[Løst]Virus? Får ikke kjørt windows update!

matematikern · 11. februar 2010

Jeg får ikke kjørt windows update, og den bare sier at vertsprosess for windows har sluttet å virke, og at tjenesten ikke kjører. Har kjørt malwarebytes, men den fant ingen ting. Legger ved DDS-logg (ville ikke kjøre combofix).

DDS (Ver_09-12-01.01) - NTFSx86

Run by Bruker at 23:55:26,65 on 11.02.2010

Internet Explorer: 7.0.6000.16916

Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.47.1044.18.1014.170 [GMT 1:00]

AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

AV: Norton Internet Security *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}

SP: AntiVir Desktop *enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

SP: Windows Defender *enabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

SP: Norton Internet Security *enabled* (Outdated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}

FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

============== Running Processes ===============

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files\Windows Defender\MSASCui.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\igfxpers.exe

C:\Windows\system32\igfxsrvc.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe

C:\Program Files\Telenor\Mobilt bredbånd\Mobilt bredbånd.exe

C:\Windows\ehome\ehmsas.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Telenor\Mobilt bredbånd\GtDetectSc.exe

c:\Windows\system32\o2flash.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Internet Explorer\ieuser.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Windows Live\Toolbar\wltuser.exe

C:\Windows\system32\Macromed\Flash\FlashUtil10d.exe

C:\Windows\System32\svchost.exe -k netsvcs

C:\Windows\system32\DllHost.exe

C:\Users\Bruker\Downloads\dds.scr

C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.utsyn.no/

uInternet Settings,ProxyOverride = *.local

mURLSearchHooks: H - No File

BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll

BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll

BHO: Påloggingshjelp for Windows Live: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll

TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File

TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll

TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No File

TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File

uRun: [sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun

uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe

uRun: [sony Ericsson PC Suite] "c:\program files\sony ericsson\sony ericsson pc suite\SEPCSuite.exe" /systray /nologon

mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

mRun: [RtHDVCpl] RtHDVCpl.exe

mRun: [sMSERIAL] c:\program files\motorola\smserial\sm56hlpr.exe

mRun: [bVRPLiveUpdate] c:\program files\avanquest update\engine\setup.exe -s /patch,/srcupdatec:\progra~2\sonyer~1\sonyer~1\liveup~1\LISTOF~1.DAT

mRun: [igfxTray] c:\windows\system32\igfxtray.exe

mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe

mRun: [Persistence] c:\windows\system32\igfxpers.exe

mRun: [sunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"

mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime

mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"

mRunOnce: [Malwarebytes' Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent

StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\mobilt~1.lnk - c:\program files\telenor\mobilt bredbånd\Mobilt bredbånd.exe

IE: E&ksporter til Microsoft Excel - c:\progra~1\micros~3\office11\EXCEL.EXE/3000

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Notify: igfxcui - igfxdev.dll

============= SERVICES / DRIVERS ===============

R0 O2MDRDR;O2MDRDR;c:\windows\system32\drivers\o2media.sys [2006-11-20 38400]

R0 O2SDRDR;O2SDRDR;c:\windows\system32\drivers\o2sd.sys [2006-11-17 31360]

R2 GtDetectSc;GtDetectSc;c:\program files\telenor\mobilt bredbånd\GtDetectSc.exe [2007-12-18 196704]

S3 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr.sys [2009-11-11 54632]

S3 fsssvc;Windows Live Tryggere for familien-tjenesten;c:\program files\windows live\family safety\fsssvc.exe [2009-8-5 704864]

S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [2009-1-2 10976]

S3 GT72NDISIPXP;GT 72 IP NDIS;c:\windows\system32\drivers\Gt51Ip.sys [2007-11-13 106112]

S3 GT72UBUS;GT 72 U BUS;c:\windows\system32\drivers\gt72ubus.sys [2007-10-9 59264]

S3 s115bus;Sony Ericsson Device 115 driver (WDM);c:\windows\system32\drivers\s115bus.sys [2007-7-25 83208]

S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;c:\windows\system32\drivers\s115mdfl.sys [2007-7-25 15112]

S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;c:\windows\system32\drivers\s115mdm.sys [2007-7-25 108680]

S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s115mgmt.sys [2007-7-25 100488]

S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;c:\windows\system32\drivers\s115obex.sys [2007-7-25 98568]

=============== Created Last 30 ================

2010-02-11 22:37:10 0 d-----w- c:\users\bruker\appdata\roaming\Malwarebytes

2010-02-11 22:37:01 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-02-11 22:36:58 0 d-----w- c:\programdata\Malwarebytes

