6C3-4C501F1A1930}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{CE24D759-B673-435C-B6C3-4C501F1A1930}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{CE24D759-B673-435C-B6C3-4C501F1A1930}\InprocServer32]

@=“D:\WINDOWS\system32\pfustab.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{BE3AF7C3-BFD5-4495-9FD1-03C352F12382}]

@=""

[HKEY_CLASSES_ROOT\CLSID{BE3AF7C3-BFD5-4495-9FD1-03C352F12382}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{BE3AF7C3-BFD5-4495-9FD1-03C352F12382}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{BE3AF7C3-BFD5-4495-9FD1-03C352F12382}\InprocServer32]

@=“D:\WINDOWS\system32\beowsewm.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{87BAC973-BC6A-4EED-9825-D6AF0FE5FCB0}]

@=""

[HKEY_CLASSES_ROOT\CLSID{87BAC973-BC6A-4EED-9825-D6AF0FE5FCB0}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{87BAC973-BC6A-4EED-9825-D6AF0FE5FCB0}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{87BAC973-BC6A-4EED-9825-D6AF0FE5FCB0}\InprocServer32]

@=“D:\WINDOWS\system32\weavusd.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{262DE97B-79D0-49C4-8BD8-85B4AB6A3C2D}]

@=""

[HKEY_CLASSES_ROOT\CLSID{262DE97B-79D0-49C4-8BD8-85B4AB6A3C2D}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{262DE97B-79D0-49C4-8BD8-85B4AB6A3C2D}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{262DE97B-79D0-49C4-8BD8-85B4AB6A3C2D}\InprocServer32]

@=“D:\WINDOWS\system32\nywrstr.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{C185DCFB-B30A-4551-AF64-F1536A145CC1}]

@=""

[HKEY_CLASSES_ROOT\CLSID{C185DCFB-B30A-4551-AF64-F1536A145CC1}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{C185DCFB-B30A-4551-AF64-F1536A145CC1}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{C185DCFB-B30A-4551-AF64-F1536A145CC1}\InprocServer32]

@=“D:\WINDOWS\system32\nxmsapi.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{2471C431-A7FD-4BC3-A19F-A7EF183E9B27}]

@=""

[HKEY_CLASSES_ROOT\CLSID{2471C431-A7FD-4BC3-A19F-A7EF183E9B27}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{2471C431-A7FD-4BC3-A19F-A7EF183E9B27}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{2471C431-A7FD-4BC3-A19F-A7EF183E9B27}\InprocServer32]

@=“D:\WINDOWS\system32\vspodbc.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{170FB37D-422A-4A0D-B37D-0195F534D5A3}]

@=""

[HKEY_CLASSES_ROOT\CLSID{170FB37D-422A-4A0D-B37D-0195F534D5A3}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{170FB37D-422A-4A0D-B37D-0195F534D5A3}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{170FB37D-422A-4A0D-B37D-0195F534D5A3}\InprocServer32]

@=“D:\WINDOWS\system32\ahmpvcno.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{9B000BC2-0246-4BEB-9F90-E171B26CD80C}]

@=""

[HKEY_CLASSES_ROOT\CLSID{9B000BC2-0246-4BEB-9F90-E171B26CD80C}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{9B000BC2-0246-4BEB-9F90-E171B26CD80C}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{9B000BC2-0246-4BEB-9F90-E171B26CD80C}\InprocServer32]

@=“D:\WINDOWS\system32\dhkquoui.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{1D50FAD8-595F-4D99-AC4A-B411580DB150}]

@=""

[HKEY_CLASSES_ROOT\CLSID{1D50FAD8-595F-4D99-AC4A-B411580DB150}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{1D50FAD8-595F-4D99-AC4A-B411580DB150}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{1D50FAD8-595F-4D99-AC4A-B411580DB150}\InprocServer32]

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{19337E51-E012-432E-AEB0-210B86B066E8}]

@=""

[HKEY_CLASSES_ROOT\CLSID{19337E51-E012-432E-AEB0-210B86B066E8}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{19337E51-E012-432E-AEB0-210B86B066E8}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{19337E51-E012-432E-AEB0-210B86B066E8}\InprocServer32]

@=“D:\WINDOWS\system32\ih50_qc.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{E94E64FA-5841-4C34-9841-5DE92435F813}]

@=""

[HKEY_CLASSES_ROOT\CLSID{E94E64FA-5841-4C34-9841-5DE92435F813}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{E94E64FA-5841-4C34-9841-5DE92435F813}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{E94E64FA-5841-4C34-9841-5DE92435F813}\InprocServer32]

@=“D:\WINDOWS\system32\cmmdlg32.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{F779E2A9-4B22-44F9-BDD5-2C8B81AAB0A3}]

@=""

[HKEY_CLASSES_ROOT\CLSID{F779E2A9-4B22-44F9-BDD5-2C8B81AAB0A3}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{F779E2A9-4B22-44F9-BDD5-2C8B81AAB0A3}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{F779E2A9-4B22-44F9-BDD5-2C8B81AAB0A3}\InprocServer32]

@=“D:\WINDOWS\system32\jxt500.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{877E63DE-BDA6-44C9-A492-D05BF13CD65C}]

@=""

[HKEY_CLASSES_ROOT\CLSID{877E63DE-BDA6-44C9-A492-D05BF13CD65C}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{877E63DE-BDA6-44C9-A492-D05BF13CD65C}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{877E63DE-BDA6-44C9-A492-D05BF13CD65C}\InprocServer32]

@=“D:\WINDOWS\system32\wvhatm.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{67D609B4-3F0A-467F-BF1A-D3ECB49FA6BA}]

@=""

