http://forum.lowyat.net/ Sat, 06 Jun 2026 15:22:21 +0800 FeedCreator 1.7.2 http://forum.lowyat.net/topic/2081237 Creativity Walks With Charity C+C 2011, When creativity meets charity <!--emo&:)--><img src='http://static.lowyat.net/style_emoticons/default/smile.gif' border='0' style='vertical-align:middle' alt='smile.gif' /><!--endemo--> <br /><br />Bazaar’s Date: 29th (Sat) and 30th (Sun) October, 2011<br /><br />Venue: The 19 USJ City Mall<br /><br />Time: 11am to 8pm<br /><br />More info: <a href='http://www.shanxin.org/cplusc2011/wp-conte...ochure-2011.pdf' target='_blank'>http://www.shanxin.org/cplusc2011/wp-conte...ochure-2011.pdf</a><br /><br />Official event T-shirt and 3 meals will be provided. GOD-ZILLA LYN Charity Foundation Sun, 23 Oct 2011 22:29:00 +0800 http://forum.lowyat.net/topic/2081224 The second C + C Event is back.<br /><br />Please come and support.<br /><br />Bazaar’s Date: 29th (Sat) and 30th (Sun) October, 2011<br /><br />Venue: The 19 USJ City Mall <br /> <br />Time: 11am to 8pm<br /><br />More info: <a href='http://www.shanxin.org/cplusc2011/wp-content/uploads/2011/04/FA_C+C-Brochure-2011.pdf' target='_blank'>http://www.shanxin.org/cplusc2011/wp-conte...ochure-2011.pdf</a><br /><br /><img src='http://share.ronlabel.net/upload/01.jpg' border='0' alt='user posted image' /><br /><img src='http://share.ronlabel.net/upload/02.jpg' border='0' alt='user posted image' /><br /><img src='http://share.ronlabel.net/upload/03.jpg' border='0' alt='user posted image' /> GOD-ZILLA Events and Gatherings Sun, 23 Oct 2011 22:25:57 +0800 http://forum.lowyat.net/topic/998718 i am thinking to upgrade my processor bcos now when i play Fm 2009<br />it lags a lot and causing my other application to slow down (flashget slower, play movie, music got lags also)<br /><br /><br />My specs are<br /><br />Proc: Athlon x2 3600+ (1.9Ghz)<br />Mobo: XFX GeForce8200<br />Graphic: HD3850<br />Ram: 3GB<br /><br />i am thiking to upgrade to either higher clock speed proc like 6000+ or Phenom x4 9150e<br /><br />the price is almost same<br /><br />so which 1 is better upgrade?<br /><br />my other resource hunger apps are Photoshop, Flash<br /><br />thanks GOD-ZILLA Hardware Tue, 14 Apr 2009 22:01:54 +0800 http://forum.lowyat.net/topic/885919 merry christmas all<br />kinda need help here as my sista laptop is infected with some kinda virus<br />the wallpaper changed to something like this <br />&quot;spyware deteced on ur computer&quot;<br />&quot;warning&#33; win32/adware.virtumonde&quot;<br />&quot;Warining&#33; win32/privacyremover.m64&quot;<br /><br />when i click on my computer<br />it oni shows my document nia<br /><br />i cant launch my AV as well as HJT<br />i also cant boot into safemode <!--emo&:sweat:--><img src='http://static.lowyat.net/style_emoticons/default/sweat.gif' border='0' style='vertical-align:middle' alt='sweat.gif' /><!--endemo--> <!--emo&:sweat:--><img src='http://static.lowyat.net/style_emoticons/default/sweat.gif' border='0' style='vertical-align:middle' alt='sweat.gif' /><!--endemo--> <!--emo&:sweat:--><img src='http://static.lowyat.net/style_emoticons/default/sweat.gif' border='0' style='vertical-align:middle' alt='sweat.gif' /><!--endemo--> <br />can only manage to launch speed runner<br /><!--SPOILER BEGIN--><div class="spoilertop" onClick="openClose('030b0da5bc770ac4cd17aaa0c77b481a')" style="font-weight: bold"><u>&raquo; Click to show Spoiler - click again to hide... &laquo;</u></div><div class="spoilermain" id="030b0da5bc770ac4cd17aaa0c77b481a" style="display:none"><!--SPOILER END-->&quot;Silent Runners.vbs&quot;, revision 59, <a href='http://www.silentrunners.org/' target='_blank'>http://www.silentrunners.org/</a><br />Operating System: Windows XP SP2<br />Output limited to non-default values, except where indicated by &quot;{++}&quot;<br /><br /><br />Startup items buried in registry:<br />---------------------------------<br /><br />HKCU&#092;Software&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Run&#092; {++}<br />&quot;MsnMsgr&quot; = &quot;&quot;C:&#092;Program Files&#092;Windows Live&#092;Messenger&#092;MsnMsgr.Exe&quot; /background&quot; [MS]<br />&quot;ctfmon.exe&quot; = &quot;C:&#092;WINDOWS&#092;system32&#092;ctfmon.exe&quot; [MS]<br />&quot;Yahoo&#33; Pager&quot; = &quot;&quot;C:&#092;Program Files&#092;Yahoo&#33;&#092;Messenger&#092;YahooMessenger.exe&quot; -quiet&quot; [&quot;Yahoo&#33; Inc.&quot;]<br />&quot;Skype&quot; = &quot;&quot;C:&#092;Program Files&#092;Skype&#092;Phone&#092;Skype.exe&quot; /nosplash /minimized&quot; [&quot;Skype Technologies S.A.&quot;]<br />&quot;(Default)&quot; = &quot;C:&#092;Documents and Settings&#092;Administrator&#092;Application Data&#092;Adobe&#092;Player.exe&quot; [null data]<br />&quot;A00FF3201.exe&quot; = &quot;C:&#092;DOCUME~1&#092;ADMINI~1&#092;LOCALS~1&#092;Temp&#092;_A00FF3201.exe&quot; [&quot;Eset &quot;]<br /><br />HKCU&#092;Software&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;RunOnce&#092; {++}<br />&quot;FlashPlayerUpdate&quot; = &quot;C:&#092;WINDOWS&#092;system32&#092;Macromed&#092;Flash&#092;NPSWF32_FlashUtil.exe -p&quot; [&quot;Adobe Systems, Inc.