2010-02-11 22:36:57 19160 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-02-11 22:36:57 0 d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-02-11 22:29:12 0 d-----w- c:\users\bruker\appdata\roaming\AVG8

2010-01-30 16:41:55 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys

2010-01-29 23:10:44 0 d-----w- c:\programdata\Alwil Software

2010-01-29 23:03:59 0 d-----w- c:\users\bruker\appdata\roaming\Spotify

2010-01-29 23:03:55 0 d-----w- c:\program files\Spotify

==================== Find3M ====================

2010-01-24 22:20:03 79408 ----a-w- c:\windows\system32\perfc014.dat

2010-01-24 22:20:03 476858 ----a-w- c:\windows\system32\perfh014.dat

2009-12-09 06:28:55 51200 ----a-w- c:\windows\inf\infpub.dat

2009-12-09 06:28:55 143360 ----a-w- c:\windows\inf\infstrng.dat

2009-09-17 13:43:42 86016 ----a-w- c:\windows\inf\infstor.dat

2008-12-14 08:34:56 174 --sha-w- c:\program files\desktop.ini

2008-06-22 08:09:52 665600 ----a-w- c:\windows\inf\drvindex.dat

2007-03-30 12:21:08 294254 ----a-w- c:\windows\inf\perflib414\perfi.dat

2007-03-30 12:21:08 294254 ----a-w- c:\windows\inf\perflib414\perfh.dat

2007-01-25 15:46:06 35166 ----a-w- c:\windows\inf\perflib414\perfd.dat

2007-01-25 15:46:06 35166 ----a-w- c:\windows\inf\perflib414\perfc.dat

2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib000\perfi.dat

2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib000\perfh.dat

2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib000\perfd.dat

2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib000\perfc.dat

============= FINISH: 23:57:43,41 ===============

raWrz · 12. februar 2010

Hei

ser at du kjører både Norton Internett Security og Avira Antivir.

Det er ikke så lurt og kjøre 2 antivirus samtidig siden de kan komme i konflikt med hverandre

Bestem deg for hvilke av de programene du vil beholde og så last ned det removal programmet som er laget til det her: https://www.diskusjon.no/index.php?showtopic=691246 under " Problemer med å avinstallere antivirusprogrammet "

-Submit

Endret 12. februar 2010 av Submit

matematikern · 13. februar 2010

Har kjørt combofix nå, og legger ut logg. Ser du hva som er galt? Får fremdeles ikke starta windows update!!!

ComboFix 10-02-12.01 - Bruker 13.02.2010 11:28:28.1.2 - x86 MINIMAL

Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.47.1044.18.1014.596 [GMT 1:00]

Kjører fra: c:\users\Bruker\Desktop\ComboFix.exe

AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

AV: Microsoft Security Essentials *On-access scanning disabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}

SP: AntiVir Desktop *enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

SP: Microsoft Security Essentials *disabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDE}

SP: Windows Defender *enabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

.

((((((((((((((((((((((((((((((((((((((( Andre slettinger )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500

c:\$recycle.bin\S-1-5-21-3579123688-3869171228-407280859-500

.

((((((((((((((((((((((((((( Filer Opprettet Fra 2010-01-13 til 2010-02-13 )))))))))))))))))))))))))))))))))

.

2010-02-13 09:25 . 2010-02-13 09:25 -------- d-----w- c:\users\Bruker\AppData\Roaming\Template

2010-02-11 23:23 . 2010-02-11 23:23 -------- d-----w- c:\program files\Microsoft Security Essentials

2010-02-11 22:37 . 2010-02-11 22:37 -------- d-----w- c:\users\Bruker\AppData\Roaming\Malwarebytes

2010-02-11 22:37 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-02-11 22:36 . 2010-02-11 22:36 -------- d-----w- c:\programdata\Malwarebytes

2010-02-11 22:36 . 2010-02-11 22:37 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-02-11 22:36 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-02-11 22:29 . 2010-02-11 22:29 -------- d-----w- c:\users\Bruker\AppData\Roaming\AVG8

2010-01-30 16:41 . 2010-01-31 16:44 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys

2010-01-29 23:10 . 2010-01-29 23:10 -------- d-----w- c:\programdata\Alwil Software

2010-01-29 23:03 . 2010-02-05 14:15 -------- d-----w- c:\users\Bruker\AppData\Local\Spotify

2010-01-29 23:03 . 2010-02-05 14:00 -------- d-----w- c:\users\Bruker\AppData\Roaming\Spotify

2010-01-29 23:03 . 2010-01-29 23:03 -------- d-----w- c:\program files\Spotify

.

