You are not logged in.

Qnap 109pro + Windows7

DanielCollinet

Banned

  • "DanielCollinet" started this thread

Posts: 44

Date of registration: Sep 23rd 2008

  • Send private message

1

Monday, October 3rd 2011, 2:10pm

Qnap 109pro + Windows7

Hallo,

Ein Kumpel von mir hat sich ein neues NB zugelegt. in seinem Netzwerk befindet sich ein Netgear Gigabit Switch, Router + Qnap NAS 109pro. Der NAS hat Freigaben auf diese kann zugegriffen werden. Das Lesen der Dateien funktioniert wunderbar, kopieren von Dateien von Win7 auf NAS geht(getestet bisher 10kb), aber beim kopieren von "großen" Dateien(z.B. 300mb) kommt die Fehlermeldung dass die Datei nicht kopiert werden und der Schreibschutz entfernt werden soll. Quota ist nicht eigerichtet.
Mit dem alten Lappi geht das immer noch wunderbar, da ist auch Win7 Ult. installiert.
Er hat sich mit dem Win7Toolkit seine Version angepasst. Eigentlich nur unter dem Register Tweaks. Ich kann aber leider keine Einstellung finden, die das Kopieren von größeren Dateien verbietet. Es muss irgendwas mit den Netzwerkeinstellungen zu tun haben, aber leider weiß ich gar nicht wo ich anfangen soll.
Installiertes BS: Windows7 x64 Ultimate
Rechner: Alienware m17x R3

Last session

Source code

 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112

*AIO
#Services
FTP::Disabled
IIS Admin Service::Disabled
Microsoft .NET Framework NGEN v4.0.30319_X86::Disabled
Offline Files::Disabled
Parental Controls::Disabled
Peer Name Resolution Protocol::Disabled
Peer Networking Grouping::Disabled
Portable Device Enumerator::Disabled
Problem Reports and Solutions Control Panel Support::Disabled
Remote Access Auto Connection Manager::Disabled
Remote Access Connection Manager::Disabled
Remote Desktop Configuration::Disabled
Remote Desktop Services::Disabled
Remote Desktop Services UserMode Port Redirector::Disabled
Remote Registry::Disabled
Superfetch::Disabled
Tablet PC Input::Disabled
TPM Base Services::Disabled
Windows Error Reporting::Disabled
Windows Font Cache::Disabled
Windows Image Acquisition (WIA)::Disabled
Windows Media Center Receiver::Disabled
Windows Media Center Scheduler::Disabled
Windows Media Player Network Sharing::Disabled
Windows Search::Disabled
Windows Time::Disabled
Windows Update::Disabled
#Tweaks
Add "Admin Tools" to Desktop context-menu
Add "Manage" to Desktop context-menu
Add "Open CMD here" to Folder Context-menu
Add "Open Elevated CMD here" to Folder context-menu
Add "Services" to Desktop context-menu
Add 'God Mode' to Computer context-menu
Add 'Programs & Features' to context-menu
Add Take Ownership to context-menu (files)
Add Take Ownership to context-menu (folders)
Allow 3rd Party Themes
Always Write Crash Dump Files
Automatically Expand to Current Folder
Control Panel View::Small Icons
Create Minidumps
Custom 1 (MANIKANT.S.GUPTA)
Detailed Shutdown/Logon
Disable 8.3 Name Creation
Disable Admin Shares
Disable Bandwidth Limit
Disable Feedback Tool
Disable IE Crash Detection
Disable IPv6 / Teredo
Disable Language Bar
Disable Last File Access Timestamp
Disable Low Disk Space Notification
Disable Paging of Kernel
Disable Password Caching in Internet Explorer
Disable Search Online on Unknown File Extensions
Disable Shortcut Link Resolve
Disable Startup sound
Disable Superfetch
Disable Window 7 built-in CD/DVD Burning
Disable Windows Error Reporting
Disable Windows Media Player AutoUpdates
Double Mouse Speed
Enable DVD in Media Player
Enable Gadgets with UAC Off
Enable SSL
Enabled Avalon Effects
Faster Browsing in IE 
Force Windows 7 Media Player to run 64 bit
GPU Rendering::Software Rendering Off
IE Homepage::http://www.google.com
Improve USB Storage Devices Performance
Increase File System Memory Cache Size
Increase Icon Cache
Instant Taskbar Preview
Large System Cache::Enable
Larger Taskbar Previews
Launch Folder Windows in a Separate Process
Launch Internet Explorer in Separate Process
Open NFO files with notepad
Remove 'Default Programs' from Start Menu
Remove 'Help & Support' from Start Menu
Remove Shortcut Arrow
Remove Shortcut Suffix
Remove Windows Mail Splash
Show 'Computer' on Desktop
Show 'Control Panel' on Desktop
Show 'Downloads' on Start Menu
Show Drive Letters First
Show File Extensions
Show 'Network' on Desktop
Show 'Run' on Start Menu
Speed Up Desktop
Speed-up Access to AVI Media Files
Turn off RSS feed discovery
Unlimited Simultaneous Downloads
White CMD Text
#Options
Enable CMD
Force Unsigned
Prepare Drivers
Prompt Addons
Prompt Drivers
Prompt Gadgets
Prompt Silent
Prompt Themes
Prompt Updates
Prompt Wallpapers
Rebuild Image
Skip Driver Checks