&quot;]<br /><br />HKLM&#092;SOFTWARE&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Run&#092; {++}<br />&quot;PRONoMgr.exe&quot; = &quot;C:&#092;Program Files&#092;Intel&#092;NCS&#092;PROSet&#092;PRONoMgr.exe&quot; [&quot;Intel&reg; Corporation&quot;]<br />&quot;SigmaTel StacMon&quot; = &quot;C:&#092;Program Files&#092;SigmaTel&#092;SigmaTel AC97 Audio Drivers&#092;stacmon.exe&quot; [&quot;SigmaTel Inc.&quot;]<br />&quot;IMJPMIG8.1&quot; = &quot;&quot;C:&#092;WINDOWS&#092;IME&#092;imjp8_1&#092;IMJPMIG.EXE&quot; /Spoil /RemAdvDef /Migration32&quot; [MS]<br />&quot;MSPY2002&quot; = &quot;C:&#092;WINDOWS&#092;system32&#092;IME&#092;PINTLGNT&#092;ImScInst.exe /SYNC&quot; [null data]<br />&quot;PHIME2002ASync&quot; = &quot;C:&#092;WINDOWS&#092;system32&#092;IME&#092;TINTLGNT&#092;TINTSETP.EXE /SYNC&quot; [MS]<br />&quot;PHIME2002A&quot; = &quot;C:&#092;WINDOWS&#092;system32&#092;IME&#092;TINTLGNT&#092;TINTSETP.EXE /IMEName&quot; [MS]<br />&quot;SunJavaUpdateSched&quot; = &quot;C:&#092;Program Files&#092;Java&#092;jre1.5.0_06&#092;bin&#092;jusched.exe&quot; [&quot;Sun Microsystems, Inc.&quot;]<br />&quot;igfxtray&quot; = &quot;C:&#092;WINDOWS&#092;system32&#092;igfxtray.exe&quot; [&quot;Intel Corporation&quot;]<br />&quot;igfxhkcmd&quot; = &quot;C:&#092;WINDOWS&#092;system32&#092;hkcmd.exe&quot; [&quot;Intel Corporation&quot;]<br />&quot;igfxpers&quot; = &quot;C:&#092;WINDOWS&#092;system32&#092;igfxpers.exe&quot; [&quot;Intel Corporation&quot;]<br />&quot;NeroFilterCheck&quot; = &quot;C:&#092;WINDOWS&#092;system32&#092;NeroCheck.exe&quot; [&quot;Ahead Software Gmbh&quot;]<br />&quot;V-Gear LiveShow&quot; = &quot;&quot;C:&#092;Program Files&#092;V-Gear LiveShow&#092;LiveShow.exe&quot; -m&quot; [&quot;Asiamajor Inc.&quot;]<br />&quot;snppro&quot; = &quot;C:&#092;WINDOWS&#092;vsnppro.exe&quot; [&quot;Sonix&quot;]<br />&quot;nod32kui&quot; = &quot;&quot;C:&#092;Program Files&#092;Eset&#092;nod32kui.exe&quot; /WAITSERVICE&quot; [&quot;Eset &quot;]<br />&quot;singtelTrayApp&quot; = &quot;&quot;C:&#092;Program Files&#092;SmartFix&#092;bin&#092;McciTrayApp.exe&quot;&quot; [&quot;Motive Communications, Inc.&quot;]<br />&quot;QuickTime Task&quot; = &quot;&quot;C:&#092;Program Files&#092;Ringz Studio&#092;Storm Codec&#092;QTTask.exe&quot; -atboottime&quot; [&quot;Apple Inc.&quot;]<br />&quot;iTunesHelper&quot; = &quot;&quot;C:&#092;Program Files&#092;iTunes&#092;iTunesHelper.exe&quot;&quot; [&quot;Apple Inc.&quot;]<br />&quot;lphcn8rj0erbv&quot; = &quot;C:&#092;WINDOWS&#092;system32&#092;lphcn8rj0erbv.exe&quot; [null data]<br /><br />HKLM&#092;SOFTWARE&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Explorer&#092;Browser Helper Objects&#092;<br />{02478D38-C3F9-4EFB-9B51-7695ECA05670}&#092;(Default) = (no title provided)<br /> -&gt; {HKLM...CLSID} = &quot;Yahoo&#33; Toolbar Helper&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Yahoo&#33;&#092;Companion&#092;Installs&#092;cpn&#092;yt.dll&quot; [&quot;Yahoo&#33; Inc.&quot;]<br />{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}&#092;(Default) = (no title provided)<br /> -&gt; {HKLM...CLSID} = &quot;AcroIEHlprObj Class&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Adobe&#092;Acrobat 6.0&#092;Reader&#092;ActiveX&#092;AcroIEHelper.dll&quot; [&quot;Adobe Systems Incorporated&quot;]<br />{11DFB01A-0852-4955-9747-C59E21DBBDA5}&#092;(Default) = (no title provided)<br /> -&gt; {HKLM...CLSID} = &quot;QXK Olive&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;WINDOWS&#092;dfmlxbpkvlo.dll&quot; [null data]<br />{5851BBF6-26B7-434B-A4D1-B92A05913403}&#092;(Default) = (no title provided)<br /> -&gt; {HKLM...CLSID} = &quot;QXK Olive&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;WINDOWS&#092;nkefbltdvts.dll&quot; [null data]<br />{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}&#092;(Default) = (no title provided)<br /> -&gt; {HKLM...CLSID} = &quot;SSVHelper Class&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Java&#092;jre1.5.0_06&#092;bin&#092;ssv.dll&quot; [&quot;Sun Microsystems, Inc.&quot;]<br />{9030D464-4C02-4ABF-8ECC-5164760863C6}&#092;(Default) = (no title provided)<br /> -&gt; {HKLM...CLSID} = &quot;Windows Live Sign-in Helper&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Common Files&#092;Microsoft Shared&#092;Windows Live&#092;WindowsLiveLogin.dll&quot; [MS]<br /><br />HKLM&#092;SOFTWARE&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Shell Extensions&#092;Approved&#092;<br />&quot;{42071714-76d4-11d1-8b24-00a0c9068ff3}&quot; = &quot;Display Panning CPL Extension&quot;<br /> -&gt; {HKLM...CLSID} = &quot;Display Panning CPL Extension&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;deskpan.dll&quot; [file not found]<br />&quot;{88895560-9AA2-1069-930E-00AA0030EBC8}&quot; = &quot;HyperTerminal Icon Ext&quot;<br /> -&gt; {HKLM...CLSID} = &quot;HyperTerminal Icon Ext&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;WINDOWS&#092;system32&#092;hticons.dll&quot; [&quot;Hilgraeve, Inc.