(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-02-13 09:54 . 2007-03-30 12:58 -------- d-----w- c:\program files\Common Files\Symantec Shared

2010-02-13 09:35 . 2007-01-25 15:50 79408 ----a-w- c:\windows\system32\perfc014.dat

2010-02-13 09:35 . 2007-01-25 15:50 476858 ----a-w- c:\windows\system32\perfh014.dat

2010-02-13 09:27 . 2010-02-13 09:25 92 ----a-w- c:\users\Bruker\AppData\Roaming\wklnhst.dat

2010-02-12 15:25 . 2007-12-15 14:23 -------- d-----w- c:\program files\CCleaner

2010-02-11 22:41 . 2008-05-04 10:40 -------- d-----w- c:\program files\AVG

2010-02-11 22:41 . 2008-05-04 10:40 -------- d-----w- c:\programdata\avg8

2010-01-30 12:31 . 2007-03-05 14:56 70752 ----a-w- c:\users\Bruker\AppData\Local\GDIPFONTCACHEV1.DAT

2010-01-29 23:10 . 2007-12-14 22:49 -------- d-----w- c:\program files\Alwil Software

2010-01-10 11:47 . 2007-03-05 15:01 -------- d-----w- c:\program files\Common Files\Ahead

2009-12-12 11:35 . 2009-12-12 11:35 680 ----a-w- c:\users\Bruker\AppData\Local\d3d9caps.dat

.

(((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))

.

*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-10 1232896]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440]

"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-02-20 356352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2007-04-11 1006264]

"RtHDVCpl"="RtHDVCpl.exe" [2006-11-01 3772416]

"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-10-09 729088]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-11 141848]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-11 166424]

"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-11 133656]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-09-15 149280]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-04 417792]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-08 305440]

"MSSE"="c:\program files\Microsoft Security Essentials\msseces.exe" [2009-09-13 1048392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"GrpConv"="grpconv -o" [X]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Mobilt bredb†nd.lnk - c:\program files\Telenor\Mobilt bredb†nd\Mobilt bredb†nd.exe [2008-2-11 876544]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

R0 O2MDRDR;O2MDRDR;c:\windows\System32\drivers\o2media.sys [20.11.2006 15:14 38400]

R0 O2SDRDR;O2SDRDR;c:\windows\System32\drivers\o2sd.sys [17.11.2006 13:58 31360]

S3 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [11.11.2009 15:47 54632]

S3 fsssvc;Windows Live Tryggere for familien-tjenesten;c:\program files\Windows Live\Family Safety\fsssvc.exe [05.08.2009 22:48 704864]

S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\System32\drivers\ggflt.sys [02.01.2009 10:20 10976]

S3 GT72NDISIPXP;GT 72 IP NDIS;c:\windows\System32\drivers\Gt51Ip.sys [13.11.2007 15:50 106112]

S3 GT72UBUS;GT 72 U BUS;c:\windows\System32\drivers\gt72ubus.sys [09.10.2007 12:53 59264]

S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\System32\drivers\MpNWMon.sys [18.06.2009 18:48 42480]

S3 s115bus;Sony Ericsson Device 115 driver (WDM);c:\windows\System32\drivers\s115bus.sys [25.07.2007 18:09 83208]

S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;c:\windows\System32\drivers\s115mdfl.sys [25.07.2007 18:09 15112]

S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;c:\windows\System32\drivers\s115mdm.sys [25.07.2007 18:09 108680]

S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s115mgmt.sys [25.07.2007 18:10 100488]

S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;c:\windows\System32\drivers\s115obex.sys [25.07.2007 18:10 98568]

--- Andre tjenester/drivere lastet i minnet ---

*NewlyCreated* - ECACHE

.

------- Tilleggsskanning -------

.

uStart Page = hxxp://www.utsyn.no/

uInternet Settings,ProxyOverride = *.local

IE: E&ksporter til Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

.

- - - - TOMME PEKERE FJERNET - - - -

Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

HKLM-RunOnce-<NO NAME> - (no file)

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2010-02-13 11:35

Windows 6.0.6000 NTFS

skanner skjulte prosesser ...

skanner skjulte autostart-oppføringer ...

skanner skjulte filer ...

skanning vellykket

skjulte filer: 0

**************************************************************************

.

--------------------- LÅSTE REGISTERNØKLER ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)