Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\CTF] "Disable Thread Input Manager"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\CTF\MSUTB] "ShowDeskBand"=dword:00000000 [HKEY_CURRENT_USER\Control Panel\Mouse] "MouseSpeed"="0" "MouseThreshold1"="0" "MouseThreshold2"="0" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\CleanupWiz] "NoRun"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "TaskbarGlomming"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "IntelliMenus"=dword:00000000 [HKEY_CURRENT_USER\Control Panel\Desktop] "ScreenSaveActive"="0" [HKEY_CURRENT_USER\Software\Microsoft\Search Assistant] "SocialUI"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Search Assistant] "BalloonTips"=dword:00000000 [HKEY_CURRENT_USER\AppEvents\Schemes] @=".None" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\.Default\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\CCSelect] [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\CCSelect\.current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\CriticalBatteryAlarm\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\DeviceConnect\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\DeviceDisconnect\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\DeviceFail\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\LowBatteryAlarm\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\MailBeep\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\ShowBand] [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\ShowBand\.current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\SystemAsterisk\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\SystemExclamation\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\SystemExit\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\SystemHand\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\SystemNotification\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\SystemStart\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\WindowsLogoff\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\WindowsLogon\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Conf\Person Joins\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Conf\Person Leaves\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Conf\Receive Call\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Conf\Receive Request to Join\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\ActivatingDocument] [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\ActivatingDocument\.current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\BlockedPopup\.current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\FeedDiscovered\.current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\MoveMenuItem] [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\MoveMenuItem\.current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\Navigating\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\SearchProviderDiscovered] [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\SearchProviderDiscovered\.current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\SecurityBand\.current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\MSMSGS\MSMSGS_ContactOnline\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\MSMSGS\MSMSGS_NewAlert\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\MSMSGS\MSMSGS_NewMail\.Current] @="" [HKEY_CURRENT_USER\AppEvents\Schemes\Apps\MSMSGS\MSMSGS_NewMessage\.Current] @="" [HKEY_CURRENT_USER\Control Panel\Desktop] "Wallpaper"="" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\General] "BackupWallpaper"="" "Wallpaper"="" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\LastTheme] "Wallpaper"=hex(2):00,00 [HKEY_CURRENT_USER\Software\Microsoft\Search Assistant] "UseAdvancedSearchAlways"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] 01,00,00,00,0d,00,00,00,00,00,00,00,00,00,00,00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\WebView\BarricadedFolders] "shell:ControlPanelFolder"=dword:00000000 [HKEY_CURRENT_USER\Control Panel\Desktop] "FontSmoothingType"=dword:00000002 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] "SearchHidden"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\WebView\BarricadedFolders] "shell:SystemDriveRootFolder"=dword:00000000 "shell:Windows"=dword:00000000 "shell:System"=dword:00000000 "shell:ProgramFiles"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects] "VisualFXSetting"=dword:00000003 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "AutoSearch"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Friendly http errors"="no" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "FavIntelliMenus"="no" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter] "Enabled"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "SmoothScroll"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{957E70AD-0A0A-47F9-9ECC-FFDCEEFA102F}" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{957E70AD-0A0A-47F9-9ECC-FFDCEEFA102F}] "DisplayName"="Google" "URL"="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" [HKEY_CURRENT_USER\Keyboard Layout\Preload] "1"="00000406" [HKEY_CURRENT_USER\Control Panel\Keyboard] "KeyboardDelay"="0" [HKEY_CURRENT_USER\Software\PDFCreator\Program] "AutosaveDirectory"="\\PDF" "AutosaveStartStandardProgram"="1" "UseAutosave"="1" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit\Favorites] "HKCU - Windows CurrentVersion"="My Computer\\HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit\Favorites] "HKLM - Windows CurrentVersion"="My Computer\\HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion" [HKEY_CURRENT_USER\Control Panel\International\Geo] "Nation"="61" [HKEY_CURRENT_USER\Control Panel\International] "iCountry"="45" "iCurrency"="2" "iNegCurr"="12" "iTLZero"="1" "Locale"="00000406" "sCountry"="Denmark" "sCurrency"="kr" "sDate"="-" "sLanguage"="DAN" "sLongDate"="yyyy-MM-dd" "sShortDate"="yyyy-MM-dd" "sTimeFormat"="HH:mm:ss" "iFirstWeekOfYear"="2" "iMeasure"="0" "s1159"="" "s2359"="" "sDecimal"="," "sThousand"="." "sMonDecimalSep"="," "sMonThousandSep"="." [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}] @="Computer" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}] @="Documents" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}] @="Network" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "HideFileExt"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "Hidden"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "ShowSuperHidden"=dword:00000001 [HKEY_CURRENT_USER\Control Panel\Desktop] "UserPreferencesMask"=hex:b0,32,07,80 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TrkWks] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CiSvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BitBucket] "NukeOnDelete"=dword:00000001 "UseGlobalSettings"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa] "forceguest"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sr] "Start"=dword:00000004 "ImagePath"=hex(2):5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\ 74,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,52,\ 00,49,00,56,00,45,00,52,00,53,00,5c,00,73,00,72,00,2e,00,73,00,79,00,73,00,\ 00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sr\Parameters] "FirstRun"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Terminal Server] "fDenyTSConnections"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Epoch] "Epoch"=dword:0000091a [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "3389:TCP"="3389:TCP:*:Enabled:@xpsp2res.dll,-22009" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "3389:TCP"="3389:TCP:*:Enabled:@xpsp2res.dll,-22009" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusDisableNotify"=dword:00000001 "AntiVirusOverride"=dword:00000001