&quot;]<br />&quot;{0006F045-0000-0000-C000-000000000046}&quot; = &quot;Microsoft Outlook Custom Icon Handler&quot;<br /> -&gt; {HKLM...CLSID} = &quot;Outlook File Icon Extension&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Microsoft Office&#092;Office10&#092;OLKFSTUB.DLL&quot; [MS]<br />&quot;{42042206-2D85-11D3-8CFF-005004838597}&quot; = &quot;Microsoft Office HTML Icon Handler&quot;<br /> -&gt; {HKLM...CLSID} = (no title provided)<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Microsoft Office&#092;Office10&#092;msohev.dll&quot; [MS]<br />&quot;{B41DB860-8EE4-11D2-9906-E49FADC173CA}&quot; = &quot;WinRAR shell extension&quot;<br /> -&gt; {HKLM...CLSID} = &quot;WinRAR&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;WinRAR&#092;rarext.dll&quot; [null data]<br />&quot;{B089FE88-FB52-11D3-BDF1-0050DA34150D}&quot; = &quot;NOD32 Context Menu Shell Extension&quot;<br /> -&gt; {HKLM...CLSID} = &quot;NOD32 Context Menu Shell Extension&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Eset&#092;nodshex.dll&quot; [null data]<br />&quot;{5464D816-CF16-4784-B9F3-75C0DB52B499}&quot; = &quot;Yahoo&#33; Mail&quot;<br /> -&gt; {HKLM...CLSID} = &quot;YMailShellExt Class&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;PROGRA~1&#092;Yahoo&#33;&#092;Common&#092;ymmapi.dll&quot; [&quot;Yahoo&#33; Inc.&quot;]<br />&quot;{FED7043D-346A-414D-ACD7-550D052499A7}&quot; = &quot;dBpowerAMP Music Converter 1&quot;<br /> -&gt; {HKLM...CLSID} = &quot;dBpShell Class&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Illustrate&#092;dBpowerAMP&#092;dBShell.dll&quot; [empty string]<br />&quot;{2C49B5D0-ACE7-4D17-9DF0-A254A6C5A0C5}&quot; = &quot;dBpowerAMP Music Converter&quot;<br /> -&gt; {HKLM...CLSID} = &quot;dMCIShell Class&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Illustrate&#092;dBpowerAMP&#092;dMCShell.dll&quot; [empty string]<br />&quot;{FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D}&quot; = &quot;Messenger Sharing Folders&quot;<br /> -&gt; {HKLM...CLSID} = &quot;My Sharing Folders&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Windows Live&#092;Messenger&#092;fsshext.8.5.1302.1018.dll&quot; [MS]<br />&quot;{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF}&quot; = &quot;iTunes&quot;<br /> -&gt; {HKLM...CLSID} = &quot;iTunes&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;iTunes&#092;iTunesMiniPlayer.dll&quot; [&quot;Apple Inc.&quot;]<br /><br />HKLM&#092;SOFTWARE&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Explorer&#092;ShellExecuteHooks&#092;<br />&lt;&lt;&#33;&gt;&gt; &quot;{33496778-0658-40bc-8352-a8f884ca282b}&quot; = &quot;MMKAFNFW1095.dll&quot;<br /> -&gt; {HKLM...CLSID} = (no title provided)<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;WINDOWS&#092;system32&#092;MMKAFNFW1095.dll&quot; [null data]<br />&lt;&lt;&#33;&gt;&gt; &quot;{181ca172-6b92-42d6-abc4-f49d86253d9c}&quot; = &quot;MMEZZPOP1074.dll&quot;<br /> -&gt; {HKLM...CLSID} = (no title provided)<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;WINDOWS&#092;system32&#092;MMEZZPOP1074.dll&quot; [null data]<br />&lt;&lt;&#33;&gt;&gt; &quot;{1e8654e8-cb43-4ef4-b039-5aa26f2c51f5}&quot; = &quot;MMMHXGGD1060.dll&quot;<br /> -&gt; {HKLM...CLSID} = (no title provided)<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;WINDOWS&#092;system32&#092;MMMHXGGD1060.dll&quot; [null data]<br />&lt;&lt;&#33;&gt;&gt; &quot;{6e70bea8-099c-4405-a594-23dbb16d598b}&quot; = &quot;MMHADPQG1089.dll&quot;<br /> -&gt; {HKLM...CLSID} = (no title provided)<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;WINDOWS&#092;system32&#092;MMHADPQG1089.dll&quot; [null data]<br /><br />HKLM&#092;SOFTWARE&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;ShellServiceObjectDelayLoad&#092;<br />&quot;onfwbsak&quot; = &quot;{A48BD35E-C61E-44F3-8A39-E4475AE91D72}&quot;<br /> -&gt; {HKLM...CLSID} = (no title provided)<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;WINDOWS&#092;onfwbsak.dll&quot; [null data]<br />&quot;rwlfsdmk&quot; = &quot;{63585FAD-D54A-4A2F-B0A7-EA4A0C854BA7}&quot;<br /> -&gt; {HKLM...CLSID} = (no title provided)<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;WINDOWS&#092;rwlfsdmk.dll&quot; [null data]<br />&quot;xgpsarbm&quot; = &quot;{79D53849-B147-4347-8EA0-40A5AE5EB89A}&quot;<br /> -&gt; {HKLM...CLSID} = (no title provided)<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;WINDOWS&#092;xgpsarbm.dll&quot; [null data]<br />&quot;neksolda&quot; = &quot;{05EB6A11-B015-485E-9283-F6B409AB43A9}&quot;<br /> -&gt; {HKLM...CLSID} = (no title provided)<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;WINDOWS&#092;neksolda.dll&quot; [null data]<br /><br />HKLM&#092;SOFTWARE&#092;Microsoft&#092;Windows NT&#092;CurrentVersion&#092;Winlogon&#092;Notify&#092;<br />&lt;&lt;&#33;&gt;&gt; igfxcui&#092;DLLName = &quot;igfxdev.dll&quot; [&quot;Intel Corporation&quot;]<br />&lt;&lt;&#33;&gt;&gt; Sebring&#092;DLLName = &quot;C:&#092;WINDOWS&#092;system32&#092;LgNotify.dll&quot; [&quot;Intel Corporation&quot;]<br />&lt;&lt;&#33;&gt;&gt; __c00CC131&#092;DLLName = &quot;C:&#092;WINDOWS&#092;system32&#092;__c00CC131.dat&quot; [empty string]<br /><br />HKLM&#092;SOFTWARE&#092;Microsoft&#092;Windows NT&#092;CurrentVersion&#092;Image File Execution Options&#092;<br />&lt;&lt;&#33;&gt;&gt; 360rpt.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; 360Safe.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; 360safebox.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; 360tray.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; adam.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; AgentSvr.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; AntiArp.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; AppSvc32.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; autoruns.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; avconsol.