HiJackThis logje

dikken · 18 september 2011

Hallo,

In het combologje zag ik ook die mcafee security scan staan maar deze staat bij de services afgevinkt. Ik ben dan via de windows zoekfunctie alles gaan zoeken wat ook maar met mcafee te maken heeft en dit manueel gewist, ook de registersleutels.

ook met ccleaner nog eens een registercontrole gedaan. daar stond niets meer tussen wat betrekking had op mcafee.

PCdoctor is een onderdeel van het dell support center en daar ben ik af gebleven daar dit vroeger ook nooit voor problemen heeft gezorgd.

Opnieuw combofix uitgevoerd maar helaas zie ik daar nog steeds die mcafee staan.

zie hier het logje.

ComboFix 11-09-17.04 - christel 18/09/2011 16:30:04.4.2 - x86

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.3581.2371 [GMT 2:00]

Gestart vanuit: c:\users\christel\Downloads\ComboFix.exe

AV: BullGuard Antivirus *Disabled/Outdated* {504FFF66-3028-EB7E-2E60-62B19ADD791C}

FW: BullGuard Firewall *Disabled* {68747E43-7A47-EA26-053F-CB84640E3E67}

SP: BullGuard Antispyware *Disabled/Outdated* {EB2E1E82-1612-E4F0-14D0-59C3E15A33A1}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

(((((((((((((((((((( Bestanden Gemaakt van 2011-08-18 to 2011-09-18 ))))))))))))))))))))))))))))))

.

2072-04-03 12:13 . 2008-03-21 13:46 607296 ------w- c:\program files\Microsoft Games\Age of Empires III\deformerdllyD.dll

2011-09-18 14:45 . 2011-09-18 14:46 -------- d-----w- c:\users\christel\AppData\Local\temp

2011-09-18 14:45 . 2011-09-18 14:45 -------- d-----w- c:\users\Public\AppData\Local\temp

2011-09-18 14:45 . 2011-09-18 14:45 -------- d-----w- c:\users\Default\AppData\Local\temp

2011-09-16 06:12 . 2011-08-10 12:14 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat

2011-09-06 13:28 . 2011-09-06 13:28 -------- d--h--w- c:\programdata\CanonIJScan

2011-09-06 13:28 . 2011-09-06 13:28 -------- d-----w- c:\users\christel\AppData\Roaming\Canon

2011-09-02 14:29 . 2011-09-02 14:29 -------- d-----w- c:\program files\iPod

2011-09-02 14:29 . 2011-09-02 14:31 -------- d-----w- c:\program files\iTunes

2011-09-02 14:24 . 2011-09-02 14:24 -------- d-----w- c:\program files\Bonjour

2011-08-24 09:33 . 2011-07-11 13:25 2048 ----a-w- c:\windows\system32\tzres.dll

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-09-07 18:00 . 2011-05-19 12:22 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-08-31 15:00 . 2011-07-04 19:44 22216 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-08-22 07:33 . 2011-04-19 13:43 155992 ----a-w- c:\windows\system32\BGLsp.dll

2011-07-22 02:54 . 2011-08-11 19:17 1797632 ----a-w- c:\windows\system32\jscript9.dll

2011-07-22 02:48 . 2011-08-11 19:17 1126912 ----a-w- c:\windows\system32\wininet.dll

2011-07-22 02:44 . 2011-08-11 19:17 2382848 ----a-w- c:\windows\system32\mshtml.tlb

2011-07-12 09:20 . 2011-07-12 09:20 83816 ----a-w- c:\windows\system32\dns-sd.exe

2011-07-12 09:20 . 2011-07-12 09:20 73064 ----a-w- c:\windows\system32\dnssd.dll

2011-07-06 15:31 . 2011-08-11 11:35 214016 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys

2011-07-05 16:37 . 2011-07-05 16:37 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx

2011-07-05 16:37 . 2011-07-05 16:37 69632 ----a-w- c:\windows\system32\QuickTime.qts

2011-06-26 10:23 . 2010-05-01 10:03 472808 ----a-w- c:\windows\system32\deployJava1.dll

2011-06-24 11:42 . 2011-06-24 11:42 86528 ----a-w- c:\windows\system32\iesysprep.dll

2011-06-24 11:42 . 2011-06-24 11:42 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe

2011-06-24 11:42 . 2011-06-24 11:42 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe

2011-06-24 11:42 . 2011-06-24 11:42 63488 ----a-w- c:\windows\system32\tdc.ocx

2011-06-24 11:42 . 2011-06-24 11:42 48640 ----a-w- c:\windows\system32\mshtmler.dll

2011-06-24 11:42 . 2011-06-24 11:42 367104 ----a-w- c:\windows\system32\html.iec

2011-06-24 11:42 . 2011-06-24 11:42 161792 ----a-w- c:\windows\system32\msls31.dll

2011-06-24 11:42 . 2011-06-24 11:42 74752 ----a-w- c:\windows\system32\iesetup.dll

2011-06-24 11:42 . 2011-06-24 11:42 420864 ----a-w- c:\windows\system32\vbscript.dll

2011-06-24 11:42 . 2011-06-24 11:42 23552 ----a-w- c:\windows\system32\licmgr10.dll

2011-06-24 11:42 . 2011-06-24 11:42 152064 ----a-w- c:\windows\system32\wextract.exe

2011-06-24 11:42 . 2011-06-24 11:42 150528 ----a-w- c:\windows\system32\iexpress.exe

2011-06-24 11:42 . 2011-06-24 11:42 142848 ----a-w- c:\windows\system32\ieUnatt.exe

2011-06-24 11:42 . 2011-06-24 11:42 1427456 ----a-w- c:\windows\system32\inetcpl.cpl

2011-06-24 11:42 . 2011-06-24 11:42 11776 ----a-w- c:\windows\system32\mshta.exe

2011-06-24 11:42 . 2011-06-24 11:42 101888 ----a-w- c:\windows\system32\admparse.dll

2011-06-24 11:42 . 2011-06-24 11:42 35840 ----a-w- c:\windows\system32\imgutil.dll

2011-06-24 11:42 . 2011-06-24 11:42 110592 ----a-w- c:\windows\system32\IEAdvpack.dll

2011-09-07 17:58 . 2011-06-26 11:30 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]

"IncrediMail"="c:\program files\IncrediMail\bin\IncMail.exe" [2011-07-21 366024]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]

"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-08-26 17361032]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ECenter"="c:\dell\E-Center\EULALauncher.exe" [2008-02-29 17920]

"Apoint"="c:\program files\DellTPad\Apoint.exe" [2007-09-24 159744]

"OEM02Mon.exe"="c:\windows\OEM02Mon.exe" [2007-12-03 36864]

"DELL Webcam Manager"="c:\program files\Dell\Dell Webcam Manager\DellWMgr.exe" [2007-07-27 118784]

"PCMService"="c:\program files\Dell\MediaDirect\PCMService.exe" [2007-12-21 184320]

"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-01-12 488984]

"LVCOMSX"="c:\program files\Common Files\LogiShrd\LComMgr\LVComSX.exe" [2007-01-12 244512]

"SigmatelSysTrayApp"="c:\program files\SigmaTel\C-Major Audio\WDM\sttray.exe" [2008-01-02 405504]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 55824]

"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]

"BullGuard"="c:\program files\BullGuard Ltd\BullGuard\BullGuard.exe" [2011-07-07 1620824]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]

"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2010-03-24 2516296]

"CanonSolutionMenuEx"="c:\program files\Canon\Solution Menu EX\CNSEMAIN.EXE" [2010-04-02 1185112]

"IJNetworkScanUtility"="c:\program files\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe" [2010-03-02 140640]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-07-05 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-08-18 421736]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2008-5-24 50688]

Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2008-10-12 813584]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

.

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BTTray.lnk]

path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk

backup=c:\windows\pss\BTTray.lnk.CommonStartup

backupExtension=.CommonStartup

.

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk]

path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

backup=c:\windows\pss\McAfee Security Scan Plus.lnk.CommonStartup

backupExtension=.CommonStartup

.

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^QuickSet.lnk]

path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\QuickSet.lnk

backup=c:\windows\pss\QuickSet.lnk.CommonStartup

backupExtension=.CommonStartup

.