Registry.txt

Source code

 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259

28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\CscService | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\CscService | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\WPCSvc | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\WPCSvc | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\PNRPsvc | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\PNRPsvc | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\p2psvc | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\p2psvc | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\WPDBusEnum | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\WPDBusEnum | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\wercplsupport | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\wercplsupport | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\RasAuto | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\RasAuto | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\RasMan | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\RasMan | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\SessionEnv | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\SessionEnv | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\TermService | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\TermService | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\UmRdpService | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\UmRdpService | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\RemoteRegistry | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\RemoteRegistry | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\SysMain | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\SysMain | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\TabletInputService | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\TabletInputService | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\TBS | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\TBS | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\WerSvc | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\WerSvc | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\FontCache | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\FontCache | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\stisvc | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\stisvc | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\ehRecvr | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\ehRecvr | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\ehSched | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\ehSched | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\WMPNetworkSvc | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\WMPNetworkSvc | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\WSearch | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\WSearch | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\W32Time | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\W32Time | Start=4 | DWord
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\wuauserv | DelayedAutostart
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\wuauserv | Start=4 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows | MUIVerb=Windows | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows | SubCommands= | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows | Icon=%SystemRoot%\\System32\\winver.exe | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\AdminTools | MUIVerb=@%SystemRoot%\\system32\\shell32.dll,-22982 | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\AdminTools | Icon=%SystemRoot%\\System32\\imageres.dll,-114 | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\AdminTools\command | =control admintools | ExpandString
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows | MUIVerb=Windows | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows | SubCommands= | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows | Icon=%SystemRoot%\\System32\\winver.exe | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\Manage | MUIVerb=@%systemroot%\\system32\\mycomput.dll,-400 | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\Manage | Icon=wsqmcons.exe | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\Manage | SuppressionPolicy=1073741884 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\Manage\command | =mmc.exe compmgmt.msc | ExpandString
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD | SubCommands= | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD | MUIVerb=Command Prompt | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD | Icon=cmd.exe | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD\shell\cmd
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD\shell\cmd | MUIVerb=Open CMD Here | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD\shell\cmd | Icon=cmd.exe | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD\shell\cmd\command
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD\shell\cmd\command | =cmd.exe /k pushd "%V" | String
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD | Extended
28-09-2011_19:48PM DeleteKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD\Command
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD | SubCommands= | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD | MUIVerb=Command Prompt | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD | Icon=cmd.exe | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD\shell\cmd
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD\shell\cmd | MUIVerb=Open CMD Here | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD\shell\cmd | Icon=cmd.exe | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD\shell\cmd\command
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD\shell\cmd\command | =cmd.exe /k pushd "%V" | String
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD | Extended
28-09-2011_19:48PM DeleteKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD\Command
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD | SubCommands= | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD | MUIVerb=Command Prompt | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD | Icon=cmd.exe | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD\shell\cmd
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD\shell\cmd | MUIVerb=Open CMD Here | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD\shell\cmd | Icon=cmd.exe | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD\shell\cmd\command
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD\shell\cmd\command | =cmd.exe /k pushd "%V" | String
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD | Extended
28-09-2011_19:48PM DeleteKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD\Command
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD | SubCommands= | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD | MUIVerb=Command Prompt | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD | Icon=cmd.exe | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD\shell\runas
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD\shell\runas | MUIVerb=Open Elevated CMD Here | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD\shell\runas | Icon=cmd.exe | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD\shell\runas | HasLUAShield= | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD\shell\runas\command