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; avgrssvc.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; AvMonitor.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; avp.com&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; avp.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; CCenter.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; ccSvcHst.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; DrvAnti.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; EGHOST.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; FileDsty.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; filemon.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; FTCleanerShell.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; FYFireWall.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; GFRing3.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; GFUpd.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; GuardField.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; HijackThis.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; IceSword.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; iparmo.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; Iparmor.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; isPwdSvc.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; kabaload.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KaScrScn.SCR&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KASMain.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KASTask.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KAV32.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KAVDX.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KAVPF.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KAVPFW.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KAVSetup.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KAVStart.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KISLnchr.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KMailMon.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KMFilter.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KPFW32.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KPFW32X.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KPfwSvc.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KPPMain.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KRegEx.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KRepair.com&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KsLoader.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KVCenter.kxp&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KvDetect.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KvfwMcl.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KVMonXP.kxp&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KVMonXP_1.kxp&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; kvol.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; kvolself.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KvReport.kxp&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KVScan.kxp&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KVSrvXP.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KVStub.kxp&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; kvupload.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; kvwsc.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KvXP.kxp&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KvXP_1.kxp&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KWatch.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KWatch9x.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; KWatchX.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; MagicSet.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; mcconsol.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; mmqczj.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; mmsk.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; Navapsvc.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; Navapw32.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; nod32.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; nod32krn.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; nod32kui.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; NPFMntor.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; PFW.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; PFWLiveUpdate.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; procexp.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; QHSET.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; QQDoctor.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; QQKav.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; Ras.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; RavMon.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; RavMonD.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; RavStub.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; RawCopy.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; RegClean.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; regedit.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; regmon.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; RegTool.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; rfwcfg.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; rfwmain.