[HKLM\~\startupfolder\C:^Users^christel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Schermopname en Snel starten.lnk]

path=c:\users\christel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Schermopname en Snel starten.lnk

backup=c:\windows\pss\OneNote 2007 Schermopname en Snel starten.lnk.Startup

backupExtension=.Startup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]

2008-01-19 07:38 1008184 ----a-w- c:\program files\Windows Defender\MSASCui.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]

"DisableMonitoring"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]

"AntiVirusOverride"=dword:00000001

"FirewallOverride"=dword:00000001

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 gupdate;Google Update-service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-09-01 136176]

R3 BgRaSvc;BgRaSvc;c:\program files\BullGuard Ltd\BullGuard\Support\BgRaSvc.exe [2011-05-18 125784]

R3 BsScanner;BullGuard scanning service;c:\program files\BullGuard Ltd\BullGuard\BullGuardScanner.exe [2011-09-17 288600]

R3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-09-01 136176]

R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]

R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

S1 AFW;Agnitum Firewall Driver;c:\windows\system32\DRIVERS\afw.sys [2011-06-15 34920]

S1 BdSpy;BdSpy;c:\windows\system32\DRIVERS\BdSpy.sys [2011-06-15 61152]

S1 NovaShieldFilterDriver;NovaShieldFilterDriver;c:\windows\system32\DRIVERS\NSKernel.sys [2011-06-15 215624]

S1 NovaShieldTDIDriver;NovaShieldTDIDriver;c:\windows\system32\DRIVERS\NSNetmon.sys [2011-06-15 20040]

S2 AESTFilters;Andrea ST Filters Service;c:\windows\system32\aestsrv.exe [2008-01-02 73728]

S2 BsBhvScan;BullGuard behavioural detection service;c:\program files\BullGuard Ltd\BullGuard\BullGuardBhvScanner.exe [2011-09-17 338264]

S2 BsBrowser;BullGuard antiphishing service;c:\windows\System32\SvcHost.exe [2008-01-19 21504]

S2 BsFileScan;BullGuard on-access service;c:\windows\System32\SvcHost.exe [2008-01-19 21504]

S2 BsFire;BullGuard firewall service;c:\windows\System32\SvcHost.exe [2008-01-19 21504]

S2 BsMailProxy;BullGuard e-mail monitoring service;c:\windows\System32\SvcHost.exe [2008-01-19 21504]

S2 BsMain;BullGuard main service;c:\windows\System32\SvcHost.exe [2008-01-19 21504]

S2 BsUpdate;BullGuard update service;c:\program files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe [2011-05-18 320344]

S3 afwcore;afwcore;c:\windows\system32\DRIVERS\afwcore.sys [2011-06-15 328296]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

bthsvcs REG_MULTI_SZ BthServ

LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

BullGuard_Main REG_MULTI_SZ BsMain

BullGuard REG_MULTI_SZ BsFileScan BsMailProxy BsFire

BullGuard_LowPriv REG_MULTI_SZ BsBrowser

.

Inhoud van de 'Gedeelde Taken' map

.

2011-09-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2011-09-01 17:12]

.

2011-09-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2011-09-01 17:12]

.

2011-09-11 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job

- c:\program files\Dell Support Center\uaclauncher.exe [2011-06-21 18:08]

.

2011-09-18 c:\windows\Tasks\SystemToolsDailyTest.job

- c:\program files\Dell Support Center\uaclauncher.exe [2011-06-21 18:08]

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://mystart.incredimail.com/?a=1jR7pNHZaFz

uInternet Settings,ProxyOverride = *.local

IE: &Verzenden naar OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000

IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

LSP: c:\windows\system32\BGLsp.dll

Trusted Zone: internet

Trusted Zone: mcafee.com

TCP: DhcpNameServer = 195.130.130.5 195.130.131.5

FF - ProfilePath - c:\users\christel\AppData\Roaming\Mozilla\Firefox\Profiles\clkf44mq.default\

FF - prefs.js: browser.search.selectedEngine - AVG Secure Search

FF - prefs.js: browser.startup.homepage - hxxp://www.google.be/ig?hl=nl&source=iglk

FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=4e06f818&v=7.005.030.004&i=26&tp=ab&iy=&ychte=us&lng=nl&q=

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2011-09-18 16:46

Windows 6.0.6002 Service Pack 2 NTFS

.

scannen van verborgen processen ...

.

scannen van verborgen autostart items ...

.

scannen van verborgen bestanden ...

.

Scan succesvol afgerond

verborgen bestanden: 0

.