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD\shell\runas\command | =cmd.exe /s /k pushd "%V" | String
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\CMD | Extended
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD | SubCommands= | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD | MUIVerb=Command Prompt | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD | Icon=cmd.exe | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD\shell\runas
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD\shell\runas | MUIVerb=Open Elevated CMD Here | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD\shell\runas | Icon=cmd.exe | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD\shell\runas | HasLUAShield= | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD\shell\runas\command
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD\shell\runas\command | =cmd.exe /s /k pushd "%V" | String
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\CMD | Extended
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD | SubCommands= | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD | MUIVerb=Command Prompt | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD | Icon=cmd.exe | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD\shell\cmd
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD\shell\runas | MUIVerb=Open Elevated CMD Here | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD\shell\runas | Icon=cmd.exe | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD\shell\runas | HasLUAShield= | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD\shell\runas\command
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD\shell\runas\command | =cmd.exe /s /k pushd "%V" | String
28-09-2011_19:48PM DeleteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Drive\shell\CMD | Extended
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows | MUIVerb=Windows | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows | SubCommands= | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows | Icon=%SystemRoot%\\System32\\winver.exe | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\Services | MUIVerb=@%SystemRoot%\\system32\\shell32.dll,-22059 | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\Services | Icon=%SystemRoot%\\System32\\mmc.exe | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\Services | SuppressionPolicy=1073741884 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\Services\command | =mmc.exe services.msc | ExpandString
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\GodMode
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\GodMode\command
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\GodMode\command | =explorer shell:::{ED7BA470-8E54-465E-825C-99712043E01C} | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows | MUIVerb=Windows | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows | SubCommands= | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows | Icon=%SystemRoot%\\System32\\winver.exe | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\ProgFeat | MUIVerb=Programs & Features | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\ProgFeat | Icon=OptionalFeatures.exe | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\ProgFeat | SuppressionPolicy=1073741884 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\Background\shell\Windows\shell\ProgFeat\command | =control appwiz.cpl | ExpandString
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\*\shell\TO
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\*\shell\TO | SubCommands= | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\*\shell\TO | MUIVerb=Ownership | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\*\shell\TO | Icon=cmd.exe | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\*\shell\TO\shell\runas
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\*\shell\TO\shell\runas | MUIVerb=Take Ownership | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\*\shell\TO\shell\runas | Icon=cmd.exe | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\*\shell\TO\shell\runas | HasLUAShield= | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\*\shell\TO\shell\runas\command
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\*\shell\TO\shell\runas\command | =cmd.exe /c takeown /f "%V" && icacls "%V" /grant administrators:F | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\*\shell\TO\shell\runas\command | IsolatedCommand=cmd.exe /c takeown /f "%V" && icacls "%V" /grant administrators:F | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\TO
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\TO | SubCommands= | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\TO | MUIVerb=Ownership | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\TO | Icon=cmd.exe | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\TO\shell\runas
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\TO\shell\runas | MUIVerb=Take Ownership | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\TO\shell\runas | Icon=cmd.exe | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\TO\shell\runas | HasLUAShield= | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\TO\shell\runas\command
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\TO\shell\runas\command | =cmd.exe /c takeown /f "%V" && icacls "%V" /grant administrators:F | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\Directory\shell\TO\shell\runas\command | IsolatedCommand=cmd.exe /c takeown /f "%V" && icacls "%V" /grant administrators:F | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Software\Microsoft\Windows\CurrentVersion\RunOnce | Theme Patcher=UTH.exe -silent | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SYSTEM\ControlSet001\Control\CrashControl | AlwaysKeepMemoryDump=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SYSTEM\ControlSet002\Control\CrashControl | AlwaysKeepMemoryDump=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | NavPaneExpandToCurrentFolder=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel | AllItemsIconView=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel | StartupPage=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Software\Microsoft\Windows\Windows Error Reporting | CrashDumpEnabled=3 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\{5c4f28b5-f869-4e84-8e60-f11db97c5cc7}\TasksItemsSelected | =Windows.Cut; Windows.Copy; Windows.Delete; Windows.rename; Windows.properties; Windows.closewindow | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\{5c4f28b5-f869-4e84-8e60-f11db97c5cc7}\TasksNoItemsSelected | =Windows.selectall; Windows.Paste; Windows.undo; Windows.redo; Windows.menubar; Windows.previewpane; Windows.readingpane; Windows.navpane; Windows.closewindow | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system | verbosestatus=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\Control\FileSystem | NtfsDisable8dot3NameCreation=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet002\Control\FileSystem | NtfsDisable8dot3NameCreation=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\LanmanServer\Parameters | AutoShareWks=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet002\services\LanmanServer\Parameters | AutoShareWks=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\services\LanmanServer\Parameters | AutoShareServer=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet002\services\LanmanServer\Parameters | AutoShareServer=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Policies\Microsoft\Windows\Psched | NonBestEfforLimit=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Control Panel\Desktop | FeedbackToolEnabled=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Policies\Microsoft\Internet Explorer\Restrictions | NoCrashDetection=1 | DWord