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; rfwProxy.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; rfwsrv.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; rfwstub.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; RsAgent.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; Rsaupd.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; runiep.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; safeboxTray.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; safelive.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; scan32.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; shcfg32.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; SmartUp.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; SREng.EXE&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; symlcsvc.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; SysSafe.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; taskmgr.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; tqat.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; TrojanDetector.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; Trojanwall.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; TrojDie.kxp&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; UIHost.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; UmxAgent.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; UmxAttachment.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; UmxCfg.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; UmxFwHlp.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; UmxPol.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; UpLive.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; vsstat.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; webscanx.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; WoptiClean.exe&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; ~OllyDBG.EXE&#092;Debugger = &quot;ntsd -d&quot; [MS]<br />&lt;&lt;&#33;&gt;&gt; ~OllyICE.EXE&#092;Debugger = &quot;ntsd -d&quot; [MS]<br /><br />HKLM&#092;SOFTWARE&#092;Classes&#092;Folder&#092;shellex&#092;ColumnHandlers&#092;<br />{FED7043D-346A-414D-ACD7-550D052499A7}&#092;(Default) = &quot;dBpowerAMP Column Handler&quot;<br /> -&gt; {HKLM...CLSID} = &quot;dBpShell Class&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Illustrate&#092;dBpowerAMP&#092;dBShell.dll&quot; [empty string]<br /><br />HKLM&#092;SOFTWARE&#092;Classes&#092;*&#092;shellex&#092;ContextMenuHandlers&#092;<br />NOD32 Context Menu Shell Extension&#092;(Default) = &quot;{B089FE88-FB52-11D3-BDF1-0050DA34150D}&quot;<br /> -&gt; {HKLM...CLSID} = &quot;NOD32 Context Menu Shell Extension&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Eset&#092;nodshex.dll&quot; [null data]<br />WinRAR&#092;(Default) = &quot;{B41DB860-8EE4-11D2-9906-E49FADC173CA}&quot;<br /> -&gt; {HKLM...CLSID} = &quot;WinRAR&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;WinRAR&#092;rarext.dll&quot; [null data]<br />Yahoo&#33; Mail&#092;(Default) = &quot;{5464D816-CF16-4784-B9F3-75C0DB52B499}&quot;<br /> -&gt; {HKLM...CLSID} = &quot;YMailShellExt Class&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;PROGRA~1&#092;Yahoo&#33;&#092;Common&#092;ymmapi.dll&quot; [&quot;Yahoo&#33; Inc.&quot;]<br /><br />HKLM&#092;SOFTWARE&#092;Classes&#092;Directory&#092;shellex&#092;ContextMenuHandlers&#092;<br />WinRAR&#092;(Default) = &quot;{B41DB860-8EE4-11D2-9906-E49FADC173CA}&quot;<br /> -&gt; {HKLM...CLSID} = &quot;WinRAR&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;WinRAR&#092;rarext.dll&quot; [null data]<br /><br />HKLM&#092;SOFTWARE&#092;Classes&#092;Folder&#092;shellex&#092;ContextMenuHandlers&#092;<br />NOD32 Context Menu Shell Extension&#092;(Default) = &quot;{B089FE88-FB52-11D3-BDF1-0050DA34150D}&quot;<br /> -&gt; {HKLM...CLSID} = &quot;NOD32 Context Menu Shell Extension&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Eset&#092;nodshex.dll&quot; [null data]<br />WinRAR&#092;(Default) = &quot;{B41DB860-8EE4-11D2-9906-E49FADC173CA}&quot;<br /> -&gt; {HKLM...CLSID} = &quot;WinRAR&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;WinRAR&#092;rarext.dll&quot; [null data]<br /><br /><br />Group Policies {GPedit.msc branch and setting}:<br />-----------------------------------------------<br /><br />Note: detected settings may not have any effect.<br /><br />HKCU&#092;Software&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Policies&#092;Explorer&#092;<br /><br />&quot;NoToolbarCustomize&quot; = (REG_DWORD) dword:0x00000001<br />{User Configuration|Administrative Templates|Windows Components|Internet Explorer|Toolbars|<br />Disable customizing browser toolbar buttons}<br /><br />&quot;NoDrives&quot; = (REG_DWORD) dword:0x0000000C<br />{unrecognized setting}<br /><br />&quot;StartMenuLogoff&quot; = (REG_DWORD) dword:0x00000001<br />{unrecognized setting}<br /><br />&quot;NoStartMenuMorePrograms&quot; = (REG_DWORD) dword:0x00000001<br />{User Configuration|Administrative Templates|Start Menu and Taskbar|<br />Remove All Programs list from the Start menu}<br /><br />&quot;NoSetFolders&quot; = (REG_DWORD) dword:0x00000001<br />{unrecognized setting}<br /><br />HKCU&#092;Software&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Policies&#092;System&#092;<br /><br />&quot;NoDispBackgroundPage&quot; = (REG_DWORD) dword:0x00000001<br />{User Configuration|Administrative Templates|Control Panel|Display|<br />Hide Desktop tab}<br /><br />&quot;NoDispScrSavPage&quot; = (REG_DWORD) dword:0x00000001<br />{unrecognized setting}<br /><br />&quot;DisableTaskMgr&quot; = (REG_DWORD) dword:0x00000001<br />{User Configuration|Administrative Templates|System|Ctrl+Alt+Del Options|<br />Remove Task Manager}<br /><br />&quot;DisableRegistryTools&quot; = (REG_DWORD) dword:0x00000001<br />{User Configuration|Administrative Templates|System|<br />Prevent access to registry editing tools}<br /><br />&quot;NoDispCPL&quot; = (REG_DWORD) dword:0x00000001<br />{User Configuration|Administrative Templates|Control Panel|Display|<br />Remove Display in Control Panel}<br /><br />HKCU&#092;Software&#092;Policies&#092;Microsoft&#092;Internet Explorer&#092;Restrictions&#092;<br /><br />&quot;NoBrowserOptions&quot; = (REG_DWORD) dword:0x00000000<br />{User Configuration|Administrative Templates|Windows Components|Internet Explorer|Browser Menus|<br />Tools menu: Disable Internet Options... menu option}<br /><br />HKLM&#092;SOFTWARE&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Policies&#092;System&#092;<br /><br />&quot;shutdownwithoutlogon&quot; = (REG_DWORD) dword:0x00000001<br />{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|<br />Shutdown: Allow system to be shut down without having to log on}<br /><br />&quot;undockwithoutlogon&quot; = (REG_DWORD) dword:0x00000001<br />{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|<br />Devices: Allow undock without having to log on}<br /><br /><br />Active Desktop and Wallpaper:<br />-----------------------------<br /><br />Active Desktop may be disabled at this entry:<br />HKCU&#092;Software&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Explorer&#092;ShellState<br /><br />Displayed if Active Desktop enabled and wallpaper not set by Group Policy:<br />HKCU&#092;Software&#092;Microsoft&#092;Internet Explorer&#092;Desktop&#092;General&#092;<br />&quot;Wallpaper&quot; = &quot;C:&#092;WINDOWS&#092;system32&#092;config&#092;systemprofile&#092;Local Settings&#092;Application Data&#092;Microsoft&#092;Wallpaper1.bmp&quot;<br /><br />Displayed if Active Desktop disabled and wallpaper not set by Group Policy:<br />HKCU&#092;Control Panel&#092;Desktop&#092;<br />&quot;Wallpaper&quot; = &quot;C:&#092;WINDOWS&#092;system32&#092;phcn8rj0erbv.bmp&quot;<br /><br /><br />Enabled Screen Saver:<br />---------------------<br /><br />HKCU&#092;Control Panel&#092;Desktop&#092;<br />&quot;SCRNSAVE.EXE&quot; = &quot;C:&#092;WINDOWS&#092;system32&#092;blphcn8rj0erbv.scr&quot; [&quot;Sysinternals&quot;]<br /><br /><br />Windows Portable Device AutoPlay Handlers<br />-----------------------------------------<br /><br />HKLM&#092;SOFTWARE&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Explorer&#092;AutoplayHandlers&#092;Handlers&#092;<br /><br />dMCAudioCDInput&#092;<br />&quot;Provider&quot; = &quot;dMC Audio CD Input&quot;<br />&quot;InvokeProgID&quot; = &quot;dMC.AudioCD.Autorun&quot;<br />&quot;InvokeVerb&quot; = &quot;open&quot;<br />HKLM&#092;SOFTWARE&#092;Classes&#092;dMC.AudioCD.Autorun&#092;shell&#092;open&#092;command&#092;(Default) = &quot;&quot;C:&#092;Program Files&#092;Illustrate&#092;dBpowerAMP&#092;CDGrab.exe&quot;&quot; [&quot;Illustrate&quot;]<br /><br />iTunesBurnCDOnArrival&#092;<br />&quot;Provider&quot; = &quot;iTunes&quot;<br />&quot;InvokeProgID&quot; = &quot;iTunes.BurnCD&quot;<br />&quot;InvokeVerb&quot; = &quot;burn&quot;<br />HKLM&#092;SOFTWARE&#092;Classes&#092;iTunes.BurnCD&#092;shell&#092;burn&#092;command&#092;(Default) = &quot;&quot;C:&#092;Program Files&#092;iTunes&#092;iTunes.exe&quot; /AutoPlayBurn &quot;%L&quot;&quot; [&quot;Apple Inc.&quot;]<br /><br />iTunesImportSongsOnArrival&#092;<br />&quot;Provider&quot; = &quot;iTunes&quot;<br />&quot;InvokeProgID&quot; = &quot;iTunes.ImportSongsOnCD&quot;<br />&quot;InvokeVerb&quot; = &quot;import&quot;<br />HKLM&#092;SOFTWARE&#092;Classes&#092;iTunes.ImportSongsOnCD&#092;shell&#092;import&#092;command&#092;(Default) = &quot;&quot;C:&#092;Program Files&#092;iTunes&#092;iTunes.exe&quot; /AutoPlayImportSongs &quot;%L&quot;&quot; [&quot;Apple Inc.&quot;]<br /><br />iTunesPlaySongsOnArrival&#092;<br />&quot;Provider&quot; = &quot;iTunes&quot;<br />&quot;InvokeProgID&quot; = &quot;iTunes.PlaySongsOnCD&quot;<br />&quot;InvokeVerb&quot; = &quot;play&quot;<br />HKLM&#092;SOFTWARE&#092;Classes&#092;iTunes.PlaySongsOnCD&#092;shell&#092;play&#092;command&#092;(Default) = &quot;&quot;C:&#092;Program Files&#092;iTunes&#092;iTunes.exe&quot; /playCD &quot;%L&quot;&quot; [&quot;Apple Inc.&quot;]<br /><br />iTunesShowSongsOnArrival&#092;<br />&quot;Provider&quot; = &quot;iTunes&quot;<br />&quot;InvokeProgID&quot; = &quot;iTunes.ShowSongsOnCD&quot;<br />&quot;InvokeVerb&quot; = &quot;showsongs&quot;<br />HKLM&#092;SOFTWARE&#092;Classes&#092;iTunes.ShowSongsOnCD&#092;shell&#092;showsongs&#092;command&#092;(Default) = &quot;&quot;C:&#092;Program Files&#092;iTunes&#092;iTunes.exe&quot; /AutoPlayShowSongs &quot;%L&quot;&quot; [&quot;Apple Inc.