[Unregister Dlls]
[Registry - Safe List]
< Internet Explorer Settings [HKEY_USERS\S-1-5-21-1993962763-1482476501-1801674531-1003\] > ->
YN -> HKEY_USERS\S-1-5-21-1993962763-1482476501-1801674531-1003\: Main\\"Start Page" -> http://start.facemoods.com/?a=tweak
YN -> HKEY_USERS\S-1-5-21-1993962763-1482476501-1801674531-1003\: URLSearchHooks\\"{472734EA-242A-422b-ADF8-83D1E48CC825}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> HKEY_USERS\S-1-5-21-1993962763-1482476501-1801674531-1003\: URLSearchHooks\\"{9CB65206-89C4-402c-BA80-02D8C59F9B1D}" [HKLM] -> Reg Error: Value error. []
< FireFox Settings [Prefs.js] > -> C:\Documents and Settings\Nenad\Application Data\Mozilla\FireFox\Profiles\74ocj49y.default\prefs.js
YN -> browser.startup.homepage -> "http://start.facemoods.com/?a=tweak"
< FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
NY -> HKLM\software\mozilla\Firefox\extensions\\{6E19037A-12E3-4295-8915-ED48BC341614} -> C:\PROGRAM FILES\RELEVANTKNOWLEDGE
< HOSTS File > ([2011/05/20 10:18:26 | 000,434,518 | R--- | M] - 15000 lines) -> C:\WINDOWS\system32\drivers\etc\hosts
YN -> 127.0.0.1 www.007guard.com ->
YN -> 127.0.0.1 007guard.com ->
YN -> 127.0.0.1 008i.com ->
YN -> 127.0.0.1 www.008k.com ->
YN -> 127.0.0.1 008k.com ->
YN -> 127.0.0.1 www.00hq.com ->
YN -> 127.0.0.1 00hq.com ->
YN -> 127.0.0.1 010402.com ->
YN -> 127.0.0.1 www.032439.com ->
YN -> 127.0.0.1 032439.com ->
YN -> 127.0.0.1 www.0scan.com ->
YN -> 127.0.0.1 0scan.com ->
YN -> 127.0.0.1 1000gratisproben.com ->
YN -> 127.0.0.1 www.1000gratisproben.com ->
YN -> 127.0.0.1 1001namen.com ->
YN -> 127.0.0.1 www.1001namen.com ->
YN -> 127.0.0.1 100888290cs.com ->
YN -> 127.0.0.1 www.100888290cs.com ->
YN -> 127.0.0.1 www.100sexlinks.com ->
YN -> 127.0.0.1 100sexlinks.com ->
YN -> 127.0.0.1 10sek.com ->
YN -> 127.0.0.1 www.10sek.com ->
YN -> 127.0.0.1 www.1-2005-search.com ->
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
YN -> {02478D38-C3F9-4efb-9B51-7695ECA05670} [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> {9CB65201-89C4-402c-BA80-02D8C59F9B1D} [HKLM] -> Reg Error: Value error. [Ask Search Assistant BHO]
< Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-1993962763-1482476501-1801674531-1003\] > -> HKEY_USERS\S-1-5-21-1993962763-1482476501-1801674531-1003\Software\Microsoft\Internet Explorer\Toolbar\
YN -> WebBrowser\\"{FE063DB9-4EC0-403E-8DD8-394C54984B2C}" [HKLM] -> Reg Error: Value error. [Ask Toolbar]
< Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\
YN -> {ECC5777A-6E88-BFCE-13CE-81F134789E7B}:Exec [HKLM] -> Reg Error: Value error. [Button: Quick Login www.yu-mp3.com]
YN -> {ECC5777A-6E88-BFCE-13CE-81F134789E7B}:Reg Error: Value error. [HKLM] -> Reg Error: Value error. [Menu: &Quick Login www.yu-mp3.com]
< Internet Explorer Extensions [HKEY_USERS\S-1-5-21-1993962763-1482476501-1801674531-1003\] > -> HKEY_USERS\S-1-5-21-1993962763-1482476501-1801674531-1003\Software\Microsoft\Internet Explorer\Extensions\
YN -> CmdMapping\\"{ECC5777A-6E88-BFCE-13CE-81F134789E7B}" [HKLM] -> [Quick Login www.yu-mp3.com]
< ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
YN -> "{AEB6717E-7E19-11d0-97EE-00C04FD91972}" [HKLM] -> Reg Error: Key error. []
< Standard Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
YN -> "C:\Program Files\Pocket Tanks\pockettanks.exe" -> [C:\Program Files\Pocket Tanks\pockettanks.exe:*:Enabled:Pocket Tanks]
< MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2
YN -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2027184e-0067-11df-9b69-00e04d475158}\Shell\AutoRun\command ->
YN -> \{2027184e-0067-11df-9b69-00e04d475158}\Shell\AutoRun\command\\"" -> [H:\]
YN -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2027184e-0067-11df-9b69-00e04d475158}\Shell\open\Command ->
YN -> \{2027184e-0067-11df-9b69-00e04d475158}\Shell\open\Command\\"" -> [rundll32.exe .\\hneqmon.dll,InstallM]
YN -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ea554ff3-6711-11df-9775-0022b07204c3}\Shell\AutoRun\command ->
NY -> \{ea554ff3-6711-11df-9775-0022b07204c3}\Shell\AutoRun\command\\"" -> F:\ [F:\]
YN -> \{ea554ff3-6711-11df-9775-0022b07204c3} ->
YN -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ea554ff3-6711-11df-9775-0022b07204c3}\Shell\open\Command ->
YN -> \{ea554ff3-6711-11df-9775-0022b07204c3}\Shell\open\Command\\"" -> [rundll32.exe .\\ddell.dll,InstallM]
[Files/Folders - Created Within 30 Days]
NY ->  4b1c1575ebf04fbc7113e9f3 -> C:\4b1c1575ebf04fbc7113e9f3
NY ->  5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp
[Files - No Company Name]
NY ->  DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> C:\Documents and Settings\Nenad\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
NY ->  d3d9caps.dat -> C:\WINDOWS\System32\d3d9caps.dat
[Empty Temp Folders]
[EmptyFlash]
[CreateRestorePoint]