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\CTF\LangBar
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\CTF\LangBar | ShowStatus=3 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\Control\FileSystem | NtfsDisableLastAccessUpdate=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet002\Control\FileSystem | NtfsDisableLastAccessUpdate=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Software\Microsoft\Windows\CurrentVersion\Policies\Explorer | NoLowDiskSpaceChecks=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\Control\Session Manager\Memory Management | DisablePagingExecutive=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet002\Control\Session Manager\Memory Management | DisablePagingExecutive=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Internet Settings | DisablePasswordCaching=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer | NoInternetOpenWith=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer | LinkResolveIgnoreLinkInfo=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer | NoResolveSearch=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer | NoResolveTrack=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\BootAnimation | DisableStartupSound=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\Control\Session Manager\Memory Management\PrefetchParameters | EnableSuperfetch=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet002\Control\Session Manager\Memory Management\PrefetchParameters | EnableSuperfetch=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | NoCDBurning=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\Windows Error Reporting | DontSendAdditionalData=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\Windows Error Reporting | DontShowU=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\Windows Error Reporting | Disabled=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\Windows Error Reporting\Consent | DefaultConsent=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR | Disable=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Policies\Microsoft\WindowsMediaPlayer | DisableAutoUpdate=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Control Panel\Mouse | MouseSpeed=2 | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\MediaPlayer\Player\Settings | EnableDVDUI=Yes | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Microsoft\Windows\CurrentVersion\Sidebar\Settings | AllowElevatedProcess=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Internet Settings | SecureProtocols=28 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer | MILDesktop=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer | MILExplorer=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\Control\Services\AFD\Parameters | BufferMultiplier=400 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet002\Control\Services\AFD\Parameters | BufferMultiplier=400 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Software\Microsoft\Windows\CurrentVersion\App Paths\wmplayer.exe | =%ProgramFiles%\Windows Media Player\wmplayer.exe | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Software\Microsoft\Windows\CurrentVersion\App Paths\wmplayer.exe | Path=%ProgramFiles%\Windows Media Player | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Internet Explorer\GPU | SoftwareFallback=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Internet Explorer\GPU | Wow64-SoftwareFallback=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\SOFTWARE\Microsoft\Internet Explorer\Main | Start Page=http://www.google.com | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SYSTEM\ControlSet001\Control\usbstor\VVVVPPPP | MaximumTransferLength=2097120 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\Control\FileSystem | NtfsMemoryUsage=2 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet002\Control\FileSystem | NtfsMemoryUsage=2 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer | Max Cached Icons=2048 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | ExtendedUIHoverTime=10 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet001\Control\Session Manager\Memory Management | LargeSystemCache=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_System\ControlSet002\Control\Session Manager\Memory Management | LargeSystemCache=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband | MinThumbSizePx=350 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | SeparateProcess=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess | BrowseNewProcess=Yes | String
28-09-2011_19:48PM DeleteKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\.nfo
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\.nfo
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\.nfo | =txtfile | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\.nfo | Content Type=text/plain | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\.nfo | PerceivedType=text | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\.nfo\PersistentHandler
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Classes\.nfo\PersistentHandler | ={5e941d80-bf96-11cd-b579-08002b30bfeb} | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowSetProgramAccessAndDefaults=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowPrinters=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowHelp=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Icons | 29=%SystemRoot%\\blank.ico,0 | String
28-09-2011_19:48PM CreateKey:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows Mail | NoSplash=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D}=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowDownloads=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer | ShowDriveLettersFirst=4 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | HideFileExt=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {F02C1A0D-BE21-4350-88B0-7367FC96EF3C}=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowRun=1 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Control Panel\Desktop | AutoEndTasks=1 | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Control Panel\Desktop | HungAppTimeout=1000 | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Control Panel\Desktop | MenuShowDelay=8 | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Control Panel\Desktop | WaitToKillAppTimeout=2000 | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Control Panel\Desktop | LowLevelHooksTimeout=1000 | String
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Internet Explorer\Feed Discovery | Enabled=0 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings | MaxConnectionsPerServer=10 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings | MaxConnectionsPer1_0Server=10 | DWord
28-09-2011_19:48PM WriteValue:HKEY_LOCAL_MACHINE\WIM_Default\Software\Microsoft\Command Processor | DefaultColor=15 | DWord


Mit dem XP Mode scheint es, auch wenn langsam, zu funktionieren. Vielleicht sieht einer von euch eine Einstellung die das komische Verhalten verursacht.

Gruß

Similar threads

Used tags

Probleme beim kopieren großer Dateien