[HKEY_CLASSES_ROOT\CLSID{67D609B4-3F0A-467F-BF1A-D3ECB49FA6BA}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{67D609B4-3F0A-467F-BF1A-D3ECB49FA6BA}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{67D609B4-3F0A-467F-BF1A-D3ECB49FA6BA}\InprocServer32]

@=“D:\WINDOWS\system32\dadmoprp.dll”

“ThreadingModel”=“Apartment”

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID{2B6632DC-5385-4452-B492-6A4A88065921}]

@=""

[HKEY_CLASSES_ROOT\CLSID{2B6632DC-5385-4452-B492-6A4A88065921}\Implemented Categories]

@=""

[HKEY_CLASSES_ROOT\CLSID{2B6632DC-5385-4452-B492-6A4A88065921}\Implemented Categories{00021492-0000-0000-C000-000000000046}]

@=""

[HKEY_CLASSES_ROOT\CLSID{2B6632DC-5385-4452-B492-6A4A88065921}\InprocServer32]

@=“D:\WINDOWS\system32\dmmodemx.dll”

“ThreadingModel”=“Apartment”

**********************************************************************************

Files Found are not all bad files:

D:\WINDOWS\SYSTEM32\

ff_vfw.dll Fri 2005-09-30 9:41:52 A… 6 144 6,00 K

w95inf16.dll Sat 2005-11-12 16:52:04 A… 2 272 2,22 K

w95inf32.dll Sat 2005-11-12 16:52:04 A… 4 608 4,50 K

f4l00e~1.dll Sat 2005-11-12 17:53:48 …S.R 0 0,00 K

vb6sock.dll Sun 2005-11-13 12:21:46 A… 19 0,02 K

bn.dll Sun 2005-11-13 12:26:42 A… 853 0,83 K

6 items found: 6 files (1 H/S), 0 directories.

Total of file sizes: 13 896 bytes 13,57 K

Locate .tmp files:

No matches found.

**********************************************************************************

Directory Listing of system files:

Wolumin w stacji D to MAMU—KA

Numer seryjny woluminu: 08DD-0732

Katalog: D:\WINDOWS\System32

2005-11-12 17:53 0 f4l00e3meh.dll

2005-11-12 16:48

2005-11-12 15:57

1 plik(˘w) 0 bajt˘w

2 katalog(˘w) 4˙440˙293˙376 bajt˘w wolnych

#6

Otwórz Notatnik i wklej w nim to:

Plik >>> Zapisz jako >>> Zmień rozszerzenie z TXT na Wszystkie pliki >>> Zapisz pod nazwą FIX.REG

Start do z Konsoli Odzyskiwania CD XP i komendy:

CD C:\WINDOWS\system32

ATTRIB -R-S-H guard.tmp

ATTRIB -R-S-H f4l00e3meh.dll

ATTRIB -R-S-H dmmodemx.dll

ATTRIB -R-S-H dadmoprp.dll

ATTRIB -R-S-H wvhatm.dll

ATTRIB -R-S-H jxt500.dll

ATTRIB -R-S-H cmmdlg32.dll

ATTRIB -R-S-H ih50_qc.dll

ATTRIB -R-S-H dhkquoui.dll

ATTRIB -R-S-H ahmpvcno.dll

ATTRIB -R-S-H vspodbc.dll

ATTRIB -R-S-H nxmsapi.dll

ATTRIB -R-S-H nywrstr.dll

ATTRIB -R-S-H weavusd.dll

ATTRIB -R-S-H beowsewm.dll

ATTRIB -R-S-H pfustab.dll

ATTRIB -R-S-H ementprf.dll

ATTRIB -R-S-H dargui.dll

ATTRIB -R-S-H zdpfldr.dll

ATTRIB -R-S-H wvashext.dll

ATTRIB -R-S-H bmackbox.dll

ATTRIB -R-S-H wonnls.dll

ATTRIB -R-S-H shvsvc.dll

ATTRIB -R-S-H dmspex.dll

ATTRIB -R-S-H sjtupapi.dll

ATTRIB -R-S-H mNg_hook.dll

ATTRIB -R-S-H iu50_qc.dll

ATTRIB -R-S-H nfoglnt.dll

ATTRIB -R-S-H ddmrtp.dll

ATTRIB -R-S-H aCaamon.dll

ATTRIB -R-S-H ispromon.dll

ATTRIB -R-S-H sZfrdm.dll

ATTRIB -R-S-H toaffic.dll

ATTRIB -R-S-H mbl_mtf.dll

ATTRIB -R-S-H kydcz1.dll

DEL guard.tmp

DEL f4l00e3meh.dll

DEL dmmodemx.dll

DEL dadmoprp.dll

DEL wvhatm.dll

DEL jxt500.dll

DEL cmmdlg32.dll

DEL ih50_qc.dll

DEL dhkquoui.dll

DEL ahmpvcno.dll

DEL vspodbc.dll

DEL nxmsapi.dll

DEL nywrstr.dll

DEL weavusd.dll

DEL beowsewm.dll

DEL pfustab.dll

DEL ementprf.dll

DEL dargui.dll

DEL zdpfldr.dll

DEL wvashext.dll

DEL bmackbox.dll

DEL wonnls.dll

DEL shvsvc.dll

DEL dmspex.dll

DEL sjtupapi.dll

DEL mNg_hook.dll

DEL iu50_qc.dll

DEL nfoglnt.dll

DEL ddmrtp.dll

DEL aCaamon.dll

DEL ispromon.dll

DEL sZfrdm.dll

DEL toaffic.dll

DEL mbl_mtf.dll

DEL kydcz1.dll

EXIT

Przejście do trybu awaryjnego Windows i uruchomienie pliku FIX.REG. Dajesz mi nowego loga L2MFix robionego z opcji 1.