&quot;]<br /><br />NeroAutoPlay2AudioToNeroDigital&#092;<br />&quot;Provider&quot; = &quot;Nero Burning ROM&quot;<br />&quot;InvokeProgID&quot; = &quot;Nero.AutoPlay2&quot;<br />&quot;InvokeVerb&quot; = &quot;PlayCDAudioOnArrival_AudioToNeroDigital&quot;<br />HKLM&#092;SOFTWARE&#092;Classes&#092;Nero.AutoPlay2&#092;shell&#092;PlayCDAudioOnArrival_AudioToNeroDigital&#092;command&#092;(Default) = &quot;C:&#092;Program Files&#092;Ahead&#092;nero&#092;nero.exe /Dialog:SaveTracks /Drive:%L&quot; [&quot;Ahead Software AG&quot;]<br /><br />NeroAutoPlay2CDAudio&#092;<br />&quot;Provider&quot; = &quot;Nero Express&quot;<br />&quot;InvokeProgID&quot; = &quot;Nero.AutoPlay2&quot;<br />&quot;InvokeVerb&quot; = &quot;HandleCDBurningOnArrival_CDAudio&quot;<br />HKLM&#092;SOFTWARE&#092;Classes&#092;Nero.AutoPlay2&#092;shell&#092;HandleCDBurningOnArrival_CDAudio&#092;command&#092;(Default) = &quot;C:&#092;Program Files&#092;Ahead&#092;nero&#092;nero.exe /w /New:AudioCD /Drive:%L&quot; [&quot;Ahead Software AG&quot;]<br /><br />NeroAutoPlay2CopyCD&#092;<br />&quot;Provider&quot; = &quot;Nero Express&quot;<br />&quot;InvokeProgID&quot; = &quot;Nero.AutoPlay2&quot;<br />&quot;InvokeVerb&quot; = &quot;PlayCDAudioOnArrival_CopyCD&quot;<br />HKLM&#092;SOFTWARE&#092;Classes&#092;Nero.AutoPlay2&#092;shell&#092;PlayCDAudioOnArrival_CopyCD&#092;command&#092;(Default) = &quot;C:&#092;Program Files&#092;Ahead&#092;nero&#092;nero.exe /w /Dialog:DiscCopy /Drive:%L&quot; [&quot;Ahead Software AG&quot;]<br /><br />NeroAutoPlay2DataDisc&#092;<br />&quot;Provider&quot; = &quot;Nero Express&quot;<br />&quot;InvokeProgID&quot; = &quot;Nero.AutoPlay2&quot;<br />&quot;InvokeVerb&quot; = &quot;HandleCDBurningOnArrival_DataDisc&quot;<br />HKLM&#092;SOFTWARE&#092;Classes&#092;Nero.AutoPlay2&#092;shell&#092;HandleCDBurningOnArrival_DataDisc&#092;command&#092;(Default) = &quot;C:&#092;Program Files&#092;Ahead&#092;nero&#092;nero.exe /w /New:ISODisc /Drive:%L&quot; [&quot;Ahead Software AG&quot;]<br /><br />NeroAutoPlay2LaunchNeroStartSmart&#092;<br />&quot;Provider&quot; = &quot;Nero StartSmart&quot;<br />&quot;InvokeProgID&quot; = &quot;Nero.AutoPlay2&quot;<br />&quot;InvokeVerb&quot; = &quot;HandleCDBurningOnArrival_LaunchNeroStartSmart&quot;<br />HKLM&#092;SOFTWARE&#092;Classes&#092;Nero.AutoPlay2&#092;shell&#092;HandleCDBurningOnArrival_LaunchNeroStartSmart&#092;command&#092;(Default) = &quot;C:&#092;Program Files&#092;Ahead&#092;Nero StartSmart&#092;NeroStartSmart.exe /AutoPlay /Drive:%L&quot; [&quot;Ahead Software AG&quot;]<br /><br />NeroAutoPlay2RipCD&#092;<br />&quot;Provider&quot; = &quot;Nero Burning ROM&quot;<br />&quot;InvokeProgID&quot; = &quot;Nero.AutoPlay2&quot;<br />&quot;InvokeVerb&quot; = &quot;PlayCDAudioOnArrival_RipCD&quot;<br />HKLM&#092;SOFTWARE&#092;Classes&#092;Nero.AutoPlay2&#092;shell&#092;PlayCDAudioOnArrival_RipCD&#092;command&#092;(Default) = &quot;C:&#092;Program Files&#092;Ahead&#092;nero&#092;nero.exe /Dialog:SaveTracks /Drive:%L&quot; [&quot;Ahead Software AG&quot;]<br /><br /><br />Startup items in &quot;Administrator&quot; &amp; &quot;All Users&quot; startup folders:<br />---------------------------------------------------------------<br /><br />C:&#092;Documents and Settings&#092;Administrator&#092;Start Menu&#092;Programs&#092;Startup<br />&quot;BEE Service&quot; -&gt; shortcut to: &quot;C:&#092;Program Files&#092;V-Gear BEE&#092;VBService.exe&quot; [&quot;Asiamajor Inc.&quot;]<br /><br />C:&#092;Documents and Settings&#092;All Users.WINDOWS&#092;Start Menu&#092;Programs&#092;Startup<br />&quot;Microsoft Office&quot; -&gt; shortcut to: &quot;C:&#092;Program Files&#092;Microsoft Office&#092;Office10&#092;OSA.EXE -b -l&quot; [MS]<br /><br /><br />Enabled Scheduled Tasks:<br />------------------------<br /><br />&quot;AppleSoftwareUpdate&quot; -&gt; launches: &quot;C:&#092;Program Files&#092;Apple Software Update&#092;SoftwareUpdate.exe -task&quot; [&quot;Apple Inc.&quot;]<br /><br /><br />Winsock2 Service Provider DLLs:<br />-------------------------------<br /><br />Namespace Service Providers<br /><br />HKLM&#092;SYSTEM&#092;CurrentControlSet&#092;Services&#092;Winsock2&#092;Parameters&#092;NameSpace_Catalog5&#092;Catalog_Entries&#092; {++}<br />000000000001&#092;LibraryPath = &quot;%SystemRoot%&#092;System32&#092;mswsock.dll&quot; [MS]<br />000000000002&#092;LibraryPath = &quot;%SystemRoot%&#092;System32&#092;winrnr.dll&quot; [MS]<br />000000000003&#092;LibraryPath = &quot;%SystemRoot%&#092;System32&#092;mswsock.dll&quot; [MS]<br /><br />Transport Service Providers<br /><br />HKLM&#092;SYSTEM&#092;CurrentControlSet&#092;Services&#092;Winsock2&#092;Parameters&#092;Protocol_Catalog9&#092;Catalog_Entries&#092; {++}<br />0000000000##&#092;PackedCatalogItem (contains) DLL [Company Name], (at) ## range:<br />imon.dll [&quot;Eset &quot;], 01 - 05, 23<br />%SystemRoot%&#092;system32&#092;mswsock.dll [MS], 06 - 08, 11 - 22<br />%SystemRoot%&#092;system32&#092;rsvpsp.dll [MS], 09 - 10<br /><br /><br />Toolbars, Explorer Bars, Extensions:<br />------------------------------------<br /><br />Toolbars<br /><br />HKCU&#092;Software&#092;Microsoft&#092;Internet Explorer&#092;Toolbar&#092;WebBrowser&#092;<br />&quot;{EF99BD32-C1FB-11D2-892F-0090271D4F88}&quot;<br /> -&gt; {HKLM...CLSID} = &quot;Yahoo&#33; Toolbar&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Yahoo&#33;&#092;Companion&#092;Installs&#092;cpn&#092;yt.dll&quot; [&quot;Yahoo&#33; Inc.