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.032"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.abr"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.amr"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.ani"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.arw"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.bay"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.bmp"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.bw"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bwf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.bwf"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cel\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.cel"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.cr2"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.crw"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.cs1"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.cur"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.dcr"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.dcx"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.dib"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.djv"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.djvu"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.dng"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.emf"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.eps"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.erf"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.fff"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flc\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.flc"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fli\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.fli"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.fpx"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.gif"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.hdr"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.icl"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.icn"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.iff"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.ilbm"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.int"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.inta"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.iw4"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.j2c"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.j2k"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.jbr"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.jfif"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.jif"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.jp2"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.jpc"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.jpe"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.jpeg"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.jpg"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.jpk"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.jpx"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kar\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.kar"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.kdc"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.lbm"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m15\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.m15"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1a\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.m1a"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2a\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.m2a"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m75\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.m75"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.mef"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.mos"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.mpv"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.mrw"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.nef"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.orf"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.pbm"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.pbr"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.pcd"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.pct"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.pcx"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.pef"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.pgm"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.pic"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pics\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.pics"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.pict"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.pix"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.png"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.ppm"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.psd"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.psp"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.pspbrush"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.pspimage"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qcp\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.qcp"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qtpf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.qtpf"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.raf"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.ras"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.raw"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.rgb"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.rgba"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.rle"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.rsb"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sdv\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.sdv"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sfil\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.sfil"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.sgi"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.smf"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smi\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.smi"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.smil"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sml\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.sml"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.sr2"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.srf"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.swa\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.swa"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.tga"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.thm"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.tif"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.tiff"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.ttc"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.ttf"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ulw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.ulw"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v20po\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.v20po"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v20pp\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.v20pp"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v20ppf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.v20ppf"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vfw\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.vfw"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.wbm"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.wbmp"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.wmf"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.xbm"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.xif"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.xmp"

.

[HKEY_USERS\S-1-5-21-1052048580-1101144840-2833693393-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="ACDSee Pro 2.0.xpm"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

.

- - - - - - - > 'Explorer.exe'(4820)

c:\program files\Logitech\SetPoint\lgscroll.dll

.

Voltooingstijd: 2011-09-18 16:50:46

ComboFix-quarantined-files.txt 2011-09-18 14:50

ComboFix2.txt 2011-09-18 14:09

ComboFix3.txt 2011-09-16 07:15

ComboFix4.txt 2010-10-02 22:01

.

Pre-Run: 146.130.673.664 bytes beschikbaar

Post-Run: 146.128.617.472 bytes beschikbaar

.

- - End Of File - - DF4C7BDCD143F50DE6D31F9F0B57C6A2

18 september 2011 aangepast door dikken

kweezie wabbit · 19 september 2011

Ga naar start, typ msconfig in het zoekvak en druk enter.

Op het tabblad algemeen selecteer je normaal opstarten.

Op het tabblad computer opstarten vink je alles uit, klik dan op geavanceerde opties, vink ook daar alles uit en klki dan OK.

Op het tabblad opstarten zoek je naar die McAfee en vink deze uit.

Klik OK om het venster te sluiten en herstart de pc.

Doe dan een scan met combofix en plaats het logje.

dikken · 19 september 2011

de mcafee applicatie was al uitgeschakeld voor de laptop traag begon te lopen.

Heb nu via ccleaner bij opstarten de waard evan mcafee verwijderd alsook nog een aantal resterende registerwaarden me de verwijzing naar mcafee. Dit resulteerde in het probleem dat ik geen enkele webbrowser meer kon opstarten. Na een herstart van de laptop was dit probleem gelukkig opgelost.

de laptop blijft echter traag.

ComboFix 11-09-19.01 - christel 19/09/2011 9:29.6.2 - x86

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.3581.2103 [GMT 2:00]

Gestart vanuit: c:\users\christel\Downloads\ComboFix.exe

AV: BullGuard Antivirus *Disabled/Outdated* {504FFF66-3028-EB7E-2E60-62B19ADD791C}

FW: BullGuard Firewall *Disabled* {68747E43-7A47-EA26-053F-CB84640E3E67}

SP: BullGuard Antispyware *Disabled/Outdated* {EB2E1E82-1612-E4F0-14D0-59C3E15A33A1}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

(((((((((((((((((((( Bestanden Gemaakt van 2011-08-19 to 2011-09-19 ))))))))))))))))))))))))))))))

.

2072-04-03 12:13 . 2008-03-21 13:46 607296 ------w- c:\program files\Microsoft Games\Age of Empires III\deformerdllyD.dll

2011-09-19 07:45 . 2011-09-19 07:45 -------- d-----w- c:\users\christel\AppData\Local\temp

2011-09-19 07:45 . 2011-09-19 07:45 -------- d-----w- c:\users\Public\AppData\Local\temp

2011-09-19 07:45 . 2011-09-19 07:45 -------- d-----w- c:\users\Default\AppData\Local\temp