&quot;]<br /><br />HKLM&#092;SOFTWARE&#092;Microsoft&#092;Internet Explorer&#092;Toolbar&#092;<br />&quot;{EF99BD32-C1FB-11D2-892F-0090271D4F88}&quot; = (no title provided)<br /> -&gt; {HKLM...CLSID} = &quot;Yahoo&#33; Toolbar&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Yahoo&#33;&#092;Companion&#092;Installs&#092;cpn&#092;yt.dll&quot; [&quot;Yahoo&#33; Inc.&quot;]<br />&quot;{0FA15166-39DA-4DAB-9B1A-0DDDBACA8BD5}&quot; = (no title provided)<br /> -&gt; {HKLM...CLSID} = &quot;peltodgx&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;WINDOWS&#092;peltodgx.dll&quot; [null data]<br />&quot;{DC51F59F-D0BA-4CE7-8CDB-15ABF290546E}&quot; = (no title provided)<br /> -&gt; {HKLM...CLSID} = &quot;dkwqgnbe&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;WINDOWS&#092;dkwqgnbe.dll&quot; [null data]<br /><br />Extensions (Tools menu items, main toolbar menu buttons)<br /><br />HKLM&#092;SOFTWARE&#092;Microsoft&#092;Internet Explorer&#092;Extensions&#092;<br />{08B0E5C0-4FCB-11CF-AAA5-00401C608501}&#092;<br />&quot;MenuText&quot; = &quot;Sun Java Console&quot;<br />&quot;CLSIDExtension&quot; = &quot;{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}&quot;<br /> -&gt; {HKCU...CLSID} = &quot;Java Plug-in&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Java&#092;jre1.5.0_06&#092;bin&#092;ssv.dll&quot; [&quot;Sun Microsystems, Inc.&quot;]<br /> -&gt; {HKLM...CLSID} = &quot;Java Plug-in 1.5.0_06&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Java&#092;jre1.5.0_06&#092;bin&#092;npjpi150_06.dll&quot; [&quot;Sun Microsystems, Inc.&quot;]<br /><br />{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96}&#092;<br />&quot;ButtonText&quot; = &quot;Yahoo&#33; Messenger&quot;<br />&quot;MenuText&quot; = &quot;Yahoo&#33; Messenger&quot;<br />&quot;Exec&quot; = &quot;C:&#092;Program Files&#092;Yahoo&#33;&#092;Messenger&#092;YahooMessenger.exe&quot; [&quot;Yahoo&#33; Inc.&quot;]<br /><br />{FB5F1910-F110-11D2-BB9E-00C04F795683}&#092;<br />&quot;ButtonText&quot; = &quot;Messenger&quot;<br />&quot;MenuText&quot; = &quot;Windows Messenger&quot;<br />&quot;Exec&quot; = &quot;C:&#092;Program Files&#092;Messenger&#092;msmsgs.exe&quot; [MS]<br /><br /><br />Miscellaneous IE Hijack Points<br />------------------------------<br /><br />HKCU&#092;Software&#092;Microsoft&#092;Internet Explorer&#092;URLSearchHooks&#092;<br />&lt;&lt;H&gt;&gt; &quot;{EF99BD32-C1FB-11D2-892F-0090271D4F88}&quot; = &quot;*[&quot; (unwritable string)<br /> -&gt; {HKLM...CLSID} = &quot;Yahoo&#33; Toolbar&quot;<br /> &#092;InProcServer32&#092;(Default) = &quot;C:&#092;Program Files&#092;Yahoo&#33;&#092;Companion&#092;Installs&#092;cpn&#092;yt.dll&quot; [&quot;Yahoo&#33; Inc.&quot;]<br /><br /><br />Running Services (Display Name, Service Name, Path {Service DLL}):<br />------------------------------------------------------------------<br /><br />Apple Mobile Device, Apple Mobile Device, &quot;&quot;C:&#092;Program Files&#092;Common Files&#092;Apple&#092;Mobile Device Support&#092;bin&#092;AppleMobileDeviceService.exe&quot;&quot; [&quot;Apple, Inc.&quot;]<br />iPod Service, iPod Service, &quot;&quot;C:&#092;Program Files&#092;iPod&#092;bin&#092;iPodService.exe&quot;&quot; [&quot;Apple Inc.&quot;]<br />RegSrvc, RegSrvc, &quot;C:&#092;WINDOWS&#092;system32&#092;RegSrvc.exe&quot; [&quot;Intel Corporation&quot;]<br />Spectrum24 Event Monitor, S24EventMonitor, &quot;C:&#092;WINDOWS&#092;system32&#092;S24EvMon.exe&quot; [&quot;Intel Corporation &quot;]<br /><br /><br />---------- (launch time: 2008-12-24 01:38:38)<br />&lt;&lt;&#33;&gt;&gt;: Suspicious data at a malware launch point.<br />&lt;&lt;H&gt;&gt;: Suspicious data at a browser hijack point.<br /><br />+ This report excludes default entries except where indicated.<br />+ To see *everywhere* the script checks and *everything* it finds,<br /> launch it from a command prompt or a shortcut with the -all parameter.<br />+ To search all directories of local fixed drives for DESKTOP.INI<br /> DLL launch points, use the -supp parameter or answer &quot;No&quot; at the<br /> first message box and &quot;Yes&quot; at the second message box.<br />---------- (total run time: 65 seconds, including 13 seconds for message boxes)<br /><!--SPOILER DIV--></div><!--SPOILER DIV--> GOD-ZILLA Technical Support Wed, 24 Dec 2008 23:50:38 +0800 http://forum.lowyat.net/topic/469309 browsing thru fnf section and saw this <a href='http://forum.lowyat.net/user/d3vilzzzz' target='_blank'>user</a> with this big siggie <br />i was like...wtf <!--emo&:shakehead:--><img src='http://static.lowyat.net/style_emoticons/default/shakehead.gif' border='0' style='vertical-align:middle' alt='shakehead.gif' /><!--endemo--> <!--emo&:shakehead:--><img src='http://static.lowyat.net/style_emoticons/default/shakehead.gif' border='0' style='vertical-align:middle' alt='shakehead.gif' /><!--endemo--> <!--emo&:shakehead:--><img src='http://static.lowyat.net/style_emoticons/default/shakehead.gif' border='0' style='vertical-align:middle' alt='shakehead.gif' /><!--endemo--> <!--emo&:shakehead:--><img src='http://static.lowyat.net/style_emoticons/default/shakehead.gif' border='0' style='vertical-align:middle' alt='shakehead.gif' /><!--endemo--> <br /><br />pls do something... my loading is tart slow <!--emo&:x--><img src='http://static.lowyat.net/style_emoticons/default/doh.gif' border='0' style='vertical-align:middle' alt='doh.gif' /><!--endemo--> GOD-ZILLA Feedback and Helpdesk Thu, 07 Jun 2007 23:00:24 +0800